Website Privacy Policy

www. Protecting Users' privacy is particularly important to Fun With Pan LTD. For this reason, Users of the website www.gc-catering.pl are guaranteed high standards of privacy protection. Fun With Pan Ltd as the Data Administrator, ensures the security of the data provided by Users. The purpose of the Administrator is also to properly inform Users about the rights and obligations related to the processing of personal data, especially in relation to the provisions on the protection of personal data specified in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27/04/2016. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"). Therefore, taking care to protect the privacy of Website Users, in this document the Administrator informs about the legal basis for the processing of personal data provided by Users in connection with their use of the Website www.gc-catering.pl (hereinafter referred to as the "Website"), methods of collecting, processing and protection of personal data, as well as about Users' rights. The User is any natural person to whom the data relates who uses the website www.gc-catering.pl or electronic services available via the Website. The administrator of personal data provided by the Fun With Pan Ltd (hereinafter referred to as the "Administrator").

1.USER CONSENT

The use of the website www.gc-catering.pl by the User means that the User accepts that the Administrator collects and uses personal data in accordance with this Privacy Policy. The Website User's personal data are processed by the Administrator based on his consent, and in some cases described in this document, as part of the Administrator's legitimate interest. The user has the right to withdraw previously expressed consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If there is a change to this Privacy Policy and the User continues to use the Website, this is deemed to constitute consent to the current terms of the Privacy Policy

2. PERSONAL DATA PROCESSED BY THE ADMINISTRATOR

1.Method of obtaining personal data The Administrator obtains personal data directly from the User via the Website, through the functionalities and communication tools available therein, and through sending messages to the Administrator. Providing personal data by the User is voluntary.

2.Types of personal data processed The Administrator collects the following personal data about the User via the Website:

1.Name and surname;

2.Email address;

3.Telephone number;

4.Message content;

5.Message subject.

3.PERSONAL DATA PROCESSING

The method of processing User's data by the Administrator depends on how the User uses the Website and the functionalities available therein. The Administrator processes the User's personal data for the following purposes: 1.Communication with the User. The Administrator uses the User's personal data to communicate with him in a personalized way. The information communicated to the User concerns the products or services offered, personal data security, network updates, reminders, but also suggested offers of the Administrator or its partners. Communication with the User also applies to User service. Personal data is used to help the User, solve technical problems and respond to his complaints. Presenting commercial offers to the User electronically.

2.Presenting commercial offers to the User electronically.

The purpose of using the User's personal data provided by him via the functionalities and communication tools available on the Website is marketing communication conducted by the Administrator as part of his business, in particular presenting commercial offers to the User electronically. Presenting commercial offers to the User by telephone. 3.Presenting commercial offers to the User by telephone. The purpose of using the User's personal data provided by him via the functionalities and communication tools available on the Website is marketing communication conducted by the Administrator as part of his business, in particular by presenting commercial offers to the User by telephone.

4.Sending information to the User electronically as part of subscribing to the Administrator's newsletter.

The purpose of the Administrator's use of the User's personal data provided as part of the Administrator's newsletter subscription form available on the Website is to inform the User electronically (e-mail) about new products, services, promotions or events of the Administrator or its partners.

5.Allowing the User to submit comments or opinions.

The Administrator uses the User's personal data to enable him to comment/opinion on the activities, services or products of the Administrator or entities cooperating with him.

The Administrator may process the User's personal data obtained via the Website also for the following purposes:

1. in order to conclude and implement a possible contract between the User and the Administrator and to service the User as a client of the Administrator in accordance with Art. 6 section 1 letter b) GDPR;

2. in order to conduct financial settlements with the User who is a client of the Administrator for the implementation of a possible contract concluded between the parties, as well as possible pursuit of claims from the User who is a client as part of the legally justified interest of the Administrator in accordance with Art. 6 section 1 letter f) GDPR and fulfillment of the Administrator's legal obligations towards tax authorities on the basis of separate provisions in accordance with Art. 6 section 1 letter c) GDPR;

3. in order to implement the Administrator's marketing activities within the legitimate interest of the Administrator within the meaning of Art. 6 section 1 letter f) GDPR, as well as in accordance with the declarations of will regarding marketing communication submitted to the Administrator. Consents granted in the field of marketing communications (e.g. to sending commercial information by electronic means or telephone contact for direct marketing purposes) may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal;

4. in order to fulfill the Administrator's legal obligations towards the User specified in the GDPR, within the meaning of Art. 6 section 1 letter c) GDPR.

4. SHARING PERSONAL INFORMATION The User's personal data is not transferred by the Administrator to third parties.

5.USER RIGHTS User Rights At each stage of data processing, the user is provided with a number of rights allowing him to access his data, verify the correctness of data processing, correct it, and also has the right to object to their processing and may request the deletion of data, restriction of processing or transfer of data. If the User wishes to exercise his rights as a personal data subject, he may contact the Administrator using the following contact details: Fun With Pan Ltd, eventsandcatering@funwithpan.org. The right to lodge a complaint with the supervisory authority. The User whose personal data is processed by the Administrator has the right to lodge a complaint with the supervisory authority competent in matters of personal data protection (President of the Personal Data Protection Office)

7.OTHER IMPORTANT INFORMATION

Protecting the security of your personal data

1.The Administrator implements appropriate measures to ensure the security of the User's personal data. Safe use of the Website is ensured by the systems and procedures used to protect against access and disclosure of data to unauthorized persons. In addition, the systems and processes used by the Administrator are regularly monitored to detect possible threats. Personal data obtained by the Administrator are stored in computer systems to which access is strictly limited.

2.Storage of personal data

The storage period of Users' personal data depends on the purposes of data processing by the Administrator. The administrator stores personal data for the period necessary to achieve specific goals, i.e.: for the period of running a business by the Administrator.

In each of the above cases, after the expiry of the necessary processing period, the data may be processed only for the purpose of pursuing claims arising from the relationship between the parties until such claims are finally resolved by legal means.

3.Changes to the Privacy Policy

In order to update the information contained in this Privacy Policy and its compliance with applicable law, this Privacy Policy may be changed. If the content of the Privacy Policy is changed, the date of its update indicated at the end of its text will be changed. In order to obtain information on how personal data is protected, the Administrator recommends that Users regularly read the provisions of the Privacy Policy.

4.Contact information

In order to obtain any information regarding this Privacy Policy, the User may contact the Personal Data Administrator.