Privacy policy

We respect your privacy and take care to protect your personal data. This Privacy Policy provides you with information about how we handle your personal data. You will also learn about your rights and how applicable regulations protect you and your personal data. Please read the Privacy Policy carefully before you start using our Services.

I. Who is the Controller of your data? That is, to whom do you entrust it?
The Controller of your personal data is
VIP Business Solutions sp. z o.o.
KRS: 0001190990 | NIP: 681-211-43-23 | REGON: 542551743
Address: Krzyszkowice 62
32-445 Krzyszkowice
Share capital: 5000 PLN

Registration authority: DISTRICT COURT FOR KRAKÓW-ŚRÓDMIEŚCIE IN KRAKÓW, XII ECONOMIC DIVISION OF THE NATIONAL COURT REGISTER

II. For what purpose do we collect your data?

1. Account creation and user authentication on the Service
Legal basis: "processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract" (Art. 6(1)(b) GDPR).
The scope of data we collect from you includes: username, e-mail address, and the password you set. These data are collected via the registration form.

• a) Services for which account creation is not required
List of services: The Service provides services for which account registration is not required, e.g., responding to posted ads, browsing ads, searching ads using the search engine available on the site, and posting ads.
Legal basis: "processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract" (Art. 6(1)(b) GDPR).
The scope of data we collect from you includes: data about your activity on the Service, in particular data regarding the ads you visit, session data, operating system, browser, location, and IP address.

• b) Services for which account creation is required
List of services: To use the full range of services and functionalities, an active user account is required. The User Account contains messages related to ads you posted, invoices, and e.g., the status of purchased packages.
Legal basis: "processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract" (Art. 6(1)(b) GDPR).
The scope of data we collect from you includes: data provided in your User Profile and data about your activity on the Service, in particular data regarding ads you visit, session data, operating system, browser, location, and IP address.
Mandatory data are marked by our system, and failure to provide them will result in the inability to provide certain services and account functionalities.

2. Handling and enforcement of complaints and claims
Legal basis: "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, particularly where the data subject is a child" (Art. 6(1)(f) GDPR).
The scope of data we collect from you includes: data provided in the User Profile, data regarding the use of our services if complaints or claims relate to services provided by us, and other data necessary to demonstrate the existence of a claim.
If documentation is attached to a complaint or claim, it will be necessary to collect data from these documents.

III. To whom do we disclose your data?

1. Your data are shared exclusively for the purpose of:

• ensuring access to and provision of Services via the Service

• ensuring convenience of using the provided services

• ensuring the security of the Service
  Your data are not administered by us; we merely facilitate their exchange.

2. Your data may be shared with the following entities:
Service providers: Your personal data are shared with service providers we use to operate the Service. Service providers independently determine the purposes and principles of personal data processing. To prevent certain functions from being performed by internet robots, we use the Google reCAPTCHA mechanism to verify that user behaviour on our platform does not resemble that of robots. In such cases, we may disclose your IP address to Google LLC.

Data processors: Your data are processed by providers solely on our instruction. These entities provide hosting, online marketing, e-mail handling, web push notifications, or other services related to analysing traffic on the Service, analysing the effectiveness of marketing campaigns, monitoring user behaviour, data profiling, and targeting. They support the provision of services related to the User Account functionalities.
In every case, if you request, we are obliged to provide copies of standard contractual clauses.

State authorities, law enforcement, supervisory, and other bodies: Due to legal obligations, your data may be disclosed to law enforcement authorities, supervisory bodies, entities performing public tasks, public authorities, and bodies acting on their behalf, i.e., organisational units of the prosecutor’s office, Police, General Inspector for Personal Data Protection (President of the Personal Data Protection Office), President of the Office of Competition and Consumer Protection, or President of the Office of Electronic Communications.

New owners of the enterprise: Upon decision to sell our assets or the entire enterprise, your data may be transferred to a new owner. In such a case, the new owner will have the right to use your personal data as specified in this policy.

3. Do we transfer your data outside the European Economic Area?
Your personal data may be transferred outside the European Economic Area to Google LLC based on appropriate legal safeguards, namely the standard contractual clauses approved by the European Commission.

IV. How we ensure the security of your data
All collected personal data are stored on properly secured servers. Your data are protected by internal personal data protection procedures and implemented security systems. Our systems are continuously monitored to prevent situations such as accidental loss, disclosure, or access to data by unauthorized persons.
Moreover, personal data used during registration and login are transmitted via encrypted data transmission (SSL). This protects identification data and minimises the risk of account access being intercepted by unauthorised parties or third parties.

V. Retention period of your personal data
Your personal data are stored for the duration of your account on the Service and solely for the purposes of providing services in accordance with the Terms and for marketing purposes.
Your data after account deletion may be retained to fulfil legal obligations or for legitimate interests. Regardless, your data processed as part of posted content (ads) are stored for 24 months from the date of expiry or deletion of the ad.
Personal data associated with cookies are stored for the period corresponding to their lifecycle or until you delete them.
Attachments sent in messages via the Service are stored for up to 36 months. Regardless, you can delete any messages received in connection with an added ad at any time.

VI. Your rights regarding data processing
Under the current regulations, every user has rights related to the processing of their personal data.
At any time, you have the right to exercise the following rights:

1. Right to restrict processing of your data – i.e., the right to suspend the processing of your personal data by us.

2. Right of access to your personal data – i.e., the right to information about the processing of your personal data and to receive a copy of the personal data being processed.

3. Right to rectification of your personal data – if your data are incomplete, outdated, or incorrect, you have the right to correct them. Some changes may require verification.

4. Right to be forgotten – this right allows you to delete all data collected about you in our database if they are no longer necessary for the purposes for which they were collected.

5. Right to withdraw consent – at any time, you have the right to withdraw any consent you provided when performing specific actions such as registration or using any services and functionalities offered by Lento.pl. Changing your consents will not entail any consequences, but withdrawing them may prevent further use of services or functionalities requiring the withdrawn consent in accordance with Art. 7(3) GDPR.

6. Right to object to data usage – at any time, you have the right to object to the use of your personal data by us. An objection also means your refusal to receive notifications related to the provision of available services on the Service and marketing communications via e-mail regarding implemented products. An objection may result in deletion of your data if we do not have another legal basis for processing your data in accordance with Art. 21 GDPR.

7. Right to transfer data to another entity – if you wish, you have the right to receive your data collected by us and transfer them to another data controller. At your request, these data will be transmitted by us, subject to technical feasibility. In such a case, the data collected by us will be provided as a file in a commonly used format (e.g., CSV) and delivered directly to the designated controller in accordance with Art. 20 GDPR.

VII. Contact
For more detailed information about our Privacy Policy or to exercise your rights, you may contact us via:

• the contact form on the website

• sending an email to: formularz kontaktowy na stronie
   

• sending a letter by post to:
  VIP Business Solutions sp. z o.o.
  Krzyszkowice 62
  32-445 Krzyszkowice

• ---

  Cookies, local storage, and pixel tags
  We use cookies and other similar technologies, such as local storage or pixel tags, to ensure the highest quality of services.

  Cookies are small text files stored on your computer by the websites you visit. They are widely used to ensure or improve the operation of websites. We use them, among other things, to monitor the performance of our Services, allow users to log in to their accounts, or save user preferences.

  Pixel tags are small pieces of code on a website, application, or e-mail notification. Like many other companies, we may use them to confirm whether a user has interacted with specific content and to improve and measure the performance of our Services.

  Local storage is a standard technology that allows a website or application to store data locally on a user’s computer, and, like other technologies, enables us to improve our Services and make them faster and more reliable.

  Services provided by third parties
  To enrich Services and functionalities, we have implemented social buttons, plugins, widgets, analytics software, and scripts from third parties such as Facebook, Twitter, and Google. Services with such functionality may use cookies from these third parties (so-called third-party cookies), over which we have no control. Therefore, you should always check the relevant third-party service to learn more about how these cookies work.

  Disabling functionality
  You can always disable cookies in your browser, including third-party cookies, and clear local storage. However, note that some functions of our Services, such as authentication or remembering your preferences, may not work correctly in such a case.