Privacy Policy

We exercise the utmost care not only in the data presented in the Smart Supplement Monitor. Your data is important to us and we process it in compliance with all the rules arising from applicable law, including the GDPR Act. Our privacy policy has been prepared in such a way that each entry is understandable and legible to you. However, if you have any questions related to the principles of data processing, please write to us.

 

I. General provisions

1. The privacy policy specifies how personal data of users (hereinafter referred to as the “User”) are collected, processed and stored, and which are necessary to provide services electronically via the website at www.smartsupplement.pl.

2. Personal data collected via the Website are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the GDPR) and the Personal Data Protection Act of May 10, 2018.

3. The Administrator of personal data is MAK Spółka z ograniczoną odpowiedzialnością with its registered office in Białystok (15-540 Białystok), ul.[street] Żurawia 71, entered into the Register of Entrepreneurs of the National Court Register under number 0000879722, NIP [Taxpayer’s Identification Number] 9662146569, REGON [National Business Registry Number] 387984462

4. The User can contact us in the following way: (a) traditionally, by post to the following address: MAK Spółka z ograniczoną odpowiedzialnością with its registered office in Białystok (15-540 Białystok), ul. [street] Żurawia 71(b) by sending a message to the e-mail address: [email protected]

 

II. Purpose of collecting personal data

1. The Users’ service, in particular the purchase of the Smart Supplement Monitor access service – the legal basis is our legitimate interest in providing the service, including: (a) the account registration and verification of the User’s identity, (b) enabling login to the Website, (c) the implementation of the Agreement regarding services and e-services.

2. Marketing of the Administrator’s own services and sending e-mail notifications about new products, current promotions and offers to the e-mail address provided by the User – the legal basis is our legitimate interest in the ability to present information about our services.

3. Providing data is voluntary, but necessary to conclude the Agreement or use the functionality of the Website.

 

III. Type of personal data processed

1. The Administrator may process the User’s personal data, including, among others, data necessary to register an account, i.e.: name and surname, e-mail address, telephone number, NIP [Taxpayer’s Identification Number].

 

IV. Period of personal data processing

We process the Users’ personal data depending on the purpose and legal basis of processing:

  • during the implementation period of the Agreement, as well as during the limitation period for claims under the Agreement,
  • until the data storage obligations arising from tax and accounting regulations regarding personal data contained in tax or accounting documentation expire,
  • until the Users express their objection to personal data processed on the basis of the legitimate interest of the Administrator,
  • until the consent is withdrawn regarding personal data processed on the basis of the Users’ consent.

 

V. Sharing personal data

1. We transfer the Users’ personal data to entities with which we cooperate, e.g. companies handling e-payments, companies providing courier/postal services, law firms. Such entities process data on the basis of an agreement with us and only in accordance with our instructions.

2. The Users’ personal data will not be transferred outside the European Economic Area (EEA).

 

VI. User Rights

Each User has rights related to the processing of his or her personal data, including in particular:

  • the right to withdraw the consent,
  • the right to object to data processing for marketing purposes,
  • the right to access personal data,
  • the right to request the rectification of personal data,
  • the right to request the deletion of personal data,
  • the right to request the restriction of the processing of personal data,
  • the right to transfer personal data, i.e. the right to receive personal data from us in a structured, commonly used, machine-readable IT format. The User can send such data to another data administrator or request that we send the User’s data to another data administrator. However, we will only do this if such a transfer is technically possible. The right to transfer personal data applies only to data that we process on the basis of the consent or in connection with the implementation of the Agreement,
  • the right to lodge a complaint with the supervisory authority responsible for the protection of personal data, i.e. the President of the Personal Data Protection Office.

2. To exercise the aforementioned rights, please contact us as indicated in section 1.4.

 

VII. Automated decision-making and profiling

1. We do not process the Users’ personal data in an automated manner which could result in any decisions being made regarding them.

2. The Users’ data will not be profiled in order to adjust the content and personalize the offer.

 

VIII. Cookies

1. We use cookies to collect information related to the User’s use of the Website. Cookies enable us in particular to:

  • maintain the User’s session (after logging in), thanks to which the User does not have to re-enter the login and password on each subpage of the Website,
  • create the viewing statistics for subpages of the Website.

 

IX. Final Provisions

1. We have the right to introduce changes to the Privacy Policy – information about such changes will appear in the form of a message available on the Website and will be sent electronically to the e-mail address provided by the User.

2. In matters not regulated in this Privacy Policy, the provisions of the GDPR and Polish law shall apply.