Privacy Policy

1. PERSONAL DATA ADMINISTRATOR
The administrator of your personal data within the meaning of personal data protection regulations is PILANDIS unregistered activity. Co-founders - Bohdan Ilchuk, Ernest Chrzan, Roman Putkov, Mariia Putkova, Aleksandra Okołowicz, Nelia Shcherban. For matters related to personal data protection, information can be obtained by contacting the Administrator via electronic mail sent to the address: info@pilandis.com
2. LEGAL BASIS FOR PROCESSING PERSONAL DATA
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"), as well as other currently applicable personal data protection laws in Poland, in particular the Act of 10 May 2018 on the Protection of Personal Data.
3. RECIPIENTS OF PERSONAL DATA
The recipient of your data is PILANDIS unregistered activity, as the data administrator, as well as—to a limited extent—Administrator's partners, in particular data processors such as accounting firms, IT companies, claims adjusters, subcontractors supporting the Administrator in providing legal services, e.g., legal advisors, tax advisors, providers of hosting services or telecommunication services, companies that service software.
The aforementioned entities process personal data on the basis of a personal data processing entrustment agreement concluded with PILANDIS unregistered activity.
4. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES (OUTSIDE THE EUROPEAN ECONOMIC AREA)
Your personal data is generally not transferred outside the European Economic Area (hereinafter EEA). However, considering the services provided by some subcontractors, your data may be transferred outside the EEA. These will only be countries that provide an adequate level of protection based on a decision by the European Commission, and in the case of countries that do not provide an adequate level of protection, only if they ensure appropriate safeguards, including, among others, based on standard contractual clauses adopted by the European Commission or binding corporate rules.
5. PROCESSING OF PERSONAL DATA, PURPOSE OF PROCESSING, LEGAL BASIS, AND SCOPE OF DATA COLLECTION
Your Personal Data may be processed in particular for the purpose of concluding and executing contracts, conducting marketing activities, market and statistical analyses, improving the quality of services, fulfilling appropriate legal obligations incumbent upon the Administrator, including in connection with the following functionalities:
A) Placing Orders and Contract Execution
Your Personal Data provided in connection with placing an order or concluding a contract, as well as other data collected in connection with your use of services (in particular: first and last name; email address; contact phone number; address [street, house number, apartment number, postal code, city, country], residential/business address/headquarters [if different from the delivery address], bank account number, and for Clients who are not consumers, additionally the company name and tax identification number [NIP]) are or may be processed for the following purposes:
a) fulfillment of the order and execution of the concluded contract—in particular, confirmation of its placement—legal basis: Art. 6(1)(b) GDPR,
b) marketing, analytical, and statistical activities of the Administrator or its partners, e.g., presenting you with advertisements and offers (discounts), also tailored to your interests based on profiling, which do not significantly affect your decisions (e.g., purchasing)—legal basis: Art. 6(1)(f) GDPR,
c) establishment, defense, and pursuit of claims that may arise in the relationship between you and the Administrator, as well as other purposes necessary for the realization of the legitimate interests of the Administrator or a third party—legal basis: Art. 6(1)(f) GDPR,
d) issuance and storage of invoices and accounting documents, as well as handling complaints and returns within the time and form specified by law—legal basis: Art. 6(1)(c) GDPR, i.e., necessity to fulfill a legal obligation incumbent upon the Administrator.
Providing Personal Data is voluntary but necessary to place an order and execute the contract. For the purpose of order/contract fulfillment, your data will be processed for the duration of the contract, as well as for the time required by law (e.g., tax, accounting regulations). In the case of marketing activities—until you object, unless a longer period results from their storage in case of potential claims, for the period of limitation specified by law, in particular the Civil Code, or in case of other purposes resulting from the realization of our legitimate interests. In any case, the longer period of Personal Data storage prevails.
B) Invoices
The legal basis for processing data in this case is the fulfillment of the legal obligation to issue an invoice (Art. 6(1)(c) GDPR). Moreover, all issued invoices are included in accounting documentation, as a result of which your personal data will be processed within this documentation for the time required by law.
C) Visiting the Website
While using the Site, additional information may be collected, in particular: IP address assigned to the user's computer or external IP address of the Internet provider, domain name, browser type, access time, operating system type; from website users, navigation data may also be collected, including information about links and references that you activate or other activities undertaken on the Site. The legal basis for such activities is the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), consisting of facilitating the use of services provided electronically and improving the functionality of these services.
D) Contact via Chat
Your Personal Data transmitted via the Chat placed on the website may be processed for the following purposes:
a) handling your inquiry through chat—legal basis: Art. 6(1)(f) GDPR, i.e., legitimate interest pursued by the Administrator,
b) depending on the content of the communication, taking actions at your request before concluding a relevant contract—legal basis: Art. 6(1)(b) GDPR, i.e., necessity to take action before concluding a contract,
c) depending on the content of your message, marketing, analytical, and statistical activities of the Administrator or partners with whom we cooperate—legal basis: Art. 6(1)(f) GDPR, i.e., legitimate interest of the Administrator or a third party,
d) establishment, defense, and pursuit of claims that may arise in the relationship between you and the Administrator, as well as other purposes necessary for the realization of legitimate interests of the Administrator or a third party—legal basis: Art. 6(1)(f) GDPR.
E) Conducting E-mail and Traditional Correspondence
In the case of directing e-mail or traditional correspondence to us, data is processed solely for the purpose of communication and resolving the matter to which the correspondence relates. In such a case, the legal basis for processing is the legitimate interest of the Administrator under Art. 6(1)(f) GDPR, consisting of conducting correspondence addressed to him in connection with the conducted business activity.
Your personal data provided during e-mail contact are processed solely for the purpose of handling your inquiry. The content of the correspondence may be subject to archiving.
F) Returns and Complaints
Your Personal Data provided in connection with submitting a complaint (Complaint Form) and collected in any further communication are or may be processed for the following purposes:
a) consideration of your complaint, keeping accounting books, and settlements due to considered complaints—legal basis: Art. 6(1)(c) GDPR, i.e., necessity to fulfill a legal obligation incumbent upon the Administrator,
b) establishment, defense, and pursuit of claims that may arise in the relationship between you and the Administrator, as well as other purposes necessary for the realization of legitimate interests of the Administrator or a third party—legal basis: Art. 6(1)(f) GDPR, i.e., legitimate interest pursued by the Administrator or by a third party.
Providing Personal Data is voluntary but necessary to submit a complaint. Your data will be processed during the period of handling your complaint, unless legal regulations (e.g., accounting) oblige us to process these data longer, or the data will be stored longer for the period of their limitation specified by law, in particular the Civil Code, or in case of other purposes resulting from the realization of our legitimate interests.
6. RIGHTS AVAILABLE
Every Client has the right at any time to:
a) lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw);
b) transfer the Personal Data provided to the Administrator and processed in an automated manner, where processing is based on consent or on a contract, e.g., to another administrator;
c) access Personal Data (including, for example, obtaining information about which Personal Data are processed or copies thereof);
d) request correction and restriction of processing (e.g., if Personal Data are incorrect) or deletion of Personal Data (e.g., if they were processed unlawfully);
e) withdraw any consent given to the Administrator at any time, whereby the withdrawal of consent does not affect processing carried out by the Administrator in accordance with the law before its withdrawal;
f) object to the processing of their Personal Data carried out for the purposes of legitimate interests of the Administrator or a third party (if there are no other important legally justified grounds for processing that override the Client's interests).
If Personal Data are processed for the purposes of direct marketing, the Client has the right at any time to object to the processing of their Personal Data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing—in such case, the Personal Data may no longer be processed for such purposes.
You can exercise the above rights in accordance with the principles described in Articles 16–21 of GDPR, by contacting info@pilandis.com The Administrator may refuse to implement some of the above-mentioned rights in situations where the implementation of a given right would be contrary to the legitimate purpose of data processing.

Cookie Policy

This cookie and similar technology policy is informational, meaning it does not impose any obligations on you (it is not a contract or terms of service). The purpose of this Policy is to clearly present the operational principles of the website regarding the use and management of cookies and similar technologies.

Cookies, or “small text files,” are data files, primarily text files, stored on the User's end device and used to navigate the Service’s website. Cookies typically contain the name of the website they come from, the storage duration on the end device, and a unique number. The Service does not automatically collect any information, except for information contained in cookies.
The Service does not automatically collect any information, except for information contained in cookies.
Obtaining and storing information through cookies, except when necessary to ensure the website’s proper operation and its essential functions (such as providing an electronic service under Article 173 (3)(2) of the Telecommunications Law), is only possible based on your consent. You can change the scope of cookie technology usage on the website at any time. By default, individual types of cookies can also be blocked through browser settings. Any withdrawal of cookie consent does not affect the legality of actions already performed.
Insofar as cookies contain your personal data, the basis for their processing is the legitimate interest of the Administrator or a third party (Article 6(1)(f) of the GDPR), the need to ensure the highest quality of content presented by the Administrator by tailoring it to visitor preferences, and marketing—including direct marketing—of the Administrator's products and services. Where functionalities and personal data collected by cookies are necessary for correctly providing services on the website, processing such data may also be based on the contract formed when you choose to use our website (Article 6(1)(b) of the GDPR).
The entity placing cookies on the User's device and accessing them is PILANDIS, an unregistered business entity co-founded by - Bohdan Ilchuk, Ernest Chrzan, Roman Putkov, Mariia Putkova, Aleksandra Okołowicz, Nelia Shcherban.
Cookies are used to:

Adapt the content of the Service's website to the User’s preferences and optimize website navigation; in particular, these cookies enable recognition of the User's device and appropriate display of the website customized to their individual needs.
Create statistics that help understand how Users use the Service’s website, which improves its structure and content.
Maintain the User’s session (after login), so the User does not have to re-enter login and password information on each subpage of the Service.

The Service uses two primary types of cookies: “session cookies” and “persistent cookies.” Session cookies are temporary files stored on the User's device until they log out, leave the website, or close the browser. Persistent cookies are stored on the User’s device for a specified period or until the User deletes them.
The Service also uses the following types of cookies:

“Essential” cookies, which enable the use of services available through the Service, such as authentication cookies used for services requiring authentication within the Service.
Security cookies used to detect authentication abuses within the Service.
“Performance” cookies, which collect information about how the Service’s website is used.
“Functional” cookies, which remember settings chosen by the User and personalize the User interface, such as language preferences or region, font size, website appearance, etc.
“Advertising” cookies, which deliver advertising content more tailored to User interests.

In many cases, browser software allows cookies to be stored on the User’s device by default. Users of the Service can change cookie settings at any time. These settings can be adjusted, in particular, to block automatic cookie handling or notify of each cookie entry on the User's device. Detailed information on cookie handling options is available in browser settings.
The Service operator informs that restricting cookie usage may affect some functionalities available on the Service’s website.
Cookies placed on the User’s device may also be used by the Service operator's advertising and partner organizations.
Depending on the purposes and legal grounds for processing personal data collected through cookies, they may be retained for varying periods.
Personal data collected through cookies will be stored until an objection is raised. The Administrator may delete personal data if it has not been used for marketing or other legitimate purposes (such as statistical analysis) for three years, unless legal provisions require longer processing. Some personal data may be retained longer in case the Administrator needs to handle or defend against claims (including those from third parties) for the period allowed by law, especially the civil code.
More information about cookies is available in your browser’s settings.
The Administrator employs technical and organizational measures to protect the personal data processed, according to risks and data protection categories, particularly to prevent unauthorized access, unauthorized acquisition, unlawful processing, alteration, loss, damage, or destruction.
The Administrator provides suitable technical measures to prevent unauthorized individuals from intercepting and modifying personal data transmitted electronically.