1. The Administrator of personal data
1.1. The administrator of the personal data of the WWW Users is: MADFORFUN with headquarters at ZIELNA 2, 87-100 Toruń (hereinafter also referred to as the “Administrator” or “the Company”).
1.2. In any matter regarding the processing of your personal data, please contact us at the following e-mail address: admin@madforfun.com
2. Processing of personal data – the basic information
2.1. Personal data is all information about an identified or identifiable natural person. All personal data is collected, stored and processed on the Website in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR).
2.2. The User of WWW provides an e-mail address on the WWW in order to make contact with the Company and maintain business relations with the User of WWW.
2.3. Personal data is protected from access by third parties. The company uses data only for contacts with Users of the WWW.
2.4. The Administrator does not process special categories of data.
2.5. The Company does not process personal data for purposes in which unambiguous consent is required, and such consent has not previously been granted.
3. The purposes of personal data processing
3.1. Personal data is collected, stored and used by the WWW with the consent of the persons to whom they relate, in accordance with the law and with due process and in a manner that ensures their safety.
3.2. The Administrator may use personal data only to provide proper service to the Users of the WWW and as part of communication with Users who have given their consent.
3.3. Personal data is used to conclude, execute and change, if any, the contract concluded with you, including service delivery, complaint handling, abuse prevention and detection, and claim management.
3.4. The Administrator declares that he does not apply profiling for the purposes of direct marketing.
3.5. The Administrator provides the following legal grounds for data processing, including personal data:
a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes – the legal basis for the processing is art. 6 par. 1 lit. a) of the GDPR);
b) processing is necessary for the performance of the contract to which the data subject is a party – the legal basis for processing is art. 6 par. 1 lit. b) of the GDPR);
c) for analytical and statistical purposes, for the analysis of Users’ activity on the Website, in order to improve the functionalities used – the legal basis of the processing is the justified interest of the Administrator (Article 6 paragraph 1 point f) of the GDPR);
d) for the purpose of potential determination, investigation or defense against claims – the legal basis of the processing is the legitimate interest of the Administrator (Article 6 paragraph 1 point f) of the GDPR).
4. Other purposes of processing personal data
4.1. The Company processes data for internal analyzes to manage the services provided and to plan their development. In addition, personal data are processed by us in order to fulfill the obligations imposed on the Company by law.
4.2. The Administrator does not process personal data in automatic decision-making processes.
5. Protection of personal data being processed
5.1. The set of collected personal data is treated as a database with a high degree of security. The collection is stored on a secure server against both remote (IT) and physical access. In addition, all persons who process User’s personal data for the purposes of the WWW, appropriate authorizations issued by the Administrator. The basis for entrusting the processing of personal data is an appropriate agreement.
5.2. The Administrator does not transfer personal data of the WWW Users outside the European Economic Area.
6. Disclosure of personal data
6.1. The Company ensures special diligence in caring for the personal data protection. Personal data may be provided to entities that provide services to the Company. These entities are separate administrators of personal data that process data on their own behalf. These include courier and postal companies, banks, payment institutions or authorized public administration bodies, including the Chairman of Electronic Communications Office.
7. Duration of processing personal data
7.1. The data will be processed and stored by the Administrator for the time necessary due to the purpose of their processing. If personal data are processed in order to conclude or perform the contract and fulfill the legal obligation of the Administrator, they will be kept for the duration of the contract, and after its expiry for the time necessary for after-sales customer service (e.g. complaint handling), security or investigation of possible claims related to the contract and fulfillment of the Administrator’s legal obligation.
7.2. In the case of processing personal data on the basis of an expressed consent to the processing of personal data, the processing time will depend on the duration of the consent, i.e. until its revocation.
7.3. Personal data processed for the purpose of marketing and promotion of the Administrator’s own services, on the basis of a justified legal interest, will be processed until the opponent complains.
8. Processing of other data of the WWW Users
8.1. Information contained in system logs (eg IP address) can also be collected on the WWW and its subpages. They are used for technical purposes related to server administration. IP Addresses are also used to collect general statistical information about Users visiting the WWW.
9. Transmission protection
9.1. Data of particular importance – in particular all kinds of passwords – are sent via SSL encrypted protocol.
10. Users’ rights in relation to personal data
10.1. The Company indicates the catalog of rights in relation to personal data:
1. rectification (correction of data);
2. deletion of data processed unreasonably in situations where this right is not excluded;
3. limitation of data processing;
4. access to information about the data and the data itself;
5. transferring data to another administrator;
6. the right to object to the data being processed to the competent authority: https://uodo.gov.pl/.
11. Request to delete personal data from the database and other applications
11.1. At any time, the User withdraws consent to the processing of personal data for the purposes of sending newsletter messages or processing data for marketing purposes, if such consent was previously expressed by the User. The appropriate message should be sent to the e-mail address: admin@madforfun.com or traditional mail to the above-mentioned address of the Administrator’s office. Withdrawal of consent will result in the User not being receiving information about promotions, new products and other attractive offers dedicated to our clients from the time the User submits a statement of withdrawal.
11.2. Further processing of the User’s data may take place due to the following reasons:
1) meeting the required period of data storage in relation to commercial and tax law;
2) storage of evidence in the area of legal restrictions.
11.3. Individual applications regarding User’s rights related to the processing of personal data, please direct:
1) in writing to the address of the Administrator’s office;
2) by e-mail to the following address: admin@madforfun.com.
11.4. Any additional information about the rules for the processing of personal data, including their use and protection, as well as the User’s rights and conditions of use, will be available at the registered office of service providers by email at admin@madforfun.com
11.5. The administrator does not declare a formal obligation to appoint an Inspector of Personal Data Protection.
11.6. In the event that the User finds that the processing of his personal data is illegal, he has the right to lodge a complaint with the President of the Office for the Protection of Personal Data.
12. Cookies
12.1. WWW uses “cookies”. Cookies are text files saved on the user’s computer when using websites. Cookies store information such as the language setting, the length of time a given user spends on the website or the information on it. And therefore, the Company avoids re-entering all the necessary data the next time visit on WWW.
The Company uses the so-called “Session files” or “session cookies”, which, depending on the User’s browser settings, will be deleted when the browser is closed. The Company also uses files that are used immediately after the session (“trans-session cookies”). These files are used, in particular, to make services of Company more user-friendly and more effective. And therefore, it is possible that the Company may provide information tailored exactly to the interests of the User on the page which the User is currently browsing.
The only purpose is to tailor the services to the User’s needs and make web use optimally convenient. Most browsers automatically accept cookies. The User may not agree to the use of cookies by not allowing their processing in their web browser. How to do it can User learn in detail by reading the manufacturer’s instructions for the browser. The User may delete cookies at any time, which are stored on his end device. The Company emphasizes that the WWW may be only partially accessible without cookies.
12.2. Tools designed for Website Optimization
The Company uses products and functions provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”):
a) Google Tag Manager
This tool does not collect personal data in itself. It supports and manages WWW tags. Tags are small elements of code that measure the traffic and behavior of Users on the WWW, as well as check the impact of online advertising, they can also test and optimize WWW. For more information about Google Tag Manager, please visit: https://www.google.com/intl/de/ tagmanager / use-policy.html.
b) Google Analytics
The WWW includes the “Universal Analytics” operating mode. This allows you to assign data, sessions and interactions on several devices thanks to a pseudo-anonymous ID, and thus analyze the User’s activity on different devices.
Google Analytics uses cookies, which are text files stored on a computer, and which help the website operator to analyze how Users use its website. The information generated by cookies in connection with the use of the Website is usually transferred to Google servers in the USA and stored there.
However, if IP anonymisation is enabled on the website, Google will first reduce / reduce the User’s IP address within all EU Member States or other states or countries covered by the European Economic Area Agreement.
Only in exceptional cases, the entire IP address will first be sent to Google servers in the USA and only then will it be shortened. For more information about the terms of use and data protection, please visit: https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.
The User may refuse to use cookies by selecting the appropriate settings in the web browser. If the User chooses such settings, it may be impossible to use the full functionality of the Website. You may stop Google from collecting data generated by cookies and linked to the use of the Site (including the User’s IP address) and Google’s processing of such data by downloading and installing the Browser Add-on. Opt-out cookies prevent the collection of data in the future when the User visits the website. To stop Universal Analytics from collecting data on several devices, the User must install an opt-out system on all devices. After clicking the provided opt-out cookie, the following will be installed: Disable Google Analytics.
12.3. Integration of third party services and content
The Company has integrated the content of third party websites on the Website (eg YouTube video, Vimeo video, Google Maps, mailchimp.com, leadfeeder.com). It is assumed that the suppliers of this content (as a result they are called third parties) use the User’s IP address. They can not send content to the User’s browser without receiving an IP address. Therefore, the IP address is required to present the content. The company uses only content from suppliers who use the IP address only to provide content. However, the Company does not control whether the third party stores IP addresses for statistical purposes. The Company will inform Users to what extent, if only the Company will know about it.
13. Date of application
The Policy is accurate as at 16th January 2019