Privacy Policy

This Privacy Policy describes how we process the personal data of people using the koniksystem.com and konikrevos.pl website (the "Website") in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR").

1. Data controller

2. Data we collect

Depending on how you interact with the Website, we process, among other things:

• form data (contact form, "Zero Audit" qualification form, Partner registration): name, e-mail address, phone number, company name and message content;
• Partner account data: sign-in data and the data needed for settlements in the Partner Programme;
• technical data: IP address, browser and device type, data from cookies and server logs, collected automatically.

3. Purposes and legal bases of processing

• responding to enquiries and handling contact: Art. 6(1)(b) and (f) GDPR (taking steps before entering into a contract and the controller's legitimate interest);
• concluding and performing a contract, including running the Partner Panel: Art. 6(1)(b) GDPR;
• complying with legal obligations (including tax and accounting obligations): Art. 6(1)(c) GDPR;
• direct marketing of our own services, analytics and Website security: Art. 6(1)(f) GDPR;
• processing based on consent, e.g. analytics/marketing cookies or the newsletter: Art. 6(1)(a) GDPR (consent can be withdrawn at any time).

4. Retention period

• correspondence data: for as long as needed to handle the matter;
• contract-related data: for the term of the contract and, after it ends, for the period required by law (including the limitation period for claims and tax obligations, generally up to 6 years);
• data processed on the basis of consent: until consent is withdrawn;
• technical data/logs: for the period necessary for security.

5. Data recipients

Data may be entrusted to trusted processors that support the operation of the Website, under data processing agreements, in particular:

• hosting and infrastructure providers (including Vercel, Hetzner);
• the database and authentication provider (Supabase);
• providers of analytics and communication tools;
• providers of accounting, legal and IT services and, where required, authorities entitled to receive data under the law.

6. Transfers of data outside the EEA

Where we use providers that process data outside the European Economic Area, transfers take place with the appropriate safeguards required by the GDPR, in particular on the basis of standard contractual clauses approved by the European Commission.

7. Rights of data subjects

You have the right to:

• access your data and receive a copy of it;
• rectification (correction) of your data;
• erasure of your data (the "right to be forgotten");
• restriction of processing;
• data portability;
• object to processing based on legitimate interest and to direct marketing;
• withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal);
• lodge a complaint with the supervisory authority, the President of the Polish data protection authority (UODO), ul. Stawki 2, 00-193 Warsaw.

To exercise your rights, contact us at rodo@koniksystem.com.

8. Voluntary provision of data

Providing data is voluntary, but in some cases necessary. For example, without contact details we cannot respond to an enquiry or register a Partner account.

9. Profiling and automated decisions

The controller does not make decisions producing legal effects solely by automated means (including profiling) within the meaning of Art. 22 GDPR. We may carry out statistical analytics to improve the Website.

10. Cookies

The Website uses cookies and similar technologies. Details are described in the Cookie Policy.

11. Security and changes

We apply technical and organisational measures appropriate to the risk to protect data against unauthorised access, loss or destruction. This Policy may be updated. The version published on the Website with the date shown above applies.