# Privacy Policy If you have found your way to this document, it means that data security is important to you. Please know that we care about the appropriate treatment of your personal data. Respecting your time, we have prepared a shortened version of the most important principles regarding privacy protection. If the basic information proves insufficient for you, below you will find a broader description in which we explain how we handle the personal data entrusted to us. --- ## In Brief ### Data Controller **Company:** OpenAir Paweł Wyszomirski **Address:** ul. Panewnicka 126/3, 40-761 Katowice, Poland **Email:** kontakt@myopenair.com ### Your Rights - Access to your data - Rectification, correction, or erasure of data - Withdrawal of consent at any time - Restriction of processing or objection to processing - Data portability to another controller - Right to lodge a complaint with the President of the Personal Data Protection Office (UODO) ### Data Processing - **For orders:** order fulfillment, issuing documents, contact - **For contact:** responding to messages - **In social media:** interactions on our profiles - **For reviews:** publication of reviews on the website - **For the newsletter:** sending information and offers ### Data Sharing - IT companies supporting our website - Accounting and marketing services - Law firms and transport companies ### Cookies - We use cookies for the proper functioning of the website - You can manage cookies in your browser settings - We use both our own cookies and third-party cookies ### Retention Period - **Data processed based on consent:** until consent is withdrawn - **Data related to a contract:** until the statute of limitations for claims expires (5 years) - **Data processed due to legal regulations:** in accordance with those regulations **Policy effective date:** April 25, 2025 --- ## I. Basic Information The Controller of personal data is **OpenAir Paweł Wyszomirski**, ul. Panewnicka 126/3, 40-761 Katowice, Poland, Tax ID (NIP): 6491906137, Statistical ID (REGON): 389021816. We process data in accordance with the **General Data Protection Regulation 2016/679 ("GDPR")**. Please remember that providing personal data, including consent to its processing, is predominantly completely voluntary, but necessary for us to achieve the purpose for which it is provided. All provided personal data is processed solely to the extent and for the purpose for which it was made available. You have the right to update your personal data at any time. We ensure adequate protection of your personal data, guaranteeing that it will be processed solely for the purpose for which it was provided, stored securely, and not made available to unauthorized entities. By contacting us or placing an order, you provide your personal data, and we guarantee that your data will remain secure. Like almost every other website, we also use cookies. --- ## II. The Controller The Controller of personal data responsible for its security is: **OpenAir Paweł Wyszomirski** ul. Panewnicka 126/3, 40-761 Katowice, Poland **Tax ID (NIP):** 6491906137 **Statistical ID (REGON):** 389021816 **Email:** kontakt@myopenair.com --- ## III. Your Rights Current legal regulations grant you a range of rights related to the processing of your personal data: ### Access to personal data You have the right to access your data that we store as the controller. You can exercise this right by contacting us using the contact details provided. ### Change of personal data, rectification, or erasure You can make changes, including updating, correcting, or deleting your personal data that we process, by contacting us using the contact details provided. You can exercise the right to erasure when your data is no longer necessary for the purposes for which it was collected by us or when you withdraw your consent to data processing. ### Withdrawal of consent In the case of processing personal data based on consent, you may withdraw this consent at any time. We inform you about this right at every moment of collecting consent and enable the withdrawal of consent as easily as it was granted. To withdraw consent, please contact us using the provided contact details. ### Right to restrict processing or object to the processing of personal data You have the right to restrict processing or object to the processing of your personal data at any time due to a particular situation, unless processing is required by law. You may object to the processing of your personal data when: - The processing of personal data is carried out on the basis of a legitimate interest or for statistical purposes, and the objection is justified by a particular situation - Personal data is processed for direct marketing purposes, including profiling for this purpose Regarding the request to restrict data processing, we inform you that it applies when: - You question the correctness of personal data – for a period allowing us to check the correctness of this data - Processing is unlawful, and you oppose the erasure of personal data, requesting instead the restriction of its use - We no longer need personal data for processing purposes, but you need it to establish, assert, or defend claims - You have objected pursuant to Art. 21(1) of the GDPR to the processing of data by us – pending verification of whether the legitimate grounds on our side override your grounds for objection ### Right to data portability You have the right to transfer data concerning you and you have the right to send this data through us to another controller if: - Processing takes place on the basis of consent, pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR; or - Processing takes place on the basis of a contract, pursuant to Art. 6(1)(b) of the GDPR; and - Processing is carried out by automated means Exercising the right to data portability, you may request that personal data be sent by us directly to another controller, if technically feasible. The right to data portability must not adversely affect the rights and freedoms of others. If you wish to exercise these rights, please contact us using the contact details provided. ### Any other questions, concerns, and complaints In the event that any questions, reservations, or doubts arise regarding the content of this Privacy Policy or the manner in which personal data is processed, as well as complaints regarding these issues, please contact us using the provided contact details along with detailed information regarding the complaint. All received complaints will be considered, and responses will be provided. You also have the right to lodge a complaint with the supervisory authority, which is the **President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)**, ul. Stawki 2, 00-193 Warsaw, Poland. Remember that you can always also turn to us with a request to provide you with broader information about what data we have about you and for what purposes we process it. Just send a message to the email address provided above. --- ## IV. Purposes for Which We Process Your Personal Data ### Orders and issuing accounting documents When ordering a product or service from us, you provide data necessary for the execution of the order (including identity data or contact details). Providing data is voluntary but necessary to place an order. Data provided in connection with the order is processed for the purpose of executing the order, issuing accounting documents, ensuring contact, and may also be used for archival and statistical purposes. Data will be processed for the time necessary to execute the order, and subsequently until the expiry of the limitation period for claims under the concluded contract. Furthermore, we are obliged to store accounting documents with data for a period of 5 years from the end of the tax year in which the document was issued. In the case of data provided for the purpose of executing an order, you cannot object to data processing and demand the deletion of data until the expiry of the limitation period for claims under the concluded contract. Personal data is processed on several legal bases expressed within Art. 6 of the GDPR, including: - Necessity for the performance of a contract (delivery of the subject of the contract, communication) or taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) - Necessity for compliance with a legal obligation to which the controller is subject (settlement of transactions, issuing an accounting document) (Art. 6(1)(c) GDPR) - Legitimate interest pursued by the controller (defense against claims, archiving, direct marketing) (Art. 6(1)(f) GDPR) ### Direct contact or use of a form By contacting us, you provide at least those data which are mandatory. It depends on you whether you provide additional data in the content of the message directed to us. Providing data is voluntary but necessary to establish contact and provide a response. Your data is processed in this case for the purpose of contacting you. The basis for data processing is your consent, which you can withdraw at any time. ### Social media and links to other creators On our website, you may find links to social media portals where information about us and our activities is posted. The controller of data within the social media portal, i.e., your personal data shared within your individual account, is both us as the owner of the social media account and the owner of the social media portal. Personal data is processed based on consent, i.e., pursuant to Art. 6(1)(a) of the GDPR, expressed through your action on our profile (e.g., writing a message, publishing a post on our profile, leaving a comment, giving a rating on the profile). Consent is voluntary and free and may be withdrawn at any time. The exercise of your rights related to personal data processing will take place directly with the owner of the social media portal. ### Website integration with plugins Within the website, we use plugins primarily serving the realization of marketing tasks, including direct marketing. Thanks to this, we ensure the possibility of displaying appropriate content on the site and reaching interested persons with our content. Among the tools, we use products supplied by Google or Meta – the list is available in point V. You will learn fully about the properties of individual tools and how your data is used directly on the website of the supplier of the aforementioned tools. ### Reviews We give you the opportunity to express your opinion about us and the services we provide, which, provided you give your consent, we will publish on our website, citing your personal data. Personal data is processed based on consent, i.e., pursuant to Art. 6(1)(a) of the GDPR. Consent is voluntary and free and may be withdrawn at any time. ### Newsletter and free materials, waiting list registration, or course participation By subscribing to the newsletter or for free materials or a course, you provide us with your basic data via the sign-up form. Providing data is voluntary but necessary to subscribe to the newsletter, download free materials, or participate in an event. This data is used to send you information about the life of our company, invitations to events, and sending commercial proposals, and the legal basis for their processing is your consent. Data will be processed for the duration of the newsletter's operation unless you resign from receiving it earlier, which will result in the removal of your data from the database. You can correct your data stored in the newsletter database at any time, as well as request its removal by resigning from receiving the newsletter. Personal data is processed based on consent, i.e., pursuant to Art. 6(1)(a) of the GDPR. Consent is voluntary and free and may be withdrawn at any time. --- ## V. Entrusting Personal Data Processing and Sharing Your data may be processed by third parties to whom we entrust the performance of specific activities related to ensuring the proper functioning of our business. Entities to whom we commission the processing of personal data guarantee the application of appropriate personal data protection and security measures required by law. The entities to whom we entrust data processing are: - Companies servicing our IT area - Company servicing accounting and bookkeeping matters - Companies responsible for marketing - Other companies with which we have concluded a data processing agreement Data is also shared with: - Companies handling legal matters - Companies handling transport and postal delivery At this moment, your traffic on our website and your browser settings may cause access to your data for the following providers connected within our website: - netlify.com - google.com - facebook.com - kit.com - hotjar.com - ifirma.pl --- ## VI. Data Processing Period The time for which we will process personal data depends on the legal basis for their processing. We inform you that: - In the case where we process personal data based on consent (Art. 6(1)(a) GDPR), the processing period lasts until the intended purpose is achieved or consent is withdrawn - In the case where we process personal data for the purposes of performance of a contract or taking steps prior to the performance of a contract (Art. 6(1)(b) GDPR), for the period of service provision, and after its completion for the limitation period of claims and archiving of accounting documentation (5 years), in accordance with applicable laws - In the case where we process personal data based on legitimate interest (Art. 6(1)(f) GDPR), the processing period lasts until the cessation of the aforementioned interest (including the limitation period for civil law claims) or until an objection is raised against further such processing – in situations where such an objection is granted by law - In the case where we process personal data because it is necessary due to applicable laws (Art. 6(1)(c) GDPR), the data processing periods for this purpose are determined by those laws --- ## VII. Server Logs By using our website, you send queries using your device to the server where the website is stored. Logs include, among others, the IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server. Server logs serve exclusively as auxiliary material used to administer the website. Their content is not disclosed to anyone. Data saved in server logs is not associated with specific persons using the website and is not used to identify specific persons. --- ## VIII. Cookies Cookies (so-called "biscuits") are IT data stored on your end device. On the website, we use two basic types of cookies: session and persistent. Session cookies are temporary files that are stored on the user's end device until logging out, leaving the website, or turning off the software (web browser). Persistent cookies are stored on your end device for the time specified in the cookie parameters or until they are deleted by you. Cookie settings can be changed, in particular, in such a way as to block the automatic handling of cookies in the web browser settings or inform about their every posting on your device. Detailed information on the possibility and methods of handling cookies is available in the software (web browser) settings. Remember that disabling or limiting the use of cookies may cause difficulties in using the websites. ### Our own cookies We use our own cookies to: - Ensure the proper functioning of the website - Ensure the proper functioning of forms ### Third-party cookies We also use third-party cookies for the entities listed in Section V above (e.g., Google, Facebook, Hotjar, etc.) for marketing and analytical purposes. ### Managing cookies You will learn about cookies (type and other important information) directly from our website, where we have also included the following instruction: **Manage Cookies** – There are various ways to manage cookie preferences and to grant and withdraw consent, where applicable: - Users can manage cookie preferences directly in their own device settings, for example, by preventing the use or storage of cookies - Additionally, whenever the use of cookies is based on consent, users can grant or withdraw such consent by setting their preferences within the cookie notice or by updating such preferences accordingly via the relevant consent preferences widget, if available - It is also possible, via relevant browser or device features, to delete previously stored cookies, including those used to remember the user's initial consent - Other cookies in the browser's local memory can be cleared by deleting the browsing history - With regard to any third-party cookies, users can manage their preferences and withdraw their consent via the related opt-out link (if provided), using the means indicated in the third party's privacy policy, or by contacting the third party ### Opting out of interest-based advertising Notwithstanding the above, users may follow the instructions provided by YourOnlineChoices (EU), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan), or other similar services. Such initiatives allow users to select their tracking preferences for most advertising tools. The owner thus recommends that users make use of these resources in addition to the information provided in this document. The Digital Advertising Alliance offers an application called AppChoices that helps users control interest-based advertising on mobile apps. ### Consequences of refusing consent Users are free to decide whether or not to grant consent. However, please note that cookies help the website to provide users with a better experience and advanced functionalities (in line with the purposes outlined in this document). Therefore, in the absence of user consent, the owner may not be able to provide the related features. --- ## IX. Change of Privacy Policy We reserve the right to introduce changes to the privacy policy. Changes will be introduced if required by applicable law or if the technological conditions of the website's functioning change. The current text of the privacy policy will always be located on the website.