PRIVACY POLICY OF THE WEBSITE
- The Administrator of Personal Data on the website at: https://kaizenrent.pl/en, hereinafter referred to as the “Website”, is Kaizen Rent S.A., with its registered office in Lubin (59-300), at 8 Gen. Józefa Bema Street, entered in the Register of Entrepreneurs of the National Court Register (KRS) maintained by the District Court for Wrocław-Fabryczna in Wrocław, 9th Commercial Division, under KRS number 0000954956, NIP (Tax Identification Number) 6922509293, REGON (National Business Registry Number) 36249513600000, hereinafter referred to as the “Administrator of Personal Data
- Any enquiries, requests or complaints concerning the processing of personal data by the Administrator of Personal Data, hereinafter referred to as “Requests”, should be submitted to the following email address: [email protected], or in writing to the following address: 8 Gen. Józefa Bema Street, 59-300 Lubin, Poland. The Request should clearly specify:
- the details of the person or persons to whom the Request relates;
- the circumstances giving rise to the Request;
- the specific requests being made and the legal basis for such requests;
- the preferred method of resolving the matter.
- We collect the following personal data through our Website:
- first name and surname – may be processed when, as a user of our Website, you provide them to us by email, during a telephone conversation, via the contact form available on our Website, or by post;
- telephone number – may be processed when you contact us by telephone, as well as when you provide it to us by email, via the contact form available on our Website, or by post;
- residential/correspondence address – may be processed where it is necessary for the proper provision of the service;
- email address – may be processed when, as a user of the Website, you provide it to us by email, via the contact form available on our Website, by post, or during a telephone conversation;
- device IP address and potentially personal data contained in Cookies – information resulting from the general principles governing Internet connections, such as the IP address (as well as other information contained in system logs), is used for technical and statistical purposes, including, in particular, to collect general demographic information (e.g. the region from which the connection is made). This type of data may also be used for marketing and analytical purposes where consent has been given;
- NIP (Tax Identification Number) and company name – data necessary for issuing invoices and other documents related to the use of our Website;
- booking number, claim number and invoice number – may be processed after a booking has been made or a service has been provided, or when, as a user of the Website, you provide such information to us by email, via the contact form available on our Website, by post, or during a telephone conversation;
- driving licence number, document number and document type – may be processed when making a booking using the pre-registration form available on the Website;
- other data, where applicable – additional data may be collected in connection with handling specific matters or may be provided by users of our Website by email, via the contact form available on the Website, by post, or during a telephone conversation.
- Each person using our Website may decide whether and to what extent they wish to use our services and provide information and personal data about themselves, within the scope set out in this Privacy Policy.
- We process personal data for the following purposes:
- entering into and performing agreements in connection with the services we offer (Article 6(1)(b) of the GDPR) – for this purpose, personal data will no longer be processed once the relevant agreement has been performed;
- maintaining an individual user account (Article 6(1)(b) of the GDPR) – for this purpose, personal data will no longer be processed once the user has deleted their account;
- complying with the legal obligations imposed on the Administrator of Personal Data, in particular maintaining documentation, issuing invoices, etc. (Article 6(1)(c) of the GDPR) – for this purpose, personal data will be deleted once the relevant legal obligations have been fulfilled;
- sending marketing content relating to the Administrator and carrying out website analytics in connection with the use of Cookies (Article 6(1)(a) of the GDPR) – for this purpose, personal data will be processed until the end of the session, until the Cookies are deleted by the user, until consent is withdrawn, or until an effective objection to processing for this purpose is made;
- operating the Website (Article 6(1)(f) of the GDPR) – for this purpose, personal data will no longer be processed when the relevant Cookie expires, the Cookies are deleted, or, where applicable, when the relevant session ends;
- ongoing communication relating to the operation of the Website (Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Administrator of Personal Data) – for this purpose, your personal data will no longer be processed once we have responded to your question or questions;
- establishing and pursuing claims or defending against claims (Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Administrator of Personal Data) – for this purpose, personal data will be deleted once the relevant claims have become time-barred, generally after the expiry of the three-year limitation period applicable to such claims.
- The source of the personal data processed by the Administrator of Personal Data is the data subjects themselves.
- Where a button or feature on the Website contains a link to an external website, application or social media platform, a joint controllership relationship exists between the Administrator of this Website and the administrator of the external website, application or platform. Such joint controllership is limited solely to the data necessary for operations related to the functioning of the relevant button or feature. The Administrator is not responsible for the policies governing the further processing of personal data by other entities, organisations or social media service providers. Our joint controllers in relation to this Website are:
- Google Ireland Ltd. (Google Maps), with its registered office at: Google Building Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland.
- Other joint controllers, where applicable.
- The Administrator uses tools provided by Google Ireland Ltd (YouTube) and Meta Platforms Ireland Ltd (Facebook, Instagram). As a general rule, data processed in connection with the use of these tools is processed on servers located within the EEA. Nevertheless, the entities providing these tools may be required to transfer data to third countries where such an obligation is imposed on them by law or where this is necessary due to the nature of the services provided (SaaS, hosting, etc.).The scope of personal data transferred for this purpose includes all personal data referred to in Section 3 of this Privacy Policy. The legal bases for the processing of the personal data referred to in the preceding sentence are set out in Section 5(d) and (e) of this Privacy Policy. Transfers of personal data to the United States are carried out on the basis of the European Commission's Decision of 10 July 2023 on the adequate level of protection provided by the EU-US Data Privacy Framework (Article 45(1) of the GDPR). Our personal data importers, namely Google LLC and Meta Platforms Inc., meet the requirements of the relevant decision and participate in the Data Privacy Framework. They are listed at: https://www.dataprivacyframework.gov/s/participant-search.
- We don"t disclose any personal data to third parties without the explicit consent of the data subject. Personal data may be disclosed without the consent of the data subject only to public authorities, i.e. government and administrative bodies (e.g. tax authorities, law enforcement authorities and other entities authorised to do so under generally applicable laws).
- Personal data may be entrusted to entities that process such data on our behalf as the Administrator of Personal Data. In such cases, as the Administrator of Personal Data, we enter into a data processing agreement with the relevant processor. The processor processes the entrusted personal data solely for the purposes, within the scope and in accordance with the terms set out in the agreement referred to above. Without entrusting personal data to such processors, we would not be able to conduct our business through the Website. As the Administrator of Personal Data, we entrust personal data for processing, in particular, to the following entities:
- entities providing hosting services for the website on which our Website operates;
- entities providing CRM services.
- As part of assessing customer satisfaction with the services provided by the Administrator, the Administrator of Personal Data cooperates with:
- Rating Captain (CUSTOMER SATISFACTION AI SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ), with its registered office in Wrocław (50-071), at 7B Plac Wolności, entered in the National Court Register (KRS) under number 0000838542, NIP (Tax Identification Number) 8982257318, REGON (National Business Registry Number) 385951719 – as part of our cooperation, we may ask Users to complete a survey or leave a review of the Administrator or the services provided, subject to the User's prior consent. In addition, the Rating Captain tool processes data relating to Users' activity on the Website (including the subpages visited, the length of time spent on a particular page or section, clicks, the way services are used and products viewed), as well as information about the User's device or browser, including its location. The Administrator has entered into an appropriate personal data processing agreement with Rating Captain. Users' personal data is not profiled using the Rating Captain tool. Users may withdraw their consent at any time by sending an appropriate message using the contact details provided in this Privacy Policy.
- Trustpilot (Trustpilot A/S, registration number: 30276582, address: c/o Trustpilot Limited, 5th Floor, The Minster Building, 21 Mincing Lane, London, United Kingdom, EC3R 7AG) – as part of our cooperation, we may ask Users to complete a survey or leave a review of the Administrator or the services provided, subject to the User's prior consent. A link to the survey will be sent to the User by email or to their telephone number. The Administrator has entered into an appropriate personal data processing agreement with Trustpilot. Users' personal data is not profiled using the Trustpilot tool. Users may withdraw their consent at any time by sending an appropriate message using the contact details provided in this Privacy Policy.
- Google Ireland Ltd. (with its registered office at Google Building Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland) – we may ask Users to complete a survey or leave a review on Google. Subject to the User's prior consent, a link enabling the User to leave a review on Google will be sent to them.
- Personal data is not subject to profiling by us, as the Administrator of Personal Data, within the meaning of the GDPR.
- In accordance with the provisions of the GDPR, every person whose personal data we process as the Administrator of Personal Data has the right to:
- the right to access their personal data, as referred to in Article 15 of the GDPR;
- the right to be informed about the processing of their personal data, as referred to in Article 12 of the GDPR;
- the right to rectify, complete, update and correct their personal data, as referred to in Article 16 of the GDPR;
- the right to withdraw their consent at any time, as referred to in Article 7(3) of the GDPR;
- the right to erasure of their personal data (the “right to be forgotten”), as referred to in Article 17 of the GDPR;
- the right to restriction of processing, as referred to in Article 18 of the GDPR;
- the right to data portability, as referred to in Article 20 of the GDPR;
- the right to object to the processing of their personal data, as referred to in Article 21 of the GDPR;
- where the legal basis for processing is consent, the right to withdraw such consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;
- the right not to be subject to profiling, as referred to in Article 22 in conjunction with Article 4(4) of the GDPR;
- the right to lodge a complaint with a supervisory authority (i.e. the President of the Personal Data Protection Office), as referred to in Article 77 of the GDPR.
- If you wish to exercise any of the rights referred to in the preceding section, please send your request by email to the email address or in writing to the postal address specified in Section 2 above.
- Each identified case of a security breach is documented. Where any of the circumstances specified in the GDPR or applicable legislation arise, the data subjects affected by the breach and, where applicable, the President of the Personal Data Protection Office (PUODO) shall be notified of the breach of personal data protection regulations.
- The Cookie Policy constitutes a separate document available at: https://kaizenrent.pl/en/personal-data-protection
- Any matters not covered by this Privacy Policy shall be governed by the applicable provisions of generally binding law. In the event of any conflict between the provisions of this Privacy Policy and the applicable law, the provisions of the law shall prevail.
Contact for Data Protection Officer
(please direct inquiries only related to personal data processing)
Konrad Cioczek
Please send other inquiries through our contact form.