Data controller: Atlantis – Investment Sp. z o.o.
This is a convenience translation; the legally binding version is the Polish one.
Controller – Atlantis – Investment Sp. z o.o., ul. 1 Dywizji Pancernej 45/119, 43-300 Bielsko-Biała, Poland, Tax ID (NIP): 5472243304, National Court Register (KRS): 0001084184, REGON: 527554489.
Personal data – all information about a natural person who is identified or identifiable through one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including the device's IP address, location data, an online identifier and information collected via cookies and other similar technologies.
Policy – this Privacy Policy.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Website – the website operated by the Controller at www.atlantis-ingredients.com.
User – any natural person visiting the Website or using one or more of the services or functionalities described in the Policy.
In connection with the User's use of the Website, the Controller collects data to the extent necessary for commercial contact, as well as information about the User's activity on the Website through the use of cookies. The detailed rules and purposes of processing personal data collected while using the Website are described below.
The personal data of all persons using the Website (including the IP address, online identifiers, data collected via cookies) who do not have a user account is processed by the Controller:
The User's activity on the Website, including their personal data, may be recorded in system logs. This data is processed for technical purposes, to ensure the security of IT systems, to create backups, to detect errors and to prevent abuse.
The Controller provides the possibility of contacting it using electronic contact forms. Using a form requires providing the personal data necessary to contact the User and to respond to the enquiry. The User may also provide other data to facilitate contact or the handling of the enquiry. Providing the data marked as mandatory is required in order to accept and handle the enquiry, and failure to provide it results in the inability to handle it. Providing the remaining data is voluntary.
The personal data is processed:
The Controller processes Users' personal data in order to carry out marketing activities, which may consist of:
In order to carry out marketing activities, the Controller in some cases uses profiling. This means that, thanks to the automated processing of data, the Controller assesses selected factors concerning natural persons in order to analyse their behaviour or to create a forecast for the future.
If the User consents to receiving marketing information (e-mail, SMS, other electronic channels), the Controller processes the data in order to send such information.
The legal basis is the legitimate interest of the Controller — Article 6(1)(f) GDPR.
The User may object at any time to the processing of data for marketing purposes.
The data will be stored until an objection is raised.
The Controller processes the personal data of Users visiting the Controller's profiles maintained on social media (Facebook, YouTube, Instagram). This data is processed solely in connection with maintaining the profile, including for the purpose of informing Users about the Controller's activity and promoting various types of events, services and products, as well as for the purpose of communicating with users through the functionalities available on social media. The legal basis for the Controller's processing of personal data for this purpose is its legitimate interest (Article 6(1)(f) GDPR), consisting in promoting its own brand and building and maintaining a community associated with the brand.
The Controller uses so-called service cookies primarily in order to provide the User with services rendered by electronic means and to improve the quality of those services. In connection with this, the Controller and other entities providing analytical and statistical services to it use cookies, storing information or gaining access to information already stored in the User's telecommunications terminal device (computer, telephone, tablet, etc.). The cookies used for this purpose include:
The Controller also uses cookies for marketing purposes, including in connection with directing behavioural advertising to Users. For this purpose, the Controller stores information or gains access to information already stored in the User's telecommunications terminal device (computer, telephone, tablet, etc.). The use of cookies and of the personal data collected through them for marketing purposes, in particular with regard to promoting the services and goods of third parties, requires obtaining the User's consent. This consent may be expressed through an appropriate browser configuration and may also be withdrawn at any time, in particular by clearing the cookie history and disabling cookies in the browser settings.
The period for which the Controller processes data depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the provision of the service or the fulfilment of the order, until the withdrawal of the consent given or the raising of an effective objection to the processing of data in cases where the legal basis for processing is the legitimate interest of the Controller.
The data processing period may be extended where processing is necessary for the establishment, assertion of, or defence against any claims, and after that time only in the case and to the extent required by law. After the processing period has elapsed, the data is irreversibly deleted or anonymised.
The persons to whom the data relates have the following rights:
A request concerning the exercise of data subjects' rights may be submitted:
In the request, the following should be indicated as far as possible:
If the Controller is unable to determine the content of the request or to identify the person submitting the request on the basis of the notification made, it will ask the applicant for additional information.
A response to notifications will be provided within one month of its receipt. If it is necessary to extend this deadline, the Controller will inform the applicant of the reasons for such extension.
The response will be provided to the e-mail address from which the request was sent and, in the case of requests sent by post, by ordinary letter to the address indicated by the applicant, unless the content of the letter indicates a wish to receive a reply to an e-mail address (in which case an e-mail address should be provided).
In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of IT systems, entities such as legal ones, and entities affiliated with the Controller.
The Controller reserves the right to disclose selected information concerning the User to the competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with the provisions of applicable law.
Controller does not transfer data outside the European Economic Area.
The Controller conducts an ongoing risk analysis in order to ensure that it processes personal data in a secure manner – ensuring above all that access to the data is available only to authorised persons and only to the extent necessary in view of the tasks they perform. The Controller ensures that all operations on personal data are recorded and carried out only by authorised employees and associates.
The Controller takes all necessary measures to ensure that its subcontractors and other cooperating entities also guarantee the application of appropriate security measures whenever they process personal data on behalf of the Controller.
Contact with the Controller is possible via the e-mail address info@atlantis-investment.pl
The Policy is verified on an ongoing basis and updated where necessary.