PRIVACY POLICY and Cookie Usage
I General Provisions
1. This Privacy Policy defines the method of collecting, processing and
storing personal data necessary to provide electronic services
through the website in the cm-opti.com domain (hereinafter: Service).
2. The administrator of Users' personal data is CM-OPTI Sp. z o.o. with
headquarters in Gorzów Wielkopolski at ul. Londyńska 16B/6 (hereinafter: Administrator), being
simultaneously the Service Provider.
3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and
of the Council of 27 April 2016 on the protection of natural persons with
regard to the processing of personal data and on the free movement of such
data, and repealing Directive 95/46/EC (General Data Protection Regulation)
(hereinafter: GDPR).
4. Data collected by the Administrator will be:
processed lawfully,
processed for specified, explicit purposes and not further
processed in a manner incompatible with those purposes,
adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed,
stored for no longer than is necessary for the achievement of the processing purpose.
II. Purpose and legal basis for data processing
1. The Administrator processes personal data necessary to provide and develop offered
services available through the Service and its individual functionalities.
2. Personal data will be processed for the following purposes:
a. account registration, User identity verification and contract performance for
electronic services provision in accordance with the Act of 18 July 2002 on
electronic services provision, including in particular by ensuring
the possibility of using the User account – based on acceptance of the Terms
and Conditions (Art. 6 para. 1 lit. b GDPR);
b. communication with the User to provide necessary information and
building positive and reliable relationships with them, which constitutes a legally justified
interest of the Administrator (Art. 6 para. 1 lit. f GDPR);
c. promotion by the Administrator of own products and/or services as well as those of
Partners through electronic delivery of marketing information
(newsletter) if the User has consented to receiving such notifications via
e-mail (Art. 6 para. 1 lit. a GDPR);
d. providing access to information about industry news directly related to
the Administrator's activities, if the User has consented to receiving such
notifications via e-mail (Art. 6 para. 1 lit. a GDPR),
e. for analytical and statistical purposes based on the legally justified
interest of the Administrator consisting in conducting verification of User
activity and their preferences for optimization of services and products as well as applied
Service functionalities (Art. 6 para. 1 lit. f GDPR);
f. possible establishment, pursuit of claims or defense against them based on
the legally justified interest of the Administrator consisting in protecting its rights
(Art. 6 para. 1 lit. f GDPR).
3. In each of the cases mentioned above (para. 2), providing data is voluntary,
however necessary to conclude a contract or use other Service functionalities.
III. Personal data processing period
1. Personal data will be processed for the period during which a person remains an active
Service User (has a User account), and after that time for the period
necessary to maintain compliance with legal provisions, pursue or defend against
potential claims, but no longer than 3 years from the date of termination of the electronic
services provision contract.
2. Data processed based on consent will be processed until the withdrawal of
the given consent, with the reservation that withdrawal of this consent does not affect the lawfulness
of data processing performed before this withdrawal.
IV. Processing information
1. Personal data, depending on the processing purpose, may be disclosed to:
a. entities related to the Administrator
b. entities cooperating with the Administrator,
c. subcontractors, in particular entities providing and operating
selected IT systems and solutions,
d. entities handling online payments,
e. entities providing courier and postal services,
f. law firms.
2. Personal data processed by the Administrator will not be transferred outside
the European Economic Area or to international organizations.
V. Rights of data subjects
1. The Service User has the right to:
access to the content of their personal data
data rectification
data erasure
restriction of data processing
data portability
object to processing carried out based on
the legitimate interest of the administrator
withdraw consent at any time without affecting the lawfulness
of processing performed based on this consent before its withdrawal.
2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office
in a situation where they consider that processing violates their rights and freedoms.
3. In the data processing process, there is no automated decision-making
including profiling.
VI. Final provisions
1. The Administrator reserves the right to introduce changes to this Privacy
Policy while ensuring that Users' rights arising from this
document will not be limited.
2. The User will be informed about all changes in the Privacy Policy through
a notice available in the Service.