This Privacy Policy defines the rules for the processing and protection of personal data provided by Users in connection with their use of the services of Inżynierska Agencja Projektowo – Budowlana “ENIX” sp. z o.o. (hereinafter: ENIX) through the website www.enix.pl (hereinafter: the Website).
The Administrator of personal data (hereinafter: the Administrator) contained on the Website is Inżynierska Agencja Projektowo – Budowlana “ENIX” sp. z o.o., with its registered office in Kraków 30-841, ul. Domagały 1, KRS 0000604073, NIP 6760010214, REGON 003906994.
In concern for the security of the data entrusted to us, we have developed internal procedures and recommendations designed to prevent the data from being made available to unauthorised persons. We monitor their execution and constantly verify their compliance with relevant legal acts—in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the Polish Act on the Protection of Personal Data (in force since 2018), the Act on the Provision of Services by Electronic Means, as well as all types of implementing acts and acts of Community law.
Personal data is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). Processing is carried out on the basis of the User’s consent (Art. 6(1)(a) GDPR), for the purpose of performing the contract or taking steps prior to its conclusion (Art. 6(1)(b) GDPR), and also for the purpose of realising the legitimate interests pursued by the Administrator (Art. 6(1)(f) GDPR), such as: responding to contact enquiries, defence against potential claims, conducting statistical analyses, and internal administrative purposes.
The Website performs functions of obtaining information about Users and their behaviour through information voluntarily entered into forms and the collection of “cookies”. “Cookies” are small text files sent by the Website and stored on the User’s end device (computer, phone, tablet). They are used to remember preferences, session authorisation, and for analytical and marketing purposes. The stored information does not cause configuration changes in the User’s device.
Analytical and marketing cookies are loaded only after obtaining the explicit, voluntary consent of the User, expressed via the “cookies” banner on the Website. Consent can be withdrawn at any time by changing the cookie settings. The User has the ability to independently change the settings regarding cookies in their web browser. Detailed information about cookie handling can be found in the settings of each browser. Withdrawal of consent to the use of cookies does not affect the legality of the processing carried out on the basis of consent before its withdrawal.
Personal data is provided voluntarily and may be made available to the following categories of recipients:
IT and Hosting Service Providers: entities providing website maintenance services (hosting, content management system providers);
Accounting and Legal Service Providers: for the purpose of fulfilling the Administrator’s legal obligations;
Analytical and Marketing Service Providers: in particular, Google LLC (Google Analytics), solely based on the User’s voluntary consent;
Analytical and Marketing Service Providers: in particular, Google LLC (Google Analytics), solely based on the User’s voluntary consent;
Analytical and Marketing Service Providers: in particular, Google LLC (Google Analytics), solely based on the User’s voluntary consent;
In connection with the processing of personal data, Users have the following rights resulting from the GDPR Regulation:
Right of Access to Data (Art. 15 GDPR): the right to obtain information about what data we process and to receive a copy thereof;
Right to Rectification (Art. 16 GDPR): the right to request immediate correction or supplementation of incomplete data;
Right to Erasure (‘Right to be Forgotten’, Art. 17 GDPR): the right to request the immediate erasure of personal data, provided they are no longer necessary for the purposes for which they were collected;
Right to Restriction of Processing (Art. 18 GDPR): the right to request the suspension of operations on data (e.g., sharing them), except for their storage;
Right to Data Portability (Art. 20 GDPR): the right to receive data in a commonly used format and to transmit them to another administrator;
Right to Object (Art. 21 GDPR): the right to object to the processing of data on the basis of the Administrator’s legitimate interest;
Right to Withdraw Consent: the right to withdraw consent at any time, which does not affect the legality of the processing performed before its withdrawal;
Right to Lodge a Complaint: the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
Personal data is stored for the period necessary to achieve the purposes for which it was collected. These periods are as follows:
Data Processed for Contract Performance: for the duration of the contract, and subsequently for the period resulting from legal provisions for the purpose of pursuing claims and fulfilling tax obligations (5 years);
Data Collected Based on Consent: until the consent is withdrawn or cookies are deleted.
Links to other websites may appear on the Website. Such websites operate independently of the Website and are not supervised by the Website in any way. These websites may have their own privacy policies and terms and conditions, which we recommend familiarizing yourself with. Should you have any doubts regarding any provisions of this Privacy Policy, please contact us.
