Skip to content
Legal

Privacy policy

How we process personal data collected through this website.

General provisions

This privacy policy applies to the website operating at ativ.com.pl. The data controller is ATIV Sp. z o.o., based at ul. Owsiana 60, 40-780 Katowice, Poland, VAT ID (NIP) 9542821502 and National Court Register (KRS) number 0000873484.

The controller uses the data collected through the website to operate it and to provide the related services, in accordance with the provisions of this Privacy Policy and applicable regulations such as the GDPR.

Data Protection Officer

Pursuant to Article 37 GDPR, the company has not appointed a Data Protection Officer. In matters concerning data processing, please contact the controller directly.

Data collected

The website collects data about its users. Some data is collected automatically and is not attributed to specific users. Some data is provided voluntarily by users while using the website.

Data collected automatically:

  • IP address
  • Browser and operating system information
  • Part of the website visited
  • Time of visit
  • Referring website address

Data collected through user submission:

  • Full name
  • E-mail address
  • Company name
  • Content of the enquiry

Providing the above data marked as collected through user submission is entirely voluntary, but necessary to use the website and to receive the related services.

Data processing

To operate the website, the controller uses the services of an external server provider, namely Smarthost sp. z o.o. The data collected is stored and processed on the provider's infrastructure. The server provider may have access to the data; this access is governed by the server provider's privacy policy, available at https://www.smarthost.pl/rodo-podmioty-wspolpracujace . The server on which the data is stored and processed is located in Poland. Data is transferred outside the European Union for the purposes of further processing consistent with the provisions of this Privacy Policy.

Personal data may be transferred outside the European Union in connection with the use of the following services:

Google Tag Manager / Google Analytics (Google LLC, USA) - a tool for managing tags and analysing website traffic. It collects data such as the IP address, browser and operating system information, pages visited, and the time of the visit. Google LLC participates in mechanisms ensuring an adequate level of protection for data transferred from the EU to the USA (the EU-U.S. Data Privacy Framework).

Web3Forms (Web3Forms Ltd., USA) - a technical intermediary handling the delivery of messages from the contact form to the controller's e-mail address. It processes the data provided by the user in the form (name, e-mail address, company name, message content) solely for the purpose of delivering the message, and does not use it for any other purpose.

In both cases, the data transfer is based on appropriate legal mechanisms ensuring GDPR compliance, including standard contractual clauses or the provider's participation in the EU-U.S. Data Privacy Framework.

Third-party content on the website

The website contains third-party content. Such third parties may collect data on their own terms; please review their respective privacy policies.

List of third-party content together with links to their privacy policies:

Third parties whose content appears on the website are beyond the controller's control. They may, for example, change their terms of use without the controller's consent. The controller is not liable for actions taken by the above third parties.

Third parties with access to the data

Third parties providing services necessary for the website to function may have access to the data, namely:

  • The server provider (described above)
  • Web3Forms (USA) - intermediary for sending messages from the contact form

Owners of third-party content may also have partial access to the website's data.

No other third parties have access to the data collected by the website. The data is stored in a way that protects it against undesired access by other third parties.

Cookies

The website uses cookies and/or similar technologies, jointly referred to as cookies, which are used to store data on the user's device.

The following types of cookies are used:

  • essential - necessary for the website to function.
  • analytics - used to compile analytical statistics on how the website is used.

Users may delete cookies saved by the website at any time and/or block their storage using their browser's settings.

Legal bases for data processing

The legal bases for processing the data are:

  • Article 6(1)(a) GDPR - the data subject has given consent to the processing of their personal data for one or more specific purposes
  • Article 6(1)(f) GDPR - processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party

The above legal bases derive from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

User rights

Users have the right to:

  • access to personal data - users are entitled to obtain access to their personal data, exercised upon request.
  • rectification of personal data - users are entitled to request that the controller promptly rectify personal data that is inaccurate and/or complete incomplete personal data; this is exercised upon request. The controller reserves the right to withhold a data erasure request in order to protect its legitimate interest (for example, where the user has breached the Terms of Service or the data was obtained as a result of ongoing correspondence).
  • erasure of personal data - users are entitled to request that the controller promptly erase their personal data, exercised upon request.
  • restriction of the processing of personal data - users are entitled to restrict the processing of their personal data in the cases indicated in Article 18 GDPR, including where the accuracy of the personal data is contested, exercised upon request.
  • data portability - users are entitled to receive from the controller the personal data concerning them in a structured, commonly used, machine-readable format, exercised upon request.
  • object to the processing of personal data - users are entitled to object to the processing of their personal data in the cases specified in Article 21 GDPR, exercised upon request.
  • lodge a complaint - users are entitled to lodge a complaint with the supervisory authority responsible for personal data protection.