Privacy Policy

§ 1 General Provisions

1. The data controller is the company Watersystem Sp. z o.o. Sp. K, located at ul. Trakt Brzeski 127 05-077 Zakręt, with NIP number: 5322048050 and KRS number: 500577. You can contact Watersystem Sp. z o.o. Sp. K in writing at the address mentioned above or by email at: office@watersystem-parks.com
2. According to Article 37 of the GDPR, the company "Watersystem Sp. z o.o. Sp. K" has not appointed a Data Protection Officer.
3. This privacy policy is an integral part of the Terms and Conditions. By using the services we offer, you entrust us with your information. This document serves as a guide to understanding what information and data are collected, for what purposes, and how they are used. These data are very important to us, so please read this document carefully, as it outlines the rules and methods for processing and protecting personal data. This document also sets forth the rules for the use of "Cookies".
4. We inform you that we comply with the rules for personal data protection and all legal regulations provided by the Personal Data Protection Act and the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, on the protection of individuals concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
5. Upon request from the person whose personal data is being processed, we provide comprehensive information on how we use their personal data. We always strive to inform clearly about the data we collect, how we use them, the purposes for which they are processed, to whom they are transferred, what protection we provide when passing them on to other entities, and provide information about institutions to contact in case of doubts.

§ 2 Privacy Principles

1. We respect your privacy. We aim to ensure the convenience of using our services.
2. We value the trust you place in us by entrusting your personal data for the provision of services. We always use personal data in a fair manner, ensuring we do not breach your trust, and only to the extent necessary to provide the services.
3. As a user, you have the right to obtain full and clear information on how we use your personal data and for what purposes they are necessary. We always clearly inform you about the data we collect, how we use it, who we share it with, and provide information about entities you should contact in case of doubts.
4. In case of doubts regarding how we use your personal data, we will promptly take actions to clarify and resolve those doubts. We respond comprehensively to all related questions.
5. We will take all reasonable actions to protect your data from improper and uncontrolled use.
6. The legal basis for processing your personal data is:
   1. Art. 6(1)(a) the data subject has given consent to the processing of their personal data for one or more specific purposes
   2. Art. 6(1)(b) processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract
   3. Art. 6(1)(c) processing is necessary for compliance with a legal obligation to which the controller is subject
   4. Art. 6(1)(d) processing is necessary to protect the vital interests of the data subject or another individual
   5. Art. 6(1)(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
   6. Art. 6(1)(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party

7. Your personal data related to the conclusion and performance of the contract will be processed for the duration of the contract and for no longer than the law allows, including provisions of the Civil Code and the Accounting Act, i.e., no longer than 10 years from the end of the calendar year in which the last contract was performed.
8. Your personal data processed for the purpose of concluding and performing future contracts will be processed until an objection is raised.
9. You have the right to: access your personal data and obtain a copy of the personal data being processed; correct inaccurate data; request the deletion of data (right to be forgotten) under circumstances specified in Art. 17 of the GDPR; request the restriction of processing in cases specified in Art. 18 of the GDPR; object to processing in cases specified in Art. 21 of the GDPR; request the transfer of data provided and processed in an automated manner.
10. If you believe your personal data is being processed unlawfully, you can file a complaint with the supervisory authority (Personal Data Protection Office, ul. Stawki 2, Warsaw). If you need additional information regarding data protection or wish to exercise your rights, please contact us in writing at the correspondence address.
11. We comply with all applicable regulations concerning data protection and will cooperate with data protection authorities and law enforcement agencies. In the absence of specific data protection regulations, we will act in accordance with widely accepted data protection principles, social coexistence principles, and established customs.
12. For any questions, please contact us through the website you were redirected from to this Privacy Policy. Requests will be forwarded immediately to the relevant person.
13. To facilitate our response or reply to the provided information, please provide your name.

§ 3 Scope and Purpose of Collecting Personal Data

1. We process necessary personal data for the purpose of providing services and for accounting purposes only.
2. We collect, process, and store the following user data:
   1. first and last name,
   2. residential address,
   3. delivery address (if different from residential address),
   4. tax identification number (NIP),
   5. email address,
   6. phone number (mobile, landline),
   7. information about the used web browser,
   8. other voluntarily provided personal data.
3. Providing the above data is entirely voluntary, but also necessary for the full realization of services.
4. We may transfer personal data to servers located outside your country of residence or to affiliated entities, third-party entities based in other countries, including those in the EEA (European Economic Area), for the purpose of processing personal data by such entities on our behalf in accordance with the provisions of this Privacy Policy and applicable legal regulations, customs, and data protection regulations.
5. Access to your data may be granted to entities providing services necessary for operating the service, such as:
   1. Hosting companies providing hosting or related services for the Administrator
   2. Companies through which the Newsletter service is provided
   3. Service companies and IT support maintaining or responsible for IT infrastructure
   4. Companies involved in online payment for goods or services offered in the Service (in case of purchase transactions in the Service)
   5. Companies responsible for delivering physical products to the User (postal/courier services in case of purchase transactions in the Service)

§ 4 Cookies

1. We use cookies or similar technologies (collectively referred to as "cookies") which are computer data, particularly text files, intended for using the website and stored in the end devices of users browsing the pages. Information collected via cookies allows adjusting services and content to individual needs and preferences of users, as well as compiling general statistics on users' website usage. Data collected via cookies are encrypted to prevent unauthorized access.
2. On our website, we use the following types of cookies:
   1. Internal cookies - cookies placed and read from the user's device by the Service's teleinformatics system
   2. External cookies - cookies placed and read from the user's device by teleinformatics systems of external services
   3. Session cookies - cookies placed and read from the user's device during one session of the device. After the session ends, the cookies are deleted from the user's device.
   4. Persistent cookies - cookies placed and read from the user's device until manually deleted. They are not automatically deleted after the session ends unless the user's device settings are set to delete cookies after the session ends.

3. Within our website, the following types of cookies are used based on necessity to provide services:
   1. Necessary cookies, enabling access to services available on the website, especially authentication cookies used for services requiring authentication;
   2. Security cookies, particularly used to detect authentication abuse;
   3. Performance cookies, allowing the collection of information about how the website is used;
   4. Functional cookies, enabling "remembering" user-selected settings and personalization of the user interface;
   5. Advertising cookies, enabling the delivery of tailored advertising content based on user interests.

4. Web browsing software (web browser) usually allows cookies to be stored on the end device by default. The user can change the settings regarding cookies at any time, specifying the conditions for storing and accessing cookies on their device. These settings can be changed, for instance, to block automatic handling of cookies or to inform the user every time cookies are placed on their device. Detailed information about cookie handling settings can be found in the software settings (web browser).
5. Using the website without changing the cookie settings means consent to the storage of cookies. The user can withdraw consent at any time by changing the cookie settings. Information on how to configure cookie settings in example browsers can be found here:
   • Chrome
   • Opera
   • FireFox
   • Edge
   • Safari
   • Internet Explorer 11

§ 5 Social Media Plugins

1. Social media plugins may be present on our website.
1. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. To view the Facebook plugins, visit: https://developers.facebook.com/docs/plugins
2. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. To view the Twitter plugins, visit: https://dev.twitter.com/web/tweet-button
2. The plugin transmits to its provider only information about which of our pages you visited and at what time. If you are logged into your account, e.g., on Facebook or Twitter, the provider can link your interests, information preferences, and other data, such as liking a post, leaving a comment, or searching for a profile. This information will also be transmitted directly from the browser to the provider.
3. To avoid recording a visit to a specific user's account by the Plugin on our website, you must log out of your account before browsing our website.

§ 6 Rights and Obligations

1. We have the right, and in certain legally defined cases, the statutory obligation, to provide selected or all personal data to public authorities or third parties that request such information based on applicable Polish law.
2. The user has the right to:
   1. Access to personal data The user has the right to access their personal data, which can be requested from the Administrator.
   2. Correction of personal data The user has the right to request the Administrator to promptly correct inaccurate personal data and/or complete incomplete personal data, which can be requested from the Administrator.
   3. Deletion of personal data The user has the right to request the Administrator to promptly delete personal data, which can be requested from the Administrator. For user accounts, deletion involves anonymizing data that identifies the User. The Administrator reserves the right to delay the request for deletion to protect the Administrator's legitimate interests (e.g., if the User has violated the Terms or if data was collected from correspondence). In the case of the Newsletter service, the user has the option to independently delete their personal data by using the link provided in each email sent.
   4. Restriction of personal data processing The user has the right to request the restriction of processing personal data in the cases specified in Article 18 of the GDPR, including challenging the accuracy of the personal data, which can be requested from the Administrator.
   5. Transfer of personal data The user has the right to request from the Administrator personal data concerning the user in a structured, commonly used, machine-readable format, which can be requested from the Administrator.
   6. Objecting to the processing of personal data The user has the right to object to the processing of their personal data in the cases specified in Article 21 of the GDPR, which can be requested from the Administrator.
   7. Submitting a complaint The user has the right to submit a complaint to the supervisory authority responsible for data protection.