1. General provisions
This Privacy and Cookie Files Policy regulates the processing of personal data gathered through the sunscrapers.com Website.
The character of this Privacy and Cookie Files Policy is only informational, which means that it does not constitute any grounds for any obligations for the Users of the Website. The Privacy and Cookie Files Policy focuses on regulating the processing of personal data by the Controller of Personal Data on the Website, including the grounds, purposes and the scope of personal data processing and the rights of the individuals whom the data is regarding, as well as the information on how cookie files and analytical tools are used on the Website. The Controller of personal data as per the provisions of the laws regulating the protection of personal data is Sunscrapers sp. z o.o. with its registered office in Warsaw, in 15/17 Tadeusza Czackiego St., Warsaw, VAT EU PL1182116268, REGON 363226220, e-mail: firstname.lastname@example.org, (hereinafter referred to as the “Controller”).
The legal grounds for the processing of personal data by the Controller are provided by the provisions of the Regulation of the European Parliament and the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the „Regulation”.
The Controller shall use their best efforts to honour the privacy of the visitors to the sunscrapers.com Web Site.
The Controller guarantees the confidentiality of all gathered personal data and ensures that all security and data protection means required by the provisions of the laws on personal data protection are implemented. Personal data is gathered with due care and properly secured from being accessed by any unauthorised persons.
The Controller does not gather nor process any sensitive data, referred to within the Regulation as “special categories of personal data”. They also do not intend to collect nor process any data regarding any individuals below 16 years of age.
2. Rights of the user
The User has the following rights resulting from the processing of their personal data:
Right of access to their own personal data - the User has the right to obtain confirmation of whether the Controller is processing their personal data and if so, they have the right to gain access to their personal data and obtain information regarding e.g.: the purpose of processing, categories of the processed data, receivers or categories of receivers of the data to whom the data has been or will be disclosed, the planned duration of storing of the personal data or any criteria upon which the duration of storing the data is depending; the above right includes also the right to obtain a single copy of the data free of charge (for every consecutive copy for which the User asks, the Controller may charge a fee in a reasonable amount resulting from any administrative costs incurred);
Right to rectify their own personal data (when it is incorrect), which also includes the right to have incomplete personal data completed;
Right to erase their own personal data (the so-called “right to be forgotten”), in the following circumstances: when the personal data of the User is no longer required for the purposes for which it has been gathered, when the User withdrew their consent for the processing of the data and no other legal grounds exist for the processing of the data, when the User objected to the processing, when the data has been processed against the law, when the data must be removed for the purpose of meeting the legal obligation arising from the Law of the European Union or the law of a member state applicable to the Controller, when the data has been gathered in relation to provision of an information society service;
Right to restriction of processing, when the User questions the correctness of their personal data (for the period which shall allow the Controller to verify the correctness of the data), when the processing is incompliant with the provisions of the law and the User is objecting to the erasure of the data, when the Controller no longer requires the personal data for the purposes for which it has been gathered but it is still required for the User for establishment, exercise or defence of legal claims, when the User submitted an objection to the processing - for as long as it is required to establish if legal grounds exist on the side of the Controller and are superior to the grounds for the objection of the User;