PRIVACY POLICY OF THE MY TREE MAP SERVICE

This document describes the principles of processing and protection of personal data obtained by MGGP Aero through the Service.

1. Definitions

The terms indicated below and used herein shall be construed in accordance with their meanings:

Concept Meaning
MGGP Aero - MGGP Aero spółka z ograniczoną odpowiedzialnością with its registered office in Tarnów, ul. Karola Kaczkowskiego 6, 33-100, KRS: 0000026913.
Cookies - small text files saved by the browser on the end device of the user visiting a website. Cookies usually contain the name of the website they come from, time of storage on the end device and a unique identifier.
Personal data - information about an identified or identifiable natural person, as defined in Article 4(1) of the GDPR.
Service - the My Tree Map website, available at www.mytreemap.com
GDPR - Regulation 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation). The text of the GDPR is available here.
User - a natural person, a legal person or an organizational unit without legal personality, to which a separate act grants legal capacity - performing on its own behalf a business activity, as well as a natural person not performing a business activity, using the Service.
Services - services provided by MGGP Aero to the Users by electronic means within the meaning of the Act of 18 July 2002 on electronic provision of services specified in the Regulations, available here.

2. Manner of collection of Users' personal data.

MGGP Aero collects personal data of Users who are natural persons:

  • through forms available on the Website;
  • in connection with the provision of Services to Users;
  • through the User's use of the Service

3. Personal data processed by MGGP Aero

Users' personal data collected and processed by MGGP Aero may include:

  • Name;
  • Street and house number;
  • Town/City;
  • Country;
  • Postal Code;
  • Name of institution (business)
  • Order Area;
  • Tax ID
  • Phone number;
  • Email address;
  • Invoicing and payment details;
  • Service usage statistics.

4. Data collected via cookies.

Using the Service by the User may be connected with collecting information about the User by MGGP Aero using cookies.

Cookies allow us to collect information such as:

  • type of end device;
  • the name and version of your browser;
  • the name and version of the operating system installed on the end device.

Detailed rules on the use of cookies by MGGP Aero are specified in the cookie policy, which is an integral part of the Privacy Policy that is available here.

5. Purposes and grounds for processing personal data.

MGGP Aero, acting as a controller of personal data within the meaning of Article 4(7) of the GDPR, may process the User's personal data for the following purposes and on the basis of the indicated legal grounds:

With regard to Users who are MGGP Aero Clients
Purpose Legal basis
  • taking action at the request of the User prior to concluding a contract, including sending a reply to the inquiry sent via the contact form;
  • concluding an agreement, in particular agreements for the provision of Services, including services for creating and managing an account on the Website;
  • performance of the contract, in particular contracts for the provision of Services, including contacting the User in connection with the concluded contracts, providing support to the User in the scope of the provided Services, handling possible complaints;
Article 6(1)(b) GDPR: the processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract
  • keeping of accounts and accounting by MGGP Aero;
Article 6(1)(c) GDPR: the processing is necessary for the fulfilment of a legal obligation incumbent on MGGP Aero.
  • the establishment, investigation and defence of claims;
  • establishing and maintaining contact with the User, including in order to answer the User's questions sent via the contact form available on the Website and to exchange current correspondence not related to the conclusion of an agreement for the provision of Services or another agreement;
Article 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by MGGP Aero, i.e. determining, pursuing or defending against claims, establishing and maintaining contact with the User, including for the purpose of answering the User's questions sent via the contact form available on the Site and the exchange of current correspondence.
  • conducting direct marketing of our own products or services;
Article 6(1)(f) GDPR: processing is necessary for purposes deriving from the legitimate interests pursued by MGGP Aero, i.e. direct marketing of its own products or services.
In relation to Users who are employees/co-workers of our Clients
Purpose Legal basis
  • ensuring contact with the entity that is a party to the agreement concluded with MGGP Aero;
  • verification whether the person who contacts MGGP Aero is authorised to undertake activities on behalf of the entity that is a party to the agreement concluded with MGGP Aero;
  • ensuring proper implementation of the agreement concluded with MGGP Aero;
  • the establishment, investigation and defence of claims;
Article 6(1)(f) of the GDPR: processing is necessary for the purposes deriving from the legally justified interests pursued by MGGP Aero, i.e. ensuring contact with the subject who is a party to the agreement concluded with MGGP Aero, verification whether the person who contacts MGGP Aero is authorised to take action on behalf of the subject who is a party to the agreement concluded with MGGP Aero, ensuring proper performance of the agreement concluded with MGGP Aero, establishing, pursuing and defending against claims.
  • conducting direct marketing of our own products or services;
Article 6(1)(f) GDPR: processing is necessary for purposes deriving from the legitimate interests pursued by MGGP Aero, i.e. direct marketing of its own products or services.
  • keeping of accounts and accounting by MGGP Aero;
Article 6(1)(c) GDPR: the processing is necessary for the fulfilment of a legal obligation incumbent on MGGP Aero.

Notwithstanding the purposes and grounds indicated above, MGGP Aero may ask the User to consent to the processing of his/her personal data for a specific purpose.

6. User Rights.

The User whose personal data are processed by MGGP Aero may be entitled to the following rights described below. The scope of the User's rights in a particular case depends especially on the legal basis of processing his personal data by MGGP Aero.

Right to information The User's right to obtain information related to the processing of his personal data by MGGP Aero. MGGP Aero exercises this right by publishing this privacy policy, the cookie policy and the information clauses available on the Site.
Right of access The User's entitlement to obtain confirmation from MGGP Aero as to whether its personal data are being processed and to obtain access to and information about them, in accordance with Articles 13 and 14(1) of the GDPR.
Right of rectification The User's right to request MGGP Aero to immediately rectify personal data concerning him that are incorrect. Taking into account the purposes of the processing, the User has the right to request the completion of incomplete personal data, including by providing an additional statement.
Right of erasure The User's entitlement is also referred to as the "right to be forgotten". In cases set out in Article 17(1) of the GDPR (e.g. data are no longer necessary for the purposes for which they were collected or otherwise processed), the User has the right to request the erasure of personal data concerning them, and MGGP Aero is obliged to erase personal data without undue delay. However, there are certain exceptions to this right as set out in Article 17(3) of the GDPR (e.g. further processing of personal data is necessary for the establishment, investigation or defence of claims).
Right to restrict processing The User's right to request MGGP Aero to restrict processing in the cases indicated in Article 18(1) of the GDPR (e.g. in the event that the data subject questions the correctness of the data - for a period allowing MGGP Aero to check the correctness of the data). In such case, however, MGGP Aero is entitled to process the personal data, except for storage, only with the consent of the User or for the purpose of establishing, asserting or defending claims, or for the purpose of protecting the rights of another natural or legal person, or for important reasons of public interest of the European Union or a Member State.
Right to data movement The User's right to receive in a structured, commonly used, machine-readable format the personal data that MGGP Aero has been provided with, and the right to transfer this data to another controller without hindrance from MGGP Aero if the processing takes place by automated means. The User has the right to data movement if the processing is carried out in an automated form on the basis of the User's consent or on the basis of a contract.
Right to object to the processing of data The right of the User to object at any time - on grounds related to his/her particular situation or in connection with the processing of his/her personal data for direct marketing purposes - to the processing of his/her personal data when the processing is necessary for the performance of a task carried out in the public interest or for purposes resulting from the legitimate interests pursued by MGGP Aero.
Right to withdraw consent The User has the right to withdraw the consent to processing of personal data given to MGGP Aero at any time. The withdrawal of consent does not affect the legality of processing that was carried out on the basis of consent before its withdrawal.
The right not to be subject to automated decision-making The User's right not to be subject to a decision which is based solely on automated data processing, including profiling, and which produces legal effects with regard to that person or significantly affects him/her in a similar manner. The above provision does not apply in cases indicated in Article 22(2) GDPR (e.g. when the processing is based on the explicit consent of the data subject).
Right to file a complaint with a supervisory authority The User's right to file a complaint with a supervisory authority, in particular in the Member State of his habitual residence, his place of work or the place where the alleged infringement was committed, if he believes that the processing of his personal data has infringed the provisions of the GDPR.

7. Procedure for the exercise of data subjects' rights.

In order to exercise the rights described in point 6 above, the User should make a relevant request to MGGP Aero at the address indicated in point 14.

MGGP Aero is authorised to verify the identity of the User submitting the request.

The realisation of the User's rights will take place in accordance with the provisions of the GDPR.

MGGP Aero is entitled to disregard a request concerning the realisation of rights to which the User is not entitled under the provisions of GDPR. In the case of a request that is clearly unjustified or excessive, MGGP Aero is entitled to charge a fee towards the costs of realisation of the request.

MGGP Aero shall provide the User with information on actions taken in relation to the submitted request within one month of its receipt. Due to the complexity of the application or the number of applications, the deadline may be extended by another two months. The MGGP Aero shall inform the User about the extension of the deadline.

8. Data protection measures.

MGGP Aero uses technical and organizational measures to provide protection against destruction, loss, modification, unauthorized disclosure or unauthorized access to personal data.

The measures implemented by MGGP Aero include, in particular:

  • only authorised employees of MGGP Aero have access to the data;
  • training of MGGP Aero personnel in the scope of personal data protection;
  • implement appropriate physical, technical and procedural safeguards on personal data, in particular to ensure their confidentiality and integrity;
  • implementation of security procedures;
  • encryption of connections using SSL protocol.

9. Transfer of personal data.

MGGP may transfer your personal data to the following entities:

  • payment service providers whom the User has authorised to access his personal data; the processing of personal data carried out by payment service providers is subject to the personal data protection rules, in particular the privacy policies, of those providers;
  • authorized bodies and institutions, acting on the basis of binding legal regulations;
  • entities providing consultancy services (legal, tax) and IT services to MGGP Aero.

10. Transfers of personal data to third countries.

MGGP Aero may transfer the User's personal data to MGGP Aero's partners processing personal data in third countries, i.e. countries outside the European Economic Area (EEA), however only to the extent necessary, connected with providing services by these partners to MGGP Aero, especially IT services and connected with processing payments on the Site.

The transfer of personal data will take place on the basis of mechanisms ensuring an adequate level of protection of such data in third countries, in particular on the basis of a decision of the European Commission declaring an adequate level of protection or on the basis of standard contractual clauses adopted by a decision of the European Commission (available here).

In order to obtain additional information on the safeguards applied by MGGP Aero to transfer data to third countries, including obtaining a copy of such additional safeguards, please contact us at the address indicated in point 14.

11. Period of retention of personal data.

MGGP stores and processes personal data for as long as a valid legal basis exists, i.e.:

  • in the case of personal data processing based on the User's consent, until the consent is withdrawn;
  • in the case of processing of personal data for the purpose of performance of a contract or taking steps at the request of the User prior to entering into a contract, respectively for the duration of performance of the contract or completion of the steps taken prior to entering into the contract;
  • in the case of processing of personal data for purposes arising from the legitimate interests of MGGP Aero, until the objection raised by the User against such processing is taken into account - in this case MGGP Aero will cease processing such data unless MGGP Aero or a third party demonstrates the existence of valid legitimate grounds for processing, overriding the interests, rights and freedoms of the User, or the grounds for establishing, asserting or defending claims (whereby in the case of processing of the User's personal data for the purpose of direct marketing of own products or services, MGGP Aero shall cease processing the User's personal data to the extent to which the processing is related to such marketing);
  • in the event that MGGP performs its accounting and bookkeeping activities to the extent and for the duration required by applicable law

12. Processing of personal data of minors.

The protection of personal data of minor Users is very important to MGGP Aero.

Where the basis for the processing of a minor's personal data in connection with the provision of information society services by MGGP Aero (i.e. services normally provided for remuneration, at a distance, electronically and at the individual request of the recipient of the services) is consent, the consent may be given independently by a minor who is at least 16 years old.

In the case of a minor under the age of 16, MGGP Aero will only process his/her personal data where consent has been given or approved by the person with parental responsibility or custody of the child and only to the extent of the consent given.

A person with parental authority or custody of a child under 16 years of age who has obtained information that the child has independently consented to the processing of personal data may contact MGGP Aero at the address indicated in paragraph 14.

MGGP Aero is authorised to verify:

  • user age;
  • ● the identity of the person having parental responsibility or custody of the child, including for the purpose of determining whether such person has given consent or approval.

The rules of using the Service by minors, separate from the issues related to the processing of their personal data, are regulated by the Terms and Conditions of the Service, available here.

13. Additional information - information clauses.

Detailed information on the processing of Users' personal data, including whether providing personal data is obligatory, is specified in the information clauses under the forms by which MGGP Aero collects personal data:

14. Final provisions.

MGGP Aero has appointed a Data Protection Officer who can be contacted for all matters mentioned in and related to this privacy policy at iod@mggpaero.com or in writing (by post) at the address of MGGP Aero;. ul. Karola Kaczkowskiego 6, 33-100, Tarnów, Poland (marked "IOD" or "Data Protection Officer").

Any requests to withdraw consents granted to us (e.g. to receive commercial information) can be addressed to: support@mapadrzew.com

In matters not regulated by the Privacy Policy, the provisions of Polish law shall apply.

Effective date of document: 21.06.2021. Last modified document: 21.06.2021.

This document can be downloaded here.