published: 16.12.2024
Hi, hello!
In this document you will find information on the principles of processing personal data, the purposes of processing and the legal grounds for doing so, as well as the use of cookies and other tools related to the use of this website, and the recipients of your data and your rights.
Personal data administrator
The administrator of your personal data is Renata Kozlowska | bez bałaganu by Renia, residing in Lodz, Poland. In matters concerning the processing of personal data, you can contact via e-mail: renata.kozlowska@renatakozlowska.pl or phone: 603 860 094.
Important!
By contacting me via e-mail, the contact form on the site, or by registering for the newsletter, you are providing me with your personal information - such as your name and e-mail address, for example.
I make every effort to ensure that the data you provide is kept secure.
Wherever data processing requires the involvement of third-party providers, I ensure that I consciously select the entities I work with to ensure an adequate standard of security for the data you provide to me.
You are using this website voluntarily and are not obligated to provide your personal information. However, if you choose not to provide certain information, you may be unable to access specific services or fulfill certain purposes, such as contacting me via email or signing up for a newsletter.
By contacting me via e-mail, the contact form on the site, or by registering for the newsletter, you are providing me with your personal information - such as your name and e-mail address, for example.
I make every effort to ensure that the data you provide is kept secure.
Wherever data processing requires the involvement of third-party providers, I ensure that I consciously select the entities I work with to ensure an adequate standard of security for the data you provide to me.
This website, like many other websites, uses cookies for its proper operation. From the following section, you will learn how cookies work and what it means for you.
I use analytics tools that collect anonymous information about visits to this site, such as time spent on the site or tabs viewed, for example. You will find details later in this document.
Scope, purpose and legal basis of data processing
If you are contacting me or you are my Client, I process your personal data. Below is the full scope, purpose and basis for their processing:
| Purpose of data processing | Scope of data processing | Legal basis of data processing |
| Contact | Email address, first and last name, as well as data contained in the body of the message (phone number). | The legal basis for such processing is Article 6(1)(a) of the RODO, which allows the processing of data on the basis of consent for the purpose of responding to your message, and Article 6(1)(f) of the RODO, which allows the fulfillment of the legitimate interest of ensuring efficient and effective communication between the website administrator and the user. |
| Fulfillment of personal data obligations (e.g. obligation to create registers of data processing activities and records under RODO) | Name, surname, e-mail address, data indicated in invoices, bills and other data provided to me. | The obligation arises from Article 6(1)(c) of the RODO and from my legitimate interest as administrator of this website (arising from the content of Article 6(1)(f) of the RODO). |
| Archival and evidentiary, for the purpose of securing information that can be used to prove facts | All data listed in this table. | This processing aligns with the legitimate interests of the personal data controller, as outlined in Article 6(1)(f) of the RODO. This article permits the processing of personal data when the controller is pursuing a legitimate interest, which in this case involves creating an archive for potential legal proceedings. The controller's interests include having access to personal data to substantiate facts related to website usage, fulfilling contract obligations, processing data on a legitimate legal basis, and identifying returning customers. |
| Placing and processing an order for products/services | Name, surname, e-mail address, address/residential address, telephone number, Tax ID, PESEL, data on business activity. Provision of data is voluntary, but necessary for order processing. | The legal basis is Article 6(1)(b) of the RODO, which allows us to process the data in order to take steps to conclude a contract and to perform the contract concluded by placing an order. |
| Accounting | Name and surname, address, Tax Identification Number, business data. | Obligation by law, carried out for the purpose of issuing a VAT invoice or other document on the basis of which we make settlements - Article 6(1)(c) RODO. |
| Processing of complaints and processing of withdrawal from the contract | Name, surname, e-mail address, address of residence, telephone number, Tax Identification Number, data on business activity, bank account number; other data included in the complaint. Provision of data is voluntary, but necessary to file a complaint/withdraw from the contract. | Data provided in connection with the filing of a complaint or withdrawal from the contract is used for the purpose of the complaint procedure or withdrawal procedure (Article 6(1)(c) of the DPA) and then for archival purposes, which is my legitimate interest (Article 6(1)(f) of the DPA). Data will be processed for the time necessary for the execution of the complaint procedure or withdrawal procedure. Complaints and withdrawal statements may furthermore be archived in order to be able to demonstrate the course of the complaint or withdrawal process in the future. In the case of data provided in the complaint or withdrawal process, some of your rights will not be granted to you always and under all conditions. |
| Marketing purpose (sending a newsletter) | Name, surname, e-mail address. | The data provided by you in connection with signing up for the newsletter is used to send you news, and the legal basis for its processing is your consent - Article 6(1)(a) RODO - expressed during registration, as well as Article 6(1)(f) RODO, which allows the processing of personal data if by doing so the controller pursues its legitimate interest (in this case, it is the purpose of marketing its own services and products). |
| Site management, use of tools to improve the site and analyze data related to the use of the site | IP, user behavior on the site | The legal basis is Article 6(1)(f) of the RODO, which allows the processing of personal data if by doing so the administrator realizes its legitimate interest (in this case, the administrator's interest is the activity aimed at optimizing the site, including the content presented on the site to the needs of users, improving the administrator's offer). |
| Use of cookies on the site | not applicable so far | |
| Management of the website and other pages/groups on external platforms, e.g. social media) | Data that is related to the use of a particular social media platform (this may include your IP and behavior on my websites; your data indicated in your public profile on META Platforms e.g. place of employment, image (profile photo). | The legal basis is my authority as the controller of your data, exercised on the basis of Article 6(1)(f) RODO - the controller's legitimate interest and your consent (Article 6(1)(a) RODO), which you give, for example, by joining a group created by the controller on a given platform. |
| Establishing, investigation or defending against claims | All data listed in this table. | The legal basis is Article 6(1)(f) of the RODO, which allows the processing of personal data if, by doing so, the controller pursues its legitimate interest (in this case, the controller's interest is to have personal data to establish, assert or defend against claims by users of the site or third parties or customers). |
| Posting comments and opinions on the site | Name, surname, e-mail address. | The legal basis is Article 6(1)(a) of the RODO, i.e. your consent to add a comment on our site. |
| Researching preferences for my services and analyzing business processes by conducting surveys | Data indicated in the survey and in answers to survey questions. | If you participate in the survey provided by me, and in particular provide me with the data in the answers to the survey questions, I process this data on the basis of your consent (Article 6(1)(a) of the RODO). Participation in the survey and providing me with data is voluntary. The data provided will later be processed by me for archival purposes and possible defense against claims (Article 6(1)(f) RODO). |
| Manychat | Identification data (first and last name, email address), publicly available information in social media profiles, related pages and accounts, ICT data (IP addresses, geographic location, usage data, cookie data, browser data), chat history and content data, chat bot usage information, other electronic and personal data, the scope of which is set and controlled by the Administrator in accordance with the available functions within the ManyChat service. | This is based on Article 6(1)(a) of the RODO, i.e. the consent given prior to sending my information from ManyChat, and Article 6(1)(f) of the RODO, i.e. my legitimate interest as Administrator. |
Personal data administrator
The RODO grants you the following potential rights related to the processing of your personal data:
- The right of access to information and the duty to inform - means that every person whose data is processed has the right to know what happens to their personal data. Among other things, the privacy policy you are about to read was created for this purpose.
- The right of access to your personal data - means that if I, as the controller of your data, receive a request from you for access to your data, I have an obligation to provide you with such information. I am to perform my duties as a data controller immediately,
no later than within one month. If it is impossible to do so within this timeframe, then I am obliged to at least inform you whether I am processing your data, and I may then extend the timeframe by two months to provide a complete response to your request. - The right to rectify personal data - means that you can request that the controller of your data rectify data that is incorrect or complete data that is incomplete.
- The right to erasure of personal data, the right to be forgotten - means that you can demand from me, as the controller of your personal data, to delete it and to inform the person to whom your data has been provided of its deletion. You also have the right to demand that your data that has been made public by me be subject to deletion by other
administrators. As the controller of your data, I am also obliged, upon your request, to inform you of the recipients to whom your data subject to deletion has been transferred. - The right to restrict the processing of your personal data - means that you can request that the processing of your personal data be restricted. This is the case, for example, when you disagree with the accuracy of the processed data, or when you consider that you no longer need the data for the purposes of processing.
- The right to object to the processing of personal data - means that you can object to your data being processed by the controller.
- The right to data portability - means that, under certain conditions, you can request that your data be transferred directly to a designated other controller.
- The right to file a complaint - means that as soon as you consider that our processing of your data violates the law, you can file a complaint with the President of the Office for Personal Data Protection
The rules related to the exercise of the rights indicated above are described in detail in Articles 16 - 21 of the RODO. I encourage you to familiarize yourself with these provisions. However, it is worth noting that the rights indicated above are not absolute and you will not be entitled to all activities related to the processing of your personal data (this is due to the nature of the law).
At any time you may request that I provide you with information about what data I have about you and for what purposes I process it. To do so, send an email to kontakt@renatakozlowska.pl.At the indicated e-mail address you can direct all questions related to the processing of your personal data.
Recipients of data
Your personal data may be transferred to third parties whose services I use in connection with the operation of the website and my social media profiles. I assure you that I carefully select the entities with which I cooperate or whose services I use, and I am always guided by the assurance of adequate data protection. Due to the use of Google, Manychat, or META, your data may be transferred to the United States of America (USA) and Canada. I inform you that these entities guarantee an adequate level of personal data protection as required by European regulations.
In order to organize the entities whose services I use, they have been divided into two groups. The first is entities that process data within the European Union. The second group is entities processing data outside the European Economic Area.
Data processors in the European Economic Area:
- home.pl S.A, NIP 8522103252 - IT system maintenance and hosting service, in order to store personal data on the server and to use e-mail;
- Fakturownia sp. z o. o., NIP 5213704420 - provider of an invoicing system (for the purpose of issuing an accounting document for services rendered, processing payments and conducting accounting settlements);
- MailerLite LTD - mailing system provider, if you are a newsletter subscriber;
- tax offices to the extent necessary to carry out tax, accounting and settlement obligations, as well as other entities, authorities or institutions authorized to access the data under the law (e.g. police services, courts, prosecutors' offices).
- Other subcontractors who gain access to data if the scope of their activities requires such access.
Data processors outside the European Economic Area:
- Google Analytics, Google Tag Manager contract with Google Ireland Limited, a service provided by Google LLC - a marketing tool;
- MANYCHAT INC. - a marketing tool for sending automated messages on the META platform within the Instagram social network;
- YouTube by Google LLC - embedding audiovisual content in my service;
- Meta Corp. - marketing tool.
Social media plug-ins have also been embedded on the site as part of the administrator's operations. The purpose and scope of data collection and their further processing and use by service providers are described in the privacy policies of the following:
Instagram – https://help.instagram.com/519522125107875?helpref=page_content,
Facebook – https://www.facebook.com/privacy/explanation,
YouTube – https://support.google.com/youtube/answer/7671399,
Google LLC – https://policies.google.com/privacy?hl=pl,
Pinterest – https://policy.pinterest.com/pl/privacy-policy.
LinkedIn – https://www.linkedin.com/legal/privacy-policy.
Cookies files
This website, like many others, uses cookies. Cookies are short text information stored on the device you use to browse the website. They can be read by me (“own cookies”, which I use to ensure the proper operation of this site), as well as by systems belonging to other entities whose services I use (“external cookies”). When you visit the site for the first time, information on the use of cookies is displayed. If you do not change your browser settings, you agree to their use.
Cookies may be deleted when you close your browser (“session cookies”), or they may be retained on your device and allow your browser to be recognized the next time you visit my sites (“persistent cookies”).
Cookies may be necessary for the operation of the site you visit, and if you do not consent to their activity, the site may not function properly.
Cookies may be used for analytical activities, so that it is possible to analyze the number of visits and collect information and traffic on my site, and in this way I can improve my online activities.
On my site, cookies may also come from third-party providers and may be used by entities whose services I use.
Cookies from third-party providers may be used to personalize content, measure advertising and content, collect information about their audience and develop their products.
Remember that you have the right to change your cookie settings (including blocking them) from your browser.
This website uses the following tracking technologies:
● social plugins: Facebook, Instagram, YouTube;
● analytics and marketing tools: Manychat, Meta Pixel, Google Analytics.
Note that if you do not want information about the pages you visit to be stored in your browser history, you can use incognito mode (if the browser you use has this feature).
Requirement to provide personal data
The provision of personal data is voluntary and at your discretion, but the provision of certain personal data is necessary to fulfill your expectations for entering into a contract or using my services.
If you contact me on any matter related to the site or the services I provide, providing your contact information may be necessary to answer your question. If your data is required by law - it is your obligation to provide the data.
Requirement to provide personal data
I run profiles on social media platforms, and my website includes plugins redirecting to them.
I am the administrator of a profile on particular platform, and I process your data (name, nickname, other data you indicate on your profile) mainly for the purpose of managing my profile, creating a community and interacting with observers.
The provider of a given social networking platform determines the rules of the platform and the rules for processing data for its own purposes, so I encourage you to read the rules and policies of each platform. I do not process data collected by social media platforms for my own purposes.
Plug-ins leading to my profiles allow you to connect directly to my profile when you click on the platform icon.
A social media platform may acquire information about your use of my site, particularly when you are logged in as a user of that platform.
If you do not want social networks to acquire information about your activities, I recommend logging out of your profiles and using your browser in incognito mode.
Within my service, you will find plug-ins that redirect you to my profiles on the platforms indicated below. I also indicate the privacy policies of these platforms so that you can read them (I recommend):
- My profile on the Facebook platform: https://www.facebook.com/RenataKozlowskaPL
Together with Facebook, I co-administer data related to my operation of my Facebook profile, including in pursuit of our joint business goals, such as, among others, processing data related to visits to my profile, including the display of my profile through the use of a plug-in available on my website. We process as part of my profile data related to administering my profile, providing information about my business, promoting my services, campaigns and staying in touch with my audience. I also analyze the data collected as part of the profile for statistical purposes and for possible defense against claims. The scope of your data that I process as part of your profile is the data that you publicly share as part of your profile (name, surname, possibly an image or other data that is publicly available on your profile or that you voluntarily provide as part of a message or in a comment). I do not process data collected by the Facebook social media platform for its own purposes, and I do not have access to data collected by Facebook for its own purposes and under the terms of Facebook's Terms of Use.
I process your personal data on the basis of your consent, which you give by observing my profile, leaving a comment, and my legitimate interest in interacting with those who observe or use my profile, or for profile management purposes. You may stop observing my profile at any time.
I recommend you read Facebook's privacy policy, which is available at: https://www.facebook.com/privacy/explanation. - My profile on the Instagram platform: https://www.instagram.com/renatakozlowska_pl/
Together with Instagram, I co-administer data related to my running my profile on Instagram, including in pursuit of our joint business purposes, such as, but not limited to, processing data related to visits to my profile, including the display of my profile through the use of a plug-in available on my website. I process as part of my profile data related to administering my profile, providing information about my business, promoting my services, campaigns and staying in touch with my audience. I also analyze the data collected as part of the profile for statistical purposes and for possible defense against claims. The scope of your data that I process as part of your profile is the data that you make publicly available as part of your profile (first name, last name, possibly an image or other data that is publicly available on your profile or that you have voluntarily provided as part of a message or in a comment). I do not process data collected by the Instagram social media platform for its own purposes, and I do not have access to data collected by the Instagram portal for its own purposes and under the terms of the Instagram portal's terms and conditions.
I process your personal data on the basis of your consent, which you give by observing my profile, leaving a comment, and my legitimate interest in interacting with those who observe or use my profile, or for profile management purposes. You may stop observing my profile at any time.
I recommend you to read Instagram's privacy policy, which is available at: https://help.instagram.com/519522125107875?helpref=page_content.
I have linked my Instagram account to the ManyChat service, which you will read about later in this document. - My profile on the YouTube platform:
Together with YouTube, I co-administer data related to my running my profile on Instagram, including in pursuit of our joint business goals, such as, but not limited to, processing data related to visits to my profile, including the display of my profile through the use of a plug-in available on my website. I process as part of my profile data related to administering my profile, providing information about my business, promoting my services, campaigns and staying in touch with my audience. I also analyze the data collected as part of the profile for statistical purposes and for possible defense against claims. The scope of your data that I process as part of your profile is the data that you publicly share as part of your profile (name, surname, possibly an image or other data that is publicly available on your profile or that you voluntarily provide as part of a message or in a comment). I do not process data collected by the YouTube social media platform for its own purposes, and I do not have access to data collected by YouTube for its own purposes and under the terms of YouTube's Terms and Conditions.
I process your personal data on the basis of your consent, which you give by observing my profile, with leaving a comment, and my legitimate interest in interacting with those who observe or use my profile, or for profile management purposes. You can stop observing my profile at any time.
I recommend you to read YouTube's privacy policy, which is available at: https://support.google.com/youtube/answer/7671399.
Newsletter
By signing up for the newsletter, you provide me with your personal data, which, depending on the form used for registration, may include a different range of data, such as name, surname, e-mail address, telephone number. This data is processed for the purpose of sending the newsletter and based on your consent. Remember to confirm your subscription to my newsletter after you receive the first message. I use a newsletter provider that ensures the protection of your data, i.e. MailerLite Limited, Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland.Your data will not be transferred to a third country outside the European Union for the purpose of sending the newsletter. For details, please refer to the service provider's privacy policy: https://www.mailerlite.com/legal/privacy-policy and security statement: https://www.mailerlite.com/legal/security-statementYour submission of data in the newsletter sign-up form is voluntary, but necessary to send you the newsletter based on the consent you have given, as well as to send you information about marketing of my own products or services based on my legitimate interest as an administrator(i.e., Article 6(f) of the DPA), and to pursue possible claims in connection with the sending of the newsletter.
I guarantee you that your data will be processed until you withdraw the consent you have given, unsubscribe from the newsletter or express your objection.
The mechanism for unsubscribing from the newsletter service is by clicking on the active link with the information “I unsubscribe from the newsletter”, which is included in the messages I send you or by contacting me at kontakt@renatakozlowska.pl..
Once you have exercised this right and unsubscribed from the newsletter, your data relating to your subscription to this service will be kept for the period necessary to defend against potential claims. This is my legitimate interest as data administrator.
I may transfer personal data provided during the newsletter subscription process to the following entities: IT system maintenance and hosting service providers, email service providers, newsletter service providers, and third parties that assist in the dissemination of the newsletter, all of whom are bound by relevant contractual agreements.
Whenever we are processing your personal data, you are entitled to certain rights, which include the right to access your data, obtain a copy of it, request corrections, deletion, or restrictions on its processing, the right to data portability, the right to object to the processing, and the right to withdraw your consent at any time.
It is important to note that the withdrawal of consent does not affect the legality of any data processing conducted prior to such withdrawal.
Additionally, you have the right to file a complaint with the President of the Office for Personal Data Protection should you believe that your data processing infringes upon applicable laws. Please be assured that your data will not be processed through automated means, nor will it be subjected to profiling.
Google Analytics
I use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. I perform these activities based on my legitimate interest in creating statistics and analyzing them in order to optimize my website.
Google Analytics uses cookies, which are stored on your computer (or other device) and enable me to analyze your use of the site.
You have the option to disable the saving of cookies through the appropriate settings within your browser. However, there is a risk that you will lead to a situation where you will not be able to fully use all the functions of this site.
The data collected as part of the tool is anonymous (location, gender, age, online activity), though the provider may combine it with data it has collected about you as part of your use of its browser and/or its services.
I use Google Analytics to analyze the use of the site by its users and to improve it according to the users' preferences. With the statistics obtained, I can, for example, adjust the offer.
Details about Google Analytics are available by clicking on the link: https://analytics.google.com/analytics/web/provision/?hl=pl#/provision.
Google ensures that it uses data protection and security mechanisms provided by European regulations. Details of Google's data protection are available at the link: https://policies.google.com/privacy?hl=pl.
Google Analytics and Google Analytics 360 services have been certified to the independent security standard ISO 27001. ISO 27001 is one of the most widely recognized standards in the world and certifies that the systems that operate Google Analytics and Google Analytics 360 meet the relevant requirements. If you would like to know more details related to Google's use of data from sites and applications that use Google services, I encourage you to read the information: https://policies.google.com/technologies/partner-sites.
Content from external services
I may post content from external services on the site, such as audiovisual or sound recordings from YouTube. Playing these materials automatically generates cookies from the indicated service and the given tool saves its cookies on your device.
If you do not agree, do not play the material or log out of the respective service before playing the content (if you have an account).
The purpose and scope of data collection and their further processing and use by service providers are described in YouTube's privacy policy: https://support.google.com/youtube/answer/7671399.
The cookies used when you use a given widget are used by the given tool for proper functioning, analysis, advertising, personalization.
I draw your attention to the fact that the information collected from you through the use of the YouTube widget is anonymous. However, they may be combined with other information about you collected in your online activities. My use of this widget is motivated by my legitimate interest as an administrator, in the form of marketing my own products or services.
Comments and opinions on the site
I allow users to leave comments on the site. Adding a comment is completely voluntary. To leave a comment, fill out the form with your name and e-mail address. By posting a comment on the site, you consent to the processing of related data.
Please observe, please, mutual respect and remember that you are responsible for the content posted within the comment and opinion.
I reserve the right to moderate comments and opinions, in particular to remove those of an offensive, vulgar, advertising or violating the rights and personal rights of others.
Contact form
You have the opportunity to contact me through the contact form provided on this website, the Google Forms tool, or via email.
The information you provide in the contact form, including your name, phone number, email address, and any additional details, will be processed to facilitate electronic communication with you.
If you choose to reach out via email, you will be using your email address as the sender. You may also include further personal information in your message.
The legal basis for processing your personal data in this instance is your consent, which is established by your initiation of contact.
Once our correspondence has concluded, I may archive the content. The duration of this archiving will not exceed the statute of limitations for legal claims.
Surveys
I make every effort to continually improve my content and services and the procedures of my business, so I may direct surveys to you that include, among other things, questions about my services and products, from which I will learn about your preferences or feelings about your use of my products or services and the needs you have regarding the scope of my business.
Participation in the survey is completely voluntary, and there are no negative consequences if you do not participate or do not answer all the questions. You may withdraw your consent to participate in the survey at any time. The withdrawal of consent does not affect the processing of data prior to its withdrawal.
Time of processing your data
In accordance with applicable laws, I will process your data only for the time that is necessary to achieve the stated purpose. After this period, your personal data will be irreversibly deleted or destroyed. The additional year associated with the processing of personal data collected for the performance of a contract is due to the fact that an application may be submitted by you just before the
expiration of the statute of limitations.
I process your data for the following period:
| Time of processing your data | Situations applied |
| 3 or 6 years + 1 year | regarding to personal data processed for the purpose of establishing, asserting or defending claims; the choice of 3 or 6 years depends on whether both parties are businesses or not |
| until an effective objection is raised or the purpose of the processing is achieved | regarding to personal data processed on the basis of a legitimate interest of the controller |
| until it becomes obsolete or no longer relevant | regarding to personal data processed primarily for website administration purposes |
| until consent is withdrawn or becomes obsolete | regarding to personal data processed on the basis of your consent, unless explicitly indicated otherwise at the time of consent |
Meta Pixel
It is a piece of code provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, which works, like an analytics tool. I use it for remarketing purposes to display ads to you on Facebook or Instagram. The data collected by the tool is anonymous (location, gender, age, online activity), though the provider may combine it with data it has collected about you as part of your use of its platform. Meta Pixel helps me determine the effectiveness of ads, reach a specific audience and shows their reactions to my actions.
The information collected is mostly transferred to Meta's servers located outside the European Union, including in the United States, and stored there. However, Meta ensures that it applies the appropriate level of data protection required by European law. For more information, visit: https://www.facebook.com/privacy/policy/.
You can read more about the tool on the provider's website: https://www.facebook.com/business/tools/meta-pixel.
From your Facebook account you can also manage your privacy settings. Here you will find useful information in this regard: https://www.facebook.com/ads/settings.
ManyChat
I use the ManyChat tool to enhance my communication with you on social media (e.g. Instagram) for my marketing efforts. ManyChat allows me to send messages to you with content I specify.
To send you a message containing commercial information via ManyChat I need your consent. Such consent is given at the first message sent to you after using the keyword that implies the launch of ManyChat. To send you a message of a different nature (without commercial information) I use the legal basis, which is the legitimate interest of the administrator, in which case I do not obtain your consent. In each of the above cases, I can only send you messages for a limited period of time i.e., 24 hours from your use of the keyword that generates the sending of the first message from me using ManyChat.
You can also subscribe to ManyChat, which means that I will send you messages, including messages containing commercial information outside the 24-hour window. If you don't click on “Subscribe to ourupdates” or another message of the same meaning at the beginning of your communication with ManyChat, you won't receive automated messages sent to you via ManyChat from me. I draw your attention to the fact that ManyChat calls its service a subscription, i.e. by clicking on the message “Subscribe to ourupdates” or another of the same meaning, you agree to the subscription service of providing you with content via ManyChat for a period longer than the 24h time window.
Remember that you can withdraw consent to the processing of your data or object at any time.
ManyChat, as a marketing tool, has two roles when processing data. It can be a data controller (usually with respect to our data) and a data processor (processor) on our behalf (usually with respect to your data).
The data that ManyChat may process as a processor includes your identification data (name, email address), publicly available information in your social media profiles, your related pages and accounts, ICT data (IP addresses, geographic location, usage data, cookie data, browser data) and others. In addition, if I communicate with you via ManyChat or enter data into this service, your identification data, publicly available social media profile information (photo, name, date of birth, gender, geographic location), chat history and content are also processed, chatbot usage information and other electronic data sent, stored, sent or received by you, and other personal data, the extent of which is determined and controlled by me in accordance with the available features within the ManyChat service and of which I inform you prior to processing such data, if any.
The source of obtaining the above-mentioned data is my registration process with ManyChat and the use of this service both by me and by you, in particular the communication with you and the integration of applications of other entities connected by me (e.g. Facebook, Instagram, Zapier) and other applications specified on http://www.apps.manychat.com/.
An integral part of my agreement with ManyChat (Terms of Use: https://manychat.com/legal/tos) is an addendum on data processing, which sets out the principles of data processing by Manychat.
More information can be found here: https://manychat.com/legal/dpa.
ManyChat, as processor, processes the data until the termination of the contract with me, and as controller also until I opt out of receiving marketing communications and the expiration of the legally required retention period, among others, until the statute of limitations for claims.
In connection with your use of ManyChat, your personal data may be transferred outside the European Economic Area under the Standard Contractual Clauses. ManyChat also uses appropriate security measures for data processing. You can find detailed information about ManyChat's security measures in Appendix 2 at the following link: https://manychat.com/legal/dpa.
ManyChat also uses sub-processors, which means that your data may be transferred to these entities as part of your use of the Manychat service.
ManyChat works with the following entities:
- processing subcontractors for the purpose of providing the Manychat Service:
| Name | Purpose of data processing | Location |
| Amazon Web Services, Inc. | Cloud service provider for hosting and storage of U.S. data | USA |
| Freshworks, Inc. | Cloud-based software that supports customer interactions, such as via chat or email | USA |
| Hotjar Limited | Cloud-based software registry | Malta, UE |
| Rollbar, Inc. | Cloud-based bug logging software | USA |
| Sentry LLC | Cloud-based bug logging software | USA |
| Snowflake, Inc. | Cloud solutions provider | USA |
| Twillio, Inc. | Cloud-based provider of SMS, MMS and email services | USA |
| OpenAI, LLC | Cloud service provider exclusively supporting artificial intelligence-enabled functions | |
- service providers on behalf of ManyChat (service providers act either as processors on behalf of Manychat: or as separate controllers):
| Name | Purpose of data processing | Location |
| Google LLC | E-mail services and file storage software | USA |
| Impact Tech, Inc. | affiliated partners marketing | USA |
| InMoment, Inc. (Wootric) | Marketing (NPS) | USA |
| Interkom, Inc. | Cloud-based CRM platform | USA |
| PartnerStack, Inc. | affiliated partners marketing | USA |
| Stripe, Inc. | Billing and payment gateway | USA |
| The Rocket Science Group LLC d/b/a Mailchimp | Ad-hoc email communication with customers | USA |
| Zoom Video Communications, Inc. | Video conferencing | USA |
| Usercentrics GmbH | Consent management service | Germany |
- ManyChat partners:
| Name | Purpose of data processing | Location |
| Manychat, Inc. | Services and support | USA |
| OctoHub LLC | Services and support | Armenia |
| Manychat, SL | Services and support | Spain |
These entities are subject to change, so you may want to take a regular look here and at https://manychat.com/legal/service-providers.
You can learn more about ManyChat's data processing and the security measures in place by clicking on the links below:
https://manychat.com/legal/dpa
https://manychat.com/legal/privacy
https://manychat.com/legal/service-providers
Server logs
Using the site involves sending requests to the server that hosts my website.
Each request to the server is recorded in the server logs, which include, among other things: the IP address, date, server time, information about the web browser and operating system you are using.
The logs are saved and stored on the server. The data stored in the server logs are not associated with specific individuals using the site and are not used by us to identify you. The server logs are only ancillary material used to administer the site, and their contents are not disclosed to anyone except those authorized to administer the server. The server logs are only ancillary material used to administer the site, and their contents are not disclosed to anyone except those authorized to administer the server.
Final provisions
Content posted on this site, as well as on supported social media, is a manifestation of the administrator's own intellectual creation and is therefore subject to copyright protection. I do not give permission to copy the content in whole or in part without my express prior consent. You are obliged/required to use the site in a manner consistent with the law and good morals, bearing in mind the respect for personal property and intellectual property rights of third parties. Use of the provided content outside of permitted personal use may result in the risk of criminal and civil liability.
Finally, I would like to remind you that the content of this Privacy Policy is subject to change, such as when I change my service provider or the scope of functionality on the site. For your convenience, the date of updating the policy is indicated at the beginning of the Policy.
That's all I wanted to convey to you! Thank you for your time.
If you have any doubts about the legal nature of the content provided or how you can legally use it, please write me a message and I will give you a comprehensive answer.
Renata Kozłowska
