Privacy Policy
I. General Provisions
Definitions of terms used in this privacy policy:
- Administrator – GPD limited liability company limited partnership with its registered office in Poznań at ul. Roosevelta 18, 60-829 Poznań, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto i Wilda in Poznań, VIII Commercial Division of the National Court Register under number: 0000527454, REGON: 302860051, NIP PL: 7811902177;
- Personal Data – information about a natural person identified or identifiable, in particular based on an identifier such as name, surname, PESEL, location data, internet identifier;
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;
- Service – the website available at www.gpdfilmstudio.pl.
- User – any natural person visiting the Service or using one or more services provided within the Service.
The privacy policy is a document regulating the principles of processing and protecting the personal data of Users in connection with the use of the Service, collected during the use of the Service.
The primary goal of the Administrator is to ensure the protection of the privacy of the Service Users and to ensure that the processing of their personal data collected in connection with their activity on the Service complies with applicable laws, including GDPR.
II. Principles of Personal Data Processing
-
Personal data is processed by the Administrator based on:
- Article 6(1)(a) GDPR – based on consent, personal data may be processed by the Administrator for purposes indicated in the consent clause, e.g., for marketing activities via phone call or by sending commercial information to an email address;
- Article 6(1)(b) GDPR – data is processed in connection with the performance of a contract and for the purpose of its execution e.g., for the conclusion and execution of the agreement for the delivery of the Newsletter service (this includes all personal data provided to the Administrator in connection with the concluded contract, whose processing is necessary for the performance of the contract and includes processing necessary to take actions at the request of the data subject before concluding the contract);
- Article 6(1)(c) GDPR to fulfill a legal obligation incumbent on the Administrator (e.g., accounting regulations, tax regulations);
- Article 6(1)(f) GDPR, i.e., for purposes resulting from legitimate interests pursued by the Administrator, including:
- archiving documents, including files related to business contact, such as portfolio, offers, inquiries, email correspondence during cooperation;
- creating and maintaining databases of contractors, including a database of shooting location addresses;
- claiming or securing claims;
- conducting quality analyses and statistics regarding provided services and completed projects;
- responding to messages in connection with contact with the Administrator.
In individual cases and upon prior consent, the Administrator may process personal data based on Article 6(1)(a) GDPR for purposes other than those mentioned above.
- The Administrator of personal data exercises particular care to protect the interests of the data subjects, and in particular ensures that: the personal data it collects is processed lawfully; is collected for specified, lawful purposes and not subjected to further processing incompatible with these purposes; remains substantively accurate and adequate for the purposes for which it is processed.
- To carry out marketing activities, the Administrator in some cases uses profiling, employing the automated processing of data collected through cookies and similar technologies (e.g., marketing tools provided by Google). The actions taken, including profiling, do not serve automated decision-making concerning the User or produce any legal effects for the User. More about cookies in section VI of the Privacy Policy and section VII. Analytical and Marketing Tools Used by the Administrator.
- The Administrator processes personal data of Users visiting the Administrator's profiles maintained on social media (Facebook, Instagram), including those engaging in activity on these profiles. The data is processed solely for marketing purposes, including promoting the Administrator's brand, activities, services, and products, as well as for building and maintaining communication, based on the Administrator's legitimate interests.
III. User Rights
- Every User has:
- the right to access their personal data, i.e., the right to obtain confirmation whether the Administrator processes the data, to what extent, and information about such processing, including the basis for processing;
- the right to rectify data if the data processed by the Administrator is incorrect or incomplete;
- the right to request the Administrator to delete data;
- the right to request the Administrator to restrict data processing;
- the right to data portability, i.e., the right to receive the personal data provided to the Administrator and transfer it to another administrator if processing is based on consent or contract and is carried out in an automated manner;
- the right to object to the processing of personal data for purposes arising from the Administrator's legitimate interest;
- the right to object to processing for marketing purposes;
- the right to withdraw consent given for personal data processing at any time (without affecting the lawfulness of processing carried out based on consent before its withdrawal);
- the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another EU member state, particularly if the User believes that the processing of their personal data violates GDPR (in Poland, since 25.05.2018, the supervisory authority is the President of the Personal Data Protection Office).
- A request to exercise the aforementioned rights can be submitted via:
- in writing to the Administrator's address;
- via email to: ochrona.danych@gpd.com.pl.
- The request referred to in point 2 above must be precisely formulated and in particular indicate what request is to be fulfilled, what processing purposes the request concerns, and what type of data processing the request pertains to. If necessary, the Administrator is entitled to request clarification/supplementation of the request for the data needed to properly fulfill the requests contained in the request.
- The Administrator will inform the User within one month of receiving the request about actions taken in connection with the request. If necessary, the Administrator will inform the User about the need to extend the response time, providing the reason for the extension.
- The response to the request will be sent using the same communication method as was used to submit the request. In the case of a written request, at the User's request, the response may be sent electronically to the email address provided by the User.
- In the case of processing personal data based on consent, the User has the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, the User should:
- For the Newsletter service, the subscription can be canceled using the deactivation link found in the content of each sent Newsletter or by completing the cancellation form found in the Newsletter Regulations
- Send an SMS/MMS to the phone number +48 506 193 341 with information regarding the withdrawal of consent for marketing activities in the form of a phone call
- Send an email to new-business@gpd.com.pl with information regarding the withdrawal of consent to send commercial information to the email address
IV. Period for which data is stored:
- Personal data processed for the purpose of concluding or performing a contract will be stored for the duration of the contract and, thereafter, for the period necessary for post-sale customer service (e.g., complaint handling), securing or pursuing claims owed to or against the Administrator;
- Personal data processed to fulfill the Administrator's legal obligation will be processed until such legal obligation is fulfilled;
- Personal data processed based on separate consent will be stored until such consent is withdrawn;
- Personal data processed for purposes resulting from legitimate interests pursued by the Administrator will be processed until an objection to such processing is made, unless the Administrator demonstrates compelling legitimate grounds for processing overriding the interests, rights, and freedoms of the data subject or grounds for establishing, pursuing, or defending claims;
- Personal data processed for marketing purposes will be processed until an objection to such processing is made.
If an objection is made to the processing of personal data for marketing purposes, personal data related to marketing will no longer be processed for this purpose.
V. Categories of data recipients
Personal data of Users may be disclosed to the Administrator's employees and collaborators, entities affiliated with the Administrator, debt collection companies, postal operators, carriers, partners providing technical services, hosting service providers, IT system providers, subcontractors of the Administrator, other entities providing services to the Administrator, and employees or collaborators of such entities.
VI. Cookies and operational data
- The Service uses cookies, i.e., small text-and-numeric files that are stored by the telecommunication system on the User's telecommunication system (computer, phone, or another device used to connect to the Service) during browsing and allow subsequent identification of the User when reconnecting to the Service from the device (e.g., computer, phone) on which they were stored.
- Cookies collect data about the User's use of the Service, and their main purpose is to facilitate the User's use of the Service, tailor the Service to the User's needs and expectations (personalization of Service subpages), analyze User traffic within the Service, and conduct marketing activities by the Administrator.
- Depending on the storage period on the end device, cookies used by us can be divided into:
- Session cookies: stored on the User's device until the end of the browser session. Saved information is then permanently deleted from the device's memory.
- Persistent cookies: stored on the User's end device for a defined period or until they are deleted by the User.
- We use the following types of cookies: Essential cookies contribute to website usability by enabling basic functions like page navigation. The Service cannot function properly without these cookies. Preference cookies allow the website to remember information that changes its appearance or operation, such as the preferred language or the region in which the User is located. Statistical cookies help website owners understand how different Users interact with the site. Marketing cookies are used to track Users across websites. Their purpose is to display ads that are relevant and engaging for individual Users and therefore more valuable to publishers and advertisers.
- The use of data collected through the above-mentioned technologies, including for marketing purposes, is based on the Administrator's legitimate interest and only if the User has consented to the use of cookies. Consent can be withdrawn at any time. A link to the tool used on the Service for managing User preferences regarding cookie installation is available HERE.
- Information on the storage period of cookies is available from the tool used in the Service to manage User preferences regarding cookie installation, accessible via a link HERE.
- The Service may include links allowing Users to directly access other websites. The Administrator of personal data has no control over the privacy policies or use of cookies by their administrators. It is recommended that before using resources offered by other websites, each User reviews the privacy and cookie usage policies provided by those websites, or, if unavailable, contacts the editorial team of the respective website for information.
- The method of changing cookie settings may vary depending on the web browser used by the User. Information about cookies can be found in the "Help" section of each web browser and on the website http://www.aboutcookies.org.
Google Chrome
Default settings of the Google Chrome browser allow for storing cookies. To change these settings:
- click the "Google Chrome Settings" menu and select "Settings";
- click "Show advanced settings" at the bottom of the page;
- select "Content settings" in the "Privacy" options;
- choose the desired settings;
- to introduce specific settings for a given service, click "Manage exceptions" and select your own settings for websites;
- to confirm changes, click the "Done" button.
Microsoft Internet Explorer
Default settings of the Microsoft Internet Explorer browser allow storing cookies but block files that may originate from services not following a privacy policy. To change these settings:
- click the "Tools" menu and select "Internet Options";
- choose the "Privacy" tab;
- use the slider to set the desired settings (the highest setting blocks cookies entirely, while the lowest allows all cookies).
OR:
- click the "Advanced" button and manually choose the desired settings;
- to introduce specific settings for a given service, click "Sites" and select your own settings for websites;
- confirm changes using the "OK" button.
Mozilla Firefox
Default settings of the Mozilla Firefox browser allow storing cookies. To change these settings:
- click the "Tools" menu (in other versions: click the "Firefox" button) and select "Options";
- then choose the "Privacy" tab and mark the desired settings;
- to introduce specific settings for a given service, click "Exceptions" and select your own settings for websites;
- confirm changes using the "OK" button.
Opera
Default settings of the Opera browser allow storing cookies. To change these settings:
- click "Preferences," select the "Advanced" option, and then "Cookies";
- mark the desired settings;
- to introduce specific settings for a given service, enter the chosen website, right-click on it, select "Site Preferences," and go to the "Cookies" tab to enter the desired settings;
- confirm changes using the "OK" button.
Safari
Default settings of the Safari browser allow storing cookies. To change these settings:
- in the "Safari" menu, select "Preferences";
- click the "Privacy" icon;
- mark the desired settings;
- to introduce specific settings for a given service, click "Details" and select your own settings for websites.
VII. Analytical and Marketing Tools Used by the Administrator
The Administrator uses various methods and tools for analytical and marketing purposes. Below, general information about the tools used is presented.
- GOOGLE ANALYTICS – files used by Google to analyze how the User interacts with the Service (reports and statistics). The tool does not use data to identify the User. Within this tool, data such as internet identifiers, including cookie identifiers, IP address, device identifiers, and User identifiers, are collected. Thanks to tools provided by Google, the User’s IP address is anonymized. According to the Google Analytics Terms of Service, Google declares that it will not associate the IP address of the data subject with other data held by Google. More about the service: https://www.google.com/intl/en/policies/privacy/partners.
For web analytics, the Administrator also uses the Google Signals tool, which is an extension of Google Analytics services enabling so-called "cross-device tracking" (identifying users across multiple devices). This means that if the User’s internet-enabled devices are linked to their Google account, and the User has activated the "personalized advertising" option on their Google account, Google can generate reports on the use of our site (in particular, the number of Users using different devices), even if the User switches devices. The Administrator does not process personal data in this regard, and the reports received from Google do not allow the Administrator to identify individual Users (the data collected by Google is anonymized and aggregated).
A link to the tool used on the Service, enabling Users to manage their preferences regarding the installation of Google Analytics cookies, is available HERE. Additionally, to opt out of Google Analytics cookies, you can download and install the browser add-on that blocks Google Analytics (Opt-out Browser Add-on: https://support.google.com/analytics/answer/181881?hl=en).
- GOOGLE ADS & DV 360 – measures the effectiveness of advertising campaigns conducted by the Administrator. It enables the analysis of keywords and the number of unique users. It allows advertisements to be shown to Users who have previously visited the website. More about the service: https://policies.google.com/technologies/ads?hl=en.
A link to the tool used on the Service, enabling Users to manage their preferences regarding the installation of GOOGLE ADS & DV 360 cookies, is available HERE. Additionally, any User with a Google account can disable personalized advertising on the internet in the Google Ads Settings (https://support.google.com/My-Ad-Center-Help/answer/12155451?visit_id=638169850624111508-3462238637&rd=1).
- FACEBOOK PIXELS – allows measuring the effectiveness of advertising campaigns conducted on Facebook. Both the platform’s tools and the Pixels enable detailed data analysis to optimize the Administrator’s activities. The Pixel acts as a pseudonym, meaning it does not create any direct connection to the User's personal information. More about the service: https://pl-pl.facebook.com/help/443357099140264?helpref=about_content.
A link to the tool used on the Site, enabling Users to manage their preferences regarding the installation of FACEBOOK PIXELS cookies, is available HERE. Users with a Facebook account can adjust their consent to using Facebook Pixel via this link: https://www.facebook.com/ads/preferences. Anyone can opt out of interest-based ads displayed by Facebook or its partner companies through the European Interactive Digital Advertising Alliance (selecting the ‘opt-out’ option) via this link: http://www.youronlinechoices.com/pl/twojewybory. - SOCIAL MEDIA PLUGINS – allow Users to share content published on the Service on selected social networks. Using plugins results in the relevant social network receiving information about the User’s interaction with the Service, which can be linked to the User’s profile on that social network. The Administrator has no knowledge of the purpose and scope of data collection by social networks. Some of these social networks may be located outside the European Economic Area (in the United States). The plugin provider receives information that the User’s browser displayed our Service. This information, along with the User’s IP address, is stored by the plugin provider and, if the User has a registered account in their service, is linked to that account. Some plugins, e.g., "like" or "share," are responsible for transferring specific information from the User’s browser to the plugin provider’s server to publish them in their service. In this context, the plugin provider decides on the purposes and methods of processing the User’s personal data. More details about Users' rights related to this can be found at the following links:
- Facebook: https://www.facebook.com/legal/FB_Work_Privacy
- Instagram: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
- Google (YouTube): https://policies.google.com/privacy?hl=en
- TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/pl-PL
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
- Spotify: https://www.spotify.com/pl/legal/privacy-policy
- LinkedIn Insight Tag – measures the effectiveness of advertising campaigns conducted by the Administrator and provides information about website visitors. Using the Insight Tag, you can track conversions, retarget visitors, and view demographic data of LinkedIn members visiting the Service. More about the service: https://www.linkedin.com/help/lms/answer/a489169. A link to the tool used on the Site, enabling Users to manage their preferences regarding the installation of LinkedIn Insight Tag cookies, is available HERE.
- GOOGLE TAG MANAGER – enables analysis of User activity by allowing the management of other analytical or marketing tools used by the Administrator.
VIII. Final Provisions
- The personal data administrator applies technical and organizational measures ensuring the protection of processed personal data appropriate to the risks and categories of personal data covered by the protection, in particular securing personal data against unauthorized access, unauthorized acquisition, processing in violation of applicable regulations, and alteration, loss, damage, or destruction.
- This privacy policy is effective upon publication, understood as posting its full content on the Service with an indication of the posting date. The privacy policy may be subject to changes or updates. Any changes to the privacy policy, including updates, will be published within the Service with an indication of the posting date. The amended Privacy Policy is effective upon publication in the Service.
Contact
The Administrator has appointed a Data Protection Officer – Paweł Radzewicz. Contact with the Administrator’s Data Protection Officer is possible at the Administrator’s address and via email at: ochrona.danych@gpd.com.pl