The administrator of your personal data is NOMA Sp. z o. o. with its headquarters in Podlas, Tomaszowska 90, 96-200 Rawa Mazowiecka, entered into the Register of Entrepreneurs of the National Court Register held by the District Court for Łódź-Śródmieście in Łódź, 20th Economic Division of the National Court Register, number: 0000039826, with NIP number: 8351148991, REGON number: 750034969 and share capital in the amount of PLN 30,033,300.00 (hereinafter: Administrator).
You can contact the Administrator at the following e-mail address: rodo@noma.tech or by post to the address of the Administrator’s office indicated above.
The administrator processes personal data in accordance with applicable regulations, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR).
Depending on the situation, the Administrator processes your personal data for the following purposes and based on the following provisions of the GDPR:
in order to conclude and perform a contract concluded with you or in order to take, at your request, actions aimed at concluding a contract (e.g. sending an offer) – pursuant to Art. 6 section 1 point b) of the GDPR – no longer than until the claims in connection with the contract expire;
in order to implement the legally justified interests of the Administrator, i.e.:
promoting and advertising products and services of the Administrator, entities belonging to the Administrator’s capital group or third parties that are directly related to the subject of the contract concluded between you and the Administrator,
pursuing any claims of the Administrator,
archiving for the purposes of protecting the Administrator’s legal interest,
ensuring your safety in connection with recording your image using CCTV cameras while staying on the Administrator’s premises,
responding to your inquiries addressed to us unrelated to the contract concluded with the Administrator,
ensuring the security and proper functioning of the Administrator’s website, including using cookies – more information about cookies can be found in point 7 of the Privacy Policy.
Processing for the purpose of pursuing the legitimate interests of the Administrator takes place pursuant to Art. 6 section 1 point f) of the GDPR, no longer than until the purposes indicated above are achieved, with the exception of the processing of personal data in the field of promotion and advertising products and services – then no longer than until you raise an objection.
3. in order to fulfill the obligations imposed on the Administrator by relevant provisions, e.g. tax law provisions, accounting act – pursuant to Art. 6 section 1 point c) of the GDPR – no longer than the limitation period for claims for public receivables;
4. in order to send the newsletter you ordered – pursuant to Art. 6 section 1 point a) of the GDPR – no longer than until consent is withdrawn;
5. in order to promote and advertise products and services of entities cooperating with the Administrator, if they do not fall within the scope specified in point. 2 above (in the case of persons who have given their consent) and only to the extent specified in such consent) – pursuant to art. 6 section 1 point a) of the GDPR – no longer than until consent is withdrawn.
Providing personal data to the Administrator is voluntary, but necessary to achieve the purposes indicated above in the Privacy Policy. It will not be possible to achieve the goals if you refuse to provide personal data.
Due to the fact that the Administrator processes your personal data, you have the following rights:
the right to access your personal data;
the right to request rectification of your personal data if it is incorrect and its completion if it is incomplete;
the right to request the deletion of your personal data (the so-called “right to be forgotten”)
in each of the following cases:
when you have withdrawn your consent pursuant to which the processing is taking place and there is no other legal basis for the processing;
when your personal data is no longer necessary for the purposes for which it was collected or
otherwise processed;
when your personal data has been processed unlawfully;
when you object to the processing of your data and there are no overriding legitimate grounds for processing the data;
when the data was collected in connection with the provision of information society services specified in Art. 8 section 1 of the GDPR.
when personal data must be deleted in order to comply with a legal obligation provided for in European Union or Polish law.
However, the Administrator will not have to delete your personal data to the extent that the processing is necessary (i) to exercise the right to freedom of expression and information; (ii) to comply with a legal obligation requiring processing under European Union or Polish law or to perform a task carried out in the public interest; (iii) to establish, pursue or defend legal claims; (iv) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, insofar as the right to request erasure is likely to render impossible or seriously impair the achievement of the purposes of such processing.
4. the right to restrict data processing in cases in which:
you question the accuracy of your personal data – for a period enabling the Administrator to check the accuracy of the data;
the processing is unlawful and you object to the deletion of your personal data and instead request the restriction of the use;
The administrator no longer needs personal data for processing purposes, but you need it to establish, pursue or defend claims;
you have raised an objection – until it is determined whether the legally justified grounds on the part of the Administrator override the grounds for your objection.
5. the right to object to processing for reasons related to your particular situation – to data processing carried out in order to pursue legitimate interests of the Administrator
6. the right to withdraw consent – at any time in relation to a situation in which your personal data is processed on the basis of your consent. A withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
7. the right to transfer data – when your data is processed on the basis of consent or on the basis of a contract and the processing is carried out in an automated manner, you have the right to receive your personal data that you provided to the Administrator from the Administrator in a structured, commonly used, machine-readable format. You also have the right to request that your personal data be sent to another administrator, if it is technically possible.
8. the right to lodge a complaint about the processing of personal data by the Administrator to the competent supervisory authority (President of the Personal Data Protection Office) if you believe that the processing is in violation of the GDPR.
The Administrator may make your personal data available to the following recipients:
entities from the Administrator’s capital group,
entities cooperating with the Administrator for purposes related to the implementation of contracts concluded with you, including, among others: suppliers, subcontractors, intermediaries,
entities providing IT services,
entities providing marketing services,
entities providing accounting, legal and debt collection services,
entities providing protection services for persons and property of the Administrator.
In some cases, your personal data may be transferred outside the EEA, which is usually necessary to take actions related to prior to concluding a contract with you or related to the ongoing implementation of a contract already concluded with you. We make reasonable efforts to ensure that the recipients of your data apply the necessary security standards. However, due to the global activity of the Administrator, sometimes some data, and only to the extent necessary, is transferred to countries outside the EEA that do not guarantee legal standards fully consistent with the principles of the GDPR. All other cases of data transfer outside the EEA may be related to the use of the website of the Administrator or Administrator’s profiles on social networking sites, and in the above scope your personal data is processed in compliance with the necessary legal standards, i.e. in accordance with the EU USA Privacy Shield agreement or by applying standard contractual clauses in accordance with Commission Decision 2010/87/EU on standard contractual clauses regarding the transfer of personal data to data processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council (OJ EU L 39 p. 5 of 12/02/2010), as issued on February 5, 2010.
The Administrator stores your personal data for a period no longer than necessary to achieve the purposes indicated above in the Privacy Policy and to comply with applicable law (or until you raise an objection – in the case of processing personal data for direct marketing purposes, or withdraw your consent – in such a case Your personal data will only be able to be processed if there is another legal basis for the processing of your data, e.g. an obligation imposed by law on the Administrator, for the fulfillment of which it is necessary to process your personal data). In any case, the period of processing your personal data will not exceed 10 years.
The Administrator’s website may contain links or other references to external websites or social networking sites (e.g. YouTube) and Administrator’s profiles on such portals that do not belong to the Administrator. The Administrator has no influence and is not responsible for the manner of processing personal data by third parties that own external portals, but the Privacy Policy applies accordingly to the Administrator’s profiles on such websites. A person who uses redirection will also be bound by privacy and cookie policies published by administrators of external websites. Please be encouraged to read the policies.
The Administrator is not responsible for the policies regarding the processing of personal data of other entities and organizations, providers of social media platforms (Youtube), operating systems, portals, services, including any data that is disclosed to other entities using social media functions.
The Administrator will be able to have access to some user data of the above-mentioned portals such as age, gender, location, activity on external websites as part of the Administrator’s profile, which will not enable user identification. The data may be used to target advertising, which is the legitimate purpose of the Administrator.
Acceptance or lack of acceptance of the use of the above above-mentioned data within the portals can be made in the account settings on social media platforms, e.g. in the case of YouTube, in the privacy settings after logging in to your Google account.
The Administrator uses cookies, which are IT data, in particular small text files, saved and stored on devices with which you use the Administrator’s website. The cookies used by the Administrator are safe for your devices. In particular, this way it is not possible for viruses or other unwanted software or malware to reach your devices. The files allow you to identify the software you use and individually customize the website. Cookies usually contain the name of the domain they come from, the time they are stored on your device and the assigned value.
The Administrator uses two types of cookies:
session cookies – they are stored on your device and remain there until the end of the browser session. The saved information is then permanently deleted from your device’s memory.
persistent cookies – they are stored on your device and remain there until they are deleted. Ending a given browser session or turning off the device does not delete them.
You have the option of limiting or disabling access to cookies on your device – in this case, you will be able to use the Administrator’s website, but some of its functions that require access to cookies may be unavailable.
The Administrator uses its own cookies for the correct configuration and full functionality of its website, in particular for:
adapting the content of its website to your preferences and optimizing its use,
recognizing your device and its location and displaying the website, its functions and the information provided accordingly, tailored to your individual needs,
remembering your settings and personalizing the interface, e.g. in terms of the selected language or the region the User comes from,
remembering the history of visited pages on the website in order to recommend content,
remembering font size, website appearance, etc.,
correct operation of the affiliate program, enabling in particular verification of sources of redirection to the Administrator’s website,
analysis and research as well as audience audit, and in particular to create anonymous statistics that help understand how you use the Administrator’s website, which allows improving its structure and content.
The administrator also uses external cookies, provided by Google Inc. based in the USA, to collect general and anonymous static data via Google Analytics analytical tools. In order to block the collection of the above data by Google Analytics, you can, among other things, install a plug-in for your browser available at https://tools.google.com/dlpage/gaoptout
You can change your cookie settings yourself at any time, specifying the conditions for storing them and accessing them on your device. Changes to the settings referred to in the previous sentence can be made using the web browser settings or via the service configuration. The settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the web browser settings, or to inform each time they are placed on your device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.
The user may delete cookies at any time using the available functions in the web browser they use. Restricting the use of cookies may affect some of the functionalities available on the website.
