Privacy Policy

The text below should be located in the "Privacy Policy" tab

 

 

PRIVACY POLICY

AND COOKIES

 

This Privacy and Cookies Policy (hereinafter referred to as the Privacy Policy) contains information on the processing of your personal data and the use of cookies in connection with your use of the website operating at: https://color-laboratory.com/ (hereinafter referred to as the website).

 

 

1. Information about the Administrator of your personal data

 

The controller of your personal data is COLOR LABORATORY MD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Warsaw (02-496) at ul. Wolności 24, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under the KRS number: 0000435741, NIP: 5223000057, REGON: 14634263500000,

 

hereinafter referred to as "Personal Data Administrator" or "Company”.

 

2. Contact with the Personal Data Administrator

In all matters related to the protection of personal data and this Privacy Policy, you can contact the Personal Data Administrator by:

 

1.       email address:  biuro@color-laboratory.com
2.      in writing:  Color Laboratory  MD sp. z o. o., ul. Wolności 24, 02-496 Warsaw

 

3. Purposes and basis of data processing;

 

 

Purpose of processing	Personal data	Legal basis
Contacting you regarding the matter you described.	name, last name, email address, telephone number, company name, address (street, postal code, city, province), Tax Identification Number, details about the matter about which you are contacting us.	Article 6, paragraph 1, letter f of the GDPR - processing is necessary for the purposes of pursuing the legitimate interest of the Company, which in this case is to respond to your message sent to us using the contact details provided on our website.

 

Purpose of processing	Personal data	Legal basis
Contacting you in order to conclude or perform a contract (including a contract for the provision of electronic services) with you or the client/contractor on whose behalf you are contacting us.	name and surname, email address or phone number, position or function – if applicable, your place of employment or the details of the entity you represent – if applicable, other necessary data.	Article 6, paragraph 1, letter b of the GDPR - processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before entering into a contract.

 

Purpose of processing	Personal data	Legal basis
IN purpose verification of your permissions to representing our Contractor or Client.	name and surname, email address or phone number, position or function, identification data of the client or contractor (e.g. at the same time your place work) - if you contact us in on behalf of our client or contractor; data about in the matter, in which you are in touch	Article 6, paragraph 1, letter b of the GDPR - processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before entering into a contract.

 

Purpose of processing	Personal data	Legal basis
Contact form "Contact us" support	name, email address, message content.	Article 6, paragraph 1, letter f of the GDPR - processing is necessary for the purposes of pursuing the legitimate interest of the Company, which in this case is the response to your message sent to us using the "Contact us" contact form.

 

Purpose of processing	Personal data	Legal basis
Sending the Newsletter.	name and surname, email address.	Article 6, paragraph 1, letter b of the GDPR - processing is necessary for the performance of the Newsletter Service Agreement concluded with the data subject or to take steps to conclude it.

 

Purpose of processing	Personal data	Legal basis
Use of cookies other than essential cookies.	website user cookies.	Article 6, paragraph 1, letter a of the GDPR - the processing of personal data takes place on the basis of the consent granted (upon first entry to the website) the website is asked about consent to use of cookies).

 

Purpose of processing	Personal data	Legal basis
Analysis of your website activity.	IP address, date and time of website visit, type of operating system, time spent on the site, visited subpages, data collected in cookies, other data collected by Google Analytics.	Article 6, paragraph 1, letter f of the GDPR - processing is necessary to pursue the legitimate interest of the Company, which in this case is to know your activities on the website.

 

 

Purpose of processing	Personal data	Legal basis
Archival and evidentiary purposes.	name, last name, email address, telephone number, company name, address (street, postal code, city, province), Tax Identification Number, other necessary data.	Article 6, paragraph 1, letter f of the GDPR - processing is necessary for the purposes of pursuing the legitimate interest of the Company, which in this case is securing information that may be used to demonstrate facts of legal significance.

 

Purpose of processing	Personal data	Legal basis
Establishing, pursuing or defending against legal claims.	name, last name, email address, telephone number, company name, address (street, postal code, city, province), Tax Identification Number, other necessary data.	Article 6, paragraph 1, letter f of the GDPR - processing is necessary to pursue the legitimate interest of the Company, which in this case is the protection of the property interest of the Company.

 

Purpose of processing	Personal data	Legal basis
Fulfillment of obligations arising from the GDPR.	name, last name, email address, telephone number, company name, address (street, postal code, city, province), Tax Identification Number, other necessary data.	Article 6, paragraph 1, letter c of the GDPR - processing is a legal obligation on the Company;   Article 6, paragraph 1, letter f of the GDPR - processing is necessary in order to pursue the legitimate interest of the Company, which in this case is, for example, maintaining registers and records, as well as having information about persons who have exercised the rights provided for in the GDPR.

 

 

4. The obligation to provide us with your personal data

 

• You are not obliged to provide us with your personal data. Providing personal data is voluntary and depends on your decision. However, providing certain personal data is necessary to meet your expectations, e.g. to contact the Personal Data Administrator.
• Please remember that if you contact us on any matter, providing your data may be necessary, for example, to answer your question.

 

5. The right to withdraw consent

 

• If the processing of personal data is based on consent, you may withdraw this consent at any time at your own discretion.
• If you would like to withdraw your consent to the processing of personal data, please send an e-mail directly to the Administrator at the following address: biuro@color-laboratory.com  or in the case of cookies, changing cookie settings.
• If the processing of your personal data was processed on based on consent, its withdrawal cannot be it causes processing of personal data for was illegal at that point. In other words, until until you withdraw your consent, we have the right to process your data personal data and her appeal was not affects Compliance with the law of previous processing.

 

6. Data profiling and automated decision-making

 

We inform you that your data will not be used for automated decision-making, including profiling.

 

7. Recipients of personal data

 

Like most entrepreneurs, we use the help of other entities in our activities, which often involves the need to provide personal data.
Therefore, if necessary, we may transfer your data to external service providers.

 

External service providers involved in the processing of your personal data are:

• Hosting companies, which store data on the server,
• Entities providing technical services, if the technical work involves areas where personal data is located,
• Entities related to legal services, who are subject to professional secrecy and gain access to personal data as a result of the need to use legal assistance,
• Newsletter service provider,
• Statistics tool providers,
• Other subcontractors, who will be granted access to the data if necessary.

 

In addition, it may happen that, for example, on the basis of the relevant legal provision or the decision of the relevant authority, we will have to transfer your personal data to other entities, whether public or private. For our part, we assure you that we analyze every case of a request to provide personal data very carefully and very thoroughly, so as not to inadvertently pass on information to an unauthorized person.

 

8. Transfer of data to third countries

 

Yes. In connection with the use of popular services (including Facebook) by the Personal Data Administrator, your personal data may be transferred to the USA. For our part, we assure you that the data will be transferred in compliance with all legal requirements. The providers of these tools guarantee an adequate level of protection of personal data through appropriate compliance mechanisms provided for by the GDPR, in particular through the use of standard contractual clauses.

 

9. The period of storage of personal data

 

Please note that, in accordance with applicable law, we do not process your personal data "indefinitely", but for the time needed to achieve the designated purpose. After this period, your personal data will be irreversibly deleted or destroyed.

 

You will find a description of the processing periods below:

• Correspondence handling – data related to handling correspondence will be processed for the duration of the correspondence between us,
• Handling correspondence to conclude or execute a contract – data related to handling correspondence related to the conclusion or performance of the contract will be processed until an objection is effectively raised or the purpose of processing is achieved (including, for example, the expiry of limitation periods),
• Verification of the right to represent the client or contractor - data related to the verification of the right to represent the client or contractor will be processed until the objection is effectively raised or the purpose of processing is achieved (including, for example, the expiry of limitation periods),
• Contact form "Contact us" support - data related to handling correspondence will be processed for the duration of the correspondence between us,
• Sending the Newsletter - data related to the conclusion of the Newsletter Service Agreement will be processed until the claims arising from this Agreement expire,
• Use of cookies (other than essential cookies) – data related to cookies will be processed until time of withdrawal of consent or achievement of the purpose of processing,
• Website Activity Analysis -  data related to the analysis of activity on the website will be processed for time of obsolescence or loss of usefulness, but not longer than for 2 years,
• Archival and evidentiary purposes – data related to archival and evidentiary purposes will be processed until you successfully file an objection or until the processing purposes are achieved,
• Establishing, pursuing and defending claims – data related to claims will be processed until the claims are time-barred, although the limitation period for claims may vary under applicable law;
• Fulfillment of obligations arising from the GDPR – data related to the protection of personal data will be processed until they lose their usefulness, you effectively file an objection or the limitation period for our liability as the Personal Data Controller expires.

10. Rights in connection with the processing of your personal data

 

We inform you that under the GDPR you have the right to:

• access to your personal data;
• rectification of personal data;
• deletion of personal data;
• restrictions on the processing of personal data;
• object to the processing of personal data;
• transfer of personal data,
• lodge a complaint with the supervisory authority (if you find that we are processing your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office or another competent supervisory authority).

 

As the Personal Data Administrator, we respect your rights arising from the provisions on the protection of personal data and strive to facilitate their implementation to the highest possible extent. We point out that the listed rights are not absolute, and therefore
In some situations, we may lawfully refuse to comply with your requests. However, if we refuse to comply with your request, it will only be after a thorough analysis and only if refusing to comply with your request is necessary.

 

11. Cookies

 

The Personal Data Administrator, like other entities, uses so-called cookies on its website, i.e. short text information saved
on the computer, phone, tablet or other device of the website user. They can be read by our system, as well as by systems belonging to other entities whose services we use.

We use cookies based on your consent, except when cookies are necessary for the proper functioning of the website.

 

Cookies that are not necessary for the website to function properly remain blocked until you consent to the use of cookies. During your first visit to the site, we display a message asking for your consent along with the ability to manage cookies, i.e. decide which cookies you agree to and which you want to block.

 

Cookies perform many functions on the website, most often useful ones, which we will try to describe below:

 

• functional cookies – the use of such cookies is necessary for the proper operation of the website, we can place these cookies without your consent,
• creating statistics — cookies are used to analyze,
  how users use the website (how many open the website, how long they stay on it, which content is most interesting, etc.). This allows the website to be continually improved
  and adapt its operation to user preferences. In order to track activity
  and create statistics using Google tools such as Google Analytics,
• marketing cookies – cookies enable us to target advertisements to users of our website that are tailored to their preferences.

 

Your web browser allows the use of cookies by default.  device, therefore, upon your first visit, we ask you to agree to the use of cookies. However, if you do not wish to use cookies when browsing the website, you can change the settings in your web browser - completely block the automatic handling of cookies or request notification each time cookies are placed on your device. Settings can be changed at any time.

 

You can manage cookie settings within your web browser. You can block all or selected cookies. You can also block cookies from specific websites. You can also delete previously saved cookies and other website and plug-in data at any time.

 

We give you the ability to modify cookies from our website. To modify cookies, you can use this link ___________________.

 

Internet browsers also offer the possibility of using incognito mode. You can use it if you do not want information about visited pages and downloaded files to be saved in the browsing and download history. Cookies created in incognito mode are deleted when you close all windows of this mode. Be aware that disabling or limiting the use of cookies may prevent you from using some of the functions available on our website and cause difficulties in using the site, as well as many other websites that use cookies.

 

12. Types of cookies placed

 

Name	Supplier	Expiry	Function
__Secure-3PSID
__Secure-1PSID
__Secure-3PSIDCC
SSID
SAPISID
_GRECAPTCHA
__Secure-1PSIDCC
__Secure-3PAPISID
NID
OGP
OGCP
CONSENT
tk_lr
_ga
_ga_8VZEXEE5P2
tk_or
tk_r3d
popup_form_dismissed_2

 

 

13. Policy update

 

We may modify the Privacy Policy, in particular due to technological changes and changes in applicable law. You will be notified of any changes introduced to this Privacy Policy in a manner appropriate to the method of data processing. This Privacy Policy is effective from __________ In addition, any archived versions of the privacy policy will be linked below.

 

Archived versions of the privacy policy:

________________________________