This document contains information about the processing of your personal data by Cracow University of Technology in connection with the use of the online store services available on the website (hereinafter: the “Site”), as well as in connection with the establishment or maintenance of contacts related to the operation of the Store through other channels of communication, including e-mail, telephone calls or traditional postal correspondence.
I. Data Controller
The Controller of your personal data is Cracow University of Technology, with its registered office in Krakow, at 24 Warszawska Street, 31-155 Kraków, and is represented by the Rector of the Cracow University of Technology.
The Controller can be contacted:
- by letter or in person at the Controller’s office.
- by phone at +48 12 628 20 66,
- by e-mail: promocja@pk.edu.pl
II. Contact in matters related to the processing of personal data
The Controller has appointed a Data Protection Officer (hereinafter: DPO), who can be contacted regarding the processing of personal data. Contact with the DPO is possible via:
- DPO’s e-mail address: iodo@pk.edu.pl
- by phone at 510 894 675,
- in writing to the address of the Controller’s registered office
- in person at the Controller’s office – in this case, we encourage you to contact us in advance by e-mail to arrange a convenient appointment.
III. Security of your data
Whenever we process your personal data, we do so in accordance with the requirements of the GDPR. We use technical and organizational measures required by law as well as the changing security environment to ensure the security of the processing of your personal data.
IV. Purpose and legal basis for the processing of personal data
Your personal data shall be processed for the following purposes:
| Purpose of data processing | Legal grounds for data processing |
|---|---|
| Conclusion and execution of the contract – order | Article 6(1)(b) of the GDPR – conclusion of a contract (including taking steps to conclude it) and performance of the contract – concerning the ordering party) Article 6(1)(f) of the GDPR – legitimate interest: communication with contact persons in the scope of the performance of the contract – order |
| Receiving inquiries and providing answers (via the form available on the Site or by contacting us by e-mail, telephone, or postal mail) | Article 6(1)(f) of the GDPR (legitimate interest – ensuring contact with the Controller, receiving inquiries regarding the services offered by them and providing answers) |
| Conducting promotional and marketing activities, including through electronic communication tools (e.g., e-mail). Selected forms of communication, such as sending newsletters, may require additional consent under separate laws | Article 6(1)(f) of the GDPR (legitimate interest – direct marketing of own services); Article 6(1)(a) of the GDPR (consent) – if you agree to receive newsletters, the consent may be withdrawn at any time |
| Conducting analytical and statistical activities regarding User activity on the Site through cookies or other similar technologies. Installing cookies for this purpose may require obtaining your additional consent under separate legislation | Article 6(1)(f) of the GDPR (legitimate interest – conducting analytical and statistical activities regarding the website in order to develop and improve services) |
| Data archiving | Article 6(1)(c) of the GDPR (fulfillment of the legal obligation incumbent on the Controller) in connection with the implementation of the tasks specified in the Act of 14 July 1983 on the national archival resources and archives (Journal of Laws of 2020, item 164, as amended) |
| Investigation or defense against potential claims | Article 6(1)(f) of the GDPR (legitimate interest – pursuing claims, undertaking debt collection activities) |
V. Retention period of personal data
Your personal data will be processed for the period necessary to achieve the purposes indicated above. Depending on the legal basis, this will be in particular:
- the period of execution of the order and thereafter for the period in which the law prescribes the retention of data;
- for the duration of correspondence or contact;
- until an objection to data processing is raised – in cases where data processing is based on a legitimate interest (described in the table above).
After the aforementioned period, your personal data will be archived for the period in which we are required by law to store your data or for the period necessary for the establishment, investigation, and defense of claims – when applicable, and will then be deleted.
VI. Recipients of personal data
Recipients of your personal data are entities providing services to the Controller under data processing agreements, services such as ICT services (provision or maintenance of IT systems); legal services; consulting services; accounting services; postal and courier services, as well as entities and authorities authorized to receive data under the law.
VII. Rights related to the processing of personal data
The provision of your personal data is a statutory requirement/condition for concluding a contract.
VIII. Obligation to provide data
Provision of data is voluntary but may be necessary for the purposes for which they are processed, i.e., to respond to an inquiry, order a service, conclude and perform a contract, or use the Site.
IX. Cookies policy
When you visit the Site (hereinafter also referred to as the “Service”), we may collect information from you such as cookie IDs, information collected through cookies, or other similar technologies.
Cookie files (so-called “cookies”) are IT data, in particular text files, which are stored on the User’s terminal equipment and are intended for use on the Site. Cookies usually contain the name of the website from which they originate, their storage time on the end User device, as well as a unique number.
Cookie identifiers, as well as information collected through cookies or other similar technologies in some situations, may constitute personal information. The entity placing cookies on the Site User’s terminal equipment and accessing them is the Site Operator, i.e., Cracow University of Technology.
Cookies are used to:
- enable the User to use the Site and ensure the proper functioning of its functionality (essential cookies);
- create statistics that help to understand how Users of the Site use its pages, which allows for improvement of their structure and content (analytical cookies).
Two main types of cookies are used in the Service: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User’s end device until logout, leaving the Site, or disabling the software (web browser). Persistent cookies are stored in the User’s end device for the time specified in the cookie file parameters or until the User deletes them.
The following types of cookies are used as part of the Site:
| Name of the cookie | Storage period | The purpose of saving Cookies |
|---|---|---|
| wordpress_logged_in_[hash] | Until the end of the session | An essential cookie used by the WordPress system. Stores information about the logged-in User. |
| wordpress_sec_[hash] | Until the end of the session | An essential cookie used by the WordPress system. It is used to authenticate the logged-in User in the admin panel. |
| wordpress_test_cookie | Until the end of the session | An essential cookie used by the WordPress system. Checks whether cookies are enabled in the User’s browser. |
| wp-settings-{time}-[UID] | 1 year | An essential cookie used by the WordPress system. Stores the WordPress dashboard personalization preferences for the logged-in User. |
| woocommerce_cart_hash | Until the end of the session | An essential cookie used by the WooCommerce plugin. It helps to determine when the contents of the shopping cart change. |
| woocommerce_items_in_cart | Until the end of the session | An essential cookie used by the WooCommerce plugin. Keeps track of the number of products in the shopping cart. |
| wp_woocommerce_session_[hash] | 2 days | An essential cookie used by the WooCommerce plugin. It contains a unique code for each customer, so it is possible to find the cart data in the database. |
| _ga | 2 years | A cookie used by Google Analytics. Used to distinguish Users. |
| _ga_<container-id> | 2 years | A cookie used by Google Analytics. It is used to store session status. |
| wfwaf-authcookie-[hash] | Until the end of the session | An essential cookie used by the Wordfence plug-in. Used to check the User’s identity before loading WordPress. |
| _icl_current_language | Until the end of the session | An essential cookie used by the WPML plug-in. Stores the User’s current language. |
| _icl_visitor_lang_js | Until the end of the session | A cookie used by the WPML plug-in. Stores the visitor’s language preferences. |
| wp-wpml_current_language | Until the end of the session | A cookie used by the WPML plug-in. Stores the User’s current language. |
When entering the website for the first time, the User will see a banner that informs them of the use of cookies and allows them to be managed. The User can manage the cookies installed on their device, i.e., agree to all categories of cookies or only some of them. Consent can also be revoked at any time by clicking the “I reject” button. If the User accepts the installation of all categories of cookies, they should click the “I accept” button. To manage the cookie settings for a particular cookie category, click on the “Cookie Settings” button, slide the corresponding button on the cookie banner, and then click the “Save and Close” button. The “Cookie Settings” button is located at the bottom left corner of the Site. The ability to manage cookies does not apply to essential cookies, which cannot be disabled or rejected.
The User can also, on their own, and at any moment, change the Cookie settings of the software used to browse websites (web browser). By default, the web browser allows cookies to be stored on the User’s end device. These settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the settings of your web browser or inform you of their placement on the Site User’s device each time. The detailed information on the possibility and the ways regarding cookie management are available in the settings of the web browser.
X. Analytical and marketing tools used by the Site
Third-party entities may use cookies and similar technologies to collect or receive information from the Site or other places on the internet and use them to provide measurement and ad-targeting services. By managing your cookie settings, you can choose whether you consent to the collection and use of information for ad targeting. For instance:
GOOGLE ANALYTICS
The Site uses Google Analytics, which is a web statistics and web analytics tool that gives insight into the Site’s data traffic, provided by Google. We use this tool to create statistics for the purpose of adapting the content of our websites to Users’ preferences and continuously optimizing them.
You can prevent the installation of cookies by using the appropriate settings of your web browser. You can also prevent Google from storing data collected through cookies and about your use of the Site by installing a browser add-on that blocks the embedding of Google Analytics scripts available here. You can find more information about Google Analytics here.
Due to the use of the Google Analytics tool, personal data obtained in connection with the use of the website may be transferred outside the European Economic Area. In this case, the transfer of personal data is based on the standard contractual clauses concluded by the Controller with the tool provider. We encourage you to read the Personal Data Processing Agreement, including the contents of the standard contractual clauses that are part of it.
For information on how Google collects data when you use its partners’ sites and applications, see here.
GOOGLE ADWORDS
This tool measures the effectiveness of advertising campaigns, allowing you to analyze the collected data. Google AdWords allows us to display our ads to people who have previously visited the Site. Information on Google’s processing of Google AdWords is available here.
FACEBOOK BUSINESS TOOLS
In connection with the use of Facebook Business Tools, we and Facebook act as joint controllers within the meaning of Article 26 of the GDPR, based on arrangements between the joint controllers to define the appropriate scope of responsibilities for ensuring compliance with the obligations under the GDPR. In accordance with these arrangements, we are responsible for providing you with the following information:
- The use of business tools constitutes the implementation of the legitimate interest of the Controller and our trusted partners (Article 6 section letter f of the GDPR), consisting in conducting marketing activities (behavioral advertising) and measuring the effectiveness of advertising.
- For more information on data processing, please see the Facebook Data Policy (including information that Facebook is a joint controller, the information required by Art. 13 section 1 letters (a) and (b) of the GDPR, information on how Facebook processes data, the legal basis and how to exercise data subject rights against Facebook) available here.
- Facebook is responsible for ensuring the enforcement of data subject rights pursuant to Articles 15 to 20 of the GDPR with respect to personal data stored by Facebook after joint processing.
Facebook also acts as our processor and may transfer personal data outside the European Economic Area. The transfer of personal data in such a case is based on standard contractual clauses.
You can manage your privacy settings from your Facebook account.
Facebook Pixel is an analytics tool available within Facebook that helps measure the effectiveness of ads based on analysis of Users’ actions on the Store, provided by Facebook, Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), as well as enabling Facebook to target personalized ads to you. Keep in mind that Facebook may combine the collected information with other information it has obtained in connection with your use of Facebook, and then use it for its own purposes (including marketing).
LINKEDIN INSIGHT TAG
The LinkedIn Insight Tag (also known as the LinkedIn Pixel) is a piece of JavaScript code that, when added to a site, collects data that can help you track conversions, remarket, and gain insights into statistics about who is visiting and interacting with the Site. This tool makes it easy for us to implement LinkedIn conversion tracking on the Site, as well as create targeted audiences.
LinkedIn data processing information is available at the link: LinkedIn Privacy Policy.
The Site Operator reserves the right to make changes to the Cookies Policy. Any changes will be published on the Site.