Privacy Policy

I. General Information

1. The Data Controller is: QR COMMUNIKATION SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, registered office at Zielona 47, Kotórz Mały, 46-045, Poland. Registered in the Register of Entrepreneurs maintained by the District Court in Opole, 8th Commercial Division of the National Court Register (KRS) under number KRS: 00008291777, REGON: 384471785, NIP (Tax ID): 9910530509.
2. Data Protection Officer – email: kontakt@poznajhistorie.pl
3. The website operator is: QR COMMUNICATION Sp. z o.o., with its registered office in Kotórz Wielki, Poland, KRS No. 0000829177.
4. The website collects information about users and their behavior through:
   1. storing cookies on users' end devices;
   2. collecting web server logs by the hosting provider: NETKONCEPT Sp. z o.o., headquartered in Opole, ul. Partyzancka 5a, 45-801 Opole, Poland, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court in Opole, 8th Commercial Division, under KRS No. 0000461385, NIP: 7543072668, REGON: 161531534, with a share capital of PLN 5,000 fully paid up.

II. Purpose and Scope of Data Collection

1. The legal basis for data collection is the voluntary use of the application through a QR code reader.
2. The website may also record information about connection parameters, including time stamps and IP addresses.
3. The purposes of processing users' personal data by the Controller are:
   1. provision of electronic services;
   2. operation of the application and ensuring its proper functioning;
   3. handling correspondence and processing inquiries and notifications submitted by users.
4. Personal data is disclosed only to entities that require access to it in order to ensure a high standard of service.
5. Personal data is not transferred to countries outside the European Union or the European Economic Area and is not disclosed without the consent of the data subjects, unless such disclosure is made to persons authorized to process personal data under data processing agreements concluded with the Controller (including authorized employees, contractors providing management, accounting, marketing, IT, legal services, and services related to the operation of the website and services offered by the Controller), or to other entities authorized under applicable law.
6. The Controller may be required to provide information collected through the website to authorized public authorities upon lawful request and to the extent required by such request.
7. The Controller guarantees compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and ensures the rights of data subjects, including the right to:
   1. access personal data;
   2. rectify personal data;
   3. erase personal data;
   4. restrict processing of personal data;
   5. data portability;
   6. object to the processing of personal data.
8. The rights referred to above may be exercised in the following circumstances:
   1. Right to Rectification - when personal data is inaccurate or incomplete.
   2. Right to Erasure - when:
      1. the data is no longer necessary for the purposes for which it was collected;
      2. consent to processing has been withdrawn;
      3. an objection to processing has been raised;
      4. the personal data has been processed unlawfully;
      5. the data must be erased to comply with a legal obligation;
      6. the data was collected in connection with information society services offered directly to a child.
   3. Right to Restriction of Processing - when:
      1. the accuracy of the data is contested, for a period enabling verification of its accuracy;
      2. processing is unlawful, but the data subject opposes erasure;
      3. the Controller no longer needs the data, but it is required for the establishment, exercise, or defense of legal claims;
      4. an objection to processing is pending verification as to whether the Controller's legitimate grounds override those of the data subject.
   4. Right to Data Portability - when processing is based on consent or a contract and is carried out by automated means. A person providing personal data has the right to lodge a complaint regarding the processing of personal data with the supervisory authority:
   5. President of the Personal Data Protection Office (UODO) ul. Stawki 2, 00-193 Warsaw, Poland
      Personal data will be automatically deleted once it is no longer necessary for the purposes for which it was collected, but not earlier than upon the expiry of limitation periods for any claims related to the services provided.

III. Information About Cookies

1. The website uses cookies.
2. Cookies are IT data, in particular text files, stored on the user's end device and intended for use on the website. Cookies typically contain the name of the website from which they originate, the storage duration on the user's device, and a unique identifier.
3. The hosting provider is responsible for placing cookies on the user's device and accessing them.
4. The following cookies are used by default:

This Privacy Policy describes only the website operator's own cookies (first-party cookies). To obtain information about third-party cookies, users should consult the privacy policies of the respective third-party providers.

5. Cookies are used for the following purposes:
   1. generating statistics that help understand how users interact with the website, enabling improvements to its structure and content;
   2. maintaining user sessions after login so that users do not need to re-enter their login credentials on every page.
6. The website uses two main types of cookies:
   1. Session Cookies - These are temporary files stored on the user's device until logout, leaving the website, or closing the web browser.
   2. Persistent Cookies - These remain stored on the user's device for the period specified in the cookie parameters or until deleted by the user.
7. Web browsers typically allow cookies to be stored on users' devices by default. Users may change these settings in their browser's Privacy settings. Browsers also allow users to delete cookies or block them automatically. Detailed information can be found in the browser's help section or documentation.
8. Restricting the use of cookies may affect certain functionalities available on the website.
9. We recommend reviewing the privacy policies of external service providers to learn how they use cookies for statistical purposes, including: Google Analytics Privacy Policy.