This Privacy Policy sets out the rules for the processing of personal data and the use of cookies in connection with the use of the online services of Choice Group Sp. z o.o. (hereinafter the “Service”).
The controller of personal data is Choice Group Sp. z o.o., with its registered office at Aleja "Solidarności" 95/99 / Lu6, 00-144 Warszawa, Polska, NIP: 5252941236, REGON: 524294467 (hereinafter the “Controller”).
The Service collects information about users and their behaviour in the following ways:
through data voluntarily entered into forms;
through saving cookies on users’ end devices;
through automatic processing of user data for analytical and marketing purposes;
through monitoring interactions with marketing and service emails (e.g. tracking email opens).
2. Scope and purpose of personal data processing
Users’ personal data is processed by the Controller for the following purposes:
performance of a service agreement (Article 6(1)(b) GDPR), including the repair of devices;
corresponding with the customer for the purpose of providing the service;
direct marketing of the Controller’s own products or services, if the user has given consent to this (Article 6(1)(a) GDPR);
carrying out statistical analyses and automatic data processing in order to improve the functionality of the Service (Article 6(1)(f) GDPR);
collecting customer feedback and analysing service quality in order to improve customer service.
The Controller may process users’ personal data for profiling purposes in order to provide personalised content and offers. Users may withdraw consent to such processing at any time.
3. Transfer of personal data
Users’ personal data may be transferred to the following categories of recipients:
courier or service companies for the purpose of performing the service;
IT service providers who provide technical support for the Service;
external marketing service providers for the purpose of running promotional campaigns;
public authorities, if required by law;
external entities, including security experts, in the event of a personal data breach.
The Controller ensures that personal data is transferred in accordance with legal requirements, and that all data recipients are obliged to maintain confidentiality and apply appropriate safeguards.
4. Users’ rights
Every user has the right to:
access their personal data;
rectify, erase, or restrict the processing of data;
data portability;
object to the processing of personal data;
withdraw consent to processing at any time;
lodge a complaint with the President of the Personal Data Protection Office (PUODO).
The user also has the right to obtain information as to whether their data is processed in an automated manner, including profiling, and what the consequences of such processing are.
Any requests regarding the exercise of these rights may be submitted to the following email address: kontakt@thechoice.pl.
5. Data security
The Controller applies appropriate technical and organisational measures to protect processed personal data against unauthorised access, alteration, or deletion. This includes:
data encryption (including SSL) to ensure confidentiality during transmission;
regular security audits of IT systems;
restricted access to personal data exclusively for authorised employees;
the use of tools to monitor and respond to potential security incidents.
In the event of a personal data breach, the Controller will take all necessary steps to notify the persons concerned as soon as possible and report the breach to the relevant supervisory authorities.
6. Cookies
The Service uses cookies to ensure the proper functioning of the website and for analytical purposes.
The user may manage cookie settings in their web browser at any time. Restricting the use of cookies may affect the functionality of the Service.
Cookies may be used by external services such as Google Analytics to monitor website traffic and analyse user behaviour.
7. Data retention period
Personal data will be stored for the period necessary to fulfil the purposes for which it was collected:
data related to the agreement: for the duration of the agreement and the period required by law (e.g. complaint handling);
data processed on the basis of consent: until consent is withdrawn;
statistical and marketing data: for the duration of the analysis or marketing campaigns.
After cooperation with the user ends, data may be stored for a maximum of 5 years for legal and archival purposes.
8. Transfer of data outside the European Economic Area
Personal data will not be transferred outside the European Economic Area.
9. Data breach notifications
In the event of a personal data breach, the Controller will notify the persons concerned without undue delay where such a breach may result in a high risk to their rights or freedoms.
The Controller will report the data breach to the relevant supervisory authority within 72 hours of becoming aware of it, in accordance with the GDPR.
10. Changes to the Privacy Policy
The Controller reserves the right to make changes to the Privacy Policy. Such changes will be published on the Service website.
11. Contact
Any questions and requests regarding the processing of personal data should be sent to: kontakt@thechoice.pl, or in writing to the company’s registered office address: Aleja "Solidarności" 95/99 / Lu6, 00-144 Warszawa, Polska.