This Privacy Policy provides information to optima-steamer.eu website (Website) users (Users) on the purposes and the legal basis for the Website processing personal data, and on the manner in which the data is used, and on the rights the Users are entitled to in association thereof. The administrator of personal data (Administrator) protects the Users’ privacy and ensures security for the data provided by them. The Administrator observes personal data processing rules and applies technical and organisational measures ensuring personal data security and processing thereof in accordance with the law. Users’ personal data are processed each and every time on the basis of legal regulations as in force at present, and in particular pursuant to the Telecommunications Law Act and Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR). Personal data may be processed in Users’ Cookies pursuant to the terms as set forth in the Cookies Policy. 

Who is the Administrator of your personal data ?

GREEN STEAM INTERNATIONAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ Emaus 6 / 11, 30-201 Kraków, Polska, NIP (tax identification number): 6772356243, REGON (Business Identification Number): 121494310 is the Administrator of your personal data. Contact address: info@greensteaminternational.com

Users whose personal data are processed may also choose another method for contacting the Administrator, including voice and written communication.

Purposes and legal basis for personal data processing:

communication using the Website contact form:
personal data are processed for purposes associated with the Administrator’s legitimate interests (article 6, paragraph 1f of the GDPR). Communication with a person who approaches the Administrator looking for a response, and in particular to handle User enquiries and reply to User questions constitutes the Administrator’s legitimate interest. There may be a number of reasons for communicating which are difficult to categorise. Provision of personal data is voluntary and may be necessary to receive a response from the Administrator.
communication using contact details provided to the Website:
personal data are processed for purposes associated with the Administrator’s legitimate interests (article 6, paragraph 1f of the GDPR). Communication with a person who approaches the Administrator looking for a response, and in particular to handle User enquiries and reply to User questions constitutes the Administrator’s legitimate interest. There may be a number of reasons for communicating which are difficult to categorise.  Provision of personal data is voluntary and may be necessary to receive a response from the Administrator.
pursuing and defending against claims, preventing fraud, performing analyses and statistical calculations, ensuring security for the IT environment, applying internal control systems:
personal data are processed for purposes associated with the Administrator’s legitimate interests (article 6, paragraph 1f of the GDPR). The ability to undertake the aforementioned actions is the Administrator's legitimate interest. 
installing and using Cookies on a User device:
purposes and legal basis for personal data processing in Cookies are defined in detail by the Cookies Policy. 
Personal data recipients:

User data shall not be made available to other third parties, unless this proves to be necessary and the User agrees or is obliged to do so, or unless making the data available results from mandatory legal provisions, a final court decision or a final decision by a competent authority. The Website may contain links to other websites. The Administrator shall not be responsible for processing of personal data resulting from a User browsing such websites. Upon opening other websites, in the first place the User should read the applicable privacy policies and personal data protection procedures. The Administrator does not transfer data to third countries outside of the EEA or international organisations. 

What is profiling and are data profiled by this Website?

Profiling entails any automated processing of personal data which makes it possible to evaluate personal factors of an individual and, in particular, to analyse or predict aspects relating to the work, economic situation, health, personal preferences or interests, reliability or behaviour, location or movements of the data subject – in so far as it produces legal effects in relation to the data subject or significantly affects the data subject in a similar manner. The Website does not profile data. If, in conjunction with the Website’s expansion, personal data will be subject to profiling, the Administrator shall inform the Users of this and data shall be profiled in accordance with the applicable regulations. If profiling is to be employed, the Administrator shall implement appropriate rights, freedoms, and Users’ legitimate interests’ protection measures, which include an option for the Administrator to perform a human intervention and the ability to express one’s opinion and question decisions. 

What rights do Users have? 

Users have the right to request access to and rectification or erasure of personal data or restriction of processing as well as the right to data portability. Users have the right to object to data processing, and in particular within the scope of data profiling. To exercise these rights Users can contact the Administrator on info@greensteaminternational.com. Users may also choose another method for contacting the Administrator, including voice and written communication. Users have the right to lodge a complaint with the President of the Data Protection Office if they consider that the processing of their personal data infringes legally binding regulations.

How does the Administrator protect personal data?

The Administrator protects Users’ data against unauthorised access, disclosure, amendments, and destruction. In particular the Administrator applies data encryption, physical protection measures as well as verification within IT systems. The Administrator also employs anti-virus software and firewalls. Only authorised persons, obligated to maintain confidentiality, as well as subcontractors who have concluded data processing agreements with the Administrator may access User data. 

What is the scope of personal data processing? 

User data are processed for the duration of their Website use. For processing of personal data in connection with:

communication via the Website’s contact form – personal data shall be processed for a period necessary to provide the User with a reply, complete handling a User enquiry or until the User raises an effective objection;
communication using contact details provided to the Website – personal data shall be processed for a period necessary to provide the User with a reply, complete handling a User enquiry or until the User raises an effective objection;
pursuing and defending against claims, preventing fraud, performing analyses and statistical calculations, ensuring security for the IT environment, applying internal control systems – personal data shall be processed for a period justified by the nature of the aforementioned actions, legal regulations or until such time as the User raises an effective objection;
installing and using Cookies on a User’s device – personal data shall be processed for a period as set forth in the Cookies Policy.
If the period for processing personal data on the basis of a given legal basis expires, the said personal data may still be processed pursuant to a different legal basis. Upon expiry of the processing period and exhaustion of all bases for processing, personal data shall be permanently deleted or rendered anonymous.

Entry into force and changes to the Privacy Policy:

The Privacy Policy and changes thereto apply from the moment they are published on the Website. 

The Administrator reserves the right to amend this Privacy Policy in order to ensure the Privacy Policy satisfies the requirements stemming from applicable legal regulations. Amendments shall be published on the Website.