Privacy Policy

PRIVACY POLICY

To ensure transparency and clarity in the processing of personal data, below we present concise and clear information regarding the controller of your data, the purposes of processing, your rights, and other important issues related to this matter.

I. GLOSSARY OF TERMS

The terms used below have the following meanings within this Privacy Policy: a) Controller – CDSR Sp. z o.o., which is the controller of your personal data,
b) GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation);
c) Website – this website.

II. PERSONAL DATA CONTROLLER

The controller of your personal data is CDSR Sp. z o.o., with its registered office in Warsaw (00-837), ul. Pańska 96/83, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under KRS number: 0000595892, REGON: 363489110, NIP: 5252642663.

You can contact us regarding all matters related to personal data via:
a) email at: rodo@cdsr.pl
b) traditional mail sent to our address listed above.

III. PURPOSES AND LEGAL BASIS FOR DATA PROCESSING

The scope, purpose, and legal basis for processing your personal data depend on how you use the Website or the circumstances under which you provided your data. Below are the main purposes for which we may process your personal data. If we collect or process your data for any other reason, you will be informed accordingly.

1. IN CONNECTION WITH WEBSITE USAGE

When you use the Website, cookies are collected to tailor its content to your preferences, optimize usage, create statistics that help us understand how users interact with the Website, maintain your session, and deliver targeted advertisements.

Via the Website, we also store HTTP queries sent to our server. Resources viewed are identified by URL addresses. The detailed list of information stored in web server log files includes:
a) public IP address of the computer from which the request came (this may be your own computer),
b) client station name – identification performed via HTTP protocol if possible,
c) username provided during authorization,
d) time of the request,
e) the first line of the HTTP request,
f) HTTP response code,
g) number of bytes sent by the server,
h) URL of the referring page (referer link), if the user accessed the Website via a link,
i) information about the user's browser,
j) information about errors that occurred during HTTP transactions.

This data is not associated with specific individuals browsing the Website. To ensure the highest service quality, we occasionally analyze log files to determine which pages are visited most often, what browsers are used, and whether the page structure is error-free.

Personal data will be stored for as long as our legitimate interest persists and for the period necessary for any potential claims. We will stop processing your data if you object to its use for the specified purpose.

Processing is based on Art. 6(1)(f) GDPR, due to our legitimate interest.

2. FOR CONTRACT NEGOTIATION OR EXECUTION

When you show interest in our services or products, we collect data necessary to prepare an offer and take actions to enter and perform a contract, ensuring high-quality service.

Your personal data will be stored during the contract term and further for the claim limitation period and the period required by law, including tax law. For waste management, your data will be stored for 5 years from the end of the calendar year when waste documentation was created.

Processing is based on Art. 6(1)(b) GDPR.

3. FOR DIRECT MARKETING PURPOSES

Due to previous use of our services or potential interest in our offer, data is collected to send selected and personalized marketing content or for surveys and market research. Marketing messages will only be sent with your consent.

Data will be stored as long as our legitimate interest persists and for any claims limitation period. We will stop processing if you withdraw consent or object.

Processing is based on Art. 6(1)(f) GDPR for legitimate interests and Art. 6(1)(a) GDPR with your consent.

4. FOR OTHER FORMS OF MARKETING

Where required by law (e.g., electronic or phone communication), marketing activities are carried out only with your consent and limited to the scope you specify.

Data will be stored until consent is withdrawn.

Processing is based on Art. 6(1)(a) GDPR.

5. FOR BUSINESS OPERATIONS

Due to our business activities, we must process your data to fulfill legal obligations, particularly accounting and tax duties and obligations related to service/product responsibility.

Data will be stored for the period required by law and the limitation period for claims.

Processing is based on Art. 6(1)(c) GDPR.

6. TO PROTECT OUR LEGITIMATE INTERESTS

We may process your data when necessary to defend our rights or pursue claims.

Data will be stored for the claim limitation period.

Processing is based on Art. 6(1)(f) GDPR.

IV. COOKIES

Our Website uses cookies—text files stored on your device. These files help analyze Website usage and identify your browser. You can block cookies via browser settings, which may limit website functionality.

We may process cookie data to analyze visitor actions, study your Website behavior (e.g., opening specific tabs) for tailored advertising on other sites (Google Inc., Facebook Ireland Ltd.), and improve Website performance.

V. DATA RECIPIENTS

Your data may be shared with other entities in connection with processing purposes outlined above, ensuring confidentiality and GDPR compliance.

Recipients include:
a) our partners and service providers supporting our business (transport, waste management, accounting, tax, HR, legal, marketing, etc.),
b) public authorities as required by law.

VI. DATA TRANSFER OUTSIDE EEA

Your data may be transferred outside the EEA due to Website usage.

The Website uses facebook.com tools, administered by Facebook Inc., 1601 Willow Road Menlo Park, CA 94025. Through the Facebook plugin, your browser connects to Facebook’s servers and sends information about visited pages. If logged in to Facebook, your activity may be recorded and visible on your account (e.g., via "Like" or comments). To avoid this, log out of Facebook before visiting our Website.

Similarly, data may be shared with Google LLC, Mountain View, CA, USA, especially via Google Analytics.

VII. YOUR RIGHTS REGARDING DATA PROCESSING

You can exercise your rights by contacting us via email or mail (see Section II).

1. Right to Information and Access (Art. 15 GDPR)
   You have the right to confirm whether we process your data, access it, and obtain detailed information.
2. Right to Withdraw Consent (Art. 7 GDPR)
   You can withdraw consent at any time. Processing before withdrawal remains lawful. Data may be retained for up to 14 days for technical reasons.
3. Right to Rectification (Art. 16 GDPR)
   You can request correction of inaccurate data and completion of incomplete data.
4. Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)
   You can request deletion of your data if certain conditions are met (e.g., no longer needed, consent withdrawn, unlawful processing).
5. Right to Object (Art. 21 GDPR)
   You can object to processing based on legitimate interest or for direct marketing purposes.
6. Right to Data Portability (Art. 20 GDPR)
   You can receive your data in a structured, machine-readable format or request its transfer to another controller.
7. Right to Lodge a Complaint (Art. 77 GDPR)
   You can lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO) at www.uodo.gov.pl, under the “Complaints” section.

VIII. PROFILING AND AUTOMATED PROCESSING

Your data may be processed automatically and profiled (including AI use) to tailor offers and improve service quality. Your data is not used for automated decision-making.

IX. LINKS TO OTHER WEBSITES

Our Website may contain links to other sites. We are not responsible for their content, data processing practices, or privacy policies. We recommend reviewing the privacy policies of those websites after leaving ours.