INTERNET SERVICE PRIVACY POLICY

ANGEL MODELS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ – available at the address: angeloftheworld.eu, hereinafter referred to as the Service.

Dear User!

We care about your privacy and want you to feel comfortable while using our services. Below, we present the most important information about the rules of processing your personal data and about the cookies used by our Service. Your data is processed in accordance with the personal data protection act of May 10, 2018 (Journal of Laws of 2019, item 1781), in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR Regulation”) and the act on providing services by electronic means of July 18, 2002 (Journal of Laws of 2020, item 344).

  1. Personal Data Administrator.

The administrator of the personal data of users of angeloftheworld.eu Service, responsible for ensuring the security of your personal data is: ANGEL MODELS SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, based in Warsaw, UL. NOWOGRODZKA 64 / 43, 02-014, NIP: 7011227952, REGON: 529947661

  1. Bases for Data Processing.

1) The Administrator is authorized to process personal data in cases where at least one of the following conditions is met:

a) the person concerned has consented to the processing of their personal data for one or more specific purposes,

b) processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject, before entering into a contract,

c) processing is necessary to fulfill a legal obligation resting on the Administrator,

d) processing is necessary for purposes resulting from legally justified interests pursued by the Administrator or by a third party.

2) Processing of personal data by the Administrator always requires the presence of at least one of the bases indicated above. The specific bases for processing users’ personal data by the Administrator are indicated below.

  1. Purpose of Data Processing.

1) The purpose of data processing results from the actions taken by the user of the Service and the Administrator.

2) The Administrator processes personal data for the following purposes:

 

Purpose of data processing

Legal basis for processing and data storage period

Contract for providing services or actions taken at your request, aiming to conclude it.

Article 6 (1)(a) and (b) of the GDPR Regulation (the person concerned has consented to the processing of their personal data, and/or processing is necessary for the performance of a contract to which the data subject is a party, or to take action at the request of the data subject, before entering into a contract).

Data is stored for the period necessary to execute, terminate or expire the contract in another way or until the consent granted is withdrawn.

Marketing, including direct marketing.

Article 6 (1)(f) of the GDPR Regulation (processing is necessary for purposes resulting from legally justified interests pursued by the Administrator or by a third party) and Article 6 (1)(a) of the GDPR Regulation (the person concerned has consented to the processing of their personal data by the Administrator for marketing purposes).

Data is stored for the period of existence of a legally justified interest pursued by the Administrator, economically. The Administrator cannot process data for direct marketing purposes in case of effective objection in this regard by the person concerned. In the case of data stored based on consent, data is stored until the person concerned withdraws their consent for further processing of this data for the above-mentioned purpose.

Using the Internet Service site and ensuring its proper functioning.

Article 6 (1)(f) of the GDPR Regulation (processing is necessary for purposes resulting from legally justified interests of the Administrator – consisting in running and maintaining the Internet Service site).

Data is stored for the period of existence of a legally justified interest pursued by the Administrator, but no longer than for the period of limitation of claims of the Administrator against the person concerned, due to the business activities conducted by the Administrator. The period of limitation is defined by law, in particular the civil code (the basic limitation period for claims related to conducting business activity is three years).

Conducting statistics and traffic analysis in the Internet Service.

Article 6 (1)(f) of the GDPR Regulation (processing is necessary for purposes resulting from legally justified interests of the Administrator – consisting in conducting statistics and traffic analysis in the Internet Service to improve its functioning and/or increase the reach of the services provided).

Data is stored for the period of existence of a legally justified interest pursued by the Administrator, but no longer than for the period of limitation of claims of the Administrator against the person concerned, due to the business activities conducted by the Administrator. The period of limitation is defined by law, in particular the civil code (the basic limitation period for claims related to conducting business activity is three years).

Maintaining accounting books, legal service

Article 6 (1)(c) and (f) of the GDPR Regulation (processing is necessary to fulfill a legal obligation resting on the Administrator and/or processing is necessary for purposes resulting from legally justified interests of the Administrator).

Data is stored for a period of 5 years, counting from the beginning of the year following the fiscal year to which the data relates and/or for the period of existence of a legally justified interest pursued by the Administrator.

  1. Providing data is voluntary, but in some cases, it may be necessary to conclude a contract.
  2. The consequence of not providing data may be the inability to use all functionalities of the Internet Service, including:

a) inability to register on the Service,

b) inability to receive information about webinars, training, conferences, and promotions.

  1. Data Recipients.
  1. For the proper functioning of the Internet Service, it is necessary for the Administrator to use the services of external entities (e.g., software provider). The Administrator only uses the services of such processing entities who provide sufficient guarantees of implementing appropriate technical and organizational measures so that processing meets the requirements of the GDPR Regulation and protects the rights of the persons concerned.
  2. The Administrator transfers data only when it is necessary to achieve a specific purpose of personal data processing and only to the extent necessary for its realization.
  3. Personal data of the Users of the Internet Service may be transferred to the following recipients:

a) entities handling payments and entities ensuring the delivery of the order – in the case of a User making a purchase of goods offered by the Service,

b) providers of services supplying the Administrator with technical, IT, and organizational solutions. It refers to providers of computer software for running the Internet Portal, email and hosting provider, and software provider for managing the company and providing technical assistance to the Administrator,

c) providers of accounting, legal, and advisory services providing the Administrator with accounting, legal, or advisory support. The Administrator shares the collected personal data of the User with the chosen supplier acting on his behalf only in the case and to the extent necessary to achieve a specific purpose of data processing in accordance with this privacy policy.

  1. Rights of the Data Subject.
  1. The data subject has the right to request from the Administrator access to their personal data, their rectification, deletion, or limitation of processing and has the right to object to processing, as well as the right to data portability. Detailed conditions are indicated in art. 15-21 of the GDPR Regulation.
  2. The person whose data is processed by the Administrator based on art. 6 (1)(a) or art. 9 (2)(a) of the GDPR Regulation, has the right to withdraw consent at any time without affecting the legality of processing, which was carried out on the basis of consent before its withdrawal.
  3. The person whose data is processed by the Administrator has the right to lodge a complaint with the supervisory authority in the manner and mode specified in the provisions of the GDPR Regulation and Polish law. The supervisory authority in Poland is the President of the Personal Data Protection Office.
  4. The person concerned has the right at any time to object

a) for reasons related to their particular situation – against processing of their personal data, based on art. 6 (1)(f) of the GDPR Regulation (i.e., on legally justified interests pursued by the administrator), including profiling based on these provisions – if applicable,

b) if personal data is processed for direct marketing purposes, including profiling, to the extent that the processing is related to such direct marketing.

  1. In order to exercise the rights mentioned in this point of the privacy policy, you can contact the Administrator by sending an appropriate written message by email to the Administrator’s address indicated at the beginning of the privacy policy.

 

  1. Cookies in the Service
  1. Cookies (small text files) are small text information in the form of text files, sent by the server.
  2. Our Service, like most websites, uses cookies. These files:

a) are stored in the memory of your device (computer, phone, etc.),

b) allow you, among other things, to use all the functions of the Service,

c) do not cause changes in the settings of your device.

  1. Using the appropriate options of your browser, you can at any time:

a) delete cookies,

b) block the use of cookies in the future

  1. In the Service, Cookies are used for:

a) remembering information about your session,

b) statistical,

c) marketing,

d) providing key functions of the Service.

  1. To learn how to manage cookies, including how to disable their support in your browser, you can use the help file of your browser.
  2. If you do not disable the use of cookies in the