General Provisions

1. This Privacy Policy defines the method of collecting, processing, and storing personal data necessary for providing services electronically via the website in the domain www.tyrefire.eu (hereinafter referred to as the "Service").

2. The administrator of the personal data of Users is Proergia Sp. z o.o., ul. Mogilska 65, 31-545 Kraków (hereinafter referred to as the "Administrator").

3. Personal data is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR").

4. The data collected by the Administrator will be:
   4.1. processed lawfully,
   4.2. processed for specified purposes and not subjected to further processing incompatible with those purposes,
   4.3. factually correct and adequate to the purposes for which they are processed,
   4.4. stored no longer than necessary to achieve the purpose of processing.

Purpose and Legal Basis for Data Processing

5. The Administrator processes personal data necessary for providing and developing the services offered through the Service and its individual functionalities.

6. Personal data will be processed for the following purposes:
   6.1. registration of an account, verification of User identity, and execution of the agreement for providing services electronically in accordance with the Act of July 18, 2002, on providing electronic services, in particular by enabling the User to use their account – based on acceptance of the terms of the Regulations (Article 6(1)(b) of GDPR);
   6.2. communication with the User to provide them with necessary information and to build positive and reliable relations with them, which constitutes a legitimate interest of the Administrator (Article 6(1)(f) of GDPR);
   6.3. promoting the Administrator's and/or its Partners' products and/or services by sending electronic marketing information (newsletter) if the User has consented to receive such notifications via e-mail (Article 6(1)(a) of GDPR);
   6.4. providing access to information about news in the industry directly related to the Administrator's activities if the User has consented to receive such notifications via e-mail (Article 6(1)(a) of GDPR);
   6.5. for analytical and statistical purposes based on the legitimate interest of the Administrator, which consists of verifying User activity and preferences for optimizing services and products as well as functionalities used in the Service (Article 6(1)(f) of GDPR);
   6.6. possible determination, pursuit of claims, or defense against them based on the legitimate interest of the Administrator, which consists of protecting its rights (Article 6(1)(f) of GDPR).

7. In each of the cases mentioned above (paragraph 5), providing data is voluntary; however, it is necessary to conclude the agreement or to use other functionalities of the Service.

Data Processing Period

8. Personal data will be processed for the period during which the person remains an active User of the Service (has a User account), and thereafter for the period necessary to comply with legal regulations, pursue or defend against possible claims, but not longer than 3 years from the date of termination of the agreement for providing electronic services.

9. Data processed based on consent will be processed until the consent is withdrawn, provided that the withdrawal of this consent does not affect the legality of the processing carried out based on that consent before its withdrawal.

Information on Processing

10. Personal data, depending on the purpose of processing, may be disclosed to:
    10.1. entities related to the Administrator,
    10.2. entities cooperating with the Administrator,
    10.3. subcontractors, in particular, entities supplying and servicing selected IT systems and solutions,
    10.4. entities handling internet payments,
    10.5. entities providing courier and postal services, including law firms.

11. Personal data processed by the Administrator will not be transferred outside the European Economic Area or to international organizations.

Rights of Data Subjects

12. The User of the Service has the right to:
    12.1. access the content of their personal data,
    12.2. rectify their data,
    12.3. delete their data,
    12.4. restrict data processing,
    12.5. transfer data,
    12.6. object to processing based on the legitimate interest of the Administrator,
    12.7. withdraw consent at any time without affecting the legality of processing carried out based on that consent before its withdrawal.

13. The User has the right to lodge a complaint with the President of the Office for Personal Data Protection if they believe that the processing infringes their rights and freedoms.

14. In the data processing process, there is no automated decision-making, including profiling.

Final Provisions

15. The Administrator reserves the right to make changes to this Privacy Policy while ensuring that the rights of Users resulting from this document will not be restricted.

16. The User will be informed of any changes in the Privacy Policy through a notice available on the Service.