Privacy and cookies policy

(1) This Privacy Policy governs the processing of personal data obtained through the swisslaser.pl website (hereinafter referred to as the “Website“).

(2) The owner of the Website and, at the same time, the data administrator is Swisslaser Sp. z o.o. with its registered office in Warsaw (03-713), 12/21 Wrzesińska Street, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Economic Division of the National Court Register under the KRS number 0000447644, with the share capital of PLN 5,000, NIP: 5223002553, REGON: 146502760, hereinafter referred to as SWISSLASER.

(3) Personal data collected by SWISSLASER through the Website shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), also known as RODO.

4 SWISSLASER is particularly careful to respect the privacy of Users visiting the Website.

§ 1 Type of data processed, purposes and legal basis

(1) SWISSLASER collects information on natural persons conducting business or professional activities on their own behalf and natural persons representing legal persons or organizational units that are not legal persons, to which the law grants legal capacity, hereinafter collectively referred to as Users.

(2) Users’ personal information is collected in case:

(a) subscription to a newsletter (Newsletter), for the purpose of performance of a contract the subject of which is a service provided electronically. Legal basis – consent of the data subject to perform the contract for Newsletter service (Article 6(1)(a) RODO);

(b) use of the contact form service on the Website for the purpose of executing a contract provided electronically. Legal basis: necessary to perform the contract for the provision of the contact form service (Article 6(1)(b) RODO);

(c) use of the Request a Quote service on the Website in order to perform the contract provided electronically. Legal basis: necessary to perform the contract for the provision of the contact form service (Article 6(1)(b) RODO);

(d) use of the chat service, in order to perform a contract the subject of which is a service provided electronically or to perform a sales contract, if the User places an order using the free Chat service. Legal basis: necessary for the performance of the agreement for the provision of the chat service or necessary for the performance of the sales agreement – if the User places an order using the free Chat service (Article 6(1)(b) of the RODO).

(3) In the case of registration on the Website, the User shall provide:

(a) e-mail address;
(b) name;
(c) telephone number.

(4) In the case of using the Newsletter service, the User shall provide only his/her e-mail address.

(5) When using the contact form service, the User shall provide the following data:
a. e-mail address;
b. first and last name;
c. telephone number.

(6) When using the Ask for Quote service, the User shall provide the following data:
a. e-mail address;
b. first and last name;
c. company of the Entrepreneur;
d. telephone number.

7. When using the chat service, the User shall provide the following data:
a. first name.

(8) When using the Website of the Service, additional information may be collected, in particular: the IP address assigned to the User’s computer or the external IP address of the Internet provider, domain name, type of browser, access time, type of operating system.

(9) Navigational data may also be collected from Users, including information about links and references they choose to click on or other actions taken on our Website. Legal basis – legitimate interest (Article 6(1)(f) RODO) to facilitate the use of services provided electronically and to improve the functionality of such services.

10. for the purpose of establishing, investigation and enforcement of claims, some personal data provided by the User in the course of using the functionality on the Website may be processed, such as: name, surname, data on the use of services, if the claims arise from the way the User uses the services, other data necessary to prove the existence of the claim, including the extent of the damage suffered. Legal basis – legitimate interest (Article 6(1)(f) RODO) to establish, assert and enforce claims and defend against claims in proceedings before courts and other state authorities.

11. submission of personal data to SWISSLASER is voluntary,

§ 2 To whom is the data shared or entrusted and how long is it kept?

(1) Your personal data shall be transferred to the service providers used by SWISSLASER in the operation of the Website. The service providers to whom personal data are transferred, depending on the contractual arrangements and circumstances, are either subject to SWISSLASER’s instructions as to the purposes and means of processing such data (processors) or determine the purposes and means of processing themselves (controllers).
a) Processors. SWISSLASER uses suppliers who process personal data only at SWISSLASER’s direction. These include, but are not limited to, providers of hosting services, accounting services, providers of marketing systems, systems for analyzing Website traffic, systems for analyzing the effectiveness of marketing campaigns;

2 Location. Service providers are primarily based in Poland and other countries in the European Economic Area (EEA).

(3) Users’ personal data are stored:
a) If the basis for the processing of personal data is
consent then the User’s personal data are processed by SWISSLASER as long as the consent is not revoked, and after revoking the consent for a period of time corresponding to the period of limitation of claims that SWISSLASER may raise and that may be raised against it. Unless a special provision provides otherwise, the statute of limitations is six years, and for claims for periodic benefits and claims related to the conduct of business – three years.
b) If the basis of data processing is the performance of
contract, then the User’s personal data are processed by SWISSLASER as long as it is necessary for the performance of the contract, and thereafter for a period of time corresponding to the period of limitation of claims. Unless a specific provision provides otherwise, the statute of limitations is six years, and for claims for periodic benefits and claims related to the conduct of business – three years.

(4) Navigation data may be used to provide Users with better service, analyze statistical data and customize the Website to Users’ preferences, as well as administer the Website.

(5) If the User subscribes to a newsletter (Newsletter), SWISSLASER will send e-mails to his/her e-mail address containing commercial information about promotions and new products available on the Website.

(6) If a request is made, SWISSLASER shall make personal data available to authorized state authorities, in particular to organizational units of the Prosecutor’s Office, the Police, the President of the Office of Personal Data Protection, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.

§ 3 Mechanism of cookies, IP address

1 The Website uses small files, called cookies. These are stored by SWISSLASER on the end device of a visitor to the Website, if the Internet browser allows it. A cookie usually contains the name of the domain from which it originated, its “expiration time” and an individual random number identifying the cookie. The information collected through cookies of this type helps tailor the products offered by SWISSLASER to the individual preferences and actual needs of visitors to the Website. They also give the possibility to develop general statistics of visits to the presented products on the Website.

2. SWISSLASER uses two types of cookies:
a) Session cookies: when the session of a given browser ends or the computer is turned off, the stored information is deleted from the memory of the device. The mechanism of session cookies does not allow the collection of any personal data or any confidential information from the Users’ computers.
b) Permanent cookies: they are stored in the memory of the User’s final device and remain there until they are deleted or expire. The mechanism of persistent cookies does not allow the collection of any personal data or any confidential information from the Users’ computer.

3. SWISSLASER uses its own cookies for the following purposes:
a) analysis and research, as well as audience auditing, and in particular to create anonymous statistics that help to understand how Users use the Website of the Service, which allows to improve its structure and content.

4. SWISSLASER uses external cookies to:
a) present on the information pages of the Website, a map indicating the location of the SWISSLASER office, using the maps.google.com website (administrator of external cookies: Google Inc. based in the USA);
b) collect general and anonymous statistical data through Google Analytics tools (administrator of external cookies: Google Inc. based in the USA);

(5) The mechanism of cookies is safe for the computers of Users of the Website. In particular, by this means it is not possible for viruses or other unwanted software or malware to enter the Users’ computers. However, in their browsers, Users have the option to limit or disable access of cookies to their computers. If this option is used, the use of the Website will be possible, except for functions that by their nature require cookies.

6 Here’s how you can change the settings of popular web browsers regarding the use of cookies:

a) Internet Explorer browser;
b) Microsoft EDGE browser;
c) Mozilla Firefox browser;
d) Chrome browser;
e) Safari browser;
f) Opera browser.

7. SWISSLASER may collect IP addresses of Users. An IP address is a number assigned to the computer of a person visiting the Website by an Internet Service Provider. The IP number allows access to the Internet. In most cases, it is assigned to the computer dynamically, i.e. it changes each time you connect to the Internet. The IP address is used by SWISSLASER to diagnose technical problems with the server, to create statistical analysis (e.g. to determine from which regions we record the most visits), as information useful for administration and improvement of the Website, as well as for security purposes and possible identification of server-loading, unwanted automatic programs for browsing the contents of the Website.

8 The Website contains links and references to other websites. SWISSLASER is not responsible for the privacy policies on them.

§ 4 Rights of data subjects

(1) The right to withdraw consent – legal basis: Article 7(3) of the RODO.
a) You have the right to withdraw any consent you have given to SWISSLASER.
b) Withdrawal of consent has effect from the moment of withdrawal of consent.
c) Withdrawal of consent does not affect processing performed by SWISSLASER lawfully prior to withdrawal.
d) Withdrawal of consent has no negative consequences for you, but may prevent you from continuing to use services or functionalities that SWISSLASER can lawfully provide only with consent.

(2) The right to object to the processing of data – legal basis: Article 21 RODO.
a) You have the right to object at any time – for reasons related to your particular situation – to the processing of your personal data, including profiling, if SWISSLASER processes your data based on legitimate interests, such as marketing SWISSLASER’s products and services, conducting statistics on the use of particular functionalities of the Website and facilitating the use of the Website, as well as satisfaction surveys.
(b) Opting out in the form of an e-mail from receiving marketing communications regarding products or services will imply the User’s objection to the processing of his/her personal data, including profiling for these purposes.
c) If the User’s objection proves to be valid and SWISSLASER has no other legal basis for processing personal data, the User’s personal data will be deleted, against the processing of which, the User has objected.

3. right to erasure of data (“right to be forgotten”) – legal basis: article 17 of the RODO.
a) You have the right to request the erasure of all or some of your personal data.
b) You have the right to request the erasure of your personal data if:
a. the personal data are no longer necessary for the purposes for which they were collected or for which they were processed;
b. he/she has withdrawn specific consent, to the extent that the personal data were processed based on his/her consent;
c. he/she has objected to the use of his/her data for marketing purposes;
d. the personal data are processed unlawfully;
e. the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which SWISSLASER is subject;
f. the personal data was collected in connection with the offering of information society services.
c. Despite a request for erasure of personal data, in connection with the filing of an objection or withdrawal of consent, SWISSLASER may retain certain personal data to the extent that the processing is necessary for the establishment, assertion or defense of claims, as well as to comply with a legal obligation requiring processing under Union law or the law of a Member State to which SWISSLASER is subject. This applies in particular to personal data including: first name, last name, e-mail address, which data are retained for the purpose of handling complaints and claims related to the use of SWISSLASER’s services, or, additionally, home address/correspondence address, order number, which data are retained for the purpose of handling complaints and claims related to concluded sales contracts or provision of services.

4 The right to restrict data processing – legal basis: article 18 RODO.
(a) You have the right to request restriction of the processing of your personal data. Submitting a request, until it is considered, prevents the use of certain functionalities or services, the use of which will involve the processing of data covered by the request. SWISSLASER will also not send any communications, including marketing communications.
b) The User has the right to request the restriction of the use of his/her personal data in the following cases:
a. when he/she questions the correctness of his/her personal data, in which case SWISSLASER restricts the use of his/her personal data for the time needed to verify the correctness of the data, but no longer than for 7 days;
b. when the processing of the data is unlawful, and instead of deleting the data, the User requests the restriction of its use;