I. Definitions
The terms used in the Privacy Policy have the following meanings:
Personal data – any information about an identified or identifiable natural person; personal data as defined in Art. 4 pts
1 RODO;
The EEA – European Economic Area is a free trade zone and common market that includes the countries of the European Union and the European Free Trade Association, with the exception of Switzerland;
Cookies – popularly known as cookies – are computer data recorded in the form of text and number files, which are placed on the User’s terminal equipment. Such a terminal device can be a cell phone, laptop, tablet;
Privacy Policy – this document regulating the protection of personal data and the rules for the use of cookies and other technologies under the mandatory provisions of the law, including the RODO, the Act on the provision of electronic services and the Telecommunications Law.
RODO – Regulation EU 2016/679 of the European Parliament and of the Council of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation);
Service- the website at wwww.caseownia.com and all its sub-sites, including all services provided at the domain i.e. Store, contact form, newsletter, form to post a comment, order form,;
Law on Provision of Electronic Services – the law of July 18, 2002. On provision of services by electronic means (Journal of Laws No. 144 item 1204 as amended);
Law – Telecommunications Law – the law of July 16, 2004. On Telecommunications Law (Journal of Laws No. 171 item 1800, as amended);
The terms described in this section are intended for ease of use in this Privacy Policy; they may be capitalized and lowercase, which does not change the meaning given to them.
II. Administrator
The controller of your personal data within the meaning of the RODO regulations is:
kutku Maciej Zamojski
street Marszałkowska 27/35 m.47
00-639 Warsaw
NIP: 5423188120
REGON: 388333382
info@kutku.pl
III. Co-administrators
The co-controllers of your personal data are:
Facebook Ireland Limited LTD, address: 4 Grand Canal SQUare, Grand Canal Harbour, Dublin 2, DO2X525, Ireland;
Co-administration is related to the Administrator’s use of social media platforms, namely. Instagram, Facebook, which are owned by Facebook Inc. In addition, the Service uses social plugins directing to social networks Facebook, Instagram, on which the Administrator has profiles of a business nature.
Details of the Facebook fanpage, Instagram profile and social plugins are described in Section XIII Tools Used.
IV. Legal basis and purposes of personal data processing
Your personal data may be processed:
On the basis of consent (Article 6(1)(a) RODO) for the purpose of:
storing data in cookies, using cookies for the proper functioning of the Website and its subpages, and collecting data from the Website;
commenting on blog posts in the Service;
to send a newsletter (Article 10 of the Electronic Services Act and Article 172 of the Telecommunications Law);
sending offers of the Administrator or entities recommended by the Administrator.
due to the necessity to conclude and/or perform a contract or to take action upon request (Article 6(1)(b) of the DPA) for:
to send an offer of the Administrator’s services or products;
performance of the service or execution of the concluded contract.
due to the need to fulfill a legal obligation incumbent on the Administrator (Article 6(1)(c) of the DPA) for:
ensure accountability and demonstrate compliance with obligations imposed on the Administrator by law, including the creation of records and other documentation under the RODO;
to issue an invoice, bill or fulfill other obligations under tax and accounting regulations, including for archival purposes.
legitimate interest (Article 6(1)(f) RODO) for the purpose of:
To ensure the security of the Service;
Management of the Service, including improving its functionality and performance;
creation of databases;
operate an account on Instagram under the name “@kutku.pl and interact with users of these social media sites;
operate a website (fanpage) on Facebook under the name @kutkupl and interact with users of this fanpage;
to send a newsletter as direct marketing of its own products or services or recommended products of third parties;
conduct research and analysis of the Service, among other things, in terms of functionality and improvement of its operation, as well as satisfaction with the services and products offered;
to contact you, in particular through the contact form available on the Website;
establish, assert or defend against claims;
storage of data for archival and evidentiary purposes, for the purpose of securing information that can be used to prove facts.
The specific purposes of processing personal data on social networks are discussed in Section XIII Tools Used.
V. Recipients of personal data
The Administrator’s business activities are supported by external entities to which the Administrator shares your personal data.
Data recipients:
cyber_Folks Joint-Stock Company with headquarters in Poznań (60-829), ul. Franklin Roosevelt 22 – an entity that provides technical and IT support, including hosting of the site, storage of data stored on the server, operation of the system for sending e-mail;
UAB MailerLite, based in Lithuania, Jono Basanavičiaus g. 15, LT-03108 Vilnius – the entity providing the system for sending the newsletter;
PayPro with headquarters in Poznań 60-327, ul. Kanclerska 15 – handling the payment system and electronic transactions;
Facebook Ireland Limited LTD, 4 Grand Canal SQUare, Grand Canal Harbour, Dublin 2, DO2X525, Ireland – the entity providing the platform on which the business social profile on the Instagram platform, the website (fanpage);
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – an entity that provides a security tool for the Service and a tool for analyzing statistics (Google Analystics).
VI. Transfer of personal data to a Third State or International Organization
The administrator cooperates with entities that are based in the EEA. However, due to the use of international entities such as Facebook Ireland Limited LTD, Google Ireland Limited, UAB Mailerlite may cause your personal data to be transferred outside the EEA or to a country with restrictions on international transfer of personal data. In such a situation, the compliance mechanisms provided for in the RODO, including the standard contractual clauses defined by the European Union Commission, are applied.
VII. Disclosure of personal data
The Administrator reserves the right to disclose your personal data in a situation where this will result from a legal obligation imposed on the Administrator, including the transfer to competent authorities or law enforcement agencies.
VIII. Period of storage of personal data
Personal data are kept for the time necessary to fulfill the purpose for which they were collected, in particular:
personal data processed in connection with the performance of the sales contract described in the Terms of Service
for the period of the newsletter’s operation or until the time you withdraw your consent. However, please note that after withdrawing your consent, your personal data may still be processed for the purpose of establishing, investigating or defending against possible claims in accordance with the statute of limitations for such claims
personal data processed in connection with the handling of the contact form
for the period of time necessary to handle the application/request, and thereafter for the archiving period to secure the information in case for the purpose of establishing, investigating or defending against possible claims in accordance with the statute of limitations for such claims;
other personal data processed on the basis of consent
Until the consent is withdrawn or the purpose of the processing is achieved. However, after withdrawal of consent, your personal data may still be processed for the purpose of establishing, investigating or defending against possible claims in accordance with the statute of limitations for such claims;
personal data processed because of the need to perform a contract or take action on a request
for the period of time necessary for the performance of the service with respect to the data provided in the inquiry or for the period of service and cooperation, as well as for the period of limitation of claims under the law;
personal data processed on the basis of the legitimate interest of the Administrator
Pending the effective filing of an objection filed under Art. 21 RODO;
personal data processed in connection with the performance of the Administrator’s legal obligations
For the period required by law, including tax law, accounting law, RODO;
Personal data processed in connection with the Administrator’s use of social media platforms
including the use of the functionality of Facebook, Instagram applications, – for the duration of the existence of company pages or accounts on the relevant social network;
personal data processed for analytical purposes and in connection with the administration of the website
will be processed until the data becomes obsolete or no longer useful;
personal data processed in connection with the establishment, investigation or defense of claims until the expiration of the statute of limitations.
IX. Your entitlements
In connection with the processing of your personal data, you have the following rights:
The right to access personal data and receive a copy
Right to rectify personal data
Right to erasure
The right to restrict the processing of personal data
The right to object to the processing of your personal data when the processing of your personal data is carried out on the basis of a legitimate interest of the Controller and the objection is justified by the particular situation in which you find yourself
Right to portability of personal data
The right to lodge a complaint in connection with the processing of your personal data to the supervisory authority, which is the President of the Office for Personal Data Protection
The right to withdraw the consent on the basis of which the Administrator processes your personal data. However, this will not affect the lawfulness of the processing that the Administrator performed before the withdrawal of consent. In some cases, your personal data may not be completely deleted and will be retained to defend against possible claims for a period of time in accordance with the law or to comply with legal obligations imposed on the Administrator.
Your rights are not absolute and do not apply to all personal data processing activities. In order to exercise your rights, you can contact the Administrator electronically at kontakt@caseownia.com indicating the scope of your requests.
X. Requirement of personal data
Provision of personal data is voluntary. Failure to provide certain personal information, however, may result in the inability to use a particular functionality of the Service or the inability to provide a service.
XI. Automated decision-making, including profiling
The Administrator analyzes the personal data of newsletter subscribers, browsing history of the Website, history of transactions made by the store within the Website, history of activity on its social media profiles and groups on Instagram, Facebook platforms. The analysis in question is undertaken in an automated manner on the basis offered by the service providers of the data, such as the newsletter provider, the owner of the Instagram platform. However, the analysis of the data will not have any legal effect on you or similarly significantly affect you, including your rights or freedoms. The purpose of automated data processing is for the Administrator to learn the preferences of recipients in order to tailor the content, offers or communications created by the Administrator to these preferences. The Administrator may direct dedicated and personalized offers to you via individualized email, postal or web correspondence on its own or external communication channels.
Nevertheless, the Administrator informs you that you have the right to object to profiling that could affect your rights and obligations.
XII. Cookies
The Service uses its own cookies and external cookies, which are used for:
The proper functioning of the website, including improving its navigation,
to remember your cookie preferences,
To ensure the security and management of the Service,
statistical and analytical research,
connecting to social networks,
proper functioning of the e-store, including abandoned shopping carts.
When you visit the Website for the first time, a message about the use of cookies is displayed, along with a question about your consent to the use of cookies. By clicking on the “I agree” button, you consent to the use of cookies, unless you later decide to disable them. You also have the option of not agreeing to the use of cookies – by clicking on the “I do not agree” button. In such a situation, only proprietary cookies that are necessary for the proper functioning of the Website will be used.
You have the option to configure your web browser in such a way that it does not store cookies. Unfortunately, this may hinder the proper functioning of the Service. You can also use the incognito mode offered by web browsers. Then the cookies will be deleted the moment you close your browser.
If you use the Website without changing your web browser, the Website will use cookies for the purposes listed.
Since cookies are also used to remember your cookie preferences, you should be aware of the consequences associated with changing your settings, in particular:
If you disable the ability to save cookies on your end device, you may not be able to use its functionality, and some content may not be visible;
If you use a different terminal device, profile on your computer or web browser, it will be necessary to redefine your cookie preferences.
The consequence of accepting cookies is that in the memory of the device you use, such as a tablet, computer or phone, information from the provider of the service in question will be recorded, over which you will have no control.
XIII. Tools used
The Administrator uses the following tools to improve its business operations, including the Service it has created:
Contact form
A contact form has been provided on the Website. In order to use the contact form, you are required to provide your name, e-mail address, the subject of the message and the data provided in the body of the message. The personal data in question will be processed in accordance with this Privacy Policy in order to contact you. In the course of using the contact form, the Administrator also collects personal data in the form of IP address and signature of your browser. The aforementioned personal data is necessary in connection with the security measures used on the Website, which help, among other things, with spam detection.
Order form (Payment details) in the Store
When placing an order in the store available on the Website, you must provide certain data in accordance with the rules contained in the Terms and Conditions in order to execute the order, conclude the Agreement, as well as for the purpose of fulfilling legal obligations imposed on the Administrator, billing, processing claims. These are mainly: first name, last name, company name, TIN, residential or business address, possibly delivery address, e-mail address.
Social media – Facebook fanpage, profile on Instagram,
Your personal data provided on Fanpage or Instagram will be processed for the purpose of administering and managing Fanpage/Instagram, communicating with you, including answering your questions, interacting with you, informing you about organized events, interesting information, services and products offered by the Administrator, creating a Fanpage/Instagram community.
The basis for their processing is your consent. You voluntarily choose to like/watch/interact with a profile/page on a particular social network. The rules of the Facebook fanpage are set by the Administrator, however, the rules of staying in the Facebook or Instagram social network are based on the rules of the Facebook company of the co-administrator. At any time you can stop watching or even block the Administrator’s profile created on Fanpage/Instagram. Due to the nature of the platforms used by the Administrator, only using the “block user” option will result in no content created by the Administrator being displayed to you. For the rest, the content available on a given social media platform is common. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
The administrator processes your publicly available personal data, such as your name or general information, which is posted on your profiles and marked public. The processing of other personal data is carried out by the social network Facebook, Instagram under the terms of its regulations.
Social plugins
The service uses plug-ins directing to social networks Facebook, Instagram and plug-ins that allow sharing content on these social networks, in particular “Share”. The plug-ins in question are marked with the logo of the respective social network.
Data is sent to social networks only if the user actively clicked on the corresponding plug-in button. After tapping on the plug-in icon, the web browser will initiate a connection to the servers of the social network in question, and the user will be redirected to the website of a third-party service provider, i.e. the owner of the social network in question, and the user’s web browser will establish a direct connection to the servers of these social networks. The use of these features may involve the use of external cookies. From the moment a user clicks on a particular plug-in, the user’s personal data is processed on the social network in question, and the owner of the social network becomes a co-manager of the user’s personal data. More about co-administrators is described in Section III of the Privacy Policy. The Administrator informs that from the moment the user actively clicks on the plug-in button, the Administrator has no influence on the nature and scope of personal data collected by the respective social network.
The data is sent regardless of whether you have an account on a particular social network or whether you are logged in. In the event that you are logged into a particular social media platform (e.g. Instagram), the personal data collected will be directly assigned to the account (profile) you use.
For more information on the purpose and scope of the collection of personal data, including the terms of processing by the provider of a given portal, please refer to the privacy policies of such providers:
Facebook , including information on other applications.
reCAPTCHA
The Service uses a service from Google LLC, the purpose of which is to secure the Service and limit the possibility of sending data not filled out by a human, but generated by programs or bots. In the course of using this tool, there is an occasional examination of whether the behavior of a visitor to this website bears the hallmarks of robotic behavior, and in such a situation, personal data (IP address) is collected, the recipient of whose personal data is Google LLC.
Analytical tools
As part of the Service, the Administrator uses:
Google Analytics tools. A special tracking code has been installed in the code of the Website, which uses cookies from Google LLC regarding the Google Analytics service. At any time you have the option to block the tracking code by installing a browser add-on provided by Google: add-on. The information about the use of the Website generated by the cookie is usually sent to a Google server in the USA and stored there. Google Analytics has been extended on the Service with the code “gat._anonymizelp();” to provide anonymous IP address logging (known as IP masking). Thanks to the anonymization of the IP address on the Service, the user’s IP address is abbreviated in the EU and Treaty States of the European Economic Area by Google LLC. Only in exceptional cases is the full IP address sent to a Google LLC server in the US and abbreviated there. The Google Analytics tool uses information such as: information about the operating system and the web browser you are using, the sub-pages viewed within the Service, the time rushed on the Service and its sub-pages, transitions between sub-pages of the Service, the source from which you go to the Service. Google Analytics and Google Analytics 360 services have been certified to the independent ISO 27001 security standard. ISO 27001 is one of the most widely recognized standards in the world and certifies that the systems that support Google Analytics and Google Analytics 360 meet the relevant requirements.
The administrator also uses available on social profiles, i.e. Instagram, Facebook, statistical functions provided by the owners of these portals.
Newsletter
The administrator processes personal data of its subscribers in the form of name and e-mail address. These fields are mandatory. Providing this personal data is voluntary, but necessary to send the newsletter. In order to add your e-mail address to the list of subscribers, you will be asked to confirm your subscription. Confirming your subscription will add you to the newsletter mailing list database.
Subscribing to the newsletter means that you consent to the sending of marketing and commercial information to you by means of electronic communication, as defined in the Law on Provision of Electronic Services.
By confirming your subscription to the newsletter, you consent to the Administrator’s use of telecommunications terminal equipment for direct marketing of the Administrator’s products and services, as well as the transmission of commercial information in accordance with Art. 172 para. 1 of the Telecommunications Law. The above consents are voluntary, but necessary to send the newsletter.
You may withdraw your consent at any time, which will result in the discontinuation of the newsletter as described in this Privacy Policy.
The mailing system used by the Administrator to send newsletters records all activity and actions taken by you in connection with e-mails sent to you, including the date and time of opening the message, clicking on links placed in the message, the moment of unsubscribing, etc.
The administrator uses UAB MailerLite services to manage the list of email marketing subscribers and to send emails to subscribers. MailerLite is a third-party vendor that may collect and process your personal data using industry standard technologies to help the Administrator monitor and improve the newsletter. In connection with the performance of MailerLite services, the Administrator uses cookies, unique identifiers, beacons and similar tracking technologies. More information on data use policies is available in MailerLite’s privacy policy.
Referral links on the blog
The Service may contain links pointing to other websites, including affiliate links approached from partner networks. They will open in a new browser window or in the same window. The administrator is not responsible for the content provided by these websites. In each case, the administrator encourages you to read the privacy policy or terms and conditions of these sites.
Server logs
Use of the website involves sending requests to the server on which the Service is located. Each request to the server is recorded in the server logs, which include. i.e. The public IP address of the computer from which the request came, the username provided in the authorization process, the time the request came, the user’s browser information, language, access times and address, the page from which the user was redirected, information about the web browser or information system you are using. The data referred to above are not associated with specific individuals using the Service, but are used only as supporting material for administrative purposes. The administrator does not use server logs in any way to identify you.
XIV. Changes to Privacy Policy
This Privacy Policy may be amended from time to time. The latest version of the document in question is published in the Service.
The reason for changes in the document may be the development of Internet technology, changes in generally applicable law, or the development of the Service. Any changes made by the Administrator to the Privacy Policy in the future will be published and will be effective only for the future. The Administrator recommends reviewing the privacy policy each time before taking any action on the Service.
Date of last update: 06.12.2021 r.