1. The Controller of your personal data is Dorota Kopaczewska, conducting business activity under the company name “Dorota Kopaczewska SHINE" (address of the permanent place of business: ul. Willowa 20, 05-410 Józefów, Poland), NIP number: 7121888005, REGON number: 141413098.
  2. In matters related to the processing of personal data, you can contact the Controller via email at the following address: dkopaczewska@gmail.com.
  3. The Controller processes your personal data – name and email address – in order to send you a newsletter containing commercial information. The application above data is voluntary but necessary to receive the newsletter (failure to provide the above personal data will result in the inability to receive the newsletter).
  4. The legal basis for the processing of your personal data for the above purpose is Art. 6(1)(f) of the GDPR, according to which the Controller may process personal data to realize its legitimate interest, in this case sending you a newsletter containing commercial information.
  5. Your personal data will not be used for automated decisions or profiling.
  6. The Controller will process your personal data until the processing goal is achieved or until you object effectively.
  7. The recipient of your personal data (based on the contract entrusting the processing of personal data concluded with the Controller) is the provider of the program used to send the newsletter.
  8. Your personal data will not be transferred to third countries or international organizations.
  9. You have certain rights in connection with the Controller’s processing of your personal data:
    1. you have the right to be informed what personal data concerning you are processed by the Controller and to receive a copy of such data (the right of access). The first copy of data is free of charge and the Controller may charge a fee for the subsequent copies;
    2. if the data processed become outdated or incomplete (or otherwise incorrect), you have the right to request a rectification;
    3. in certain situations, you may request the Controller to delete your personal data, i.e. when the data are no longer necessary for the purposes of the Controller’s communication; when you withdraw your consent to the processing of the data (unless the Controller has the right to process the data on another legitimate basis); if the processing is unlawful; or if the need to delete the data arises from the legal obligation of the Controller;
    4. the right to object to the processing of personal data in order to send you a newsletter. In the event of an effective objection, the Administrator will stop processing personal data in the abovementioned purpose;
    5. if you believe that the personal data processed are incorrect, the processing is unlawful or that the Controller no longer needs specific data or that you object to the processing, you may also request the Controller not to carry out any operations on the data, but only to store it, for a specified period of time (e.g. to verify the correctness of the data or to pursue claims).
    6. you have the right to lodge a complaint with the Head of the Office for Personal Data Protection if you believe that the processing of the personal data relating to you violates the provisions of the GDPR.