2 WHAT DATA WE PROCESS AND ON WHAT TERMS

CATEGORIES OF DATA	PURPOSE OF PROCESSING	SCOPE OF PROCESSING	BASIS LEGAL PROCESSING
Service user data	Through our websites we collect data only in so far as which it is necessary to management of these sites, ensure efficient activities offered in their as part of the functionality and analyse the effectiveness of communication. for the study of activity the user on the Website, and level of attractiveness individual elements Service, and in order to increase your comfort and improving your satisfaction from using them. We process these data in for statistical purposes,	For website users www. no registration required. These data remain for us anonymous. During the session, the Service stores in the browser’s memory user cookies. Information on any the devices you use in order to gain access to our Services (including the brand, model and operating system, address IP, browser type and identifiers mobile devices, date and time access to our Services, address the website from which you have been redirected to our website Internet, other data transmitted via standard HTTP(s) request headers, data used for maintenance online sessions after logging in). Information about your behaviour online while browsing our Websites	Art.6(1)(f) RODO (processing is necessary for the purpose of arising from legally justified interests carried out by administrator).
Data of persons those who contact us regarding our Services, participating in promotions, competitions, surveys	Contacting you, on for example by telephone, by post electronically, by letter or replying to your posts in social media and in the chat room, which have been addressed to us, on matters of concerning our services. We want to serve you better as to our customer, therefore we use personal data to provide explanations or assistance in response to Your messages, as well as to keep you informed of the changes that we have introduced or we intend to introduce in our Services, which have impact on you (e.g. changes in this Policy or regulations of our Services).	– Personal data provided by You every time you contact us regarding our Services (for example, name and surname, username and contact details), including by telephone, e-mail or by letter, or when you contact contact us through social media. – Message details e-mail and other messages the electronic mail we send to you, which you open, including any links contained therein, to that you click on (for example, those that enable us to determine whether and when you opened this communication).	Art.6(1)(f) RODO (processing is necessary for the purpose of arising from legally justified interests carried out by administrator), including, that if we want to Invite you by road electronic, such as e-mail or SMS, we will build on Your agreement.

PERIOD OF PROCESSING OF PERSONAL DATA

The period of data processing by the Administrator depends on the type of service provided and the purpose of processing. As a rule, the data are processed for the time of provision of the service or fulfillment of the order, until the withdrawal of the expressed consent or filing an effective objection to data processing in cases where the legal basis of data processing is the legitimate interest of the Administrator.

The processing period may be extended if the processing is necessary for the establishment, assertion or defence of possible claims, and thereafter only if and to the extent required by law. After the end of the processing period, the data shall be irreversibly deleted or anonymised.

USER RIGHTS

Data subjects have the following rights:

1. Right to information about the processing of personal data – on this basis the person making such a request is provided by the Administrator with information about the processing of personal data, including in particular the purposes and legal basis of the processing, the scope of the data held, the entities to which the personal data are disclosed and the planned date of their erasure;
2. The right to obtain a copy of the data – on this basis the Administrator provides a copy of the processed data concerning the person making the request;
3. Right of rectification – on this basis, the Administrator shall rectify any inconsistencies or errors regarding the personal data processed, and complete or update them if they are incomplete or have changed;
4. The right to erasure – on this basis you can request the erasure of data whose processing is no longer necessary for any of the purposes for which they were collected;
5. Right to the restriction of processing – on this basis the Controller shall cease to carry out operations on personal data, with the exception of operations on which the data subject has given his or her consent, and their storage in accordance with the adopted rules on retention, or until the reasons for the restriction of data processing cease to exist (e.g. a decision is issued by a supervisory authority allowing further processing);
6. Right to data portability – on this basis, insofar as the data are processed in connection with the concluded contract or the given consent, the Administrator sends the data provided by the data subject in a computer-readable format. It is also possible to request the data to be sent to another entity, provided that both the Administrator and the other entity have the technical capacity to do so;
7. Right to object to other purposes of processing – The data subject may at any time object to processing of personal data on the basis of a legitimate interest of the Controller;
8. Right to withdraw consent – where data are processed on the basis of consent, the data subject shall have the right to withdraw consent at any time, which shall not, however, affect the lawfulness of processing carried out before the withdrawal of that consent;
9. Right to complain – if the processing of personal data is considered to be in breach of the provisions of the RODO or other data protection legislation, the data subject may lodge a complaint with the President of the Data Protection Authority (in the manner set out on the website of the Data Protection Authority).

Requests to Studio Figura International sp. z o.o. sp. k. concerning the exercise of the above rights can be made:

• in writing to the following address: 26 Skórzewska Street, 62-081 Wysogotowo.
• by e-mail to: admin@studiofigura.com.pl

The reply will be given to the e-mail address from which the application was sent or, in the case of applications sent by post, by letter to the address indicated by the applicant, unless the letter states that you wish to receive feedback to your e-mail address (in which case you must provide your e-mail address).

DATA RECIPIENTS

We entrust the processing of personal data to entities with whom we cooperate on a permanent basis, in particular to suppliers responsible for the operation of IT systems, entities providing accounting, legal, auditing and consulting services, companies supporting our marketing activities (within the scope of marketing services) and entities related to the Administrator, including its business partners.

These entities operate under entrustment agreements and are equally obliged to protect personal data with us.

In addition, if you use snail mail communication, we will share your personal data with the Polish Postal Service and other companies operating under postal law.

The Administrator reserves the right to disclose selected information concerning the User to competent authorities or third parties who request such information on the basis of an appropriate legal basis and In accordance with the provisions of the applicable law.

THE SECURITY MEASURES WE APPLY

We use computer security, such as firewalls and data encryption, and enforce physical access controls to our buildings and files to ensure the security of this data. We permit access only to those employees and subcontractors who need it to perform their jobs.

• We protect the security of your data during transmission by encrypting it using Secure Sockets Layer (SSL).
• We enforce physical, electronic and organisational security measures in connection with the collection, storage and disclosure of personal information. As appropriate, we may ask you to confirm your identity before we share your personal information.

The personal data we collect from you may be transferred to and stored at a destination outside the European Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our Service Providers. If this is the case, we will ensure that your privacy rights are respected in accordance with this Policy. The most common way we use to achieve this is by entering into a specific type of contract, either using standard contractual clauses (“Model Clauses”) or based on an approved set of privacy principles, such as the Privacy Shield (“Privacy Shield”), which applies when data is transferred to the USA.

COOKIES AND SIMILAR TECHNOLOGIES

We and our partners use cookies and similar technologies, including but not limited to tags (“cookies”), to personalise and improve your experience when you use our Websites. This section provides more information about cookies, including how we use them and how you can make choices about the use of cookies.

How we use cookies

Cookies are small text files containing a unique identifier that are stored on your computer or mobile device so that your device can be recognised when you use a particular website or mobile application. They may only be used for the duration of your visit or may be used to measure your interaction with services and content over a period of time. Cookies help to provide important functions and features of our Websites and to improve your experience of using them.

If you agree to the use of cookies on our Services, they may be used for the following purposes:

Improving the way the Website works	Cookies allow us to improve the way our Websites work so that we can personalise your customer experience and enable you to take advantage of the many useful features they offer
Improving the performance of our Websites and Mobile Apps	Cookies can help us understand how the Website is used, for example, to inform us if error messages occur during use. These types of cookies collect data that is mostly aggregated and anonymised.
Measuring the effectiveness of our marketing communications, including online advertising	Cookies can tell us if you have seen a particular advertisement, and how long it has been since it was shown to you. This information allows us to measure the effectiveness of our online advertising campaigns and to control how many times an advertisement has been shown to you. We also use cookies to measure the effectiveness of our marketing communications, for example, by telling us whether you have opened a marketing email we have sent to you. Cookies are also used to monitor statistics on our websites. In particular, they allow us to observe anonymous information about the number of visitors to our websites by geographic area, browser used, operating system, type of device used to view the site.

COOKIE MANAGEMENT

Cookies in your browser

You can use your browser settings to accept or reject new cookies and delete existing cookies. You can also set your browser to notify you whenever new cookies are placed on your computer or other device. More detailed information on how to manage cookies can be found using the help function available in your web browser. If you choose to disable some or all cookies, you may not be able to take full advantage of our Websites. For example, you may not be able to add products to your shopping cart, proceed to complete a transaction, or use those of our products and services that require you to sign in.

Third parties acting through our Websites

Below is a list of our key partners together with information about the services they provide for us. This list is not exhaustive, but includes those partners with whom we have an established relationship and whose technologies, in terms of cookies, are most commonly used on our Services.

Social media	Reaching out to you through platforms social networks and to enable sharing and involvement, using our Websites. These companies may use your data for their own purposes, including profiling and the targeting of communications to you by means of other advertising.	Facebook, Twitter