Endless Photo Safaris » Privacy policy

Privacy policy

I. General provisions

The Privacy Policy specifies how personal data of Users necessary for the provision of electronic services through the website [website address] (hereinafter referred to as the "Website") are collected, processed, and stored. The Website collects only the personal data necessary for the provision and development of the services offered therein. Personal data collected through the Website are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR") and the Act on the Protection of Personal Data of 10 May 2018.

II. Data controller

The data controller for personal data collected through the Website is [name of the legal entity/entrepreneur/individual], address: [registered address/residence], National Court Register (KRS) number: [number], Tax Identification Number (NIP): [number], Statistical Number (REGON): [number], email address: [email address] (hereinafter referred to as the "Controller").

III. Purpose of collecting personal data

Personal data are used for the following purposes:

Registration of an account and verification of the User's identity,
Enabling login to the Website,
Execution of agreements related to services and e-services,
Communication with the User (live chat, contact form, etc.),
Sending newsletters (after obtaining the User's consent),
Operating the comment system,
Providing social services,
Promoting the Controller's offer,
Marketing, remarketing, affiliation,
Personalizing the Website for Users,
Analytical and statistical activities,
Debt collection,
Establishment and enforcement of claims or defense against them. Providing data is voluntary but necessary for the conclusion of an agreement or use of other functionalities of the Website.

IV. Types of processed personal data

The Controller may process the User's personal data: name and surname, date of birth, address of residence, email address, phone number, Tax Identification Number (NIP).

V. Retention period of personal data

User's personal data will be processed for the following periods:

If the basis for data processing is the performance of an agreement – until the expiration of claims after its performance,
If the basis for data processing is consent – until its withdrawal, and after withdrawal until the expiration of claims. In both cases, the limitation period is 6 years, and for claims for periodic benefits and claims related to business activities – 3 years (unless a specific provision states otherwise).

VI. Disclosure of personal data

User's personal data may be disclosed to entities affiliated with the Controller, its subcontractors, and entities cooperating with the Controller, e.g., companies providing e-payment services, courier/postal service companies, law firms. User's personal data will not be transferred outside the European Economic Area (EEA).

VII. User's rights

The User of the Website has the right to: access their personal data, rectify them, erase them, restrict their processing, data portability, object to processing, and withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal). A request regarding the exercise of the aforementioned rights should be sent to the email address [email address]. The Controller will fulfill or refuse to fulfill the request promptly, but no later than within one month from its receipt. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing violates their rights and freedoms (GDPR).

VIII. Cookies

The Website collects information using cookies - session, persistent, and third-party cookies. Collecting cookies supports the proper provision of services on the Website and serves statistical purposes. Users can determine the scope of access for cookies on their device in the browser settings.

IX. Automated decision-making and profiling

User data cannot be processed in an automated manner that would result in any decisions being made concerning them. User data may be profiled for the purpose of content customization and offer personalization, with their consent.

X. Final provisions

The Controller has the right to make changes to the Privacy Policy, without limiting the rights of Users. Information about any changes will be provided in the form of a message available on the Website. In matters not regulated in this Privacy Policy, the provisions of the GDPR and Polish law apply.