This draft explains how personal data is processed on UK4u.pl. Before publication, the data controller’s details, contact details and the list of external services used should be completed and confirmed.
Data controller
The controller of personal data relating to users of UK4u.pl is: [TO BE COMPLETED].
Contact for privacy and personal data matters: [TO BE COMPLETED: email address].
What data we may process
- data provided voluntarily through the contact form, including name, email address and message content;
- data associated with a user account, login, registration or subscription, where these features are active;
- data submitted in comments and other user-generated content;
- technical data such as IP address, browser type, operating system, time of visit, requested URL and information recorded in server logs;
- identifiers stored in cookies or similar technologies, depending on the consent given.
Purposes and legal bases for processing
- responding to messages and handling enquiries – depending on the matter, on the basis of consent, steps taken at the user’s request, or legitimate interests;
- managing accounts, comments and subscriptions – for the purpose of providing the selected service and handling user requests;
- ensuring security, diagnosing errors and protecting against abuse – on the basis of the controller’s legitimate interests;
- analytics and measurement of website use – on the basis of consent where the tools used store or access information on the user’s device;
- displaying advertising and measuring its effectiveness – on the basis of consent to the extent required by applicable law;
- complying with legal obligations applicable to the controller.
Recipients of personal data
Data may be entrusted to providers of hosting, email services, security tools, messaging systems and other technical services necessary for the operation of the website. If analytics, advertising services or embedded third-party content are enabled, data may also be shared with their providers. Before this policy is published, the list of providers should be verified and completed.
Data may be disclosed to public authorities only where required by applicable law.
Transfers of data outside the United Kingdom
Some service providers may process data outside the United Kingdom. In such cases, the controller should use an appropriate legal mechanism and safeguards required by the UK GDPR. Details should be completed once the final providers have been selected.
Data retention
Data is retained only for as long as necessary to fulfil the purpose for which it was collected, handle claims, ensure security or comply with legal obligations. Account data is generally retained until the account is deleted, correspondence for the period needed to close the matter, and technical logs for a limited period determined according to security needs. Specific retention periods should be confirmed before publication.
User rights
- the right to access your personal data and receive a copy of it;
- the right to have inaccurate data corrected;
- the right to have data erased where provided for by law;
- the right to restrict processing;
- the right to object to processing based on legitimate interests;
- the right to data portability, where applicable;
- the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal;
- the right to lodge a complaint with the Information Commissioner’s Office (ICO).
Children
The website is not directed at children under the age of 13 and is not intended to knowingly collect their data. If the controller becomes aware of such a case, appropriate steps will be taken to investigate and delete the data where required.
Changes to this policy
This policy may be updated as the website’s features, service providers or applicable laws change. The date of the latest update should be shown at the beginning of the document.