Fulfilling the legal obligation regulated by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general Data Protection Regulation, GDPR), ARSA TECH limited liability company based in Białystok , informs that:

1. The administrator of your personal data processed on the website www.campstory.pl is ARSA TECH limited liability company with its registered office in Białystok at ul. Przędzalniana 6 H, 15-688 Białystok, KRS 0000880578, REGON: 388022877, NIP: 9662146782.
2. Administrator’s e-mail address: info@campstory.pl
3. The personal data administrator processes your personal data on the basis of applicable law, concluded contracts and on the basis of the consent granted (Article 6 (1) (a), and (b) of the GDPR).
4. Your personal data is processed for the purpose / purposes:

1. implementation of contracts concluded with ARSA TECH sp. z oo,
2. realization of claims arising from concluded contracts,
3. handling inquiries submitted via the contact form,
4. fulfillment of legal obligations of the Administrator;
5. in other cases, your personal data is processed only on the basis of previously granted consent to the extent and for the purpose specified in the consent.

5. In regard to the processing of personal data for the purposes referred to in point. 4, the recipients of your personal data may be entities cooperating with ARSA TECH sp. Z.o.o. on strictly defined terms, including in particular entities providing IT services, subcontractors, intermediaries and entities providing advisory, legal and debt collection services.
6. Your personal data will be processed only for the period necessary to achieve the goals set out in point. 4, and after that time stored for the period required by the provisions of generally applicable law.
7. As a rule, your personal data is not transferred to a third country (outside the EEA – including the European Union, Norway, Liechtenstein and Iceland). In the event that personal data is transferred to a third country, data subjects are previously informed about it, and the Administrator applies appropriate safeguards referred to in the Chapter V of the GDPR.
8. In regard to the processing of your personal data, you have the right to request access to your personal data, rectify it, request removal or limitation of processing and the right to object to the processing, as well as the right to transfer personal data.
9. If the processing of personal data is based on the consent given by the data subject (Article 6 (1) (a) of the GDPR), you have the right to withdraw this consent at any time without affecting the lawfulness of the processing which was made on the basis of consent before its withdrawal.
10. If you become aware of the unlawful processing of personal data by the Administrator, you have the right to file a complaint with the President of the Personal Data Protection Office.
11. Your personal data is necessary to achieve the purposes referred to in point 4. In a situation where the processing of personal data is based on the consent of the data subject, providing your personal data to the Administrator is voluntary.
12. Your personal data may have been obtained as a result of civil law actions, inquiries, correspondence with ARSA TECH sp. Z.o.o., as well as from publicly available sources (internet search engines, websites, official registers).
13. Your personal data will not be subject to automated decision-making processes by the Administrator, including profiling in the implementation of the above-specified purpose(s).

The administrator makes every effort to ensure all means of physical, technical and organizational protection of personal data against accidental or deliberate destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable regulations.