PRIVACY POLICY

§1 GENERAL INFORMATION

This Privacy Policy and Cookies Policy sets out the rules for the processing and protection of personal data by the Legal Link Group, including data provided as part of the www.legal.link website (hereinafter the Website).

The administrator of personal data is the Legal Link Group. The Legal Link Group consists of:

Legal Link sp. Z oo entered into the Register of Entrepreneurs of the National Court Register under the KRS number: 0000834740, NIP: 6762579237, REGON: 38581991900000; DISTRICT COURT FOR KRAKÓW-ŚRÓDMIEŚCIE IN KRAKÓW, XI ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER - SHARE CAPITAL: PLN 70,000
Legal Link Layer-Janiga sp.k. entered into the Register of Entrepreneurs of the National Court Register under the KRS number: 0000743876, NIP: 6772436976, REGON: 380982490; DISTRICT COURT FOR KRAKÓW-ŚRÓDMIEŚCIE IN KRAKÓW, XI ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER

at the joint address of the place of business and address for service: Al. 29 November 85, 31-408 Krakow.

We care about the security of personal data and the privacy of the Website User. In case of any doubts regarding the provisions of this Privacy Policy and Cookies Policy, please contact the Administrator via the e-mail address: info@legal.link.

The Administrator reserves the right to make changes to the privacy policy, and each User of the website is obliged to know the current privacy policy. The reason for the changes may be the development of internet technology, changes in generally applicable law or the development of the Website, e.g. by the use of new tools by the Administrator.

§2 DEFINITIONS

Administrator - Legal Link Group

Legal Link Group - a group of related entities composed of:

Legal Link sp. Z oo with its seat in Kraków 31-408, aleja 29 Listopada 85, entered into the Register of Entrepreneurs of the National Court Register under KRS number: 0000834740, NIP: 6762579237, REGON: 38581991900000, share capital in the amount of PLN 70,000.00; DISTRICT COURT FOR KRAKÓW-ŚRÓDMIEŚCIE IN KRAKÓW, XI ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER
Legal Link Layer-Janiga sp.k. with headquarters in Krakow 31-408, aleja 29 Listopada 85, entered into the Register of Entrepreneurs of the National Court Register under the KRS number: 0000743876, NIP: 6772436976, REGON: 380982490; DISTRICT COURT FOR KRAKÓW-ŚRÓDMIEŚCIE IN KRAKÓW, XI ECONOMIC DEPARTMENT OF THE NATIONAL COURT REGISTER

User - any entity visiting the website and using it. Website and / or Online Store - website, blog and online store located under the legal.link domain.

User Account or Account - User account set up on the Online Store's online platform, enabling access to the purchased training and products in accordance with the Store Regulations, which the User is obliged to accept when registering the Account.

Form or Forms - places on the Website that allow the User to enter personal data for the purposes indicated therein, e.g. to send a newsletter, to place an order, to contact the User.

Newsletter - means a free service provided electronically by the Administrator to the User by sending e-mails through which the Administrator informs about events, services, products and other elements important from the Administrator's point of view and / or to implement the Administrator's legitimate purpose, which is direct marketing, including sending marketing and commercial content with the consent of the User. Detailed information on the sending of the Newsletter can be found further in this privacy policy.

GDPR - means Regulation of the European Parliament and of the Council EU 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation ).

Act on the protection of personal data - the Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000, as amended).

Act on the provision of electronic services - the Act of 18 July 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended).

§3 PERSONAL DATA AND THE RULES OF PROCESSING THEM

IS THE PROVISION OF DATA VOLUNTARY? WHAT IS THE CONSEQUENCE OF FAILING THEM?

Providing data is voluntary, however, failure to provide certain information, as a rule marked on the Administrator's websites as mandatory, will result in the inability to perform a given service and achieve a specific goal or take specific actions.

Providing by the User data that are not mandatory or an excess of data that the Administrator does not need to process takes place on the basis of the decision of the User himself and then the processing takes place on the basis of the premise contained in art. 6 sec. 1 lit. a GDPR (consent). The User gives consent to the processing of this data and to anonymizing the data that the Administrator does not require and does not want to process, and yet the User has provided them to the Administrator.

FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS WE PROCESS YOUR PERSONAL DATA PROVIDED AS PART OF THE USE OF THE SITE?

The User's personal data on the Administrator's Website may be processed for the following purposes and on the following legal grounds:

performance of the service or performance of the concluded contract, sending an offer (e.g. advertising) at the User's request - pursuant to art. 6 sec. 1 lit. b GDPR (necessity to conclude and / or perform a contract or take action on request);
issuing an invoice, bill and meeting other obligations resulting from the provisions of tax law in the case of placing orders in the Online Store or other products and services - pursuant to art. 6 sec. 1 lit. c GDPR (obligation resulting from legal provisions);
granting a discount or informing about promotions and interesting offers of the Administrator or entities recommended by him - pursuant to art. 6 sec. 1 lit. a GDPR (consent);
consideration of complaints or claims related to the contract - pursuant to art. 6 sec. 1 lit. b GDPR (necessity to conclude and / or perform the contract) and pursuant to art. 6 sec. 1 lit. c GDPR (obligation resulting from legal provisions);
establishing, investigating or defending against claims - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator);
telephone contact in matters related to the implementation of the service - pursuant to art. 6 sec. 1 lit. b GDPR (necessity to conclude and / or perform the contract);
telephone contact in order to present an offer and direct marketing - pursuant to art. 6 sec. 1 lit. a GDPR (consent) and pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator), if you are already my client;
creating registers related to the GDPR and other regulations - pursuant to art. 6 sec. 1 lit. c GDPR (obligation resulting from legal provisions) and art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator);
archival and evidential, for the purposes of securing information that may be used to prove facts - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator);
analytical, consisting, inter alia, in the analysis of data collected automatically when using the website, including cookies, e.g. Google Analytics cookies, Facebook Pixel - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator);
the use of cookies on the Website and its subpages - pursuant to art. 6 sec. 1 lit. a GDPR (consent);
managing the Website and the Administrator's pages on other platforms - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator);
satisfaction surveys with the services offered - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator),
the User posting an opinion on the services provided by the Administrator - pursuant to art. 6 sec. 1 lit. a GDPR (consent),
for the Administrator's internal administrative purposes related to managing contact with the User, which is the legitimate interest of the Data Administrator pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator),
in order to send the newsletter - pursuant to art. 6 sec. 1 lit. f GDPR (the Controller's legitimate interest in the processing of data for direct marketing purposes) and on the basis of the Act on the provision of electronic services (consent),
in order to adjust the content displayed on the Administrator's websites to individual needs and to constantly improve the quality of services offered - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator),
for the purpose of direct marketing directed to the User of own products or services or recommended products of third parties - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator),
in order to create Users' own databases - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator),
in order to operate the fanpage under the name @legallinktaxandlaw on Facebook, the Legal Link profile on Linkedin and interacting with users - pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator).
in order to target advertising in social media and on websites, such as Facebook Leads Ads or Facebook Custom Audience, and to target remarketing - pursuant to art. 6 sec. 1 lit. a GDPR (consent) and pursuant to art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator) consisting in the promotion and advertising of the Administrator's services through remarketing addressed to people subscribed to mailing or visitors to a given website),
in order to store comments on the Website - pursuant to art. 6 sec. 1 lit. a GDPR (consent).

As we are not able to provide all services ourselves, we use external suppliers. We provide your data to the following categories of entities:

accounting offices
payment systems that handle payments
communication systems that allow us to contact you and fulfill your orders
experts creating training and information materials published on the Website
subcontractors responsible for contact and customer service, marketing activities, administration and service of the Website, as well as the implementation of orders
hosting companies
entities with whom we cooperate in the provision of services offered on the Website and / or the Online Store

HOW IS DATA COLLECTED?

Only the data that the User provides themselves is collected and processed (except - in certain situations - data collected automatically using cookies and login data, as mentioned below).

When visiting the website, data about the visit itself is automatically collected, e.g. user's IP address, domain name, browser type, operating system type, etc. (login data). Data collected automatically can be used to analyze user behavior on the website, collect demographic data about users or to personalize the content of the website in order to improve it. However, these data are processed only for the purposes of website administration, ensuring efficient hosting service or directing marketing content and are not associated with the data of individual users. You can read more about cookies later in this policy.

Data may also be collected for the purpose of filling in forms on the Website, as discussed further in the privacy policy.

Information society services

The administrator does not collect data of children. The user should be over 16 years of age to independently consent to the processing of personal data for the purpose of providing information society services, including for marketing purposes, or obtain the consent of a legal guardian (e.g. a parent).

If the User is under 16 years of age, he / she should not use the Website and the www.legal.link website.

The Administrator is entitled to make reasonable efforts to verify whether the user meets the age requirement referred to above, or whether the person exercising parental authority or custody of the User who is under 16 years of age has consented or approved it.

WHAT ARE THE USER'S RIGHTS?

The user is entitled at any time to the rights contained in art. 15-21 of the GDPR, i.e .:

§ the right to access the content of his data,

§ the right to transfer data,

§ the right to correct data,

§ the right to rectify data,

§ the right to delete data, if there are no grounds for their processing,

§ the right to limit processing, if it was done in a manner

incorrect or without a legal basis,

§ the right to object to the processing of data on the basis of

the legitimate interest of the administrator,

§ the right to lodge a complaint with the supervisory body - the President of the Office for Protection

Personal Data (on the terms set out in the Personal Data Protection Act), if he considers that the processing of his data is inconsistent with the currently applicable data protection law.

§ the right to be forgotten if further processing is not provided for by the currently applicable law.

The Administrator points out that these rights are not absolute and do not apply to all processing activities of the User's personal data. This applies, for example, to the right to obtain a copy of the data. This right may not adversely affect the rights and freedoms of other people, such as, for example, copyrights, professional secrecy. In order to learn about the limitations of the User's rights, I refer to the content of the GDPR.

However, the user always has the right to lodge a complaint with the supervisory authority.

In order to exercise their rights, the User may contact the Administrator via the e-mail address: info@legal.link or by post to the address of the Administrator's place of business, if provided in this privacy policy, indicating the scope of his requests. The answer will be given no later than 30 days from the date of receipt of the request and its justification, unless it is justified to extend this period in accordance with the GDPR.

CAN THE USER WITHDRAW THE EXPRESSED CONSENT?

If the User has consented to a specific action, such consent may be withdrawn at any time, which will result in the removal of the e-mail address from the Administrator's mailing list and / or the telephone number from the contact list and the cessation of the indicated activities (in the case of subscription based on consent). Withdrawal of consent does not affect the processing of data which was carried out on the basis of consent before its withdrawal.

In some cases, the data may not be completely deleted and will be retained in order to defend against possible claims for a period consistent with the provisions of the Civil Code or, for example, to fulfill legal obligations imposed on the Administrator (e.g. tax obligations).

Each time, the Administrator will refer to the User's request, adequately justifying further actions resulting from legal obligations.

DO WE TRANSFER YOUR DATA TO THIRD COUNTRIES?

The User's data may be transferred outside the European Union - to third countries.

Due to the fact that the Administrator uses external providers of various services, e.g. Facebook, Google, Zoom, Wix, PayU, GetResponse, Microsoft, etc., the User's data may be transferred to the United States of America (USA) in connection with their storage on American servers (wholly or partially). Google and Facebook use the compliance mechanisms provided for by the GDPR (e.g. certificates) or standard contractual clauses for their services. They will be transferred only to recipients who guarantee the highest protection and data security, including by:

cooperation with entities processing personal data in countries for which an appropriate decision of the European Commission has been issued,
use of standard contractual clauses issued by the European Commission (as is the case, for example, in the case of Google),
application of binding corporate rules approved by the competent supervisory authority, or those for the transfer of personal data which the User has consented to.

Detailed information is available in the content of the privacy policy of each of the providers of these services, available on their websites. For example:

Google: https://policies.google.com/privacy?hl=pl

Facebook: https://www.facebook.com/privacy/explanation

GetResponse: https://www.getresponse.pl/informacje-prawne/polityka-prywatnosci Microsoft: https://privacy.microsoft.com/pl-pl

Zoom: https://zoom.us/privacy-and-legal

Wix: https://pl.wix.com/about/privacy

ClickMeeting: https://clickmeeting.com/pl/legal

Currently, the services offered by Google and Facebook are provided mainly by entities located in the European Union. You should, however, always read the privacy policy of these providers in order to receive up-to-date information on the protection of personal data.

HOW LONG DO WE KEEP YOUR DATA?

The User's data will be stored by the Administrator for the duration of the implementation of individual services / achievement of goals and:

for the period of service and cooperation, as well as for the period of limitation of claims in accordance with the law - in relation to data provided by contractors and clients or Users,
for the period of talks and negotiations preceding the conclusion of the contract or the performance of the service - in relation to the data provided in the inquiry,
for the period required by law, including tax law - in relation to personal data related to the fulfillment of obligations under applicable law,
until the objection submitted pursuant to Art. 21 GDPR - in relation to personal data processed on the basis of the legitimate interest of the administrator, including for the purposes of direct marketing,
until the consent is withdrawn or the purpose of processing or business purpose is achieved - in relation to personal data processed on the basis of consent. After the consent is withdrawn, the data may still be processed in order to defend against any claims in accordance with the limitation period for these claims or the (shorter) period indicated to the User,
until they become obsolete or lose their usefulness - in relation to personal data processed mainly for analytical and statistical purposes, the use of cookies and the administration of the Administrator's Pages,
for a maximum period of 3 years in the case of people who unsubscribed from the newsletter in order to defend against possible claims (e.g. information about the date of subscription and date of unsubscribing from the newsletter, the number of newsletters received, actions taken and activity related to the received messages), or after a period of 1 year of inactivity by a given subscriber, e.g. failure to open any message from the Administrator.

The data storage periods indicated in years are counted at the end of each year in which the data processing began. This is to improve the data processing and management process.

Detailed periods of personal data processing, concerning individual processing activities, can be found in the Administrator's register of processing activities.

LINKS REFERRING TO OTHER PAGES

Links to other websites may appear on the Website. They will open in a new browser window or the same window. The administrator is not responsible for the content provided by these websites. The user is obliged to read the privacy policy or the regulations of these websites.

ACTIVITIES IN SOCIAL MEDIA - FACEBOOK / LinkedIn

The administrator of the User's personal data on the fanpage under the name Legal Link on Facebook on Facebook (hereinafter referred to as Fanpage) is the Administrator.

The User's personal data provided on Fanpage will be processed for the purpose of administering and managing the Fanpage, communicating with the User, interacting, directing marketing content to the User and creating a Fanpage community.

The basis for their processing is the consent of the User and the legitimate interest of the administrator consisting in interacting with Users and Fanpage Followers. The user voluntarily decides to like / follow Fanpage.

The rules on Fanpage are set by the Administrator, however, the rules for staying on the Facebook social network result from the Facebook regulations.

The User may stop following Fanpage at any time. However, the Administrator will not display any content from the Administrator related to Fanpage to the User.

The Administrator sees the User's personal data, such as name, surname or general information that the User places on their profiles as public. The processing of other personal data is carried out by the social network Facebook and on the terms contained in its regulations.

The User's personal data will be processed for the period of running / existence of the Fanpage on the basis of consent expressed by liking / clicking "Follow" Fanpage or interacting, e.g. leaving a comment, sending a message and for the purpose of implementing the Administrator's legitimate interests, i.e. marketing of own products or services or defend against claims.

The User's personal data may be shared with other recipients of data, such as Facebook, cooperating advertising agencies or other subcontractors supporting the Administrator's Fanpage, IT service, virtual assistant, or teachers servicing individual online courses, if contact occurs outside of Facebook.

Other rights of the User are described in this privacy policy.

User data may be transferred to third countries in accordance with Facebook's regulations.

These data can also be profiled, which helps to better personalize the advertising offer addressed to the User. However, they will not be processed in an automated manner within the meaning of the GDPR (having a negative impact on the rights and freedoms of the User).

The above rules related to data on Facebook also apply to Linkedin.

DATA SAFETY

The User's personal data is stored and protected with due diligence, in accordance with the Administrator's internal procedures implemented. The Administrator processes information about the User using appropriate technical and organizational measures that meet the requirements of generally applicable law, in particular the provisions on the protection of personal data. These measures are primarily aimed at securing Users' personal data against unauthorized access.

In particular, only authorized persons who are obliged to keep this data secret or entities entrusted with the processing of personal data on the basis of a separate data entrustment agreement have access to the Users' personal data.

At the same time, the user should exercise due diligence in securing his personal data provided on the Internet, in particular not to disclose his login details to third parties, use anti-virus protection and update the software.

WHO CAN THE RECIPIENTS OF PERSONAL DATA BE?

The administrator informs that he uses the services of external entities. Entities entrusted with the processing of personal data (such as, for example, courier companies, electronic payment intermediaries, companies offering accounting services, companies enabling the sending of newsletters) guarantee the use of appropriate protection and security measures for personal data required by law, in particular by the GDPR.

The Administrator informs the User that he entrusts the processing of personal data, among others the following entities:

GetResponse sp. Z oo - to send the newsletter, use the mailing system, create landing pages and subscribe to the newsletter,
Wix.com Ltd - to store personal data on the server,
Wix.com Ltd - to create landing pages and collect leads,
Web INnovative Software sp. Z oo - in order to issue accounting documents,
PayU SA or Blue Media SA - in order to operate the payment system and electronic transactions,
OVH - to operate the domain and mail server,
Other contractors or subcontractors involved in technical, administrative or legal assistance for the Administrator and his clients, e.g. accounting, IT, graphic, copywriting, debt collection companies, lawyers, etc.
Entities cooperating in the provision of services or co-creating the service, etc.
Offices, e.g. tax office - in order to fulfill legal and tax obligations related to settlements and accounting.

HAVE WE APPOINTED A DATA PROTECTION OFFICER?

The Personal Data Administrator hereby informs that he has not appointed the Personal Data Protection Inspector (IODO) and performs his own duties related to the processing of personal data.

The user acknowledges that his personal data may be transferred to authorized state authorities in connection with their proceedings, at their request and after meeting the conditions confirming the necessity to obtain such data from the Administrator.

DO WE PROFILE USER DATA?

The User's personal data will not be used for automated decision-making affecting the rights, obligations or freedoms of the User within the meaning of the GDPR.

As part of the website and tracking technologies, the User's data may be profiled, which helps to better personalize the company's offer that the Administrator directs to the User (mainly through the so-called behavioral advertising). However, this should not have any impact on the legal situation of the User, in particular on the terms of contracts or agreements concluded by him or her that he intends to conclude. It can only help to better match the content and targeted advertisements to the interests of the User. The information used is anonymous and is not associated with personal data provided by the User, e.g. during the purchase process. They result from statistical data, e.g. gender, age, interests, approximate location, behavior on the Website.

Each User has the right to object to profiling if it would have a negative impact on the rights and obligations of the User.

If you want to learn more about behavioral advertising, click here: https://www.youronlinechoices.com/pl/o-reklamie-behawioralnej

§4 FORMS

The Administrator uses the following types of forms within the Website:

1. Newsletter subscription form - requires entering your name and e-mail address in the appropriate place. These fields are mandatory. Then the User, in order to add his e-mail address to the Administrator's subscriber base, must confirm his willingness to subscribe. The data obtained in this way is added to the mailing list for the purpose of sending the newsletter.

Subscription / subscription means that the User agrees to this Privacy Policy and agrees to send him marketing and commercial information by means of electronic communication, e.g. e-mail or text message, within the meaning of the Act of July 18, 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended).

By subscribing to the newsletter, the User also agrees to the Administrator using the User's telecommunications end devices (e.g. phone, tablet, computer) for direct marketing of the Administrator's products and services and to provide the User with commercial information in accordance with art. 172 (1) of the Telecommunications Law (Journal of Laws of 2014, item 243, as amended)

The above consents are voluntary, but necessary to send the newsletter, incl. to inform about services, new blog entries, products, promotions and discounts offered by the Administrator or third party products recommended by him. Consents may be withdrawn at any time, which will result in the cessation of sending the newsletter in accordance with the rules contained in this privacy policy.

The newsletter is sent for an indefinite period, from the moment of activation until the consent is withdrawn. After the consent is withdrawn, the User's data may be stored in the newsletter database for another 1 year in order to demonstrate the fact that the User has consented to communication via the newsletter, the User's actions (e-mails are open) and the moment of its withdrawal, as well as any related claims , which is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR).

The sending of the newsletter may be discontinued if the User does not show activity for a minimum of 1 year from the commencement of the newsletter service or the last e-mail message (sent newsletter) was read. In this case, the Administrator will delete the User's data from the system for sending the newsletter (supplier). The User will not be entitled to receive any message from the Administrator, unless he decides to re-subscribe to the Newsletter subscription form or contacts the Administrator in a different way selected for this purpose.

The mailing system used to send the newsletter records all activities and actions taken by the User related to the e-mails sent to him (date and time of opening the message, clicking on links, unsubscribing, etc.).

The administrator may also carry out remarketing on the basis of art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator, consisting in the promotion and advertising of services addressed to people subscribed to the newsletter, in such a way that the e-mail addresses of subscribers are uploaded to the marketing tool offered by Facebook Inc., the so-called advertising manager, and then directed they are advertisements created by the Administrator or authorized persons through the Administrator's advertising account, provided that the newsletter subscribers are also users of the Facebook platform (they have an account there). Each time, these data are deleted after the end of the advertising campaign. the updated subscriber base is loaded into the tool). Detailed information about the so-called groups of non-standard recipients, the rules for data hashing and processing of this data can be found in the privacy policy of Facebook at this

via the link https://www.facebook.com/legal/terms/customaudience# and https://www.facebook.com/legal/terms/dataprocessing, and the Administrator recommends that each User and subscriber read these rules.

2. Contact form - allows you to send a message to the Administrator and contact him by e-mail. Personal data in the form of name, surname, e-mail address and data provided in the message are processed by the Administrator in accordance with this Privacy Policy in order to contact the User.

After contacting you, the data may be archived, which is the legitimate interest of the Administrator. The administrator is not able to specify the exact archiving period and thus the deletion of the message. However, the maximum period will not be longer than the statutory limitation periods.

The administrator is not responsible for the content of comments posted by Fanpage readers. The Administrator reserves the right not to post comments that are spam, offensive, contain vulgar or offensive phrases, illegal content or contain any links to other websites placed without his consent.

1. Order form in the Store - When placing an order in the Administrator's online store, you must provide specific data in accordance with the rules contained in the sales regulations in order to fulfill the order, fulfill legal obligations imposed on the Administrator, settlements, consider claims, for statistical and archival purposes, as well as in the purpose of direct marketing in relation to customers, which is the legitimate interest of the Administrator.

These are mainly: name, surname, company name, tax identification number, address of residence or registered office of the company, possibly a delivery address, e-mail address. If you already have a user account in the store, then it is enough to enter the login (or e-mail address) and password and log in to your account, and then take further steps related to the order.

The administrator stores data for the duration of the contract or service, and after its completion for the period necessary to protect against claims. In addition, for the time specified by law, e.g. tax law (e.g. the period of storage of invoices).

3 Complaint and withdrawal form - If you use the Administrator's services or products, you can submit a complaint or withdraw from the concluded contract. For this purpose, the Administrator allows you to fill in the complaint form and the withdrawal form attached to the sales regulations. You can also do these activities without filling in the form, but providing the necessary data.

The data required in this case are: name, surname or, if applicable, username, home address or registered office address of the company (if the order was made on behalf of the company), e-mail address, telephone number (possibly), bank account number (if a return is required). ).

Providing data is voluntary, but necessary to consider the complaint in accordance with the law and the sales regulations. The data will be stored for the purpose of the complaint procedure / withdrawal from the contract and for archival purposes and defense against claims.

4. The registration form for setting up a User account in the online store - the User has the option of creating an account in the online store and for this purpose he should register and provide the following data: name, surname, e-mail address, home address, company address, tax identification number, and then passwords.

Account creation takes place on the terms specified in the sales regulations and is a service provided electronically. The rules for maintaining the account and its possible deletion are contained in the regulations.

Data marked as such are mandatory and it will not be possible to set up a user account without providing them. Providing other data is voluntary.

The Administrator may entrust the processing of personal data to third parties without a separate consent of the User (on the basis of an entrustment agreement).

If the User uses the services of external providers, such as Google, he should read their privacy policy, available from the providers of these services, on their websites.

§5 EXCLUSION OF LIABILITY AND COPYRIGHT

The content presented on the Website does not constitute specialist (e.g. educational) advice or guidance and does not relate to a specific factual state. If the User wishes to obtain assistance in a specific matter, he should contact the person authorized to provide such advice or the Administrator using the contact details provided. The Administrator is not responsible for the use of the content on the Website or for actions or omissions made on their basis.
All content posted on the Website is subject to the copyright of certain persons and / or the Administrator (e.g. photos, texts, other materials, etc.). The administrator does not agree to copy this content in whole or in part without his express prior consent.
The Administrator informs the User that any dissemination of content made available by the Administrator is a violation of the law and may give rise to civil or criminal liability. The administrator may also claim appropriate compensation for material or non-material losses in accordance with applicable regulations.
The administrator is not responsible for illegal use of the materials available on the website.
The content posted on the Website is current as of the date it is posted, unless otherwise indicated.

§6 TECHNOLOGIES

In order to use the Administrator's website, it is necessary to have:

Devices with Internet access with a bandwidth compliant with the recommendations
An active electronic mailbox that receives e-mails
A web browser that allows you to display websites (optimally Google Chrome)
Software that enables reading content in the following formats, e.g. pdf, video, mp3, mp4.

§7 COOKIES POLICY

Like most websites, the Administrator's Website uses the so-called tracking technologies, i.e. cookies ("cookies"), which allows you to improve the site in terms of the needs of visitors to it.
Cookies (so-called "cookies") are IT data, small text files that are stored on the end device, e.g. computer, tablet, smartphone when you use my Website.
These may be own cookies (coming directly from my website) and third party cookies (coming from websites other than my website).
Cookies allow you to adjust the content to the individual needs of the User and the needs of other users visiting it. They also enable the creation of statistics that show how website users use it and how they navigate around it. Thanks to this, I can improve my website, its content, structure and appearance.
The administrator uses the following third party cookies on the Website:

Facebook conversion pixel and ads created via Facebook Facebook Ads (Facebook Custom Audiences) - to manage Facebook ads and conduct remarketing activities, which is the legitimate interest of the Administrator. The administrator may also direct advertising content to the User through the Facebook portal as part of contact ads.

The Facebook Pixel tool is provided by Facebook Inc. and its affiliates. It is an analytical tool that helps measure the effectiveness of advertisements, shows what actions are taken by Website Users and helps reach a specific group of people (Facebook Ads, Facebook Insights). The administrator may also direct advertising content to the User through the Facebook portal as part of contact ads.

The administrator may also carry out remarketing on the basis of art. 6 sec. 1 lit. f GDPR (legitimate interest of the administrator, consisting in the promotion and advertising of services addressed to people who have agreed to send offers (or people similar to them or to users who like Fanpage) in such a way that the e-mail addresses provided are loaded to the marketing tool offered by Facebook Inc., the so-called advertising manager, and then an advertisement created by the Administrator or authorized persons is directed to them through the Administrator's advertising account, provided that these persons are also users of the Facebook platform (they have an account there). Each time, these data are deleted after the end of the advertising campaign. In the case of another advertising campaign, the updated contact database is uploaded to the tool. Detailed information about the so-called groups of non-standard recipients, the rules for data hashing and processing of this data can be found in the privacy policy of Facebook at this link https://www.facebook.com/legal/terms/customaudience#

and https://www.facebook.com/legal/terms/dataprocessing, and the Administrator recommends that each User reads these rules.

The information collected as part of the use of Facebook Pixel is anonymous and does not allow for the identification of the User. They show general data about users: location, age, gender, interests. The Facebook provider may combine this information with the information that the User provides to him as part of his Facebook account, and then use it in accordance with his own assumptions and goals.

The administrator recommends that you read the details related to the use of the Facebook Pixel tool and, if necessary, ask questions to the provider of this tool, as well as manage your privacy settings on Facebook. More information is available at the link: https://www.facebook.com/privacy/explanation. You can opt out of cookies responsible for displaying remarketing ads at any time, e.g. at https://www.facebook.com/help/1075880512458213/.

By using the website, the user agrees to the installation of the indicated cookie on his end device.

Built-in Google Analytics code - to analyze Website statistics. Google Analytics uses its own cookies to analyze the activities and behavior of the Website Users. These files are used to store information, e.g. from which side the User has come to the current website. They help to improve the Site.

This tool is provided by Google LLC. Actions taken as part of the use of the Google Analytics code are based on the Controller's legitimate interest in creating and using statistics, which then allows for the improvement of the Controller's services and optimization of the Website.

As part of using the Google Analytics tool, the Administrator does not process any data of the User that would enable his identification.

The administrator recommends that you read the details related to the use of Google Analytics, the option to disable the tracking code and, if necessary, ask the supplier of this tool questions at

link: https://support.google.com/analytics#topic=3544906.

Web push notifications from the browser level - in order to better communicate with the User and provide him with valuable content or offers faster, the Administrator allows you to consent to receive web push notifications from the User's browser.

In order to agree to receive web push notifications, the User should select the "display notifications" or other synonymous option in the message sent by his web browser (each browser may call this option differently).

Consent to receive the above-mentioned notifications may be withdrawn at any time by changing the settings of the User's web browser. The Administrator does not process any personal data of Users who use

from web push notifications. Users are identified only on the basis of information stored by their web browsers, to which the Administrator has no access.

Plugins targeting social media, e.g. Facebook, LinkedIn.

After clicking on the icon of a given plug-in, the user is sent to the website of an external provider, in this case the owner of a given social network, e.g. Facebook. Then he has the option to click "Like" or "Share" and like the Administrator's fanpage located on Facebook or share its content directly (post, article, video, etc.).

The administrator recommends reading the Facebook privacy policy before creating an account on this portal. The administrator has no influence on the data processed by Facebook. From the moment the User clicks the button of the plugin referring to social media, personal data is processed by a social networking site, e.g. Facebook, which becomes their administrator and decides on the purposes and scope of their processing. Cookies left by the Facebook plugin (or other third parties) may also be applied on the User's device after entering the Website and then associated with data collected on the Facebook portal. By using the Website, the User accepts this fact. The administrator has no influence on the processing of data by third parties in this way.

The above guidelines should also be applied to the operation of: Facebook - fanpage located at

URL: https://www.facebook.com/legallinktaxandlaw,

Profile on the LinkedIn portal, located at the URL:

https://www.linkedin.com/company/legallink-main.

Tools for assessing the effectiveness of Google Ads advertising campaigns - to conduct advertising and remarketing campaigns, which is the legitimate interest of the Administrator.

The administrator does not collect any data that would allow the identification of the User's personal data.

The administrator recommends reading the Google privacy policy in order to learn the details of these functions and their possible deactivation from the level of the User's browser.

Cookies used to recover abandoned carts and User's activity on the website of the online store, - in order to direct advertising communication to the User related to an unfinished order, which is the legitimate interest of the Administrator.

Content from portals and websites of external suppliers,

The Administrator may embed content from portals, websites, blogs and other websites of external entities on the Website. In particular, they can be videos from Vimeo or Zoom.

These third parties may save certain data about the content played by the User.

If you do not want this to happen, log out of the portal (if you have an account there and are logged in) before visiting my Website or do not play the content on the Website. You can also change your browser settings and block certain content from certain portals from being displayed to you.

The Administrator recommends that you read the privacy policy of each of the providers of the above services in order to learn about the possibility of making changes and settings that ensure the protection of the User's rights.
The website uses two types of cookies: session cookies, which are deleted after closing the browser, logging out or leaving the website, and permanent cookies, which are stored on the user's end device, which allows the browser to be recognized the next time the website is accessed, for the time specified in cookie parameters or until they are deleted by the User.
In many cases, the software used for browsing websites (web browser) allows cookies to be stored on the User's end device by default. Website Users can change cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the web browser settings or inform about their every posting in the device of the Website User. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.
The administrator informs that limiting the use of cookies (disabling them, limiting them) may affect some of the functionalities available on the Website's websites and hinder its functioning.
More information on cookies is available at http://wszystkoociasteczkach.pl/ or in the "Help" section in the browser's menu.

§8 CONSENT TO COOKIES

When entering the Website for the first time, you must consent to cookies or take other possible actions indicated in the message in order to be able to continue using the content of the Website. By using the Website, you consent. If you do not want to give such consent - leave the website. You can always change your browser settings, disable or delete cookies. The necessary information can be found in the "help" tab in the User's browser.

§9 SERVER LOGS

Using the Website involves sending queries to the server on which the Website is stored.
Each query directed to the server is saved in the server logs. Logs include User's IP address, server date and time, information about the web browser and operating system used by the User.
Logs are saved and stored on the server.
The server logs are used to administer the Website, and their content is not disclosed to anyone except persons and entities authorized to administer the server.
The administrator does not use the server logs to identify the User in any way.

Date of publication of the Privacy Policy: December 29, 2020

Last updated : September 26, 2021