I. INTRODUCTION

It is extremely important for us to provide the User, i.e. you, with the highest level of services, but equally important is the utmost care for your personal data that you provide to us when using our website. www.goodchoice.pro (hereinafter referred to as the "Website" or "Service"). That is why we have prepared for you this Privacy Policy (hereinafter referred to as the "Policy"), in which you will find all the necessary information about your personal data that we process.
First of all, the Policy will tell you what data we process, on what basis, for what purpose, but also how to contact us and exercise your rights. The Policy also aims to guarantee you that we process your personal data in accordance with
with applicable regulations on personal data protection, in particular
with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 April XNUMX
on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR").

When does the Policy apply?

The Policy applies whenever we process your personal data as part of your use of the Service, e.g. when you contact us. Detailed information on the purposes and basis of our processing of your data can be found in Part V of the Policy.

II. PERSONAL DATA CONTROLLER AND SCOPE OF THE POLICY

The administrator of your personal data is Good Choice Piotr Sówiński with its registered office at ul. Malborska 14a/18, 03-286 Warsaw. You can contact the Administrator by traditional mail at Malborska 14A/18, 03-286 W-wa., or by e-mail at rodo@goodchoice.pro

We obtain your personal data when:

• you contact us using the contact forms available on the Website;
• by using the Website, you accept the cookies used therein.

Please remember that by clicking on links available on the Website you may be redirected to websites managed by other Administrators, e.g. to a social networking site.
In such cases, the Privacy Policy applicable to that website will apply.

III. SCOPE OF PERSONAL DATA PROCESSED BY US

When you contact us via the means indicated on the Website, we may process the following personal data:

• first name and last name,
• e-mail adress,
• Phone number,
• name of the organization you represent,
• other data provided when contacting Us.

Our website uses cookies. Detailed information can be found in our Cookie Policy.

We also inform you that we may process your personal data for the purpose of pursuing and defending against claims for a period corresponding to the limitation period of a given claim. The scope of data processed for this purpose depends on the individual claims, but does not go beyond the data indicated in this part of the Policy.

IV. PURPOSES, BASIS AND PERIOD OF PERSONAL DATA PROCESSING

We process your personal data:

a. in order to conclude an agreement in the form of the accepted Terms and Conditions of the Service pursuant to Article 6, paragraph 1, letter b) of the GDPR (processing necessary to conclude and perform the agreement) – data processed for this purpose will be stored for the period of provision of the service;
b. in order to contact you when you use the means of communication available on the Website, including in the scope of complaints under Article 6 paragraph 1 letter f) of the GDPR (processing necessary to implement the legitimate interest of the Administrator, which is effective communication with Customers) – data processed for this purpose will be stored for the period of communication, unless they are necessary for the pursuit or defense against claims;
c. in order to properly manage the Website through the use of Cookies, which enable the identification of the web browser you are using, as well as to adapt the content of the Website to your needs on the basis of Article 6, paragraph 1, letter f) of the GDPR (processing necessary to implement the legitimate interest of the Administrator, which is to ensure the proper operation of the Website in a way that maximizes Customer satisfaction) or Article 6, paragraph 1, letter a) of the GDPR (consent of the data subject to the processing of personal data), depending on the type of Cookies - detailed information on Cookies can be found in Cookies Policy;
d. in order to pursue and defend against claims arising from the activities conducted within the Service pursuant to Art. 6 sec. 1 letter f) of the GDPR (processing necessary to implement the legitimate interest of the Administrator, which is the ability to pursue one's rights and demonstrate compliance with the obligations incumbent on it) – data processed for this purpose will be stored for a period of up to 6 years after the original purpose of their processing has ceased to exist, which period results from the provisions of the Civil Code regarding the limitation periods for claims.

We also inform you that your data may be processed in an automated manner for the above purposes, but will not be profiled and no decisions will be made based on automated processing.

V. USER RIGHTS REGARDING PERSONAL DATA PROCESSING AND THEIR IMPLEMENTATION

The data subject, which is you, has the following rights in relation to data processing:

a. the right to access personal data – you can contact us at any time
with us in order to obtain all necessary information regarding the processing of your personal data, to access this data, to verify the scope of the data we process, and to obtain a copy thereof;
b. the right to rectify personal data – as the Administrator, we constantly take care
to maintain the accuracy of your personal data contained in our resources, however, if you find that we have personal data that is incorrect or out of date, you can contact us at any time to bring this data into line with reality;
c. the right to request the deletion of your personal data (the right to be forgotten) – you may at any time contact us with a request to delete your personal data if they are no longer necessary for the purposes for which they were collected or processed in a manner incompatible with these purposes, your personal data are processed unlawfully, you withdraw your consent to the processing of personal data or you object to the processing of your personal data and there is no other legal basis for processing;
d. the right to restrict the processing of personal data (processing of data without your consent only within the scope of their storage) – you have this right if: you notice that your personal data is incorrect, which allows you to request the restriction of the processing of your personal data for a period allowing us to check the accuracy of this data; your personal data will be processed unlawfully, but you do not want them to be deleted; we will no longer need your personal data, but you may need them to defend or pursue your rights; you object to the processing of personal data, until it is determined whether the legitimate grounds on our side override the grounds for the objection;
e. the right to transfer personal data – you may request that we obtain your data in a machine-readable format or transfer your data to another Controller if the data is processed in a fully automated manner on the basis of Article 6 paragraph 1 letter a) of the GDPR (consent) or Article 6 paragraph 1 letter b) of the GDPR (conclusion and performance of a contract);
f. the right to lodge a complaint with the Supervisory Authority – if you believe that we are processing your data in a manner inconsistent with applicable regulations, you have the right to lodge a complaint with the Polish Supervisory Authority, which is the President of the Personal Data Protection Office (detailed information on this subject can be found on the website of the Personal Data Protection Office: www.uodo.gov.pl).

In addition, you have the right to object to the processing of your personal data processed on the basis of art. 6 sec. 1 letter f) of the GDPR (processing necessary to implement the legitimate interest of the Administrator), which you can report due to your special situation, after reporting which we will be obliged to demonstrate the superiority of our legitimate interest in relation to your interest or rights or freedoms, otherwise we will be obliged to stop processing your personal data. The objection to the processing of data for direct marketing purposes is absolutely effective without the need to provide justification.

You can exercise all of the above rights, excluding the right to complain to the Supervisory Authority, by sending an e-mail to the following address: rodo@goodchoice.pro or by using one of the forms of contact available on our website.

VI. DATA PROCESSING WITHIN SOCIAL MEDIA PORTALS

We may also process personal data via the social networking site Facebook:

In connection with the above, the following personal data may be processed:

• name and surname/profile name and
• data to which we have been granted access depending on privacy settings, e.g. e-mail address, telephone number, etc. contact details, interests, location, comments.

We process your personal data within social networking sites:

a. for the purpose of proper profile management, including publishing information about our activities, which constitutes our legitimate interest – pursuant to Article 6 paragraph 1 letter f) of the GDPR,
b. in order to respond to questions or complaints submitted to us via social media, which constitutes our legitimate interest – pursuant to Article 6 paragraph 1 letter f) of the GDPR,
c. in order to keep statistics of visits to Our website, which may include information such as: time spent, activity, quality of displayed content, your location or information about the device you use to browse Our website, which constitutes our legitimate interest – pursuant to Article 6 paragraph 1 letter f) of the GDPR,
d. in order to defend or pursue claims arising from or related to the use of social networking sites by Users, which constitutes our legitimate interest – pursuant to Article 6 paragraph 1 letter f) of the GDPR.

Personal data is also processed independently of Us by the entity running the social networking site. Detailed information in this regard can be found in the privacy policy of the Facebook portal: https://pl-pl.facebook.com/privacy/explanation/

VII. RECIPIENTS OF PERSONAL DATA

We may transfer your data to entities providing services to us. We may also share data with entities supporting us in providing services electronically.

In these cases, the entities to which your personal data is made available may become separate controllers of your personal data.

In addition, we may share your Personal Data with public authorities under the law in connection with ongoing proceedings concerning possible violations of the law or combating other possible violations of the Terms of Service.

VIII. SECURITY

In order to ensure the highest level of security of your data, we have taken a number of steps in this regard:
a. we take steps to protect data against loss, in particular through a backup system,
b. we have introduced a data encryption mechanism from the moment it is entered into the Service,
c. we have introduced a network monitoring mechanism,
d. we have implemented an information security system compliant with ISO 27001

IX. COMPLAINTS, DOUBTS, QUESTIONS

Any complaints, questions or concerns can be directed via e-mail by sending a message to the following e-mail address: rodo@goodchoice.pro We guarantee a quick and substantively adequate response to all messages.
For the above purpose, you can of course also use all available forms of contact
within the Service.

X. FINAL PROVISIONS

This Policy may change, so in order to ensure your constant awareness of all issues related to the processing of your data within the Service, we will promptly inform you of any modifications to this document. At the same time, we inform you that all versions of the Policy will be stored in our resources with the possibility of your reviewing them at any time.

We are also extremely grateful to you for fully reading the Policy and we hope that it has allowed you to fully understand the processes to which your personal data processed by us are subject.