I. General provisions

1. The privacy policy defines how personal data of Users necessary for the provision of electronic services through the website www.xd3d.pl (hereinafter: the Service) are collected, processed and stored.
2. The Service collects only personal data necessary for the provision and development of the services offered therein.
3. Personal data collected through the Service are processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR) and the Act on the Protection of Personal Data of 10 May 2018. 

II. Data Controller
The administrator of personal data collected through the Service is Mana Patryk Ossowski, address: Związku Jaszczurczego 5/7 80-288 Gdańsk, NIP: 5842708239, REGON: 382799228, e-mail address: kontakt@xd3d.pl (hereinafter: the Administrator). 

III. Purpose of collecting personal data

1. Personal data are used for the following purposes:

• registration of an account and verification of the User’s identity,
• enabling logging into the Service,
• implementation of the contract for services and e-services,
• communication with the User (live chat, contact form, etc.),
• sending newsletters (after the User has given consent to receiving them),
• running the commenting system,
• provision of community services,
• promotion of the Administrator’s offer,
• marketing, remarketing, affiliation,
• personalization of the Service for Users,
• analytical and statistical activities,
• debt collection,
• determination and pursuit of claims or defense against them.

Providing data is voluntary, but necessary for the conclusion of a contract or for the use of other functionalities of the Service.

IV. Type of processed personal data
The Administrator may process the User’s personal data: name and surname, date of birth, address of residence, e-mail address, telephone number, NIP. 

V. Period of personal data processing
User’s personal data will be processed for the period: • when the basis for data processing is the performance of a contract – until the limitation period for claims after its performance, • when the basis for data processing is consent – until its withdrawal, and after withdrawing consent, until the limitation period for claims. In both cases, the limitation period is 6 years, and for claims for periodic services and claims related to conducting business activity – 3 years (unless a special provision provides otherwise). 

VI. Disclosure of personal data

User’s personal data may be transferred to entities affiliated with the Administrator, its subcontractors, entities cooperating with the Administrator, e.g. companies providing e-payment services, courier/postal service companies, law firms.
2.User’s personal data will not be transferred outside the European Economic Area (EEA).

VII. User rights

1. 1. 1. The Service User has the right to access their personal data, rectify, erase, restrict processing, transfer, object to processing, and withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
      2. A request related to these rights should be sent to the email address: kontakt@xd3d.pl.
      3. The Administrator shall fulfill or refuse to fulfill the request immediately, but no later than within one month from its receipt.

VIII. Cookies

The Service collects information using cookies – session, persistent, and third-party cookies.

The collection of cookies supports the proper provision of services in the Service and serves statistical purposes.

The User may determine the scope of access of cookies to their device in the browser settings.

The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if they consider that the processing of their personal data violates their rights and freedoms (GDPR).  

IX. Automated decision-making and profiling

1. User data cannot be processed in an automated way that could lead to any decisions being made against them.
2. User data may be profiled for the purpose of customizing content and personalizing offers after obtaining their consent.

X. Final provisions

1. The Administrator has the right to make changes to the Privacy Policy, with the User’s rights not being limited.
2. Information about the changes will be provided in the form of a message available in the Service.
3. Matters not regulated in this Privacy Policy are subject to the GDPR and Polish law.