1. Introduction
    1. This privacy policy (“Privacy policy”) describes rules about collecting and using personal data and includes information about cookies used on the website paraglidingcenter.eu (“Website”). Privacy policy also contains the choices you can make about yours personal data and cookies.
    2. The Data controller is GRZEGORZ SITEK PARAGLIDING CENTER, a company registered in Poland with NIP 6511533858 whose registered office is located in Orzesze, ul. Żorska 232a, Silesia, Poland REGON 240115912.
    3. References to “we“, “us“, “our” and “center” in these Privacy policy are references to the paraglidingcenter.
    4. If you have any questions, please contact us by e-mail: info@paraglidingcenter.com. Our office hours are Monday to Friday, from 8 am to 5 pm.
  2.  Personal data
    1. We may collect personal data from you, such as: name, email address, postal address, phone number, when you register an account on the Website or place an order on the Website or by phone or by e-mail.
    2. We collect personal data in accordance with the Data protection act 1998 and any other applicable legislation and rules.
    3. Permissions. The GDPR (General Data Protection Regulation) grants you the following potential rights related to the processing of your personal data:
      1. the right of access to personal data,
      2. the right to rectify personal data,
      3.  the right to delete personal data,
      4. the right to limit the processing of personal data,
      5. the right to object to the processing of personal data,
      6. the right to transfer data,
      7. the right to lodge a complaint with the supervisory body,
      8. the right to withdraw consent to the processing of personal data, if such consent has been expressed.
    4. We may use collected personal information to:
      1. process and fulfill your order;
      2. contact you (postal mail, e-mail);
      3. facilitate social sharing (e.g. Facebook, Skype);
      4. register and manage accounts;
      5. enforce our Terms & Conditions;
      6. send newsletters;
    5. At any time you can review and change, update certain personal data on your profile on the Website. Also you can remove personal data by deleting account on the Website or by sending an e-mail to us.
    6. At any time you may choose to no longer receive the newsletter, by clicking on the  „unsubscribe” button or by sending an e-mail to us.
    7. You can cancel at any time your consent to process personal data by us.
    8. Always we will retain your personal data for a period necessary to fulfill the purposes listed in the Policy.
    9. Paraglidingcenter will never disclose your information to third parties, except where we have your consent or it is necessary to complete the fulfillment of your order or it is permitted by law.
    10.  We do our best to secure and keep in privacy your personal data by using appropriate physical and electronic methods.
    11. Security. We guarantee the confidentiality of all personal data transmitted to us. We ensure that all the security and data protection measures required by the provisions on the protection of personal data are taken. Personal data is collected diligently and protected properly against unauthorised access.
    12. User account. By creating a user account, you must enter your email address and set the password for your account. Providing data is voluntary, but necessary to create an account. In order to change your user account, you must provide other data about yourself, including your name, billing address and shipping address. Providing this data is entirely voluntary. The data entered by you during the configuration of the user account is processed only in order to maintain your account and allow you to use it. Providing data in the user account is intended to facilitate the ordering process thanks to the possibility to fill the order form automatically. The legal basis for the processing of personal data as part of the user account is the user account management contract that you place on the basis of the store’s regulation (letter b, paragraph 1, art. 6 of the GPDR). Your data will be processed as part of the account as long as you keep your user account. After the deletion of the account, the data will also be deleted from the database, with the exception of the previously placed orders. You may at any time access your personal data processed in connection with the account by logging into your user account. After logging in to the account, you can modify and delete your data at any time, with the exception of order data that you have previously placed. You can also decide to delete your account at any time. Regarding the data stored in the user account, you have the right to transfer them, referred to in art. 20 of the GDPR.
    13. Client’s personal data are processed in aim of processing of the orders placed via the Store, pursuant to article 6(1)(b) RODO. Clients’ personal data may also be processed by the Seller for the purposes of statistical analysis, archiving, or prosecution of claims related to processing of the orders placed via the Store, i.e. pursuant to article 6(1)(f) RODO, as well as after prior consent to the newsletter subscription, i.e. article 6(1)(a) RODO.
    14. Orders. By placing an order, you must provide the necessary data to execute the order, namely the first and last name, the billing address, the delivery address, the email address and the telephone number. Providing data is voluntary, but necessary to place the order. The data provided to us in the context of the order placement are processed so as to execute the order (letterb, paragraph 1, art. 6 of the GDPR), to issue an invoice (letterc, paragraph 1, art. 6 of the GDPR), to include the invoice in our accounting documentation (letter c, paragraph 1, art. 6 of GDPR) and for archival and statistical purposes (letter f, paragraph 1, art. 6 of the GDPR). Orders are also stored in our internal database for archival and statistical purposes. Order data will be processed for the period of time required for the performance of the contract, and then until the expiry period for the claims of the concluded contract. In addition, after this date, the data may still be processed by us for statistical purposes. Please note that we are obliged to store invoices with your personal data for a period of 10 years from the end of the fiscal year in which the tax obligation arose. In the case of the data concerning the orders, it is not possible to rectify them after the processing of the order. You also can not object to the processing of data and require the deletion of data until the expiry period for the claims of the concluded contract. Similarly, you can not object to the processing of data and request the deletion of the data contained in the invoices. However, once the period for the claims of the concluded contract expires, you may object to the further processing of your data for statistical purposes, as well as request the deletion of data from our database. With regard to the order data, you also have the right to transfer the data, as referred to in art. 20 of the GDPR.
    15. Complaints and withdrawal of the contract. If you submit a claim or withdraw from the contract, you provide us with personal data contained in the claim or withdrawal statement, namely your name, address, telephone number, email address and bank account number. The data provided to us when submitting a claim or withdrawing the contract is used to implement the claim procedure or the procedure for withdrawal from the contract (letter c, paragraph 1 art. 6 of the GDPR). The data will be processed for the time necessary to complete the claim procedure or the contract withdrawal procedure. Complaints and statements regarding the withdrawal of the contract may also be archived for statistical purposes. In the case of the data contained in the claims and in the withdrawal statements of the contract, the processed data can not be rectified. You also can not object to the processing of data and require the deletion of data until the expiry of claims regarding the concluded contract. However, after the expiry of the claims of the concluded contract, you may object to further  processing of your data for statistical purposes, as well as request the deletion of data from our database.
    16. Email contact. By contacting us by e-mail, which includes sending a request via contact form, you provide us with your e-mail address as the address of the sender. In addition, other personal data may be included in the body of the message. In this case, the data is processed in order to contact you, and the legal basis for this is paragraph 1, art. 6, that is: your very consent resulting from a contact with us. The legal basis for post-contact processing is the legitimate purpose of archiving correspondence for internal purposes (letter c, paragraph 1, art. 6). The contents of correspondence can be archived and we are not able to clearly determine when it will be deleted. You have the right to require the submission of a correspondence history that has been exchanged with us (if it had been archived) and to require its removal, unless its archiving is justified by our overriding interests, eg. the defense against potential claims on your part.
  3.  Cookies policy
    1. Cookies are small text files stored on your terminal equipment (a computer, a tablet, a smartphone, etc.) that can be read by our teleinformatic system.
    2. As a general rule, the web browser implicitly allows for the storage of cookies. You can at any time configure the web browser to accept cookies or automatically reject cookies.
    3. Consent to cookies. By expressing your consent to the processing of personal data, you also agree to the use of cookies. Cookie settings can be changed or deleted from the browser level. However, please note that disabling cookies may cause difficulties when using our site, as well as many other sites that use cookies.
    4. We use following types of cookies:
      1. strictly necessary – these cookies are essential to let you move on the Website and use its features. We also use these cookies to remember what is in the basket and identify whether or not you are signed on the Website;
      2. performance – these cookies collect information about how you use the Website such as which pages you have visited, thanks to this information we can improve our performance. Always these cookies are anonymous, we do not use them to target advertising;
      3. functional – these cookies are used to remember the choices you make on the Website. Always these cookies are anonymous, we do not use them to target advertising;
      4. targeting – these cookies are used to collect information about your browsing habits to give you adverts which are more relevant to your interests.
  4.  Server logs
    1. The use of the site involves sending requests to the server on which the site is stored. Each request to the server is logged in the server logs.
    2. Logs include your IP address, server date and time, web browser information, and the operating system used. The logs are saved and stored on the server.
    3. The data stored in the server logs is not associated with specific persons using the site and is not used to identify you.
    4. Server logs are only auxiliary hardware used to administer the site; their content is not disclosed to anyone except those authorised to administer the server.
  5.  Changes
    1. We reserve the right to change Privacy policy. Such changes will take effect when posted on the Website.
    2. Always you will be subject to the Privacy policy in force at the time that you visit the Website.
    3. Date of Last Revision: 25.06.2021.