Website Privacy Policy

Since 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”), has been in force. It introduces harmonised rules for the protection of personal data across the European Union.

Accordingly, we inform you that:

The controller of personal data and the website administrator is the President of the Office of Competition and Consumer Protection (UOKiK), with its registered seat in Warsaw at pl. Powstańców Warszawy 1, 00-950 Warsaw, Poland.

Contact details for the Data Protection Officer at UOKiK: iod@uokik.gov.pl

The website administrator can be contacted:

by phone: +48 22 55 50 248
by email: katarzyna.henning@konsument.gov.pl
in writing: UOKiK, pl. Powstańców Warszawy 1, 00-950 Warsaw, Poland

Personal data are processed for the following purposes:

statistical purposes,
sending newsletters electronically – only where the user has given consent,
other promotional and communication activities of the European Consumer Centre.

Data retention periods:

for newsletter purposes – until the user unsubscribes,
user IP addresses of persons who have accepted the cookie policy are stored for a period of 1 year.

Rights of the data subject:

the right to access their personal data,
the right to rectify or complete data if they are incorrect or incomplete,
the right to request erasure of data,
the right to request restriction of processing,
the right to data portability, i.e. to receive the personal data provided to the controller and transmit them to another controller,
the right to object to processing for direct marketing purposes,
the right to withdraw consent at any time,
the right to lodge a complaint with the Polish supervisory authority or with the supervisory authority of another EU Member State competent according to the habitual residence or place of work of the data subject, or the place of the alleged infringement of the GDPR.