ENPL
Contact

Privacy Policy

Scanspectrum.ai website

§1 General provisions

This privacy policy applies to the website operating at scanspectrum.ai. The data controller is QED POLAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ located at Górczewska 208 / 96, 01-460 Warsaw, Poland with NIP number 5223086142 and KRS number 0000667628.

The Administrator uses the data collected by the website to run it and provide services related to it in accordance with the provisions of this Privacy Policy and applicable regulations, such as GDPR.

§2 Data inspector

Pursuant to Article 37 of the GDPR, the company has not appointed a Data Protection Inspector. In matters relating to data processing, please contact the administrator.

§3 Collected data

The website collects data about users. Some data is collected automatically and is not assigned to specific users. Some data is voluntarily provided by users when using the website.

Data collected automatically:

  • The part of the page you are visiting
  • Information about your browser and operating system
  • Time of entering the website
  • Referrer address
  • IP address

Data collected by users providing them:

  • Name and surname
  • Residential address
  • Email address
  • Phone number
  • Other voluntarily provided data

Providing the above data marked as collected by users is completely voluntary, but necessary to use the website and provide services.

§4 Data processing

The administrator uses the services of an external server provider, Cloudflare, to run the website. The collected data is stored and processed on the server provider's infrastructure. It is possible to access the data through the server provider, this access is regulated by the server provider's privacy policy available at https://www.cloudflare.com/pl-pl/trust-hub/privacy-and-data-protection/. The server where the data is stored and processed is located in Poland. The data is transferred outside the European Union for further processing in accordance with the provisions of this Privacy Policy.

§5 Content of third parties on the website

The website contains content from third parties. They may collect data on their own, please read their privacy policies.

List of third party content with links to their privacy policies:

Third parties whose content is on the website are beyond the Controller's control. They may, for example, change the terms of use without the Administrator's permission. The Administrator is not responsible for acts committed by the above third parties.

§6 Third parties with access to data

Third parties that provide services necessary for the operation of the website may have access to the data, including:

  • Server provider (described in §4)

Third-party content owners may also have partial access to data from the website.

Other third parties do not have access to the data collected by the website. The data is stored in a way that protects it against unwanted access by other third parties.

§7 Cookies

The website uses cookies (so-called "cookies") and/or similar technologies, hereinafter collectively referred to as cookies, which are used to store data on the user's device.

The following types of cookies are used:

necessary They are crucial to the functioning of the website.
functional They are used for additional functionality or to remember preferences.
analytical They are used to conduct analytical statistics of website use.

Users can delete cookies saved by the website at any time and/or block their storage through the functions of the browser used.

§8 Legal basis for data processing

The legal basis for data processing is:

  • art. 6 section 1 letter b: processing is necessary for the performance of a contract to which the data subject is party or to take action at the request of the data subject before concluding the contract
  • art. 6 section 1 letter f: processing is necessary for the purposes of legitimate interests pursued by the administrator or a third party

The above legal bases come from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

§9 User rights

Users have the right to:

access to personal data Users have the right to access their personal data upon request.
rectification of personal data Users have the right to request that the Administrator immediately correct inaccurate personal data and/or complete incomplete personal data, which is carried out upon request. The Administrator reserves the right to suspend the execution of a request to delete data in order to protect the Administrator's legitimate interest (e.g. when the User has violated the Regulations or the data was obtained as a result of correspondence).
deletion of personal data Users have the right to request the Administrator to immediately delete personal data upon request.
restrictions on the processing of personal data Users have the right to limit the processing of personal data in the cases indicated in Art. 18 GDPR, among others questioning the accuracy of personal data, this is done upon request.
transfer of personal data Users have the right to obtain personal data regarding the User from the Administrator in a structured, commonly used and machine-readable format, this is done upon request.
object to the processing of personal data Users have the right to object to the processing of their personal data in the cases specified in Art. 21 GDPR, implemented on request.
filing a complaint Users have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data.