Policy privacy

§ 1. DEFINITIONS
The Personal Data Controller (hereinafter also referred to as the “Controller”) is X-ONE spółka z ograniczoną odpowiedzialnością with its registered office in Wysogotowo (Poznań), address: ul. Serdeczna 8T, 62-081 Wysogotowo (Poznań), entered into the Register of Entrepreneurs of the National Court Register under number: KRS 0000722704, with REGON number 369030127 and NIP number 7811961961, email address: dpaul@x-one.pl, processing personal data of users of the website operating at https://x-one.pl (hereinafter: the “Website”).

Personal Data (hereinafter also referred to as the “Data”) – means any information relating to an identified or identifiable natural person, whereby an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, email address.


§ 2. RULES OF DATA PROCESSING
The Controller processes Personal Data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), as well as other relevant applicable laws, in particular national laws concerning the protection of personal data. The Controller uses security measures appropriate to the risks and categories of Data to effectively protect the Data and meet the requirements of the applicable laws.

Purposes of Data Processing
User Data will be processed for the following purposes:

  • Responding by the Controller to User inquiries, requests or applications (Art. 6 sec. 1(b) of the GDPR – to the extent necessary to provide services/perform the contract),
  • Fulfilling the legitimate interests of the Controller in the form of marketing of the Controller's products and services and asserting copyright protection and other claims (Art. 6 sec. 1(f) of the GDPR – legitimate interest of the Controller).

Contact Person
The Controller – in the absence of a legal obligation – has not appointed a Data Protection Officer. The User may contact the Controller (details provided above) in matters related to the processing of Data and the exercise of their rights related to the processing of Data.

Data Retention Period
The Controller will process the Data only for as long as necessary to fulfill the purposes for which the Data is processed, i.e.:

  • Until a response is provided to the User's requests, inquiries, or questions,
  • For a period of 10 years or until an objection is raised – for direct marketing purposes,
  • Until the limitation period of claims expires, unless further processing is required for the pursuit of claims or required by applicable law.

Recipients of Data
Personal Data may be disclosed by the Controller to entities authorized to receive information under applicable law, as well as under a written data processing agreement or written authorization to entities whose access is necessary for the purpose for which the Data was provided, i.e., primarily entities providing the following services to the Controller: postal, shipping, transportation, accounting, HR and payroll, legal, banking, data storage, and IT services.

While using the Website, other entities that are providers of services whose plugins are embedded in the Website may also gain access to information partially sent automatically by the browsers used by Users, including: youtube.com, instagram.com, facebook.com, pinterest.com, linkedin.com (the Controller may have profiles on them). This information may include Data such as: device IP address, device type, unique identifier, operating system name, browser settings, date and time of sent requests, and User activities on websites. The specific information collected depends on the type of device and software settings used by the User. Each provider defines the rules and purposes of collected data on their websites. Cookies of other entities, which are providers of services whose plugins are embedded in the Website, including youtube.com, instagram.com, facebook.com, pinterest.com, linkedin.com (where the Controller may have profiles), may also be stored on the devices used by Users.

Personal Data will not be transferred to a third country or international organization.

Voluntary Provision of Data
In all cases, the provision of Data by the User is voluntary; however, failure to provide Data may hinder or prevent the use of Website services.

User Rights
Each User, in connection with the processing of their Personal Data, has the following rights:

  • The right to access the Data and obtain a copy thereof;
  • The right to request the rectification of the Data;
  • The right to delete the Data, provided that one of the following conditions is met:
    • The Data are no longer necessary for the purposes for which they were collected or otherwise processed;
    • The data subject has withdrawn consent on which the processing is based pursuant to Art. 6(1)(a) or Art. 9(2)(a) of the GDPR, and there is no other legal basis for the processing;
    • The data subject objects to the processing pursuant to Art. 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) of the GDPR;
    • The Data have been unlawfully processed;
    • The Data must be erased for compliance with a legal obligation in Union or Member State law to which the Controller is subject;
    • The Data were collected in connection with the offering of information society services referred to in Art. 8(1) of the GDPR;
  • The right to lodge a complaint with the supervisory authority for personal data protection;
  • The right to restrict Data processing;
  • The right to withdraw consent to Data processing (where and to the extent the Data are processed based on consent) – withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
  • The right to Data portability (where and to the extent the Data are processed based on consent or are necessary for the provision of services);
  • The right to object to the processing of the Data.

In matters related to the exercise of the above rights, contact the Controller.

The Data will not be subject to profiling or automated decision-making, except as described in this Privacy Policy.

§ 3.
COOKIES POLICY
Cookies are small text files saved and stored on the User’s computer, tablet, or smartphone while visiting various websites on the Internet. A cookie contains anonymous data concerning only the use and form of the Website.

The Website uses cookies solely to ensure correct and user-friendly operation of the Website and for statistical purposes. The Controller allows third parties (including Google AdWords, Google Analytics) to use cookies for statistical and advertising purposes.

By using our Website, you accept the rules set out in the Cookie Policy. The User independently decides whether cookies are to be stored on their computer. They can deactivate or completely disable cookies in their browser settings or by selecting the appropriate option in firewall-type software. They can also delete the cookies already saved.

Disabling cookies may cause difficulties in using some of the services and functionalities of the Website. If you do not agree to our use of cookies, you should change your browser settings accordingly or refrain from using the Website.

Cookies are used for the following purposes:

  • Adjusting the content of websites to the User’s preferences and optimizing the use of websites; in particular, these files allow the User’s device to be recognized and the website to be properly displayed in a manner tailored to the User’s individual needs.
  • Creating statistics that help understand how Users use the Website, which allows improving its structure and content.

The Website uses the following types of cookies:

Cookie

Expiration Time

Description

Third-Party Access (YES/NO)

Google Analytics

14 months

Tracking user activity on the Website

NO

YouTube

14 months

Set by YouTube to track views of embedded videos

NO

Google Ads

13 months

Used to measure ad effectiveness and personalization

NO

To avoid receiving cookies, use the settings in your web browser and select the option to automatically reject cookies. These settings typically also allow you to manage cookies in other ways. More information about cookie management can be found at:

§ 4.
USE OF GOOGLE ANALYTICS TOOL
The Website uses the Google Analytics 4 tool. The use of this tool follows the privacy policy available at: https://www.google.com/policies/privacy/. You can block Google Analytics 4 in accordance with the instructions available at: https://tools.google.com/dlpage/gaoptout/.

§ 5.
USE OF YOUTUBE TOOL
The Website uses the YouTube platform. The use of this platform is subject to the privacy policy available at: https://policies.google.com/privacy. Privacy settings related to YouTube can be managed according to the instructions at: https://myaccount.google.com/data-and-privacy.

§ 6.
USE OF HOTJAR TOOL
The Hotjar tool may be used on the Website to monitor and record User behavior. This tool collects behavioral data such as navigation, page scrolling, and cursor movement. It also gathers information about location, device used, operating system, and browser. Hotjar does not collect or store personal (including personally identifiable) information of Users. More information about Hotjar’s privacy policy is available at: https://www.hotjar.com/privacy. If you do not want your activity on the site to be tracked by Hotjar, use the following link: https://www.hotjar.com/opt-out.

§ 7.
GOOGLE ADS
Google Ads is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. It helps us draw attention to our activities and offers through advertisements on external websites. We analyze advertising campaign data to optimize our advertising efforts.

We do not collect or process any personal data through these advertising means. We do not obtain other data and cannot identify Users based on the information obtained. You can disable cookies collection in your browser settings or clear them after leaving the X-ONE site. Data processing within Google Ads is described by Google:
https://support.google.com/google-ads/answer/9614122?hl=pl.

§ 8.
EXCLUSIONS
This Privacy Policy does not apply to websites of entities whose contact details or links may appear on our pages. The Controller is not responsible for the information provided by these websites or collected through them, nor for any other activities of those websites.

§ 9.
FINAL PROVISIONS
To matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply.

 

Empower your business with AI tools