🛡️ Privacy policy

The following Privacy Policy sets out the rules for storing and accessing data on the Devices of Users using the Website for the purposes of the provision of electronic services by the Administrator, as well as the rules for collecting and processing the personal data of Users which they have provided personally and voluntarily through the tools available on the Website.

§1 Definitions

  • Service - the website „diwass.org” at https://diwass.org.
  • External service - the websites of partners, service providers or customers who cooperate with the Administrator.
  • Service/Data Administrator (Administrator) - company EKOLOGISTYKA-24 SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, doing business at: 82-300 Elbląg, ul. Kowalska 3-5D, with an assigned tax identification number (NIP):
    5783163027, providing electronic services via the Website.
  • User - a natural person for whom the Administrator provides services electronically through the Website.
  • Device - an electronic device with software through which the User accesses the Website.
  • Cookies - textual data collected in the form of files placed on the User's Device.
  • RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
  • Personal data - means information about an identified or identifiable natural person („data subject”).
  • Processing - means an operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Profiling - means any form of automated processing of personal data which involves the use of personal data to evaluate certain personal factors relating to a natural person, in particular to analyse or predict aspects relating to that person's work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

§2 Data Protection Officer

On the basis of Article 37 RODO, the Administrator has not appointed Data Protection Officer. For matters concerning data processing, including personal data, please contact the Controller directly.

§3 Purposes of personal data processing

Personal data voluntarily provided by Users (e.g. via the contact form, in comments or when signing up for the newsletter - if available) is processed for one of the following purposes:

  • Implementation of electronic services:
    • Services for sharing information about content posted on the Website on social networks or other websites.
    • The Administrator's communication with Users on matters relating to the Service and data protection.
  • To ensure the legitimate interest of the Administrator.

Data about Users collected anonymously and automatically is processed for one of the following purposes:

  • Keeping statistics.
  • Remarketing.
  • Serving advertisements tailored to Users' preferences.
  • To ensure the legitimate interest of the Administrator.

§4 Legal grounds for processing personal data

The Service collects and processes Users' data on the basis of:

  • Consent of the data subject (Article 6(1)(a) RODO).
  • When processing is necessary for performance of the contract or to take action at the request of the data subject prior to entering into a contract (Article 6(1)(b) RODO).
  • When processing is necessary for the purposes of legitimate interests carried out by the Administrator or by a third party (Article 6(1)(f) RODO).
  • Supplementary provisions such as:
    • Act of 10 May 2018 on the protection of personal data.
    • Act of 16 July 2004. Telecommunications Law.
    • Law of 4 February 1994 on copyright and related rights.

§5 Types of data collected and their storage

5.1 Personal data provided voluntarily
  • Personal data will not be transferred outside the European Union, unless they have been published as a result of an individual action by the User (e.g. entering a comment or entry), which will make the data available to any visitor to the website.
  • Personal data will not be used for automated decision-making (profiling).
  • Personal data will not be resold third parties.
  • These data are only stored for the duration of the Service on the Website. They are deleted or anonymised in the period up to 30 days from the termination of the service (e.g. deletion of a registered account, unsubscribing from a newsletter).
  • The exception is if the legitimate purposes of further processing need to be safeguarded, in which case the data will be stored for no longer than 3 years in the event of a breach or suspected breach of the Rules of Procedure.
5.2 Anonymous data collected automatically (via cookies)

Automatically collected data (e.g. IP address, browser type, screen resolution, approximate location, pages accessed, time spent, operating system type, internet provider, demographic data) is processed as follows:

FeatureDetails
Transfers outside the EUAnonymous data (no personal data) will be transmitted outside the European Union.
ProfilingAnonymous data may be used for automated decision-making (profiling). This profiling does not produce legal effects or materially affect the data subject.
ResaleAnonymous data (e.g. in the form of Service statistics) may be resold third parties.
Storage periodAnonymous statistical data, which does not constitute personal data, is stored by the Administrator for indefinite period.

§6 Access to personal data by third parties

In principle, the Administrator is the only recipient of the personal data provided by Users. Data collected as part of the services are not transferred or resold to third parties.

Access to the data may be granted to entities responsible for maintaining the infrastructure and services necessary to run the Website (on the basis of a Data Processing Entrustment Agreement), i.e.:

  • Hosting companies: The administrator uses an external hosting provider, VPS or Dedicated Servers. Seohost Sp. z o.o. (https://seohost.pl/polityka-prywatnosci).
  • All data is stored and processed on the service provider's infrastructure located within the borders of the European Union.
  • It is possible to access the data as a result of maintenance work carried out by the service provider's staff. This access is governed by the contract concluded between the Administrator and the Service Provider.

§7 Users' rights in relation to the processing of personal data

Users have the following rights, exercised upon request made to the Administrator:

User rightsDescription
Right of accessGaining access to your personal data.
Right of rectificationRequest the correction of inaccurate or incomplete data without delay.
Right to erasure (to be forgotten)Request the immediate deletion of personal data. The deletion of users' data shall consist in their anonymisation. The administrator may withhold the request in order to protect a legitimate interest (e.g. violation of the Terms and Conditions).
Right to restrict processingRestrict the processing of personal data in the cases indicated in Article 18 of the RODO (e.g. questioning its accuracy).
Right to data portabilityObtain data in a structured, commonly used machine-readable format.
Right to objectObject to the processing of data in the cases set out in Article 21 of the RODO.
Right of actionFile a complaint with the supervisory authority in charge of personal data protection (in Poland: the President of the Office for Personal Data Protection).

§8 Contact to the Administrator

The Administrator can be contacted in one of the following ways:

§9 Changes to the Privacy Policy

  • The Administrator reserves the right to change this Privacy Policy at any time without notifying the Users regarding the use and application of anonymous data or the use of cookies.
  • The Administrator reserves the right to change this Privacy Policy at any time. regarding the processing of Personal Data, of which it will inform users with newsletter accounts by e-mail within 7 days of the change in records.
  • Your continued use of the Website after the changes have been implemented means that you have read and accepted the changes.
  • If the User does not agree with the changes, he/she is obliged to delete his/her account from the Website or unsubscribe from the Newsletter service.
  • The changes made shall enter into force as soon as they are published on this subpage of the Website.

Privacy Policy last updated : 23.02.2026r.