Providing personal data and consenting to its processing is voluntary. We process data only to the extent and for the purposes to which the user has consented, or as required by a contract.
We are committed to data security and continuously improve the safeguards we have in place. This ensures the protection of information provided through our website.
This notice fulfills the obligation set out in Article 13 of the General Data Protection Regulation (GDPR) of April 27, 2016.
The controller of personal data is Lubosz Karwat, conducting business at the following address: ul. Graniczna 8c, 33-170 Tuchów.
You may contact the controller via email at karwat.mozaika@gmail.com or by phone at +48 504 770 511. The controller has not appointed a Data Protection Officer.
We process personal data for the purpose of concluding and performing a contract. The legal basis for this is Article 6(1)(b) of the GDPR.
Furthermore, the website collects information about users in several ways. Users may voluntarily provide data via a form. The website may also collect connection data, including IP addresses. We also store cookies on users’ devices. Details are provided in our cookie policy.
Access to the data may be granted to the controller’s employees and associates. Data may also be shared with entities to whom the controller entrusts the processing of such data. These include, among others, software and hosting providers, sales representatives, subcontractors, and distributors.
We do not transfer data to recipients in third countries or to international organizations. We store data for the duration of the contract and subsequently for the period required by regulations concerning accounting and billing documentation. This period is at least five years.
You may request access to your data, as well as its rectification, erasure, or the restriction of its processing. You also have the right to object to processing, the right to data portability, and the right to withdraw your consent at any time.
If you believe that we are processing your data unlawfully, you may lodge a complaint with the competent supervisory authority.
Providing the data required to conclude a contract is voluntary; however, failure to provide such data may make it impossible to enter into a contract. We do not make decisions concerning users based solely on automated processing, nor do we engage in profiling.
Access to data is restricted to authorized personnel only. The controller provides security training to these individuals and mandates that they protect the information. We implement technical and organizational measures to safeguard data in compliance with applicable regulations.
We share data with third parties only within the scope permitted by law. Data that can identify an individual is shared either with that person’s consent or based on another legal ground. Furthermore, we may disclose information to authorized authorities if we receive a lawful request.
If we need to contact you regarding your data, we will use the email address you have provided. Should you have any questions concerning privacy, please contact the controller using the details provided in the “Data Controller” section.
We may update this policy when required by law, due to changes in the technical operation of the website, or when we implement higher standards of data protection. We will notify you of any changes via email at the address you have provided. Such notification will be sent at least 30 days before the changes take effect.
