Who we are and who has access to your data?
The Data Controller of the personal data of users of the website www.imaga.pl (hereinafter “the Site”) is Magdalena Lewicka, contact: imaga@imaga.pl.
For what purpose do we collect data?
The Data Controller collects data solely for the purposes of displaying the Site correctly, detecting abuse, statistical measurement and improving the Site.
On what basis do we collect data?
The Data Controller collects data only for the lawful purposes listed above, that is:
- on the basis of Article 6(1)(f) GDPR, the legitimate interest of the Data Controller, in respect of data necessary for the correct display of the Site, the operation of its functionalities and the assurance of their security,
- on the basis of Article 6(1)(a) GDPR, the consent of the user, in respect of cookies other than strictly necessary ones, analytics tools and content embedded from external services.
What personal data do we collect and why?
We do not collect data such as name, email address, personal account preferences or transaction data. The only personal data we collect relates to the user’s visit to the Site and results from technical processes such as statistics systems and cookies.Cookies are IT data, in particular text files, stored on the user’s end device and intended for use of the Site. Cookies usually contain the name of the website they originate from, their storage time on the end device and a unique number.Cookies are used to:
- adapt the content of the Site to the user’s device and optimise the use of the Site; these files allow the user’s device to be recognised and the page to be displayed appropriately, tailored to individual needs,
- create statistics that help us understand how users use the Site, which makes it possible to improve its structure and content.
Two basic types of cookies are used: session cookies and persistent cookies. Session cookies are temporary files stored on the user’s end device until the user leaves the Site or closes the web browser. Persistent cookies are stored on the user’s end device for the time specified in their parameters or until they are deleted by the user.The following types of cookies are used on the Site:
- necessary cookies, enabling the use of functions available on the Site,
- security cookies, used to detect abuse,
- performance cookies, enabling the collection of information on how the Site is used,
- functional cookies, enabling the settings selected by the user to be remembered and the interface personalised, for example in terms of the selected language or the appearance of the website.
A full list of cookies used on the Site is available in our Cookie Policy.
In many cases, web browsers allow cookies to be stored on the user’s end device by default. Users can change these settings at any time, in particular so as to block the automatic handling of cookies or to be informed each time cookies are placed on their device. Detailed information is available in the browser settings:
- Chrome • Mozilla Firefox • Safari • Microsoft Edge
Please note that restricting the use of cookies may affect some of the functionalities available on the Site. The Site does not allow users to create a profile, log in, leave a comment, fill out a form or share any user media.
Statistics
The Data Controller uses Google tools: Google Analytics and Google Search Console, provided by Google Ireland Limited and connected to the Site through the Google Site Kit plugin.Google Analytics collects information about how the Site is used, such as the number of visits, traffic sources, pages visited, approximate location, and device and browser type. This data is processed on the basis of the user’s consent given in the cookie banner. Consent may be withdrawn at any time by changing the cookie settings.Google Search Console provides the Data Controller with aggregated and anonymised statistics on the visibility of the Site in Google search results. This tool does not place cookies on the user’s device and does not identify individual persons.The scope of anonymous data collected by our hosting provider is set out in its privacy policy: Light Hosting.
Embedded content from other sites and links to other sites
Embedded materials from external sites, such as videos, images or maps, and some plugins may collect additional personal data. Embedded content behaves as if the user had visited the external site directly. Such sites may collect information about the user, use cookies, attach additional external tracking systems and monitor interactions with the embedded material
If a user visits a page containing embedded material from an external site, a connection to that site’s servers is established and the site is informed which page was visited. If the user is logged in to an account on that external service, this allows their browsing behaviour and interactions with the material to be associated directly with their profile on that service. For example, liking YouTube content on the Site while logged in to YouTube will be visible as a like from the user’s YouTube profile. This can be prevented by logging out of the external service account. Embedding materials from external sites is intended to make the Site more engaging. We recommend reviewing the personal data protection and processing rules directly on the services the Site links to:
- Google and YouTube • Vimeo • Facebook and Instagram • LinkedIn
Who do we share data with?
Data may be made available to entities authorised to obtain it under applicable law, and to providers of technical services, in accordance with the rules set out in their privacy policies:
- WordPress • Light Hosting • Google
Where do we send the data?
The use of Google, YouTube, Vimeo and Meta services may involve the transfer of data outside the European Economic Area, in particular to the United States. Such transfers take place on the basis of the mechanisms provided for in Chapter V of the GDPR, including European Commission adequacy decisions or standard contractual clauses. The Data Controller does not transfer data outside the European Economic Area independently.
Do we use automated decision-making or profiling?
The Data Controller does not take decisions concerning users based solely on automated processing, including profiling. The Data Controller does not process special categories of personal data.
How do we protect your data?
The Data Controller applies organisational and technical security measures to protect data from being reached by unauthorised third parties.
What are your rights regarding your data?
Users of the Site have the right to obtain their data, to have it rectified or erased, to restrict its processing, to receive it in a portable form, to object to processing, to withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal, and to lodge a complaint with the President of the Personal Data Protection Office.
Contact details:
All correspondence relating to the protection of personal data should be sent to imaga@imaga.pl
How long do we store your data?
Data contained in cookies is stored for the period specified in the parameters of individual files or until deleted by the user. Statistical data collected in Google Analytics is stored in accordance with that tool’s retention settings, by default for 14 months. Other data is stored until deleted, automatically or at the user’s request.