At Impact Gallery, protecting the personal data of our customers is of utmost importance to us. We make every effort to ensure that Users feel secure in entrusting the processing of their personal data when using our Gallery's website.

The hereby Privacy Policy explains the principles and scope of processing Customers' personal data, their rights, as well as describes the duties of the administrator of such data, and also informs about the use of cookies.

I. Legal Basis for Personal Data Protection

With due regard for the privacy rights of its Customers, Impact Gallery ensures the security of personal data entrusted to it and processes them in accordance with the requirements of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) and the Act of August 29, 1997 on the protection of personal data and other legal regulations. 

II. Personal Data Administrator

1. The Personal Data Administrator is Impact Gallery Sp. z o.o. with its registered seat at ul. Ogrodowa 74, 32-080 Ujazd, registered in the Register of Entrepreneurs kept by the District Court in Kraków, XII Economic Department, under KRS number 00009955606, NIP 5130281425, e-mail address: biuro@impactgallery.pl (hereinafter referred to as the Administrator or the Gallery).
2. The Administrator shall exercise due diligence to protect the interests of data subjects, and in particular, shall ensure that the data it collects are:
   1. processed in accordance with the law,
   2. collected for designated legitimate purposes and not subjected to further processing incompatible with those purposes,
   3. substantively and adequately correct in line with the purposes for which they are processed, and stored in a form that allows identification of the persons to whom they relate for no longer than necessary to achieve the purpose of processing. 

1. Personal data of Users, collected by the Administrator, are shall be used for the purpose of contacting Users as well as for the purpose of performing other tasks related to the User's activity at the Gallery’s website impactgallery.pl.
2. The Gallery processes your personal data as it is necessary for:
   1. processing your order and payment,
   2. processing your requests communicated to the Gallery’s staff,
   3. handling requests which we receive from you (e.g. via contact forms)
   4. subscription and newsletter mailing,
   5. processing your claims, if any,
   6. storing data for archiving purposes and ensuring accountability (to demonstrate the Gallery's compliance with its obligations under the law),
   7. debt collection, litigation, arbitration and mediation, if any.
3. In addition, we are required by law to process your data for tax and accounting purposes, as well as for purposes connected with anti-money laundering and countering the financing of terrorism.
4. The Administrator processes Users' data in order to analyze their behavior on the website, which includes creating statistics and customizing the content of the website (i.e., the 'Suggested paintings' section) to the User's profile; namely: searched keywords, paintings clicked, location information and IP address, information about hardware settings, browser type and language, dates and times of sending requests, as well as referring URLs. The administrator uses services offered by social media websites as well as Google targeted advertising. The service is not responsible for the privacy policies governing the above-mentioned websites.
5. Your personal data shall also be processed by the Administrator for marketing purposes, including direct marketing of commodities and services offered by our Gallery. This includes contact by e-mail and telephone, provided that you have given us your consent.
6. Basing on your consent, the Administrator shall process your personal data for the purpose of storing data in cookies, collecting data from websites.
7. The Administrator processes the following personal data of Users:
   1. first and last name / company name,
   2. e-mail address,
   3. telephone number,
   4. delivery address.
8. The Administrator shall not collect identification data related to the transfer of logins, passwords, numbers and codes of payment instruments: credit cards, payment cards, bank account numbers, login data for payment systems (logins and passwords).

1. The User has the right to access and correct their personal data.
2. The User may withdraw the consent to process of personal data at any time.
3. The Administrator shall process the User's personal data until the User withdraws the consent or until the obligation to process the User's data imposed on the Administrator by generally applicable laws expires.
4. The User has the right to control the processing of their data, included in the Administrator's data filing system, and in particular the right to request completion, updating, rectification of personal data, temporary or permanent suspension of their processing or their deletion, shall the data be incomplete, outdated, untrue or collected in violation of the Act or are no longer necessary for the purpose for which they were collected.
5. In order to exercise the above rights, please send a relevant message to the following e-mail address: biuro@impactgallery.pl.

1. The Administrator may entrust the processing of Users' personal data to entities cooperating with the Gallery, only to the extent necessary to complete the transaction. This means that Customers' personal data may only be transferred to courier companies or postal operators for the sole purpose of processing the order.
2. In specific situations provided by Polish law, personal data may be made available to governmental institutions and authorities.
3. Apart from the purposes indicated in this Policy, Users' personal data shall not be made available to third parties in any way, nor transferred to other entities, for the purpose of sending marketing materials of such third parties.

1. The Impact Gallery website uses "cookies". Failure to change browser settings on the part of the User is equivalent to granting consent for their use.
2. The installation of "cookies" is necessary for ensuring proper provision of services at the Gallery. The "cookies" contain information necessary for the proper functioning of the Gallery, especially those requiring authorization.
3. We would like to draw attention to the fact that without placing "cookies" on the User's device, we are unable to offer full functionality of our service. Therefore, Users consent to our use of "cookies" when using our service through default browser settings (in accordance with Article 173(2) of the Telecommunications Law).
4. The Impact Gallery website uses 3 types of "cookies":
   1. "session cookies" are temporary files that are stored on the user's terminal device until the user leaves the Gallery's website. When the session ends, the information is permanently deleted from the device's memory. The mechanism of these files does not allow for the collection of any personal or confidential information from the User's device.
   2. “permanent cookies" are stored in the User's final device for the time specified in the parameters of "cookies" or until they are deleted by the User. Ending the session of a given browser or switching off the device does not remove the cookies from the User's device. The mechanism of "permanent cookies" does not allow for the collection of any personal data or any confidential information from the User's device.
   3. "analytical cookies" allow to better understand how the User interacts with the Gallery content, and to better organize its layout. "Analytical cookies" collect information about the use of the Gallery, the type of page from which the User was redirected, and the number of visits and the time of the User's visit to the Gallery website. This information does not record specific User personal data, but is used to compile statistics connected with the use of the Gallery.
5. The User has the right to decide on the access of "cookies" to their computer or other device they use, by selecting them in advance in their browser window. Detailed information on the possibility and methods of handling "cookies" is available in the settings of your software (web browser).

1. The Administrator shall apply technical and organizational measures to ensure protection of the processed personal data appropriately to the risks and categories of data protected. In particular, the Administrator shall protect the data from being disclosed to unauthorized persons, taken by an unauthorized person, processed in violation of applicable regulations, as well as from being altered, lost, damaged or destroyed.
2. This Privacy Policy complies with the provisions arising from Article 13 (1) and (2) of the RODO Regulation.
3. In matters not regulated by this Privacy Policy, the relevant provisions of Polish law shall apply.