We would like to inform you that we process your personal data when you visit our website at: https://www.galeriausmiechu.pl.
We are committed to ensuring the security of your data and to respecting your rights. We process your personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: the Regulation).
Who is the controller of your personal data and the data protection officer?
The controller of your personal data is Galeria Uśmiechu spółka z ograniczoną odpowiedzialnością , with registered office in Warsaw, KRS: 0000856823, NIP: 5272935523, REGON:
386879088, address: ul. Burakowska 5/7, 01-066 Warsaw, Postal address: ul. Francesco Nullo 42/U7, 31-543 Krakow, contact details: telephone: +48 12 429 14 70 or +48 511 155 155, e-mail address: biuro@galeriausmiechu.pl (hereinafter: Administrator).
The administrator can be contacted:
The Administrator has appointed a Data Protection Officer (DPO), who can be contacted in all matters relating to the processing of personal data. Contact details of the DPO – e-mail address: iod@galeriausmiechu.pl
On what basis and for what purposes do we process personal data?
In connection with the operation of our website, we process personal data for different purposes and to different extents. This mainly depends on which functionalities of the website you use. Below we describe each of these data processing activities.
When you visit our website, we process some of your personal data in connection with the use of cookies and the recording of website access data (logs). We may process information such as your IP address and the type of device you are using, information about your operating system, your location or statistical information about your activity on the website.
We also use solutions to analyse traffic to our website and generate statistics about it. These are based on the Google Analytics service.
To the extent described above, the basis for the processing of your data is Article 6(1)(f) of the Regulation, i.e. the Administrator’s legitimate interest in tracking activity on our website.
If you use the contact form on our website or contact us by telephone or email using the contact details provided on the website, we will process your personal data in order to answer your questions and to enable you to contact us.
The need to process your data in order to answer your questions constitutes our legitimate interest and the legal basis for processing your data in this respect is Article 6(1)(f) of the Regulation.
If you wish to use our services, we will charge a booking fee. We will then process your personal data for the purpose of booking an appointment.
The basis for processing your personal data to the extent described above is Article 6(1)(b) of the DPA, i.e. activities aimed at concluding a contract for the provision of dental services.
We have a profile on the social media site Facebook. If you visit our profile, we may also process your personal data. This is in connection with leaving likes or comments under our posts or writing private messages to us. In this respect, we process your personal data as a controller and the legal basis for the processing is our legitimate interest, i.e. to promote and inform you about the activities of the Administrator. Therefore, the basis for processing the data is the provision of Article 6(1)(f) of the Regulation.
Notwithstanding the foregoing, personal data processed within Facebook is also processed by Facebook Ireland Limited and its affiliates – they act as a separate controller of personal data in this respect. If you wish to exercise your rights under the Regulation, you may do so by contacting us or by contacting Facebook directly – if you contact us, we will share the information we hold with you and we may also assist you in directing your request to Facebook.
With whom may we share your personal information?
In order to operate our website and carry out the activities described above, we use the services of certain third parties. Therefore, the personal information you provide will be shared with companies that work with us in the areas of IT, website positioning and online advertising.
In addition, in connection with the use of our website, we may transfer your personal data to Google Ireland Limited – this company has access to the personal data we process in connection with the compilation of statistics about the use of our website and the display of advertisements within the Google search engine. This company is a subsidiary of Google LLC, based in California, USA. Any transfer of personal data to the USA may take place on the basis of the Standard Contractual Clauses, a special arrangement whose model has been approved by the European Commission,
Retention period for personal information
We endeavour to keep your personal information only for as long as we actually need it – after which time it will be deleted. Therefore, we can inform you that, as a general rule:
1. if you have visited our website, we will process your personal data for as long as you use the website,
2. if you have given your consent to the processing of your personal data, we will process your data until you withdraw your consent or until we cease to carry out the activities for which such consent was given.
What are your rights in relation to the processing of your personal data?
With regard to the processing of your personal data, you have the right to
1. obtain access to your personal data
2. request the rectification of your personal data
3. the erasure of your personal data
4. the restriction of the processing of your personal data,
5. the portability of your personal data, where the processing is based on your consent
6. to object to the processing of your personal data, to the extent that the processing is based on a legitimate interest of the controller
7. withdraw your consent at any time to the processing of your personal data based on your consent, without prejudice to the accuracy of the processing of your data prior to the withdrawal of your consent
8. lodge a complaint with the supervisory authority – the President of the Office for the Protection of Personal Data.
We do not process your personal data for the purpose of automated decision making based on profiling. The possible targeting of advertising through social networks can only be based on general criteria and does not involve decision-making.
About cookies
When you visit our website, the cookies we use may be stored on your device. Cookies are small files that enable or facilitate the use of certain website features. They may be placed on your device directly by us or by third parties with whom we work. As part of our use of cookies, we may process your personal information, including, without limitation, your IP address, your browsing history, or information about the device or software you are using. We also use other cookie-like technologies on our website to optimise its operation, in connection with which personal data may be processed. When we refer to cookies in this policy, this includes cookie-like technologies. Cookies are used to control traffic on our website, to compile statistics about the use of the website by its users, to carry out marketing activities, to prevent errors and technical faults, to ensure the security of the website or to prevent misuse and breaches of the law.
If you restrict the use of cookies, the use of certain services provided by us may be limited and in some cases may not be possible.
