Website Privacy Policy www.resilia.pl/en/ (and cookies)

This privacy policy of the website www.resilia.pl/en/ (hereinafter referred to as the “Privacy Policy”) specifies, in particular, the terms of use of the website www.resilia.pl/en/ by visitors (hereinafter referred to as the “User”), the rules for processing personal data, and matters related to the use of Cookies on the website www.resilia.pl/en/.

1. GENERAL PROVISIONS

1.1. This Privacy Policy governs the User’s use of the website www.resilia.pl/en/.

1.2. The controller of personal data collected via the website is Resilia Spółka z o.o. with its registered office in Warsaw, ul. Grzybowska 43, 00-855 Warsaw, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under KRS number 0000379789, NIP 5222972858, REGON 142839818, with a share capital of PLN 12,000.00 (hereinafter referred to as the “Controller”).

1.3. In all matters related to the protection of personal data and this Privacy Policy, you may contact the Controller using:

1.3.1. electronic mail at: [email protected];
1.3.2. traditional mail at: ul. Grzybowska 43, 00-855 Warsaw;
1.3.3. telephone number: +48 22 243 39 37.

1.4. Personal data of users of the website www.resilia.pl/en/ are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”), the Act of 10 May 2018 on the Protection of Personal Data and other personal data protection regulations, as well as in accordance with the Act of 12 July 2024 – Electronic Communications Law and the Act of 18 July 2002 on the Provision of Electronic Services.

1.5. The Controller exercises particular care to protect the interests of data subjects and, in particular, ensures that the data collected by the Controller are processed lawfully, fairly and in a transparent manner, collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes, adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, accurate and, where necessary, kept up to date, stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed, and processed in a manner ensuring appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures.

2. PROCESSING OF PERSONAL DATA

2.1. The Controller may process Users’ personal data if it is necessary for the use of the website www.resilia.pl/en/ or the services provided through it.

2.2. The purpose, scope and categories of recipients of data processed by the Controller will depend on the actions taken each time by the User when using the website www.resilia.pl/en/.

2.3. The possible purposes of processing Users’ personal data by the Controller are specified below.

2.3.1. Personal data including the name and email address of a person who has subscribed to the newsletter will be processed for the purpose of:

providing the newsletter delivery service (which may include commercial (marketing) information about the Controller’s products and services) to the email address provided by that person –

pursuant to Article 6(1)(b) GDPR, i.e. processing is necessary for entering into and performing a contract (the subject of which is the provision of the newsletter delivery service) to which the person who subscribed to the newsletter is a party, as well as pursuant to Article 6(1)(f) GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by the Controller, which in this case consist in sending commercial information based on the consent obtained within the meaning of Article 398 of the Electronic Communications Law;

2.3.2. Personal data including the name, surname, email address and telephone number of a person who has used the contact form available on the website www.resilia.pl/en/ will be processed for the purpose of:

handling the submitted inquiry and communicating with that person in connection with their message sent via the contact form – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is communication with the person who initiated contact with the Controller.

2.3.3. Personal data including the name, surname, email address and telephone number of a person who contacts the Controller via email or a communicator available on the website www.resilia.pl/en/ will be processed for the purpose of:

handling the submitted inquiry and communicating with that person in connection with their message sent via email or the communicator – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is communication with the person who initiated contact with the Controller.

2.3.4. Personal data including the name, surname, email address and telephone number of a person who uses training or webinar services will be processed for the purpose of:

concluding a contract with the Controller for the provision of training or webinar services and performing that contract – pursuant to Article 6(1)(b) GDPR, i.e. processing is necessary for entering into and performing a contract (the subject of which is the provision of services by the Controller) to which the person who ordered the service is a party, or in order to take steps at the request of that person prior to entering into a contract.

2.3.5. Personal data including the name, surname, email address, telephone number, position or function, data identifying the entity (which also indicates the workplace of the person representing the entity), and the content of correspondence will be processed for the purpose of:

confirming the authorisation to represent the entity – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is confirming the authorisation to represent the entity on whose behalf the person conducts correspondence with the Controller or concludes a contract.

2.3.6. Personal data including the name, surname, email address, telephone number, position or function, company name, tax identification number (NIP), residential/registered office address, other data identifying the customer, bank account number and other data included on invoices will be processed for the purpose of:

settling tax obligations and maintaining accounting documentation – pursuant to Article 6(1)(c) GDPR, i.e. processing is necessary for compliance with legal obligations imposed on the Controller arising from tax and accounting regulations.

2.3.7. Personal data including the name, surname, content of the statement and other data identifying the person providing an opinion or reference will be processed for the purpose of:

handling opinions and references – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is the management of opinions and references.

2.3.8. Personal data including the name, surname, email address, telephone number and data related to complaint handling will be processed for the purpose of:

handling complaints and exercising the rights of a party to a contract – pursuant to Article 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract (the subject of which is the provision of services by the Controller to the person who ordered the service and is a party to it), and pursuant to Article 6(1)(c) GDPR, i.e. processing is necessary for compliance with legal obligations imposed on the Controller arising from regulations concerning the Controller’s liability in the event of non-compliance of the service with the applicable contract.

2.3.9. Personal data including the name, surname, email address, the content of the withdrawal statement and other data contained therein will be processed for the purpose of:

handling withdrawal from the contract – pursuant to Article 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract (the subject of which is the provision of services by the Controller to the person who ordered the service and is a party to it), and pursuant to Article 6(1)(c) GDPR, i.e. processing is necessary for compliance with legal obligations imposed on the Controller arising from legal provisions concerning the right to withdraw from a distance contract.

2.3.10. Personal data collected through video/audio players and social media plugins will be processed for the purpose of:

enabling the functioning of multimedia players and social media plugins – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is ensuring the proper functioning of social media features (Facebook, Instagram, YouTube, etc.).

2.3.11. Personal data of the User of the website www.resilia.pl/en/ obtained through Cookies will be processed for the purpose of:

a) enabling the User to use the website resilia.pl/en/ and the functionalities available on it –
pursuant to Article 6(1)(b) GDPR, i.e. processing is necessary for entering into and performing a contract (the subject of which is the provision of services by the Controller) to which the person who ordered the service is a party, or in order to take steps at the request of that person prior to entering into a contract;

b) measuring Users’ interactions with the website resilia.pl/en/ using Google Analytics and determining where Users come from – pursuant to Article 6(1)(a) GDPR, i.e. based on the User’s voluntary consent – with regard to the installation and reading of data from the device (when entering the website for the first time, a request for consent to the use of cookies is displayed), and pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is understanding the User’s activity on the website;

c) collecting aggregated statistics that allow the Controller to understand how Users use the website resilia.pl/en/ and help improve its functionality and content, as well as how they respond to marketing and remarketing activities / measuring the effectiveness of marketing and remarketing campaigns – pursuant to Article 6(1)(a) GDPR, i.e. based on the User’s voluntary consent – with regard to the installation and reading of data from the device (when entering the website for the first time, a request for consent to the use of cookies is displayed), and pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is understanding the User’s activity on the website;

d) conducting marketing and remarketing activities using Google Ads, Facebook, Facebook Pixel, LinkedIn and LinkedIn Pixel aimed at presenting the User with personalised advertisements corresponding to their individual preferences, interests and needs (including profiling) – pursuant to Article 6(1)(a) GDPR, i.e. based on the User’s voluntary consent;

2.3.12. Personal data indicated for the purposes described above, including the name, surname, company name, PESEL/NIP number, residential/registered office address, other data identifying the person, and the content of correspondence, will be processed for the purpose of:

establishing, pursuing or defending against claims that may arise in connection with the services provided by the Controller – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is the protection of the Controller’s financial interests.

2.3.13. Personal data including the name, surname, email address, telephone number and other necessary data will be processed for the purpose of:

fulfilling obligations arising from GDPR provisions – pursuant to Article 6(1)(c) GDPR, i.e. processing is necessary for compliance with legal obligations imposed on the Controller arising from personal data protection regulations, and pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which includes, for example, maintaining registers and records, as well as retaining information about persons who have exercised their rights provided for under the GDPR.

2.3.14. Personal data specified for other purposes will be processed for:

archival and evidentiary purposes – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is securing information that may be used to demonstrate facts of legal significance.

2.3.15. Personal data including the name, surname, nickname, image, data made “public” by a person on their profile, data posted by the person in comments under content published on the Controller’s profile or sent in a private message to the Controller’s profile, as well as statistical and advertising data, will be processed for the purpose of:

maintaining the Controller’s profiles on platforms including Facebook, LinkedIn and YouTube, and interacting with their users – pursuant to Article 6(1)(f) GDPR, i.e. based on the legitimate interest pursued by the Controller, which is the management of the Controller’s profiles on such platforms.

2.4. With regard to the purpose described in section 2.3.15, the Controller informs that, in accordance with the judgment of the Court of Justice of the European Union, the Controller jointly controls personal data processed through the profile maintained on social media together with the social media provider (hereinafter referred to as the “Provider”). The Controller and the Provider are also joint controllers of the User’s personal data with regard to personal data processed as part of targeting.

Targeting is carried out on the basis of personal data provided by the User to the Provider (entered into the platform), such as, for example, age, gender, etc. Joint controllership of personal data applies to the processing of personal data resulting from the selection of appropriate targeting criteria and displaying advertisements to the User, as well as the processing of personal data by the Provider in order to inform the Controller about the results of targeting campaigns.

Details regarding the processing of personal data by the Provider can be found in its privacy policy:

2.4.1. for Facebook – https://www.facebook.com/privacy/policy;
2.4.2. for LinkedIn – https://pl.linkedin.com/legal/privacy-policy;
2.4.3. for YouTube – https://www.youtube.com/howyoutubeworks/privacy/ and https://policies.google.com/privacy?hl=pl&gl=pl

2.5. Providing personal data is:

2.5.1. mandatory where such data are processed by the Controller in order to fulfil its obligations arising from legal provisions, i.e.:

a) to fulfil obligations arising from tax law;
b) to fulfil obligations arising from the GDPR;
c) to fulfil obligations arising from regulations concerning the Controller’s liability for the non-compliance of a service with the applicable contract;
d) to fulfil obligations arising from regulations concerning the right to withdraw from a distance contract;

2.5.2. voluntary in other cases and depends on the User’s decision; however, it may be necessary to achieve specific purposes, e.g. entering into a contract and providing specific services (training courses, webinars), conducting correspondence with the User, sending newsletters, or publishing opinions and references.

2.6. The Controller obtains personal data directly from the User, from the entity represented by the User or on whose behalf the User contacts the Controller, or from publicly available sources, and in the case of data processing on social media – from the social media provider.

2.7. In accordance with applicable legal provisions, the Controller does not process personal data “indefinitely”, but only for the period necessary to achieve the specified purpose. After this period, the User’s personal data will be irreversibly deleted or destroyed. A description of the processing periods is provided below:

2.7.1. newsletter delivery – data related to newsletter management will be processed until an effective objection is raised or the purpose of processing is achieved, consent is withdrawn, or the newsletter delivery agreement is terminated;

2.7.2. contact and correspondence – data related to communication and correspondence management will be processed for the duration of correspondence between the Controller and the User;

2.7.3. conclusion and performance of a contract – data necessary for concluding and performing a contract will be stored until the contract has been fulfilled;

2.7.4. verification of authorisation to represent an entity – data will be stored until the expiry of limitation periods;

2.7.5. fulfilment of obligations arising from tax law – data related to the necessity to fulfil tax obligations will be stored for the period resulting from applicable legal provisions, i.e. 5 years from the end of the tax year in which the tax obligation became due;

2.7.6. handling opinions and references – data related to the management of opinions and references will be processed until an effective objection is raised or the purpose of processing is achieved;

2.7.7. complaint handling – data will be processed until the complaint handling process is completed;

2.7.8. handling withdrawal from a contract – data will be processed until the withdrawal handling process is completed;

2.7.9. marketing purposes – data processed for marketing purposes will be processed until an effective objection is raised or the purpose of processing is achieved – in the case of data processed on the basis of legitimate interest, and until consent is withdrawn or the purpose of processing is achieved – in the case of data used for profiling;

2.7.10. enabling the functioning of multimedia players and social media plugins – data will be processed for the period necessary for the functioning of these tools;

2.7.11. use of cookies (other than cookies necessary for the provision of electronic services) in relation to storing and reading data from the device – data related to cookies will be processed until consent is withdrawn or the purpose of processing is achieved;

2.7.12. analysis of website activity – data related to the analysis of activity on the website will be processed until they become outdated or lose their usefulness;

2.7.13. establishment, pursuit and defence of claims – data related to claims will be processed until the expiry of the limitation period for claims, whereas the limitation period may vary depending on applicable legal provisions;

2.7.14. archival and evidentiary purposes – data related to archival and evidentiary purposes will be processed until an effective objection is raised or the purposes of processing are achieved;

2.7.15. fulfilment of obligations arising from the GDPR – data related to personal data protection will be processed until they lose their usefulness, an effective objection is raised, or the limitation period for our liability as the Controller expires.

2.8. Personal data processed by the Controller will be disclosed to the following entities: IT service providers, hosting providers, providers of tools or plugins, social media providers, payment service operators, cloud service providers, entities providing consulting, legal and accounting services, and other subcontractors who will gain access to the data where necessary.

Personal data processed by the Controller may also be disclosed to entities and authorities authorised to process such data under applicable legal provisions.

2.9. Personal data of persons participating in training courses co-organised by Professional Evaluation and Certification Board, 336-6683 Jean Talon St E Montreal QC H1S 0A5 Canada (hereinafter referred to as “PECB”) will be disclosed to PECB for the purpose of performing a service agreement consisting in participation in a training course co-organised by PECB – pursuant to Article 6(1)(b) GDPR, i.e. processing is necessary for entering into and performing a contract (the subject of which is the provision of services by the Controller) to which the given person is a party, or in order to take steps at the request of that person prior to entering into a contract.

After the disclosure of personal data, PECB will also become an independent controller of personal data. The Controller is not a representative of PECB within the European Union within the meaning of Article 27 GDPR.

More information on the processing of personal data by PECB can be found here: https://pecb.com/en/data-protection-policy.

2.10. Where personal data are processed on the basis of consent, the consent granted may be withdrawn at any time.

The Controller may obtain consent to display information about products and services tailored to the User’s individual preferences. Processing of the User’s data for the above purpose will involve the use of profiling.

Profiling consists of the automatic analysis of the User’s data, in particular data concerning the way the User uses the website www.resilia.pl/en/, browsing history, interest in specific content or products, as well as information stored in cookies.

Based on these data, the Controller may make automated decisions concerning the User (i.e. without human involvement), including decisions regarding the content of advertisements and marketing activities directed at the User.

However, these decisions will not produce legal effects or similarly significantly affect the User’s situation. Apart from the scope indicated above, the Controller will not make automated decisions concerning the User, including decisions based on profiling.

2.11. In connection with the Controller’s use of tools or services provided by third parties and the use of Cookies of these entities, personal data may be transferred to a third country, in particular to Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA.

2.12. The Controller may transfer personal data to countries outside the European Economic Area (EEA).

In particular, the transfer of personal data outside the EEA (to Canada) will take place in connection with the disclosure of data of persons participating in training courses co-organised by PECB, in accordance with section 2.9 above.

The transfer of personal data outside the EEA (to the United States) will also take place in connection with the Controller’s use of tools or services provided by third parties and the use of Cookies of these entities, in accordance with sections 2.10 and 2.11 above.

Where the Controller transfers personal data to such countries, the Controller does so on the basis of Standard Contractual Clauses adopted by the European Commission or on the basis of relevant adequacy decisions issued by the European Commission.

In the case of the USA, the legal basis for transferring personal data to this country is the European Commission decision of 10 July 2023.

In the case of Canada, the legal basis for transferring personal data to this country is the European Commission decision of 20 December 2001.

2.13. The User may obtain from the Controller a copy of the data transferred to a third country.

2.14. More information on the transfer of personal data to third countries can be obtained by contacting the Controller directly.

3. COOKIES AND USAGE DATA

3.1. Cookies (hereinafter referred to as “Cookies”) are IT data, in particular small pieces of information in the form of text files sent by a server and saved and stored on the end device of the person visiting the website www.resilia.pl/en/. Detailed information regarding Cookies can be found, among others, here: https://support.google.com/chrome/answer/95647.

3.2. As a general rule, Cookies themselves do not constitute personal data; however, certain information stored in Cookies (e.g. regarding preferences), especially when combined with other information about the User, may be considered personal data. Personal data collected using Cookies may be processed only for the purpose of performing specific functions related to providing the User with access to the website www.resilia.pl/en/, as described below. Such data are encrypted in a way that prevents access by unauthorised persons. Where data collected using Cookies constitute personal data, the Controller processes them only on the legal bases provided for under the GDPR, as referred to in section 2.3 above.

3.3. The following Cookies are used within the website www.resilia.pl/en/:

3.3.1. Controller’s Cookies:

a) session Cookies – these are temporary files that remain stored on the User’s computer or mobile device until the User logs out of the website, leaves the website or closes the software (web browser);

b) persistent Cookies – these remain on the User’s device for the period specified in the Cookie parameters or until they are manually deleted by the User in the web browser;

3.3.2. third-party Cookies.

3.4. The Controller may process data (including personal data) contained in Cookies when Users use the website www.resilia.pl/en/ for the following purposes:

3.4.1. enabling the Controller to administer the website www.resilia.pl/en/, in particular by collecting data in the form of server logs;

3.4.2. authenticating the User of the website www.resilia.pl/en/;

3.4.3. verifying whether the User has seen a pop-up window and when to display again the pop-up window regarding settings;

3.4.4. conducting marketing activities (including remarketing), in particular for the purpose of presenting the User only with personalised advertisements corresponding to their individual preferences, interests and needs (including profiling);

3.4.5. measuring Users’ interactions with the website www.resilia.pl/en/ and determining where its Users come from;

3.4.6. creating statistics that help understand how Users use the website www.resilia.pl/en/, which enables improvement of its structure and content;

3.4.7. developing the website www.resilia.pl/en/, including optimising its functionality based on Users’ behaviour;

3.5. Each visit to the website www.resilia.pl/en/ involves sending a request to the server on which the website is hosted. Each request sent to the server is recorded in server logs. Server logs include, among others, the User’s IP address, the date and time of the event, information about the web browser and the operating system used by the User.

This information is recorded and stored on the server used by the Controller. Data stored in server logs are not associated with specific persons using the website www.resilia.pl/en/ and are not used to identify the User.

Server logs are used as an aid in administering the website www.resilia.pl/en/, and their content is not disclosed to anyone other than persons authorised to administer the server.

3.6. Cookies used on the website www.resilia.pl/en/ (type -> description expiry -> time):

• • pll_language -> It stores information about the last language used to view the page -> 1 year
  • resilia_cookies_accepted -> Information on the date (timestamp) of accepting the cookie policy (clicking the “I accept” button in the modal appearing at the bottom of the page) -> The file does not expire

3.7. The website www.resilia.pl/en/ uses third-party Cookies, i.e. Cookies functioning within the website www.resilia.pl/en/ and used by third parties (partners) whose services are used by the Controller to support and coordinate the functionalities of the website www.resilia.pl/en/.

Cookies are placed on the end device of the Website User and may be used, in particular, by advertisers and partners cooperating with the Controller.

Third parties use the collected information for the purpose of cooperating with the Controller; however, they may also use it for their own purposes. The collected data may contain information about how the User uses third-party websites and may allow such third parties to recognise their users.

More information about the Cookies used by the aforementioned entities can be found in their privacy policies.

3.8. The Controller uses the services of the following third parties that use Cookies on the website www.resilia.pl/en/:

3.9. As a standard rule, most web browsers available on the market accept the storage of Cookies by default. The User may specify the conditions for the use of Cookies through the settings of their web browser. This means that the User may partially limit (e.g. temporarily) or completely disable the possibility of storing Cookies; however, in the latter case, this may affect certain functionalities of the website www.resilia.pl/en/.

3.10. Web browser settings regarding Cookies are important from the point of view of consent to the use of Cookies by the Controller. In accordance with applicable regulations, consent to the use of Cookies that do not contain personal data may also be expressed through web browser settings. If such consent is not given, the web browser settings regarding Cookies should be changed accordingly.

3.11. Detailed information on changing Cookie settings and deleting Cookies independently in the most popular web browsers is available in the help section of the web browser used by the User, including here: https://support.google.com/chrome/answer/95647.

3.12. The website www.resilia.pl/en/ also contains links to the Controller’s websites or channels on external online platforms (Facebook, Twitter, LinkedIn, YouTube). When using these links, the User leaves the website www.resilia.pl/en/. The Controller has no control over, or influence on, what data are collected by the indicated providers.

To obtain information on the purpose and scope of data collection, including Cookies used there, their further processing and use by the indicated providers, as well as the User’s rights and privacy settings options offered by those providers, the User should read the data protection information (privacy policy) of the relevant provider.

If the User does not want the above social media channels to collect information about them after visiting www.resilia.pl/en/, the User should log out of those platforms before accessing the website.

4. RIGHTS RELATED TO DATA PROCESSING

4.1. The User has:

4.1.1. the right to access their personal data;

4.1.2. the right to request rectification of their personal data;

4.1.3. the right to request erasure of their personal data;

4.1.4. the right to request restriction of the processing of their personal data;

4.1.5. the right to data portability, i.e. the right to receive from the Controller personal data in a structured, commonly used and machine-readable format. The User may also request that the Controller transmit the personal data provided by the User to another controller;

4.1.6. to the extent that the legal basis for processing personal data is the Controller’s legitimate interest, the User has the right to object to the processing of their personal data;

4.1.7. If the User has given consent to the processing of data, the User has the right to withdraw the consent granted at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

4.2. In order to exercise the above rights, the User should contact the Controller using the contact details indicated above (contact details indicated in section 1.3 above).

4.3. In addition, the User has the right to lodge a complaint with the supervisory authority responsible for personal data protection (the President of the Personal Data Protection Office) if the User believes that the processing of data violates the GDPR. Information on how to lodge such a complaint can be found here: https://uodo.gov.pl/pl/526/2464.

4.4. The Controller respects the rights of all Users arising from personal data protection regulations and seeks to facilitate their exercise to the greatest extent possible. The Controller indicates that the rights listed in sections 4.1.1–4.1.6 are not absolute, and therefore in certain situations we may lawfully refuse to comply with them. However, if we refuse to comply with a request, we do so only after careful analysis and only where refusal to comply with the request is necessary.

5. CHANGES TO THE PRIVACY POLICY

5.1. The Controller may change the Privacy Policy and the manner of using the website www.resilia.pl/en/ if at least one of the important reasons indicated in the following list occurs:

5.1.1. a change in applicable legal provisions governing the activities conducted by the Controller;

5.1.2. the need to adapt the content of the Privacy Policy to applicable legal provisions or the necessity to make editorial changes to the Privacy Policy;

5.1.3. a change in the method of operation or functioning of the website www.resilia.pl/en/ caused by objective and independent technological or technical reasons;

5.1.4. a change in the terms of use of the website www.resilia.pl/en/ that does not worsen the situation of Users compared to the previous terms;

5.1.5. the need to update the Controller’s data indicated in the Privacy Policy.

6. FINAL PROVISIONS

6.1. The website www.resilia.pl/en/ may contain links to other websites. The Controller recommends reading the privacy policies of other websites after accessing them. This Privacy Policy applies exclusively to the website www.resilia.pl/en/.

6.2. The Controller applies technical and organisational measures ensuring the protection of processed personal data appropriate to the risks and categories of data covered by protection, and in particular protects the data against disclosure to unauthorised persons, access by unauthorised persons, processing in violation of applicable regulations, as well as alteration, loss, damage or destruction.

6.3. The Controller protects the data set against unauthorised access.

6.4. Contact regarding all matters related to support and technical assistance is carried out through messages sent to the following email address: [email protected].