Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
- If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
- If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
- When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
- If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Purpose and legal basis of data processing
- The Data Controller collects, uses, and processes Users’ personal data only for the following purposes and on the following legal bases:
- for the purpose of registration and maintenance (including technical maintenance) of a User account on the Website pursuant to art. 6 par. 1(a) of GDPR – the data subject has given consent to the processing of their personal data, whereas the personal data shall be processed until the withdrawal of consent (including the case of deleting the User account);
- for the purpose of completing orders placed on the Website and carrying out a possible complaint procedure pursuant to art. 6 par. 1(b) of GDPR – the processing is necessary to perform the contract a party whereto is the data subject or to carry out actions, upon request of the data subject, before the conclusion of the contract, whereas the personal data shall be processed until necessary to complete the order and carry out the possible complaint procedure;
- for the purpose of enforcement of claims and defending against claims pursuant to art. 6 par. 1(f) of GDPR, i.e. processing is necessary for the purposes of the legitimate interest of the Data Controller, which is the defending of the Data Controller’s interests, whereas the personal data shall be processed until the end of the limitation period of the claims;
- for the purpose of complying with the legal obligations to which the Data Controller is subject pursuant to art. 6 par. 1(c) of GDPR in conjunction with art. 74 of the Accounting Act and other tax regulations, whereas the personal data shall be processed over the period of five calendar years counted from the end of the calendar year wherein the order had been placed;
- for the purpose of rendering, via e-mail, of the Newsletter service pursuant to art. 6 par. 1(a) of GDPR, i.e. the consent, in conjunction with art. 10 of the Act on Providing Services by Electronic Means and art. 172 of Telecommunications Act, whereas the personal data shall be processed until the withdrawal of consent.
- The Data Controller processes Users’ personal data only for the purposes indicated above.
- Users’ personal data will not be transferred to countries outside the European Economic Area (to countries other than European Union countries and Iceland, Norway, UK and Liechtenstein).
- The Data Controller shall not conduct processes that consist of automated decision-making, including profiling.
- Providing data is voluntary, but necessary in order for the Data Controller to render services through the Website.
Embedded content from other websites
- Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
- These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Access to the database by third parties
- Users’ personal data will not be made available by the Data Controller to other entities or third parties, except when:
- the User consents to this;
- it is necessary for the purpose of rendering services by the Data Controller through the Website. More information on the manner in which these entities use the Users’ personal data can be found in their privacy and cookies policies;
- it is necessary to detect and prevent fraud, as well as to resolve other problems related to fraud, security, and technical issues.
- it is required by applicable laws or legitimate requests of state institutions and judicial authorities.
- In addition, the Data Controller may make Users’ personal data available to entities that were authorized or entrusted by the Data Controller with the processing of personal data, i.e.:
- providers of legal and advisory services in the event of pursuing by the Data Controller of claims arising from its business activity;
- providers of technical and organizational services enabling the Data Controller to render services through the Website;
- employees and associates.
How long we retain your data
- If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
- For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
IP address
- The Data Controller reserves the right to collect the IP addresses visiting the Website, which may be helpful in diagnosing technical problems with the server, creating statistical analyses (e.g. determining from which regions the most visits are recorded).
- In addition, they can be useful when administering and improving the Website.
User’s rights
- Users’ personal data is collected at the Data Controller’s registered office, i.e. at the following address: biossphere PSA, Warsaw, przyczolkowa 350 street, 02-962, Poland.
- The User has the right to:
- access their personal data stored by the Data Controller;
- obtain the rectification of their personal data if the User suspects that the personal data stored by the Data Controller is out of date, incomplete or untrue;
- obtain the restriction of processing their personal data;
- obtain the erasure of their personal data;
- object to the processing of their personal data in cases specified in art. 21 of GDPR;
- obtain the transfer of their personal data to another data controller, if it is technically possible;
- withdraw the consent at any time if the personal data is processed on the basis of consent (without affecting the legality of the processing which was carried out on the basis of the consent before the withdrawal thereof).
- Execution of the rights referred to in section 4.2. above may be conducted by the User through submitting to the Data Controller the appropriate statement of will:
- by e-mail to the following address: contact@biossphere.eu
- in person at the Data Controller’s registered office
- The User is also entitled to file a complaint to the supervisory body for personal data protection, i.e. the President of the Office for Personal Data Protection (PUODO).
Where your data is sent
Visitor comments may be checked through an automated spam detection service.
Contact Us
If you have any questions about this Terms and Conditions, you can contact us:
- by email: hello@biossphere.eu