PRIVACY POLICY AND COOKIES USAGE IN FILEBIT.PL SERVICE

§ 1. General provisions

1. Privacy policy and cookies usage policy for the website https://filebit.pl/ (hereinafter: "Policy") was created and adopted by inter-store.
2. Terms used in the Policy mean:
   1. Service: website https://filebit.pl/;
   2. User: entity using the publicly available Service;
   3. Owner: inter-store, Kręta 60, 62-095 Murowana Goślina, 777-227-64-67;
   4. Cookies: text files sent by the Service and stored on the User's end device from which the User browses websites. Files contain information necessary for the proper functioning of the Service. Cookies most often contain the domain name of the website they come from, their storage time on the end device, and a number;
3. The purpose of the Policy is in particular:
   1. providing Users with information regarding the use of Cookies in the Service, required by law, including Telecommunications Law;
   2. ensuring Users privacy protection at a level corresponding to standards and requirements set out in applicable legal provisions.
4. The Owner limits the collection and use of information about Users to the necessary minimum required to provide services to them.
5. In order to obtain full access through the Service to content and services offered by the Owner, it is advisable to accept the principles resulting from the Policy. Acceptance can be made through the settings of software installed on the device used by the User or service configuration.
6. The following legal provisions apply, among others:
   1. Act of July 16, 2004 Telecommunications Law (Journal of Laws 2017.1907 consolidated text as amended);
   2. Act of July 18, 2002 on the provision of electronic services (Journal of Laws 2017.1219 consolidated text as amended);
   3. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016) together with Polish provisions on personal data protection.
   4. Act of May 10, 2018 on the protection of personal data (Journal of Laws 2019 item 1781 consolidated text).

§ 2. Privacy and personal data protection

1. Data concerning Users is processed by the Owner in accordance with the law. Personal data of Users obtained by the Owner is processed on the basis of consent given by the User or the occurrence of another premise authorizing data processing according to regulations, in particular the Regulation.
2. The Owner takes special care to protect the interests of data subjects, and in particular ensures that such data is:
   1. processed lawfully, fairly and transparently for Clients and other data subjects;
   2. collected for specific, explicit and legitimate purposes and not processed further in a manner incompatible with those purposes;
   3. adequate, relevant and limited to what is necessary for the purposes for which it is processed;
   4. accurate and, where necessary, kept up to date;
   5. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed;
   6. processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures,
3. The Owner implements appropriate technical and organizational measures ensuring protection of processed personal data appropriate to the nature, scope, context and purposes of processing and the risk of violation of rights or freedoms of natural persons.
4. The Owner strives to systematically modernize the applied IT, technical and organizational means of protecting this data, in particular the Owner ensures updates of IT protection means allowing protection against viruses, unauthorized access and other threats arising from the operation of the IT system and telecommunications networks.
5. The Owner may – apart from other cases arising from legal provisions – process the following personal data of the Client necessary to establish, shape the content, change or terminate the contract:
   1. surname and first names of the Client;
   2. permanent residence address;
   3. correspondence address, if different from the residence address;
   4. right to object to processing or to restrict processing;
   5. Client's email addresses;
   6. phone number;
6. The Owner may process, with the Client's consent and for advertising purposes, market research and examination of Client behavior and preferences with the intention of using the results of such research to improve the quality of services provided by the Owner, other data concerning the Client that is not necessary to provide electronic services.
7. To each User who has made their data available to the Owner in any way, the Owner ensures access to data and use of other rights by data subjects, in accordance with applicable legal provisions, including the following rights:
   1. right to withdraw consent regarding personal data processing;
   2. right to information regarding their personal data;
   3. right to control data processing, including their completion, updating, correction, deletion;
   4. right to object to processing or to restrict processing;
   5. right to complaint to supervisory authority and use of other legal means to protect their rights.
8. The Owner may process personal data automatically, including through profiling, on the principles resulting from the Regulation. In such case, the Owner's activities aim at marketing purposes or personalization needs of messages sent to Users (including matching information to User needs or expectations). The User has the right to object to such processing of their data – this objection can be expressed by sending a message to the Owner's address.
9. A person having access to personal data processes it only on the basis of authorization from the Owner or a personal data processing entrustment agreement and only on the Owner's instruction.
10. In connection with the Service activity, the Owner uses services of other entities, including for contract execution with the User. Personal data of Users may be transferred to:
    1. hosting company,
    2. Service software provider,
    3. internet service provider,
    4. companies providing courier or postal services,
    5. electronic payment platform provider,
    6. invoicing software provider,
    7. entities providing accounting services,
    8. marketing or advertising service provider.

§ 3. Cookies

1. Cookies identify the User, which allows for matching the content of the website they use to their needs. By remembering their preferences, it enables appropriate matching of content directed to them, including advertisements. The Owner uses Cookies to guarantee an appropriate standard of Service comfort, and collected data is used only within the company for optimization purposes.
2. Cookies are used for:
   1. adapting Service content to User preferences;
   2. optimizing Service use, in particular by recognizing the User's end device,
   3. creating statistics,
   4. maintaining User session,
   5. delivering advertising content to the User.
3. The Owner processes statistical information regarding Service use, including information about session, IP number, time spent on individual pages and subpages, use of individual service functionalities, information about device and web browser. This data is processed in accordance with art. 6 sec. 1 lit. f of the Regulation in the legally justified interest of the administrator consisting in facilitating Service use, improving quality and functionality of provided services, and processing of this data does not violate Users' rights and freedoms. Information about Users is not used for any additional purposes.
4. This data is processed within the Owner's current activities, but not longer than 60 days from receiving the information. After this time, the Owner may continue to process general statistical data that will be deprived of any information concerning individual Users.
5. It should be remembered that in some cases software installed by the User on the end device for browsing websites (e.g., web browser) introduces default storage of Cookies on the User's end device. Users can change Cookies settings at any time. These settings can be changed, among others, in such a way as to block automatic Cookies settings or inform about their placement on the User's end device each time. Detailed information in this regard is available in settings and instructions regarding software (web browser).
   
   Information about managing cookies in individual browsers can be found on pages dedicated to individual browsers:
   • Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
   • IE: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
   • Chrome: https://support.google.com/chrome/answer/95647?hl=en
   • Opera: https://help.opera.com/en/latest/web-preferences/#cookies
   • Safari: https://support.apple.com/en-us/HT201265
6. The User has the possibility to disable or restore the option of collecting Cookies at any time by changing the settings of their device and web browser regarding the use of Cookies or other similar technologies.
7. Changing settings constitutes an objection, which in the future may cause difficulties in using the Service. Complete disabling of the option to accept Cookies will not mean lack of possibility to browse content published in the Service, except for those that require login access.
8. Not changing settings means that data will be placed on the User's end device (using the Service will automatically place Cookies on the User's end device).
9. Cookies are stored on User devices no longer than 12 months.
10. Stored data placed on the User's end device does not cause configuration changes in the User's end device or software installed on that device.
11. Information regarding Cookies also applies to other similar technologies used within the Service.

§ 4. Complaints

1. Complaints can be directed to the Owner electronically at [email protected].
2. There is a possibility to use out-of-court ways of resolving complaints and pursuing claims in legal relations with Consumers, including:
   1. possibility of resolving disputes electronically using the ODR (online dispute resolution) platform, available at https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=EN;
   2. possibility of conducting amicable proceedings before a common court or other bodies.
3. The Owner undertakes to consider the complaint within 14 days.
4. If the complaint is accepted, the Owner will take appropriate action.
5. For the purpose of processing complaints, the Owner processes personal data of Users filing complaints, in particular email address, first name, surname, complaint content, circumstances of the event causing the complaint, information obtained during complaint processing, including explanation of the event causing it. During complaint processing, the Owner may process a number of other information, including information about the User's use of Services, cookies files or other similar technologies, information about devices. This data is processed in accordance with art. 6 sec. 1 lit. b of the Regulation for the purpose of complaint consideration and is processed for the time necessary to consider the complaint and after the end of the complaint procedure for archival purposes in accordance with the accounting act in case of need to defend against possible claims against the service provider.
6. In case of undertaking explanatory proceedings regarding possible violation of Terms of Service, Policy provisions or legal provisions, principles of social coexistence or good customs, the Owner may process User's personal data until the end of ongoing proceedings and until the expiration of the limitation period for claims, which usually amounts to 3 years, but in special cases provided by law may be longer. This data will then be processed, including disclosed in accordance with art. 6 sec. 1 lit. f of the Regulation, i.e., in the legally justified interest of the administrator consisting in pursuing their claims against the User. The legally justified interest of the administrator will then be the overriding purpose in relation to the User's rights and freedoms.

§ 5. Final provisions

1. The Policy was adopted by virtue of the Owner's order and enters into force on April 14, 2020. Changes to the Policy content may occur in the same manner.
2. Any deviations from the Policy require written form under penalty of nullity.
3. The law applicable to the Policy is the law of the Republic of Poland.
4. In matters not regulated in the Policy, appropriate legal provisions apply.