1. Personal data

Personal data administrator

The administrator of personal data is CONCILIA, a limited liability company with its registered seat in Poland, at 6 Cyfrowej St (ul. Cyfrowej 6), 71-441 Szczecin, registered in the Register of Entrepreneurs kept by the District Court for Szczecin Centrum in Szczecin, 13th Commercial Division of the National Court Register under the KRS number 0000505574, with NIP/Tax ID: 8513175192, REGON No.: 32150353400000, share capital of 50,000.00 PLN, hereinafter: „the Administrator”. Contact with the Administrator at: office@concilia.com.pl.

Personal data collected by the Administrator are processed under the terms specified in the provisions on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and the EU Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (the General Data Protection Regulation – “GDRP”) and in the Polish regulations issued in connection with GDRP, including the Act of May 10th, 2018 on the protection of personal data. The Administrator preserves personal data and protects them against unauthorized access by third parties on the terms set out in the above-mentioned acts of law.

Should you have any questions regarding data processing, please contact the Administrator by email at: office@concilia.com.pl or by post correspondence to the official address of the Administrator.

The scope and purpose of personal data processing

As part of its activities, the Administrator collects and processes personal data:

a) in order to conclude and implement contracts concluded with the Users of the Website service: https://301carats.com, as well as to provide the correct and complete accomplishment of the ordered service and to fulfil the legal obligations incumbent on the Administrator (under the legal basis of Art. 6 sec. 1 lit. b, GDPR, Art. 6 sec. 1 lit. c, GDPR);

b) in order to send commercial information (newsletter) at the email address provided by the User during the registration to the Website Service (under the legal basis of Art. 6 sec. 1 lit. a, GDPR);

c) in order to make contact with the Service User via live chat (under the legal basis of Art. 6 sec. 1 lit. f, GDPR);

d) and resulting from the legitimate interests pursed by the Administrator: for analytical and statistical purposes as well as to ensure IT security related to the Website: https://301carats.com (under the legal basis of Art. 6 sec. 1 lit. f, GDPR).

Your rights

Processing of your personal data is carried out on a voluntary basis, however, depending on the circumstances, refusing to provide data or requesting their removal may prevent us, for example, from performing the service fully and properly.

You have the right to access your personal data; the right to rectify them; delete or restrict their processing; the right to transfer the data; the right to object if the processing is based on Art. 5 sec. 1 lit. f of the GDPR.

If the processing of your data is based on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Right to file a complaint

You have the right to file a complaint connected with the processing of your personal data by the Administrator to the President of the Office for Personal Data Protection.

Processing period

The data are stored for the duration of the contract and after its termination for the period resulting from the law provisions on archiving and limitation of claims, as well as until the relevant legitimate interests are realized by the Administrator. We shall send the newsletter and other similar information until the consent is withdrawn or objection is raised in this regard.

Transferring personal data to third parties

Recipients of your personal data may be authorized employees of the Administrator, external service providers, e.g. entities providing IT and marketing services (in particular Benhauer Sp. z o.o. - SALESmanago operator), hosting providers, internet payment service providers, carriers, insurers, subcontractors and other entities processing data on behalf of the Administrator on the basis of the entrustment agreement of personal data processing; as well as accountants, lawyers, administrative bodies, state services and courts.

Data transfer to third countries (outside the European Economic Area, the EEA)

Your personal data may be transferred to third countries, such as the USA, in connection with the Administrator's use of the services of entities based outside the European Economic Area (Google Inc, Facebook, Instagram, LinkedIn, Pinterest, Tidio) in order to ensure regularity, efficiency and effectiveness of the services provided. In this case, the Administrator, in accordance with the requirements of the GDPR, has implemented security measures aimed at ensuring proper processing and adequate protection of your personal data.

a) Google Suite

More information on the processing of personal data by this entity can be found at: https://support.google.com/a/answer/60762?hl=pl

b) Facebook

More information on the processing of personal data by this entity can be found at: https://pl-pl.facebook.com/business/gdpr/

c) Instagram

More information on the processing of personal data by this entity can be found at: https://www.facebook.com/help/instagram/519522125107875

d) LinkedIn

More information on the processing of personal data by this entity can be found at: https://www.linkedin.com/help/linkedin/answer/62533/

e) Pinterest

More information on the processing of personal data by this entity can be found at: https://policy.pinterest.com/pl/privacy-policy/

f) Tidio

More information on the processing of personal data by this entity can be found at: https://www.tidio.com/privacy-policy/

No profiling

Your personal data shall not be subject to profiling as one of the forms of automated personal data processing.

2. Cookies

The Website uses "cookies"

The administrator stores and accesses "cookies", i.e. small text information sent by the web server and saved on the hard drive or other data carrier of the User, for the purpose of: proper functioning of the website, website configuration, website security and reliability, status monitoring sessions or analyses, statistics, research and audit of website views and display of personalized advertisements. In particular, the Administrator uses "cookies" to collect general and anonymous static data via the analytical tools of Google Analytics [cookie administrator: Google Inc. based in the USA].

The legal basis for the processing of personal data from "cookies" are the legitimate interests of the Website operator, consisting in ensuring high quality of services and transaction security.

By entering the website, the User is identified (in the form of a "cookie"). Data about the User are transferred to: Google Inc, Facebook Inc and Benhauer Sp. z o.o. (SALESmanago) – by the use of tracking codes.

If the User is an Identified User (they have completed the contact form integrated with SALESmanago and confirmed consent to marketing) then they are personally identified - in the SALESmanago system there is information about the User's activity on the website. Based on this activity, the User is assigned appropriate tags and targeted specific messages.

Information on the content of the User's panel is sent to SALESmanago and on their basis appropriate tags are assigned to the User and specific content is sent.

The Website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in the parameters of "cookies" or until they are deleted by the User.

The administrator uses "cookies" only after the Website User has given prior consent in this regard. The consent to the use of all "cookies" by the operator of the Website takes place by clicking the button: "I accept" when the message about the use of "cookies" by the Administrator is displayed or by closing this message.

The consent referred to in the previous point may only cover selected "cookies". In this case, the Website User should use the option: "Cookie settings", available in the message about the use of "cookies" by the Administrator.

If the Website User does not consent to the use of "cookies" by the Website operator, they may use the option: "I do not agree", also available in the message on the use of "cookies" by the Administrator.

You can also, independently and at any time, change the settings for "cookies", specifying the conditions for their storage and access through "cookies" to your Device. Changes to the settings can be made using the web browser settings or by using the service configuration. These settings can be changed in particular in such a way as to block the automatic handling of "cookies" in the settings of the web browser or to inform you about their every posting of "cookies" on your Device. Detailed information on the possibilities and methods of handling cookies is available in the software (web browser) settings.

You can delete "cookies" at any time applying the functions available in the web browser you are using.

Restricting the use of "cookies" may affect some of the functionalities available on the Website.

3. Changes to the Privacy Policy

Any changes to the Privacy Policy in the future will be published on the Website. We recommend that you visit our website regularly to check for updates to our Privacy Policy. If you do not accept our Privacy Policy or changes to the Privacy Policy, you should stop using our website.