I. General Data Protection Regulation (GDPR)

In connection with the changes in data protection regulations and the entry into application on May 25, 2018, of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/WE (General Data Protection Regulation — GDPR). We would like to inform you that as of May 25, 2018, you have rights related to the processing of your personal data by the company SURMA SYSTEMS Spółka z ograniczoną odpowiedzialnością.

Pursuant to Article 13(1) of the General Data Protection Regulation of 27 April 2016, we hereby inform you that:
1. The controller, i.e. the entity that decides how your personal data will be used, is SURMA SYSTEMS Spółka z ograniczoną odpowiedzialnością, with its registered office at ul. Przemysłowa 23, 34-120 Andrychów, NIP: 5492466378, REGON: 521337733, KRS: 0000955430

2. You can contact the Controller via email at: [email protected] or by traditional mail at: ul. Przemysłowa 23, 34-120 Andrychów, Poland.

3. Your personal data is processed on the basis of Article 6 (1)(f)  of the GDPR, i.e. based on the necessity of processing for the purposes of the legitimate interests pursued by the Controller or by a third party.

4. Your personal data will be processed because it is necessary for the conclusion of a contract with you, including:
– the conclusion and performance of a contract for the supply of goods and services by „SURMA SYSTEMS sp. z o.o.”,
– enabling the provision of services by electronic means, communication, and providing information about the status of an order,
– ensuring the provision of all services delivered by „SURMA SYSTEMS sp. z o.o.”,
– performing all activities necessary for the execution of the contract, including installation, complaints, service etc.,
– ensuring payment processing,
– marketing of products and services,
– handling inquiries, including via contact forms and email,
– organizing and conducting contests and other marketing activities,
– ensuring the security of the services we provide to you electronically, including enforcing SURMA SYSTEMS sp. z o.o. internal policies, preventing fraud and abuse, and ensuring traffic security,
– storing data for archiving purposes and ensuring accountability (i.e. demonstrating compliance with legal obligations).

5. Personal data will be stored until the end of the limitation period for potential claims arising from the contract.

6. Providing your personal data is voluntary. You may withdraw your consent to the processing of personal data at any time in the same way it was given. Your personal data will be processed until the consent is withdrawn.

7. Your personal data will not be shared with other recipients and will not be transferred to a third country/international organization.

II. COOKIES

1. General Information

The website collects information about users and their behavior in the following ways:

1. Through information voluntarily entered in forms,
2. By storing cookies on end-user devices,
3. By collecting server logs of the web server.

2. Information collected in Forms

1. The website collects information voluntarily provided by the user.
2. The website may also record information about connection parameters (timestamp, IP address).
3. The data provided in the form is not shared with third parties unless the user gives explicit consent.
4. The data entered in the form is processed for purposes resulting from the specific function of the form, e.g., to handle a service request or for commercial contact purposes.

3. Information about Cookies

1. The website uses cookies.
2. Cookies are IT data, in particular text files, that are stored on the User’s end device and are intended for use on the Website’s pages. Cookies typically contain the name of the website they come from, the duration of storage on the end device, and a unique identifier.
3. The entity placing cookies on the User’s end device and accessing them is the operator of the Website.
4. Cookies are used for the following purposes:
   1. to create statistics that help understand how Users use the Website, which enables the improvement of its structure and content;
   2. to maintain the User’s session on the Website (after logging in), so that the User does not have to re-enter login and password on each subpage;
   3. to define the User’s profile in order to display personalized content in advertising networks, in particular the Google network.
5. The Website uses two main types of cookies: “session” cookies and “persistent” cookies.Session cookies are temporary files that are stored on the User’s device until logging out, leaving the website, or closing the web browser.Persistent cookies are stored on the User’s device for the time specified in the cookie parameters or until deleted by the User.
6. Web browsing software (internet browsers) usually allows cookies to be stored on the User’s end device by default. Users of the Website can change their settings in this regard. The internet browser allows deletion of cookies. It is also possible to automatically block cookies. Detailed information on this can be found in the browser’s help section or documentation.
7. Restrictions on the use of cookies may affect some of the functionalities available on the Website.
8. Cookies placed on the User’s device may also be used by the Website operator’s partners and advertisers.
9. We recommend reviewing the privacy policies of these companies to understand the rules for the use of cookies in statistics: e.g., Polityka ochrony prywatności Google Analytics
10. Cookies may be used by advertising networks, in particular by the Google network, to display advertisements tailored to the way the user uses the Service. For this purpose, they may store information about the user’s navigation path or the time spent on a particular page.
11. With regard to user preference information collected by the Google advertising network, the user can view and edit the information resulting from cookies using the following tool: https://www.google.com/ads/preferences/

4. Server logs

1. Information about certain user behaviors may be logged at the server level. These data are used solely for the administration of the service and to ensure the most efficient operation of the hosting services provided.
2. The accessed resources are identified by their URL addresses. In addition, the following may be recorded:
   1. the time the request was received,
   2. the time the response was sent,
   3. the name of the client station – identified via the HTTP protocol,
   4. information about any errors that occurred during the execution of the HTTP transaction,
   5. the URL of the page previously visited by the user (referrer link) – if the transition to the Service was made via a hyperlink,
   6. information about the user’s browser,
   7. information about the IP address.
3. The above data are not associated with specific individuals browsing the pages.
4. The above data are used solely for the purpose of server administration.

5. Data sharing.

1. Data may be shared with external entities only within the limits permitted by law.
2. Data enabling the identification of a natural person are shared only with the consent of that person.
3. The operator may be obligated to provide information collected by the Service to authorized authorities based on lawful requests and to the extent resulting from such requests.

6. Managing cookies – how to give and withdraw consent in practice?

1. If the user does not wish to receive cookies, they can change the settings of their web browser. Please note that disabling cookies necessary for authentication, security, or user preference retention may hinder or, in extreme cases, prevent the use of websites.
2. To manage cookie settings, choose your web browser/system from the list below and follow the instructions:
   1. Internet Explorer
   2. Chrome
   3. Safari
   4. Firefox
   5. Opera
   6. Android
   7. Safari (iOS)
   8. Windows Phone
   9. Blackberry

III. NEWSLETER

1. Your personal data will be processed for the purpose of receiving the newsletter.
2. Subscribing to the newsletter is voluntary, and you may unsubscribe at any time. To do so, please send a statement to [email protected] or use the unsubscribe link located in the footer of the newsletter.
3. Personal data will be stored for the duration of the consent granted to receive newsletter messages.
4. By subscribing to the newsletter service, the user:

• Gives consent to the processing of their personal data for the purpose of receiving the Newsletter
• Agrees to receive commercial information
• Consents to the use of their email address for marketing purposes

5. Providing all data is voluntary but necessary to receive the newsletter.
6. The user has the right to control the processing of their data, in particular the right to access, correct, and delete them.
7. The newsletter subscription is completely free of charge.