I. Introduction

Since you’ve come across this document, it means that your data security is important to you. Please be assured that as the operator of the business under the name HYB Spółka z ograniczoną odpowiedzialnością, located in Gdańsk 80-176, at Przytulna 40/28, KRS: 0000854113, NIP: 5223187825, REGON: 386735099, I take proper care in handling your personal data. My goal is to appropriately inform you regarding issues related to the processing of personal data, especially in the context of the regulations on data protection, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”). In this Privacy Policy, I inform you about the legal grounds for processing personal data, the ways of collecting and using them, as well as your rights related to these matters.

This Privacy Policy also meets the requirements set forth in the Act of September 15, 2017, on telecommunications law, in connection with the use of cookies. As the owner of the website hackyourbrain.pl, I am obliged to inform you about the cookies used by this service.

II. Personal Data

2.1. When does this Privacy Policy apply?

This Privacy Policy applies to all cases where I process your personal data. This includes situations where I process personal data obtained directly from you, as well as situations where your personal data was obtained from other sources.

2.2. How, on what legal grounds, and what types of personal data do I process?

I ensure transparency regarding the methods and legal grounds for processing personal data, as well as the purposes for which personal data is processed. I take care to provide all necessary information in this regard. To make this explanation as clear as possible, I present the following summary of personal data processing operations in connection with the website.

Additionally, I emphasize that whenever I process personal data based on a legitimate interest (Art. 6 (1) (f) GDPR), I strive to analyze and balance my interest with the potential impact on your data (both positive and negative), as well as your rights under the data protection laws.

A. Processing of personal data of website visitors

In connection with the use of the website, I process the following data transmitted by your browser to the server: IP address, date and time of session start, information about the time zone, referring website, HTTP status/access code, website address from which you entered, browser type, operating system and its interface, language, and version of the browser software.

Processing of this data is necessary for the proper functioning of the website and to ensure stability and security. It is processed based on Art. 6 (1) (f) GDPR.

Explanations regarding cookies can be found in section 3 of this Privacy Policy.

B. Processing of personal data in connection with the newsletter

By subscribing to the newsletter, you provide me with your name and email address through the subscription form. Providing this data is voluntary but necessary to subscribe to the newsletter. The legal basis for processing this personal data is Art. 6 (1) (a) GDPR.
You can withdraw your consent at any time.
A full description of your rights and obligations related to personal data processing (in accordance with Art. 13 GDPR) is included in the information clause in section 2.5 of the Privacy Policy.

C. Processing of personal data in connection with Google Analytics

This website uses Google Analytics, an internet analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies stored on your computer, which allow the analysis of your use of the website. The information generated by cookies about the use of the website is usually transferred to Google servers in the USA and stored there. On behalf of the operator of this website, Google uses this information to evaluate the use of the website, prepare reports on activity on the site, and provide other services related to website and internet usage.
The IP address transmitted by Google Analytics will not be linked with other data by Google. I use this tool to analyze and improve the website’s use regularly.
You can prevent the storage of cookies by adjusting your browser software or by using an appropriate browser plugin.
The legal basis for processing personal data is Art. 6 (1) (f) GDPR.
A full description of your rights and obligations related to personal data processing (in accordance with Art. 13 GDPR) is included in the information clause in section 2.5 of the Privacy Policy.

D. Social Media 

On the website, you will find links to social media platforms where information about me and my business is posted. I am the data controller within the social media platform, both as the owner of the social media account and as the owner of the specific social media platform.

2.3. How long is your personal data processed?

The duration of personal data processing depends on the legal basis for processing. I inform you that: a) If personal data is processed based on consent, the processing period lasts until the intended purpose is achieved or the consent is withdrawn; b) If personal data is processed for the purpose of executing a contract or taking steps before executing the contract (order fulfillment), the data will be processed for the duration of the order, and after its completion, for the period of claims limitation and accounting documentation archiving (5 years), in accordance with applicable laws; c) If personal data is processed based on legitimate interest, the processing lasts until the legitimate interest ceases (e.g., the statute of limitations for civil claims) or until you object to further processing, when such an objection is allowed by law; d) If personal data is processed because it is necessary for compliance with legal obligations, the processing periods for such data are specified by those laws.

2.4. When and how is personal data shared with third parties? Do I transfer data to third countries?

I share personal data with third parties only when permitted by law. In such cases, I ensure that the agreement with the third party contains provisions and security mechanisms to protect the data, ensuring standards in data protection, confidentiality, and security. When I share personal data as the data controller with third parties for the purpose of performing certain tasks on my behalf, I enter into a special contract with them. Such contracts are known as data processing agreements (Art. 28 GDPR), which allow me to control how and to what extent the third party processes the personal data entrusted to them.

2.5. What rights do you have, and how can you exercise them? [Information clause]

You have specific rights regarding your personal data, and as the data controller, I am responsible for ensuring that these rights are exercised in accordance with applicable laws. If you have any questions or requests regarding the scope and implementation of your rights, you can contact me at: sklep@hackyourbrain.pl.
I will respond to your message once I have verified your identity.

A. Access to personal data

You have the right to access your personal data that I store as the controller. You can exercise this right by sending me an email.

B.Changing, updating, correcting, or deleting personal data

You can update, correct, or delete your personal data by sending me an email.
You can exercise your right to delete data, for example, when your data is no longer necessary for the purposes for which it was collected or when you withdraw your consent for data processing.

C. Withdrawal of consent

If personal data is processed based on consent, you can withdraw your consent at any time. I inform you about this right at the time of collecting your consent, and I make it as easy to withdraw consent as it was to provide it. To withdraw your consent, please send me an email.

D. Right to restrict processing or object to processing personal data

You have the right to restrict processing or object to the processing of your personal data at any time due to your specific situation, unless the processing is required by law.
You can object to the processing of your personal data when: – The processing is based on legitimate interest or for statistical purposes, and the objection is justified by your specific situation; – The personal data is being processed for direct marketing purposes, including profiling for such purposes.
Regarding the request to restrict data processing, it is applicable when: – You dispute the accuracy of the data, for a period allowing me to verify the accuracy of the data; – The processing is unlawful, and you oppose deleting the personal data, requesting instead to restrict its use; – I no longer need the personal data for processing purposes, but the data is needed by you for establishing, exercising, or defending legal claims; – You have raised an objection under Art. 21 (1) GDPR against processing, pending the determination of whether my legitimate grounds override your objections.

E. Right to data portability

You have the right to transfer your data and send it to another controller if: – The processing is based on consent (Art. 6 (1) (a) GDPR) or the contract (Art. 6 (1) (b) GDPR); and – The processing is automated.
Exercising your right to data portability allows you to request that personal data be transmitted directly to another controller, where technically feasible.
The right to data portability should not adversely affect the rights and freedoms of others. If you wish to exercise these rights, please send me an email.

F. Any other questions, concerns, or complaints

If you have any questions, concerns, or doubts about the content of this Privacy Policy or the way personal data is processed, or if you wish to lodge a complaint about these matters, please send an email with detailed information about your complaint. Any complaints will be reviewed, and responses will be provided.
You also have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office, Stawki 2, 00-193 Warsaw.

3.Cookies

As mentioned in section 2.2. A, cookies are used on this website. Therefore, I provide information about the most important aspects of cookies so that your use of the website is transparent and understandable.

3.1. What are cookies?

Cookies are small files stored on your electronic device by the websites you visit. Cookies contain various information that is often necessary for the proper functioning of the website. Cookies are encrypted in such a way that unauthorized persons cannot access them. Information collected via cookies can only be read by me and, for technical reasons, trusted partners whose services I use. Importantly, cookies cannot run programs or transfer viruses to electronic devices.

3.2. What are cookies used for?

Basic cookies – installed if consent is given through the settings of the software installed on your device.
Technical cookies – necessary for the proper operation of the website. They are used to: – Ensure the website is properly displayed depending on the device you use; – Adjust content based on technical preferences such as language; – Remember whether consent for certain content display has been given.

Analytical cookies – necessary for accounting with business partners or measuring the effectiveness of marketing actions without identifying personal data, and for improving website functionality. They are used to: – Analyze statistics about traffic on the website and sources of traffic; – Detect abuse, such as artificial internet traffic (bots).

3.3. How long are cookies used?

Session cookies – remain on your device until you leave the website or close the browser. These are primarily technical cookies.
Persistent cookies – remain on your device for a period specified in the cookie parameters or until manually deleted.

3.4. Can I opt out of accepting cookies?

You can always change your browser settings to reject requests to install cookies. However, please note that cookies are for your convenience in using the website. Disabling cookies may cause the website to display incorrectly.

3.5. How to disable cookies?

At any time, you can delete cookies from your browser and block the possibility of them being reinstalled.
Depending on your browser, the option to remove or revoke consent for cookies installation may differ. You should refer to the user guide for the browser on your device.

4. Final Provisions

Can changes be made to this Privacy Policy?

I reserve the right to amend this Privacy Policy in the event of changes in the technology used for processing personal data, changes in the purposes, means, or legal bases for processing, or due to new legal provisions or guidelines from supervisory authorities.

To ensure the best contact regarding personal data protection, I provide postal contact or email contact using the details below:

HYB Spółka z o.o., Przytulna 40/28, 80-176 Gdańsk
KRS: 0000854113, NIP: 5223187825, REGON: 386735099

sklep@hackyourbrain.pl