Appendix 1 “Privacy Policy”
1 General provisions: Katarzyna Gendis (hereinafter referred to as “Boost by Kasia Gendis”) who owns the website www.boostbykasiagendis.com and runs a sole proprietorship under the name of Katarzyna Gendis, NIE Z0070395-C, acts as an administrator pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016. (hereinafter referred to as “RODO”) on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, in relation to the personal data of Users who are natural persons.
2 Data processing and its scope: Data processing is understood as the activities and operations performed on Users’ data, including storage, or analysis for the purposes of the Website services.
2.1 Registration – registering for classes may require the User to provide the following data: name and surname, e-mail. 2.2 Conclusion of transactions – the Administrator, within the scope of the services provided by Boost by Kasia Gendis, may process the Users’ personal data in order to enable the conclusion of the agreement of sale of services offered by Boost by Kasia Gendis. 2.3 Customer Service – The Administrator may process the personal data of Users who contact Boost by Kasia Gendis and use the services of Boost by Kasia Gendis. The data may be necessary for communication. 2.4 Bookings, attendance and sales of products – The Administrator, as part of the services provided by Boost by Kasia Gendis, may process the personal data of Users in order to register bookings and attendance at classes, as well as information on products sold by those using the services of Boost by Kasia Gendis. 2.5 Processing of data by the Website – when it is necessary to provide services to the User or constitutes a legitimate interest of the Administrator or third parties, the Administrator is entitled to process such data as: the User’s IP address, location, time of access to the Website, URL of the web- site previously visited by the User (referer link), parameters of the User’s software and hardware, mobile device identification number and other de- vice and system data. The processing of the above information takes place when using the Website and the services of third parties. 2.6 Contests – The Administrator may process the data for the purpose of running a contest and selecting its winners.
3.Purpose of data processing: The Users’ personal data are processed by the Administrator in order to enable the Users to use the Website, including in particular the following activities: -enabling access to the on line services provided by Boost by Kasia Gendis, including carrying out the booking of services, -registering the sale of services purchased by the customer, -enabling transactions for the purchase of access to services, -providing support for User transactions, including resolving technical problems, -contacting Users, including for purposes related to the provision of services, User support, authorised marketing activities, through the available communication channels, in particular e-mail and telephone, -conducting research and analysis of the website, among other things, in order to improve the functioning of the website, improve the services available or assess the main interests and needs of the visitors, -ensuring the security of electronic services, including enforcing compliance with the Terms of Service and counteracting fraud and abuse, -handling complaints from users, -conducting direct marketing of the Administrator’s own services or products -handling requests from Users, -organising loyalty programmes, competitions and promotional actions in which Users may take part, -performing legal obligations, including tax or accounting regulations, -provision of payment services, execution of payment of commissions for transactions on the Service, debt collection, -conducting litigation, arbitration and mediation proceedings, statistical, accounting, archiving.
4 Data sharing 4.1 The Administrator does not provide personal data to third parties, except for the need to provide information about the User to public authorities, in the fight against fraud and abuse, proceedings related to the violation of the law and fighting against violations of the Terms of Use. 4.2 The Administrator may make available to third parties data in anonymous form, which do not identify specific Users, and which serve to improve the content displayed on the Website, adjust advertisements and reach Users outside the Website.
5 Entitlements of Users 5.1 Each User has the right to : -access to their personal data – the User may request the Administrator to provide a catalogue of the personal data processed about them, to object to data profiling – the User may request the Administrator to disable profiling (personalisation) of the Service’s offer and related marketing activities, -rectification, erasure or restriction of processing, data portability, lodging a complaint to a supervisory authority, and the right to withdraw consent at any time without affecting the legality of the processing performed on the basis of consent before its withdrawal. If you exercise your right to access, rectify, erase, restrict the processing of your personal data, object to the processing of your personal data, request data portability or not be subject to a decision based solely on automated data processing – you will be informed without undue delay, no later than one month after receipt of the request, of the action taken on your request. The execution of a request for data portability is free of charge, however, in accordance with the provisions of the RODO, the Administrator may charge a reasonable fee for providing the data subject with or refuse to exercise the right in the case of: -requesting another copy of the personal data being processed, -a request which is manifestly unreasonable, -request excessive, in particular due to its continuing nature.
The amount of the aforementioned fee shall be determined on a case-by- case basis, shall be reasonable and shall take into account the administrative costs of providing the information, carrying out the communication or undertaking the requested actions that the Administrator had to incur. 5.2 The provision of data by the User is a contractual requirement. In case of failure to provide the required personal data by the User, selected functionalities of the Service may be unavailable for the User (e.g. possibility to register, place orders, contact other Users). 5.3 The User can contact the person supervising the processing of personal data by the Administrator by e-mail at the following address: [email protected].
6 Data security The Administrator cares about the security of the data provided. The data are particularly protected and secured against unauthorised access. Communication taking place between the Website and Users is protected by the SSL encryption protocol on pages containing personal data.
7 Other The Administrator undertakes to store the entrusted Users’ personal data until they revoke their consent or object. Once consent has been revoked, for a period corresponding to the period of limitation of claims that the data controller may raise and that may be raised against the data controller. The Terms and Conditions enter into force on 29.03.2020 Boost by Kasia Gendis reserves the right to change prices and class schedules. Boost by Kasia Gendis also reserves the right to cancel classes if fewer than 4 people register for a given class.
Any changes to these Regulations must be made in writing and communicated to the Clients by posting information on the website www.boostbykasiagendis.com. To the extent not covered by these Rules and Regulations, the provisions of the Civil Code apply accordingly.