Privacy Policy

I. General Provisions

1. This Privacy Policy defines how personal data of Users necessary for the provision of electronic services via the website www.dispace.uk is collected, processed, and stored.
2. The Website solely collects personal data necessary for the provision and development of the services offered therein.
3. Personal data collected via the Website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter GDPR), as well as the Personal Data Protection Act of 10 May 2018.

II. Data Controller

The Controller of personal data collected through the Website is Dispace, email info@dispace.uk

III. Purpose of Collecting Personal Data

1. Personal data is used for the following purposes:
   • registering an account and verifying the User's identity,
   • enabling login to the Website,
   • performing contracts regarding services and e-services,
   • communicating with the User (livechat, contact form, etc.),
   • sending newsletters (after the User consents to receiving them),
   • managing the commenting system,
   • providing social networking services,
   • promoting the Controller's offerings,
   • marketing, remarketing, and affiliation,
   • personalising the Website for Users,
   • analytical and statistical activities,
   • debt collection,
   • establishing and pursuing claims or defending against them.
2. Providing data is voluntary, but necessary to enter into a contract or use other functionalities of the Website.

IV. Types of Personal Data Processed

The Controller may process the following personal data of the User: first and last name, date of birth, residential address, email address, telephone number, and tax identification number (NIP/VAT number).

V. Period of Personal Data Processing

Users' personal data will be processed for the following periods:

• when the legal basis for data processing is the performance of a contract - until the statute of limitations for claims after its execution expires,
• when the legal basis for data processing is consent - until it is revoked, and after the revocation of consent, until the statute of limitations for claims expires.

In both cases, the limitation period is 6 years, and for claims regarding periodic benefits and claims related to conducting business activity - 3 years (unless a specific provision stipulates otherwise).

VI. Sharing Personal Data

1. Users' personal data may be transferred to: entities affiliated with the Controller, their subcontractors, entities cooperating with the Controller, e.g., companies handling e-payments, courier/postal companies, and law firms.
2. Users' personal data will not/will be transferred outside the European Economic Area (EEA).

VII. Users' Rights

1. The Website User has the right to: access their personal data, rectify it, delete it, limit its processing, transfer it, object to its processing, and withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
2. A notification regarding the User's exercise of rights resulting from the aforementioned entitlements should be sent to the following address: info@dispace.uk
3. The Controller complies with or refuses to comply with the request promptly - within a maximum of one month from its receipt.
4. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing violates their rights and freedoms (GDPR).

VIII. Cookies

1. The Website collects information using cookies - session, persistent, and third-party cookies.
2. The collection of cookies supports the proper provision of services on the Website and serves statistical purposes.
3. The User can specify the extent of cookie access to their device in the browser settings.

IX. Automated Decision-Making and Profiling

1. Users' data cannot be processed in an automated manner such that any decisions could be made regarding them as a result.
2. Users' data may be profiled to tailor content and personalise the offer upon obtaining their consent.

X. Final Provisions

1. The Controller has the right to amend the Privacy Policy, but the rights of Users will not be limited.
2. Information about the implemented changes will appear in the form of a notice available on the Website.
3. In matters not covered by this Privacy Policy, the provisions of the GDPR and Polish law shall apply.