PRIVACY POLICY

WHAT IS THE PRIVACY POLICY?
We would like to acquaint you with the details of our processing of your personal data to give you full knowledge and comfort in using our website.
As we are in the Internet business ourselves, we know how important it is to protect your personal information. Therefore, we make special efforts to protect your privacy and the information you provide to us.
We carefully select and use appropriate technical measures, especially those of a programmatic and organizational nature, to ensure the protection of the personal data we process. Our site uses encrypted data transmission (SSL), which ensures the protection of the data identifying you.
In our Privacy Policy you will find all the most important information regarding our processing of your personal data. We ask you to read it and we promise it won't take you more than a few minutes.

Who are the co-administrators of the www.cncultimate.com website?
The co-administrators of the website are Łukasz Gradzik, who conducts business activity under the name Łukasz Gradzik, registered in the register of entrepreneurs of the Central Registration and Information on Business Activity conducted by the minister responsible for economy at 21 Lipówka Street, 42-240 Rudniki, NIP 5732805705, REGON 381347317 and
Tomasz Gradzik, conducting business activity under the name Tomasz Gradzik, entered into the register of entrepreneurs of the Central Registration and Information on Business Activity conducted by the minister responsible for economy at ul. Lipówka 21, 42-240 Rudniki, NIP 5732805711, REGON 381347435,
jointly conducting business activity under the name GNG S.C. TOMASZ GRADZIK, ŁUKASZ GRADZIK, on the basis of a civil partnership agreement, at the address Lipówka 21 Street, 42-240 Rudniki, NIP 9492233469, REGON 381350733, BDO 000194986 (i.e.: us).
PERSONAL DATA
What legal act governs the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly referred to as: RODO. To the extent not regulated by the RODO, the processing of personal data is governed by the Personal Data Protection Act of May 10, 2018.
Who are the co-data controllers of your personal data?
The co-administrators of your personal data are Łukasz Gradzik, conducting business activity under the name Łukasz Gradzik, registered in the register of entrepreneurs of the Central Registration and Information on Business Activity conducted by the minister responsible for economy at 21 Lipówka Street, 42-240 Rudniki, NIP 5732805705, REGON 381347317, and
Tomasz Gradzik, conducting business activity under the name Tomasz Gradzik, entered into the register of entrepreneurs of the Central Registration and Information on Business Activity conducted by the minister responsible for economy at ul. Lipówka 21, 42-240 Rudniki, NIP 5732805711, REGON 381347435,
jointly conducting business activity under the name GNG S.C. TOMASZ GRADZIK, ŁUKASZ GRADZIK, on the basis of a civil partnership agreement, at the address Lipówka 21, 42-240 Rudniki, NIP 9492233469, REGON 381350733, BDO 000194986, phone: +48 508 027 881, e-mail: office@cncultimate.com.
You can contact us about your personal data via:
e-mail: office@cncultimate.com,
snail mail: 21 Lipówka St. , 42-240 Rudniki ,
phone: +48 508 027 881.
HOW DO WE PROCESS YOUR PERSONAL DATA THAT YOU PROVIDE TO US?
What personal data do we process and for what purposes?
We offer you many different services on our website, for which purposes we process different personal data, based on different legal bases.
Purpose
Personal data
Legal basis for processing
Duration of data storage
conclusion and performance of the contract
name, surname, mailing address, VAT ID, REGON, e-mail address, telephone number
Article 6(1)(b) RODO, i.e. processing for the purpose of taking action at your request, prior to entering into a contract, and processing necessary for the performance of a contract to which you are a party
until the expiration of the statute of limitations for claims concerning performance of the contract
establishment and maintenance of an account
name, surname, e-mail address, telephone number, mailing address
Article 6(1)(b) RODO, i.e. processing for the purpose of taking action at your request, prior to entering into a contract, and processing necessary for the performance of a contract to which you are a party
until the expiration of the statute of limitations for claims concerning performance of the contract
newsletter
email address, first name, last name
Article 6(1)(a) RODO, i.e. processing based on your consent to process your personal data
until the date you withdraw your consent to process your personal data
contact form
name, surname, e-mail address, telephone number
Article 6(1)(f) RODO i.e. processing for the purpose of realizing our legitimate interest in maintaining continuity of communication and enabling contact with us on matters of business activity
until you object to the processing of your personal data
interactive chat
data provided during the chat
Article 6(1)(f) RODO i.e. processing for the purpose of our legitimate interest in maintaining continuity of communication and enabling contact with us on matters of business activity
until you object to the processing of your personal data
traffic analysis of the online store website
residence address, IP address, browser data
Article 6(1)(f) RODO, i.e. processing for the purpose of our legitimate interest in analyzing customer traffic on the store's website
until you object to the processing of your personal data
Direct marketing of our own goods and services, including remarketing
residence address, IP address, browser data
Article 6(1)(f) RODO, i.e. processing for our legitimate interest consisting in direct marketing of our own services, including remarketing
Until you object to the processing of your personal data
establishment, investigation and enforcement of claims and defense against claims in proceedings before courts and other state authorities
name, surname, residential address, PESEL no., NIP no., REGON no., e-mail address, telephone no., IP no., bank account no., payment card no.
Article 6(1)(f) RODO i.e. processing for the purpose of realizing our legitimate interest in establishing, pursuing and enforcing claims and defending against claims in proceedings before courts and other state bodies
until the expiration of the statute of limitations for claims relating to the performance of the contract
fulfillment of legal obligations under the law, in particular tax and accounting regulations
name, surname, company, PESEL, NIP or REGON number, e-mail address, telephone number, mailing address, payment card number
Article 6(1)(c) RODO, i.e. the processing is necessary for the fulfillment of legal obligations incumbent on us under the law, in particular tax and accounting regulations
Until the expiration of legal obligations incumbent on the Joint Administrators that justified the processing of personal data

Voluntariness of providing personal data
The provision of the required personal data by you is voluntary but is a condition for us to provide services to you (e.g., sending you a newsletter or creating an account).
Recipients of personal data
You can find the current list of entities to whom we disclose your personal data here.

Automated decision-making (including profiling)
We do not make automated decisions about you, nor do we use profiling.
Will we transfer your personal data outside the EEA or to an international organization?
In order to use Google tools, your personal data may be transferred to the United States, where Google LLC servers are located.

Google LLC is listed as a participant in the Data Privacy Framework (link: https://www.dataprivacyframework.gov/s/participant-search), and therefore the protection of personal data is adequate in relation to the regulations applicable in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of July 10, 2023 on the adequate level of protection of personal data in accordance with the EU-US Data Privacy Framework (link: https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf).

In order to use Facebook tools, your personal data may be transferred to the United States, where Meta Platforms Inc. servers are located.

Meta Platforms Inc. is listed as a participant in the Data Privacy Framework (link: https://www.dataprivacyframework.gov/s/participant-search), and therefore the protection of personal data is adequate in relation to the regulations applicable in the European Union, in accordance with Commission Implementing Decision (EU) C(2023) 4745 of July 10, 2023 on the adequate level of protection of personal data in accordance with the EU-US Data Privacy Framework (link: https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework.pdf).

WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH OUR PROCESSING OF YOUR PERSONAL DATA?
Under the RODO, you have the right to:
request access to your personal data,
request rectification of your personal data,
request the deletion of your personal data,
request the restriction of the processing of your personal data,
to object to the processing of your personal data,
request for portability of your personal data.

If you make any of the above-mentioned requests to us, we will inform you without undue delay - and in any case within one month of receipt of the request - about the action taken on your request.
If necessary, we may extend the one-month period by another two months due to the complexity of the request or the number of requests.
In any case, we will inform you within one month of receipt of the request about the extension and provide you with the reasons for the delay.

Right of access to your personal data (Article 15 RODO)
You have the right to obtain information on whether we process your personal data. If we process your personal data you have the right to:
access your personal data,
obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the intended period of storage of your data or the criteria for determining that period, your rights under the RODO and the right to lodge a complaint with the President of the Office for Personal Data Protection, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
obtain a copy of your personal data.

If you wish to request access to your personal data, submit your request to: office@cncultimate.com.
Right to rectify your personal data (Article 16 of the RODO)
If your personal data is inaccurate you have the right to request that we promptly rectify your personal data. You also have the right to request that we complete your personal data. If you wish to request rectification or completion of your personal data, please submit your request to: office@cncultimate.com.
The right to erasure of your personal data, the so-called "right to be forgotten" (Article 17 RODO)
You have the right to request the deletion of your personal data when:
your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
You have withdrawn specific consent, to the extent that your personal data was processed based on your consent;
your personal data was processed unlawfully;
you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of your personal data is related to direct marketing;
you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.

Despite your request for erasure, we may continue to process your personal data for the purpose of establishing, asserting or defending claims, of which you will be informed.
If you wish to request deletion of your personal data, please submit your request to: office@cncultimate.com.
Right to request restriction of processing of your personal data (Article 18 RODO)
You have the right to request the restriction of the processing of your personal data when:
you question the accuracy of your personal data, in which case we will restrict the processing of your personal data for a period of time that allows you to check the accuracy of the data;
the processing of your data is unlawful, in which case, instead of deleting your personal data, you request that the processing of your personal data be restricted;
your personal data is no longer needed for the purposes of processing, but it is needed to establish, assert or defend your claims;
you have objected to the processing of your personal data - until we determine whether our legitimate interests override the grounds stated in your objection.

If you wish to request a restriction of the processing of your personal data, please submit your request to: office@cncultimate.com.
Right to object to the processing of your personal data (Article 21 RODO)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:
processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Joint Controllers of your personal data or a third party;
processing for direct marketing purposes.

If you wish to object to the processing of your personal data, submit your request to: office@cncultimate.com.
Right to request portability of your personal data (Article 20 RODO)
You have the right to receive your personal data from us in a structured, commonly used machine-readable format and to send it to another personal data controller.
By default, we will make your personal data available to you in CSV format. If you prefer to have your data made available to you in another format indicate your preferred format in your request. To the extent possible, we will try to share your data in your preferred format.
You may also request that we send your personal data directly to another controller (if technically possible).
If you wish to request the transfer of your personal data, please submit your request to: office@cncultimate.com.
Can you revoke the consent you have given for the processing of personal data?
You can revoke the consent you have given for the processing of your personal data at any time. Withdrawal of consent to process your personal data does not affect the lawfulness of the processing performed by us on the basis of your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data, please submit your request to: office@cncultimate.com.
If you wish to withdraw your consent to the processing of your personal data for the purpose of providing the "Newsletter" service, you can opt out here.
Complaint to the supervisory authority
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place where the alleged violation was committed.
In Poland, the supervisory authority under the RODO is the President of the Office for Personal Data Protection, which replaced the GIODO as of May 25, 2018.
More information can be found here.