1. Who is the Controller of your personal data?
The Controller of your data is FLIKO P.S.A., with its registered office in Olsztyn, ul. Grunwaldzka 4a lok. 1, 10-124 Olsztyn, entered into the register of entrepreneurs of the National Court Register, maintained by the District Court in Olsztyn, VIII Commercial Division of the National Court Register under KRS number: 0000935385, NIP: 5213949386, REGON: 520674090, share capital: PLN 172,535.04.
2. How can you contact the Controller?
Contact with the Controller is possible in the following ways, chosen by you:
● Via the contact form located on the website at: www.fliko.pl
● By email to: kontakt@fliko.pl
● By mail, by sending a parcel to the address: FLIKO P.S.A., ul. Grunwaldzka 4a lok. 1,
10-124 Olsztyn.
3. On what basis do we process your personal data?
We process your personal data for various purposes, depending on the relationship we have with you. Therefore, the legal basis for processing personal data differs depending on the situations described below:
If you visit our website www.fliko.pl and browse the content on it, use the contact form, send us a message to the email address provided on the website, contact us by phone, or subscribe to the newsletter, we process your personal data for the following purposes:
● To ensure the proper functioning of the website, monitor traffic, verify how visitors use the website, and potentially counteract user actions inconsistent with generally applicable legal provisions. We record this data primarily through cookies and website logs. The legal basis for processing data in this regard is Article 6(1)(f) of the GDPR, which allows data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interest of the controller in this case is to ensure the proper functioning of the website, maintain statistics regarding the website's operation, and counteract fraud and legal violations.
● To contact individuals who use the contact form on our website, send messages via email, or call the phone number provided on the website. The legal basis for processing data in this regard is Article 6(1)(f) of the GDPR, which allows data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interest of the controller in this case is the necessity to process data in order to contact individuals and answer their questions.
● To conduct marketing activities regarding the Controller's products and services. In such a case, personal data is processed based on Article 6(1)(f) of the GDPR, which allows data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interest of the Controller in this case is conducting marketing activities. These activities may include, for example, enabling subscription to and sending a newsletter. Regardless, where legal provisions require separate consent from the data subject, e.g., to present an offer using electronic communication means or telecommunications devices, the Controller obtains such consent in accordance with the requirements resulting from legal provisions. Such consent is required based on the provisions of the Telecommunications Law concerning the sending of marketing messages, such as a newsletter.
If you use our Fliko, Fliko Service, or Fliko Booking application, we process your personal data for the following purposes:
● To perform the provisions of the contract concluded between you and the Controller, including in particular enabling you to log in to the application and use the functionalities available to clients. The legal basis for data processing in this regard is Article 6(1)(b) of the GDPR, which allows data processing when it is necessary for the conclusion and performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
● To fulfill legal obligations imposed on us as the Controller, in particular tax obligations related to the settlements of our cooperation, such as issuing and storing invoices. The legal basis for data processing in this regard is Article 6(1)(c) of the GDPR, which allows data processing when it is necessary for compliance with a legal obligation to which the controller is subject.
● To pursue our legitimate interests, such as asserting claims, defending against claims, monitoring the use of the application, and detecting potential activities inconsistent with the contract concluded between us and you or with legal provisions. The legal basis for processing personal data in this regard is Article 6(1)(f) of the GDPR, which indicates that data processing is permissible when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
● If you are a person acting on behalf of our Client (i.e., a person who signed a contract with us) and, in connection with this, you contact us acting as a representative of the Client (e.g., as a board member, employee, or associate), we process your personal data for the purpose of concluding and performing the contract between us and the Client. In such a case, the legal basis for data processing is Article 6(1)(f) of the Regulation, which indicates that data processing is permissible when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interest of the controller in this case is the performance of the contract between us and our Client, which requires contacting the Client's representatives.
● If you use the application as a user (e.g., as a member of a housing community or cooperative, resident, tenant, or occupier), we process your data to ensure the proper functioning of the application, monitor traffic, verify how the application is used, ensure security, and potentially counteract actions inconsistent with generally applicable legal provisions. The legal basis for data processing in this regard is Article 6(1)(f) of the GDPR, which allows data processing when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The legitimate interest of the controller in this case is to ensure the proper functioning of the application, maintain statistics regarding the application's operation, and counteract fraud and legal violations. We note that data is processed by us as the controller to a limited extent, concerning the realization of the purposes indicated above—most personal data of application users is processed based on data processing entrustment agreements concluded between us and our clients.
If you visit our fan page on Facebook, fan page on LinkedIn, or profile on Instagram, follow them, or react to our posts, we process your personal data to the following extent:
● To monitor traffic and conduct marketing activities regarding our products and services. Within these social media portals, we may direct marketing content to you (display posts marked as sponsored) in accordance with the regulations of Facebook, LinkedIn, or Instagram. We process data related to the activity of our fan page on Instagram or Facebook based on Article 6(1)(f) of the GDPR, i.e., based on our legitimate interest. The legitimate interest of the controller in this case is maintaining statistics and conducting marketing activities.
4. To whom may your personal data be disclosed?
To properly provide our services, we use the help of certain third parties. Therefore, the personal data you provide may be transferred to:
● The entity providing HR and accounting services for us—CXO spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Sarmacka 15/111, 02-972 Warszawa, KRS: 0001028724, NIP: 5322046447.
● Entities providing hosting services for us—home.pl Spółka Akcyjna with its registered office in Szczecin, ul. Zbożowa 4, 70-653 Szczecin, KRS 0000431335, NIP 8522103252.
● The entity providing email sending automation services for us—Vercom Spółka Akcyjna with its registered office in Poznań, ul. Wierzbięcice 1B, 61-569 Poznań, KRS: 0000535618, NIP: 7811765125.
● The entity providing SMS message sending automation services for us—LINK Mobility Poland spółka z ograniczoną odpowiedzialnością with its registered office in Gliwice, ul. Toszecka 101, 44-100 Gliwice, KRS: 0000350201, NIP: 9691566736.
● The entity providing email hosting and cloud services for us—Google Ireland Ltd. and Google LLC with its registered office in Mountain View, California. The legal basis for transferring data to the United States is the Data Privacy Framework program, which Google has joined.
● The entity providing analytical services (Google Analytics, Google Firebase) for us—Google Ireland Ltd. and Google LLC with its registered office in Mountain View, California. The legal basis for transferring data to the United States is the Data Privacy Framework program, which Google has joined.
● The entity that manages the social media portals Facebook and Instagram—Meta Ireland Limited and Meta Platforms Inc. with its registered office in Mountain View, California, USA. To the extent that the processing of your personal data concerns marketing activities related to the website undertaken through the Facebook platform, we and Facebook are joint controllers of your personal data. This means you can address questions about data processing in this regard to both us and Facebook. The legal basis for transferring data to the USA is the Data Privacy Framework program, which the Meta concern has joined.
● The entity that manages the social media portal LinkedIn—LinkedIn Corp., Sunnyvale, California, USA. The legal basis for transferring data to the United States are the Standard Contractual Clauses, approved by the European Commission.
5. How long do we store your data?
We strive to store your personal data only for as long as it is truly necessary for us, and we delete it afterward. The time your data is stored depends on the interaction you have with us:
● If you are a person who entered our website, we process your personal data for as long as you use the site and for up to 12 months after you leave it.
● If you are a person who wrote to us using the contact form on our website or contacted us by phone or email, we process your personal data for as long as the contact between us and you lasts and for a period of 3 subsequent months.
● If you are a person who concluded a contract with us and uses the Fliko application, your data is processed for the duration of this contract and after its termination—for a period of up to 3 years from the end of the year in which you ceased using our service, in accordance with the statute of limitations for claims. This also applies if you are a representative of our Client.
● If you use our Fliko application as a user, i.e., because the entity you are associated with concluded a contract with us for the use of the Fliko application, we process your personal data for as long as you are a user of the application.
● If you expressed a desire to receive our newsletter or other marketing materials, we process your personal data for this purpose until you unsubscribe from our mailing list or until we cease promotional activities.
● If you follow us on a social media portal, react to our posts, or contact us via our fan page on Facebook, LinkedIn, or profile on Instagram, we process your personal data for the duration of the interaction between you and our fan page and for up to one year after the end of the given interaction.
6. What rights do you have in connection with the processing of your personal data?
In connection with the processing of your personal data, you have the following rights:
Right of access You can request confirmation from us that your personal data is being processed and obtain relevant information on this topic, including information about what data is being processed and for what purpose.
Right to rectification You have the right to demand the immediate rectification of inaccurate personal data and the completion of incomplete personal data.
Right to erasure (''right to be forgotten'') You have the right to request the immediate erasure of personal data if one of the following circumstances applies: * The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed. * You have withdrawn consent on which the processing is based and there is no other legal ground for the processing. * You object to the processing and there are no overriding legitimate grounds for the processing. * The personal data has been unlawfully processed. * The personal data has to be erased for compliance with a legal obligation. This does not apply to the extent that processing of personal data is necessary: * For exercising the right of freedom of expression and information. * For compliance with a legal obligation requiring processing by the controller. * For the establishment, exercise, or defense of legal claims.
Right to restriction of processing You have the right to demand the restriction of processing of personal data if: * You contest the accuracy of the personal data—for a period enabling us to verify the accuracy of the data. * The processing is unlawful, but you oppose the erasure of the personal data and request the restriction of its use instead. * We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims. * You have objected to the processing of data—pending the verification whether the legitimate grounds on our side override the grounds for your objection.
Right to data portability You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
Right to lodge a complaint You have the right to lodge a complaint regarding the unlawful processing of personal data to the supervisory authority—the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
Right to object You have the right to object to the processing, to the extent that the processing is based on our legitimate interest.
Right to withdraw consent If the personal data is processed based on consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
7. What else is worth knowing?
Your personal data will not be used for profiling, including automated decision-making.
The provision of personal data is voluntary, but in the case of data processing for the purpose of concluding or performing a contract with us for the use of the Fliko application, failure to provide data may result in the impossibility of us providing services.
Cookies
Cookies are small files that enable or facilitate the use of certain website functions. They may be saved on your device directly by us or by third parties with whom we cooperate. In connection with the use of cookies, we may process personal data, in particular such as IP address, website usage history, or information about the device or software used. The cookies we use are related to the functioning of our website, serve to control traffic on the site, create statistics regarding the use of the site by its users, undertake marketing activities, prevent technical errors and faults, ensure website security, and prevent abuse and legal violations.
The following types of cookies are distinguished:
● Session cookies: are stored on the device while you use our website (they are deleted after closing the browser). Session cookies enable the proper use of our website. Blocking them may result in errors or prevent the use of the site.
● Persistent cookies: are stored on your device until they are deleted or until they expire.
Additionally, cookies are divided according to the following categories:
1. Technical cookies - these files are essential for the proper display and operation of the website. These files can also detect irregularities in the functioning of the site and help in correcting errors, as well as enable verification of the scope of user consent expressed for other cookies. Blocking them may cause the site to malfunction.
2. Analytical and statistical cookies - these cookies enable the creation of statistics regarding the use of the website by users. They allow, among other things, the verification of traffic on the website, counting the number of entries, measuring how the site is used, and analyzing which devices and browsers users use. To conduct analytical activities, we use tools such as Google Analytics. These tools may require the use of cookies.
3. Marketing cookies - cookies responsible for conducting advertising and marketing activities, in particular related to the use of Google Ads services. They also include remarketing activities, i.e., encouraging users to revisit the website. Consent to the use of these cookies will allow us to direct advertisements to you based on your previous activities on our website.
4. Social cookies - these are cookies related to the social media portals we use, such as Facebook, Instagram, or YouTube. Accepting them will allow your visit to the site to be linked to our profiles on social media.
You can familiarize yourself with detailed information about which cookies may be stored on your device through the cookie information banner displayed on the website. It contains information about specific cookies, their purpose, and the time for which they will be stored on your device.
The use of cookies is based on your consent, expressed in accordance with the provisions of Article 398 of the Electronic Communications Law. Lack of such consent or subsequent deletion of cookies may result in the inability to use the website's functionalities.
It is possible to restrict or disable cookies on your device using your web browser settings. Web browsers allow you to disable all or part of the cookies (e.g., those originating from third parties). If you disable some cookies, cookies generated by our site may still be saved on your device, enabling the site to function properly. However, if the use of cookies is restricted, the use of our individual services provided may be limited, and in some cases, it may be impossible.
