§ 1. General provisions

1. The privacy policy and the use of cookies on the website (hereinafter: “Policy”) was created and adopted by VIVO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNNOŚCIĄ with its registered office in Warsaw, address: ul. Bartycka 26/24, 00-716 Warsaw.

2. The terms used in the Policy mean:
1) Website: website;
2) User: an entity using the publicly available Website;
3) Owner: VIVO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Bartycka 26/24, 00-716 Warsaw, NIP: 5342571122; 4) Cookies: text files sent by the Website and saved on the User’s end device, which the User uses when browsing the web. The files contain information necessary for the proper functioning of the Website. Cookies most often contain the name of the website domain they come from, their storage time on the end device and the number;

3. The purpose of the Policy is in particular:
1) providing Users with information regarding the use of Cookies on the Website, required by law, including the Telecommunications Law;
2) providing Users with privacy protection to the extent corresponding to the standards and requirements specified in applicable legal provisions.

4. The owner limits the collection and use of information about Users to the minimum necessary to provide services to them.

5. In order to gain full access through the Website to the content and services offered by the Owner, it is advisable to accept the rules resulting from the Policy. Acceptance may be made using the settings of the software installed in the device used by the User or the configuration of the service.

6. They are applicable, inter alia, the following legal provisions:
1) the Act of July 16, 2004, Telecommunications Law (Journal of Laws 2017.1907, i.e. as amended);
2) the Act of July 18, 2002 on the provision of electronic services (Journal of Laws 2017.1219, i.e. as amended);
3) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on the protection of data) (Journal of Laws L 119 of 4.5.2016) together with Polish provisions on the protection of personal data.
4) The Act of May 10, 2018 on the protection of personal data (Journal of Laws of 2019, item 1781, i.e.).

§ 2. Protection of privacy and personal data

1. Users’ data are processed by the Owner in accordance with the law. The Users’ personal data obtained by the Owner are processed on the basis of the consent given by the User or the occurrence of another premise authorizing the processing of data according to the provisions, in particular the Regulation.

2. The owner takes special care to protect the interests of the data subjects, and in particular ensures that the data are:
1) processed in accordance with the law, fairly and transparently for customers and other data subjects;
2) collected for specific, explicit and legitimate purposes and not further processed in a manner inconsistent with these purposes;
3) adequate, relevant and limited to what is necessary for the purposes for which they are processed;
4) correct and, if necessary, updated;
5) stored in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed;
6) processed in a manner ensuring adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures,

3. The owner applies appropriate technical and organizational measures ensuring protection of the personal data being processed, appropriate to the nature, scope, context and purposes of processing as well as the risk of violating the rights or freedoms of natural persons.

4. The Owner strives to systematically modernize the IT, technical and organizational measures to protect this data, in particular, the Owner provides updates of IT security measures to protect against viruses, unauthorized access and other threats resulting from the operation of the IT system and telecommunications networks.

5. The owner may – apart from other cases resulting from legal provisions – process the following personal data of the Customer necessary to establish, shape the content, amend or terminate the contract:
1) surname and first names of the Client;
2) permanent address of residence;
3) correspondence address, if different from the residential address;
4) the right to object to processing or to limit processing;
5) Customer’s e-mail addresses;
6) telephone number;

6. The Owner may process, with the consent of the Customer and for the purposes of advertising, market research and customer behavior and preferences, with the purpose of the research results for the purpose of improving the quality of services provided by the Owner, other data concerning the Customer that are not necessary to provide the service by electronic means.

7. Each User who in any way made his data available to the Owner, the Owner provides access to data and the use of other rights to data subjects, in accordance with applicable law, including those persons:
1) the right to withdraw consent to the processing of personal data;
2) the right to information regarding their personal data;
3) the right to control the processing of data, including their supplementation, updating, straightening and deletion;
4) the right to object to processing or to limit processing;
5) the right to lodge a complaint with the supervisory authority and use other legal means to protect one’s rights.

8. The owner may process personal data in an automated manner, including profiling, in accordance with the provisions of the Regulation. In this case, the purpose of the Owner’s actions are marketing purposes or the need to personalize messages sent to Users (including matching information to the needs or expectations of the User). The User has the right to object to such processing of his data – this objection may be expressed by sending a message to the Owner’s address.

9. A person having access to personal data processes them only on the basis of the Owner’s authorization or a contract for entrusting the processing of personal data and only at the Owner’s request.

10. In connection with the operation of the Website, the Owner uses the services of other entities, including for the purpose of performing the contract with the User. Users’ personal data may be transferred to:
1) a hosting company,
2) software providers to operate the Website,
3) internet service providers,
4) companies providing courier or postal services,
5) electronic payment platform providers,
6) invoice issuing software suppliers,
7) entities providing accounting services,
8) providers of marketing or advertising services.

§ 3. Cookies

1. Cookies identify the User, which allows the content of the website he uses to be adapted to his needs. By remembering his preferences, it allows you to adjust the content addressed to him, including advertisements. The owner uses Cookies to guarantee an appropriate standard of Website convenience, and the collected data is used only within the company to optimize activities.

2. Cookies are used for the following purposes:
1) adjusting the content of the Website to the User’s preferences;
2) optimizing the use of the Website, in particular by recognizing the User’s end device,
3) creating statistics,
4) maintaining the User’s session,
5) providing the User with advertising content.

3. The owner processes statistical information on the use of the Website, including information about the session, IP number, the amount of time spent on individual pages and subpages, the use of individual service functionalities, information about the device and the web browser. These data are processed in accordance with Art. 6 sec. 1 lit. f of the Regulation in the legitimate interest of the administrator consisting in facilitating the use of the Website, improving the quality and functionality of the services provided, and the processing of this data does not violate the rights and freedoms of Users. Information about Users is not used for any additional purposes.

4. These data are processed as part of the Owner’s ongoing activities, but not longer than 60 days from receiving the information. After this time, the Owner may continue to process general statistical data that will be devoid of any information about individual Users.

5. It should be remembered that in some cases the software installed by the User on the end device used for browsing websites (eg a web browser) introduces the default storage of Cookies on the User’s end device. Users can change their cookie settings at any time. These settings can be changed, inter alia, in such a way as to block the automatic settings of Cookies or to inform about their every posting on the User’s end device. Detailed information in this regard is available in the settings and instructions for the software (web browser).

6. The user may at any time disable or restore the option of collecting Cookies by changing the settings of his device and web browser in the field of the use of cookies or other similar technologies.

7. Changing the settings constitutes an objection which may cause difficulties in using the Website in the future. Disabling cookies completely will not mean that you will not be able to view the content posted on the Website, except for those whose access requires logging in.

8. Failure to change the settings means that the data will be stored on the User’s end device (using the Website will automatically place Cookies on the User’s end device).

9. Cookies are stored on the User’s devices for no longer than 12 months.

10. The data stored on the User’s end device do not cause any configuration changes in the User’s end device or the software installed on this device.

11. Information on Cookies also applies to other similar technologies used on the Website.

§ 4. Complaints

1. Complaints may be sent to the Owner in electronic form to the address

2. There is a possibility of using out-of-court methods of dealing with complaints and redress in legal relations with Consumers, including:
1) the possibility of resolving disputes by electronic means via the ODR platform (online dispute resolution), available at;
2) the possibility of conducting amicable proceedings before a common court or other authorities.

3. The owner undertakes to consider the complaint within 14 days.

4. If the complaint is accepted, the Owner will take appropriate action.

5. In order to consider the complaint, the Owner processes the personal data of the Users submitting the complaint, in particular the e-mail address, name, surname, content of the complaint, circumstances of the event giving rise to the complaint, information obtained in the course of examining the complaint, including explaining the event giving rise to it. In the course of considering the complaint, the Owner may process a number of other information, including information about the User’s use of the Services, cookies or other similar technologies, information about devices. These data are processed in accordance with Art. 6 sec. 1 lit. b of the Regulation in order to consider the complaint and are processed for the time necessary to consider the complaint and after the complaint procedure is completed for archiving purposes in accordance with the Accounting Act, if it is necessary to defend against any claims against the service provider.

6. In the event of undertaking an investigation regarding a possible breach of the provisions of the Regulations, Policy or legal provisions, rules of social coexistence or good manners, the Owner may process the User’s personal data until the end of the pending proceedings and until the expiry of the limitation period for claims, which is usually 3 years, but in special cases provided for by law it may be longer. These data will then be processed, including made available in accordance with art. 6 sec. 1 lit. f of the Regulation, i.e. in the legitimate interest of the administrator consisting in pursuing his claims against the User. The legitimate interest of the administrator will then override the rights and freedoms of the User.

§ 5. Final provisions

1. The policy was adopted under the Owner’s order and shall enter into force on April 14, 2020 The content of the Policy may be changed in the same manner.

2. Any deviations from the Policy must be made in writing under pain of nullity.

3. The law applicable to the Policy is the law of the Republic of Poland.

4. In matters not covered by the Policy, the relevant legal provisions shall apply.