Personal data processing policy

1. General Provisions. This personal data processing policy has been drafted in accordance with the law “On Personal Data” and sets forth the procedure for processing personal data and measures to ensure the security of personal data used by P`URI (hereinafter referred to as the Operator).
1.1. The Operator seeks to respect human and citizen rights and freedoms as its most important goal and condition in its activity during the personal data processing, as well as ensure protection of privacy rights, personal and family secrets.
1.2. This Operator’s policy on the personal data processing (hereinafter referred to as the Policy) shall apply to all information that the Operator may obtain about visitors to the http://puri-franszyza.pl/ website.

2. Basic Policy Concepts
2.1. Automated personal data processing shall mean personal data processing based on computer equipment.
2.2. Personal data blocking shall mean temporary suspension of personal data processing (except for cases when processing is required to clarify personal data).
2.3. Website shall mean a collection of graphic and informational materials, as well as computer programs and databases, which ensure their availability on the Internet at the http://puri-franszyza.pl/ network address.
2.4. The information personal data system shall mean all personal data contained in databases and information technologies and technical means that ensure its processing.
2.5. Personal data depersonalisation shall mean any actions that make it impossible to determine what specific User or any other personal data subject the personal data belongs to without the use of additional information.
2.6. Personal data processing shall mean any actions (operation) or a number of actions (operations) implemented in relation to personal data with the use of automation tools or without the use of such tools, including collection, recording, systematisation, accumulation, storage, clarification (updating, changing), extraction, use, transfer (dissemination, provision, access), depersonalisation, blocking, deletion, destruction of personal data.
2.7. Operator shall mean a state body, municipal body, legal entity or natural person that independently or jointly with other people organises and (or) initiates the processing of personal data, as well as determines the purposes of personal data processing, the personal data content to be processed, actions (operations) to be implemented with personal data.
2.8. Personal data shall mean any information directly or indirectly related to a specific User of the http://puri-franszyza.pl/ website.
2.9. User shall mean a visitor to the http://puri-franszyza.pl/ website.
2.10. Personal data provision shall mean any actions aimed at disclosing personal data to a certain person or a certain number of people.
2.11. Personal data dissemination shall mean any actions aimed at disclosing personal data to an indefinite number of people (transferring personal data) or getting an unlimited number of people familiar with personal data, as well as publishing personal data in the mass media, posting it in data telecommunication networks or providing access to personal data in any other way.
2.12. Cross-border personal data transfer shall mean any personal data transfer to a foreign country, a foreign authority, a foreign natural person or a foreign legal entity.
2.13. Personal data destruction shall mean any actions, leading to the irrevocable personal data destruction with impossible further restoration of the personal data content in the information system, or destruction of storage devices containing personal data.


3. The Operator may process the following User’s personal data:
3.1. Last name, first name, patronymic
3.2. E-mail address 3.3. Phone numbers
3.4. The website also collects and processes depersonalised data about visitors (including cookies) using Google Analytics, an internet statistics service.
3.5. The data listed above are hereinafter jointly referred as Personal data.

4. Purpose of personal data processing
4.1. The processing of User's personal data aims to inform the User by sending e-mails.
4.2. The Operator may also notify the User about new products and services, special offers and various events.The User can always opt out of receiving messages by sending an email marked as Enabling notifications about new products and services, special offers to the puri.franchise@gmail.com Operator’s email address.
4.3. Depersonalised user data collected through Internet statistics services is used to collect information about user actions on the website, improve the website’s quality and its content.

5. Legal grounds for personal data processing
5.1. The Operator shall process the User's personal data only if it is provided and/or sent by the User through special forms available on the http://puri-franszyza.pl/website. By filling out the forms and/or sending personal data to the Operator, the User shall express its agreement with this policy.
5.2. The Operator shall process depersonalised data about the User if it is enabled in the User's browser settings (allowed to save cookies and use JavaScript technology).

6. Collection, storage, transfer and any other types of personal data processing, the security of personal data processed by the Operator shall be ensured by legal, organisational and technical measures necessary to fully implement the requirements of effective laws in the area of personal data protection.
6.1. The Operator shall ensure the personal data storage and shall take all possible measures to prevent any unauthorised entities from accessing personal data.
6.2. The User's personal data shall never, under no circumstances, be transferred to any third parties, except for cases where it is required to comply with effective laws. If any inaccuracies were detected in personal data, the User can update them on its own, by sending a message marked as “Updating personal data” to the puri.franchise@gmail.com Operator’s email address.
6.3. The term of personal data processing is unlimited. The User may at any time revoke its consent to the processing of personal data by sending a message marked as “Revocation of consent to the personal data processing” to the puri.franchise@gmail.com Operator's e-mail address.

7. Cross-border personal data transfer
7.1. Before initiating the cross-border personal data transfer, the Operator shall make sure that the foreign state that the personal data is planned to be transferred to, ensures reliable protection of the personal data subject rights.
7.2. Cross-border personal data transfer to the territory of foreign countries that do not meet the above-mentioned requirements can be implemented only if the personal data subject gives its consent to the cross-border personal data transfer in writing and/or executes an agreement that the personal data subject is a party to.

8. Final provisions
8.1. The User can get any clarifying information on issues related to the processing of its personal data by contacting the Operator at puri.franchise@gmail.com.
8.2. This document shall reflect any amendments to the Operator's personal data processing policy. The policy shall be valid indefinitely until being replaced by a new version.
8.3. The current version of this Policy is freely available on the Internet at http://puri.franszyza.pl/policy