Privacy policy

This Privacy and Cookies Policy (hereinafter the "Policy") contains information about the processing of data collected when using the website available at: https://vetty3d.com/ and the Vetty 3D web application available on the aforementioned website (hereinafter the "Service").
When you use the Website, various personal data is collected. Personal data are all those data from which your person can be identified. The policy explains what data we collect, what we use it for and how it is used.
Use of the Website constitutes acceptance of the following terms and conditions of the Policy.

The data administrator responsible for data processing via the Website is SOCIAL RESPONSIBLE TECHNOLOGIES SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Nysa, ul. Tadeusza Kościuszki 10, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Opole VIII Economic Division of the National Court Register under KRS no. 0000897994, NIP 7532460094, REGON 388823643, share capital PLN 5,000, (hereinafter referred to as the "Administrator").
Contact with the Administrator is possible through:

The Administrator informs that he has not appointed a Data Protection Officer.

The User's personal data on the Website shall be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as "GDPR") and other legal provisions in force for the duration of the data processing.
The controller shall take special care to protect the interests of the data subjects and, in particular, shall ensure that the data it collects are:
  • processed lawfully, fairly and in a manner transparent to the data subject;
  • collected for specific, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
  • adequate, relevant and limited to what is necessary for the purposes for which they are processed;
  • correct and updated as necessary;
  • kept in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed;
  • processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures.

USE OF THE SERVICE
Personal data of all persons using the Website, hereinafter "User" (including IP address or other identifiers and information collected through cookies or other similar technologies) are processed by the Administrator for purposes:
  • the provision of services by electronic means in terms of making available to users the content collected on the Website (legal basis: Article 6(1)(b) of the GDPR - necessity of processing for the performance of the contract),
  • analytical and statistical purposes (legal basis: Article 6(1)(f) GDPR - the Administrator's legitimate interest in conducting analyses of the activity of persons using the Website, as well as their preferences in order to improve the functionality of the Website and the services provided),
  • technical, administrative, ensuring the security of the IT system and the management of the IT system (legal basis: Article 6(1)(f) GDPR - legitimate interest of the Administrator),
  • possible establishment and investigation of claims or defence against claims (legal basis: Article 6(1)(f) GDPR - the Administrator's legitimate interest in protecting its rights),
  • marketing of the Administrator and other entities, in particular related to the presentation of behavioural advertising - the principles of processing personal data for marketing purposes are described below under MARKETING.
CREATING AN ACCOUNT ON THE SITE
Users who register on the Website are asked to provide the data necessary to create and operate an account. The provision of data indicated as mandatory is required, and failure to provide such data will result in the impossibility to create and operate an account. The user, in order to improve contact and service, may also provide additional data, thereby consenting to their processing. Such additional data can be deleted at any time and is provided on a voluntary basis.
Personal data is processed for the purposes of:
  • the provision of services relating to the operation and maintenance of your account on the Website (legal basis: Article 6(1)(b) of the GDPR - the necessity of processing the data for the performance of the contract),
  • analytical and statistical purposes (legal basis: Article 6(1)(f) GDPR - the Administrator's legitimate interest in carrying out analyses of User activity and account usage in order to improve the functionality of the Website),
  • possible establishment and investigation of claims or defence against claims (legal basis: 6(1)(f) GDPR - the Administrator's legitimate interest in protecting its rights),
  • the Administrator's marketing - the rules for processing Personal Data for marketing purposes are described below under MARKETING.
VETTY 3D APPLICATION - PURCHASE OF APPLICATION SUBSCRIPTION
The placing of an order by the User involves the processing of his/her personal data. The provision of data, with the exception of those marked as optional, is required in order to accept and process the order, and failure to provide such data will result in the impossibility of processing the order. The provision of optional data is voluntary.
Personal data is processed for the purposes of:
  • the fulfilment of the order placed (legal basis: Article 6(1)(b) GDPR - necessity of processing for the performance of the contract ),
  • fulfilment of statutory obligations incumbent on the Administrator, arising in particular from tax and accounting legislation (legal basis: Article 6(1)(c) GDPR - legal obligation),
  • analytical and statistical purposes (legal basis: Article 6(1)(f) GDPR - the Administrator's legitimate interest in conducting analyses of user activity and account usage in order to improve the functionality of the Website),
  • possible establishment and investigation of claims or defence against claims (legal basis: Article 6(1)(f) GDPR - the Administrator's legitimate interest in protecting its rights).
CONTACT THROUGH FORMS
The use of the electronic contact form on the Website requires the provision of personal data necessary to make contact and respond to the message sent. The provision of data is voluntary but necessary in order to send and handle the message.
Personal data is processed, as the case may be, for:
  • contact with a view to concluding a contract or in connection with a contract concluded (legal basis under Article 6(1)(b) of the DPA - necessity of processing for the performance of a contract or taking steps prior to the conclusion of a contract),
  • Identification of the sender and handling of his/her messages (legal basis Article 6(1)(f) GDPR - legitimate interest of the Administrator),
  • proper customer service, including answering questions addressed to the Administrator (legal basis Article 6(1)(f) GDPR - legitimate interest of the Administrator).
MARKETING
The Administrator processes Users' Personal Data in order to carry out marketing activities, which may consist in:
  • displaying marketing information to the User that is not tailored to the User's preferences, so-called contextual advertising (legal basis: Article 6(1)(f) GDPR - implementation of the Administrator's legitimate interest),
  • displaying marketing information to the User corresponding to the User's interests, so-called behavioural advertising (legal basis: Article 6(1)(f) GDPR - fulfilment of the Administrator's legitimate interest. The User will not be subject to a decision that is based solely on automated data processing),
  • Sending e-mails to the User by the Administrator on its own behalf or on behalf of the Administrator's business partners about offers or information that may contain commercial information as part of a newsletter (legal basis: Art. 6(1)(a) GDPR - user consent in connection with the Electronic Communications Act - consent),
  • use of Meta's Pixel tool to target the User with personalised advertising based on the User's behaviour on the Website (legal basis: Article 6(1)(a) GDPR - User consent),
  • processing of personal data of Users using the Administrator's profiles in social media, in particular profiles in the Facebook and Instagram platform, including a group in Facebook, personal data will be processed in order to administer the profiles, communicate with Users, including interacting with them, answering their questions, informing them about: products offered, events, promotions (legal basis: Article 6(1)(a) GDPR - the User's consent expressed by voluntarily liking, observing or subscribing to the Administrator's profile in social media, interacting, commenting on posts, as well as voluntarily joining the User's group), the User may withdraw consent at any time by ceasing to observe or blocking the Administrator's profiles or groups in social media
  • other activities related to direct marketing of its services and products, inter alia, by means of sending commercial information by electronic means and telemarketing (legal basis: Article 6(1)(f) GDPR - implementation of the Administrator's legitimate interest) in connection with the Electronic Communications Act - consent.
SOCIAL NETWORKS
The Administrator may process personal data of Users visiting the Administrator's social media profiles, in particular YouTube, Facebook, Instagram, Twitter, LinkedIn, Google+. This data is processed in connection with the operation of the profile, including for the purpose of promoting the Administrator's activities and providing information about its activities (legal basis: Article 6(1)(f) GDPR - the implementation of the Administrator's legitimate interest in promoting its own activities).
The Administrator, as part of its activities, may process the User's personal data as part of remarketing on the social network Facebook. This process consists of:
  1. promotion of the Administrator's services/products addressed to Users subscribed to the newsletter or who have given other consent to commercial contact, in such a way that the Users' e-mail addresses are uploaded to the marketing tool offered by Meta Platforms Ireland Limited (Facebook and Instagram), the so-called advertising manager, and then advertising created by the Administrator or the Administrator's partners is directed to them, through the Administrator's advertising account, provided that the Users are also users of the Facebook platform (they have an account created there).
  2. promotion of services/products addressed to persons other than Users subscribed to the newsletter or who have otherwise consented to commercial contact, in such a way that the Users' e-mail addresses are uploaded to the marketing tool offered by Meta Platforms Ireland Limited (Facebook and Instagram), the so-called ad manager, and then Meta creates a group of similar users on their basis, to whom the advertisement created by the Administrator or the Administrator's partners is addressed, through the Administrator's advertising account, provided that the aforementioned persons are also users of the Facebook platform (they have an account created there).
Each time the data is deleted at the end of an advertising campaign. In the event of a subsequent advertising campaign, an updated subscriber database is uploaded to the tool). Precise information about the so-called non-standard groups of recipients, rules of data hashing and data processing can be found in Facebook's privacy policy, in particular under the following links: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing, and the Administrator recommends that each User and subscriber familiarise themselves with these rules.
COOKIES
Cookies and other tracking mechanisms may be used when using the Website.
Cookies are IT data, in particular text files, which are stored on the User's terminal equipment and are intended for the use of the Website. Cookies usually contain the name of the website they come from, the time they are stored on the User's terminal equipment and a unique number.
During the User's first visit to the Website, a message on the use of cookies is displayed, together with a question asking for consent to the use of cookies or consent to the use of selected cookies. By clicking on the "I agree", "Consent", "I agree" or equivalent button, the User consents to the use of cookies or selected cookies in accordance with this Privacy Policy. The User has the option to subsequently disable cookies, despite their consent, according to the settings of the browser they are using. The User may refuse to consent to the use of cookies by clicking on the "I do not consent", "I do not agree" or equivalent button. In this situation, only proprietary cookies that are necessary for the proper functioning of the Website will be used.
Each User has the possibility to configure his/her Internet browser in such a way as to prevent cookies from being stored, according to the principles described under "managing cookie settings" below. The Administrator stipulates that this may impede the proper functioning of the Website. The User may also use the incognito mode offered by web browsers. In this case, cookies will be deleted as soon as the browser is closed.
Cookies are used according to the principles described in this Privacy Policy and in particular for the following purpose:
  • recognise the device used by the user in order to display the content of the website appropriately,
  • to compile statistics that help us understand how Users use the Website so that we can improve its content,
  • maintain the User's session on the Website, so that the User does not have to re- enter data on each sub-page of the Website,
  • to adapt the content and functioning of the Website by matching an anonymous, randomly generated tracking identifier, which makes it possible, among other things, to find out where the User comes from, which search engine they used, which link they clicked on, which keywords they typed in and at what point they stopped using the Website,
  • the collection of general and anonymous data for the implementation of advertising campaigns via remarketing lists, allowing the display of advertising content tailored to your preferences.
Analytical and marketing tools used by the Administrator's partners
Google Analytics
The information collected automatically during the User's visit to the Website is analysed using the Google Analytics 4 tool provided by Google LLC for the purpose of generating statistics and their analysis for optimising the Website. The information is collected automatically and generated by cookies on the use of the Website (including anonymised IP address) will be transmitted to and stored by Google on servers in the United States. The Administrator informs you that it has activated the IP address anonymisation function. This consists of truncating IP addresses before passing them on, whereby in exceptional cases they may only be truncated on Google's servers in the USA; it should be emphasised that the IP address is not, as a rule, combined with other User data on Google's website associated with the User's account. As part of the use of Google Analytics, the Administrator does not collect any data which allows the Administrator to identify the User. The data to which the Administrator gains access includes information about the web browser used by the User, the operating system uploaded to the User's device, the use of subpages on the Website, and data on the time spent on the Website, including on subpages on the Website, as well as information on the source from which the User accessed the website on which the Website operates. As part of its use of Google Analytics, the Administrator also uses advertising tools, such as remarketing, demographic and interest reports, ad reporting, and user-ID. The information that the Administrator may access includes, among other things, the age range of the Users using the Website, gender, approximate location (town or city without providing specific geo-location data), the User's interests as determined by Google on the basis of the User's Internet activity. The Administrator has implemented the Google Analytics tracking code in the code of the Website. The User may block the tracking code referred to in the sentence above at any time by installing the dedicated Google plug-in available at the following link: https://tools.google.com/dlpage/gaoptout (Available for Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Edge browsers) Detailed rules regarding the Google Analytics privacy policy (including information on how to block data collection) can be found at: https://support.google.com/analytics/answer/6004245?hl=pl
Facebook Pixel
The Service uses the Facebook Pixel marketing tool provided by Facebook Inc. In order to target personalised Facebook ads to the User, the Administrator uses the Facebook Pixel tool, which collects information about the Customer's behaviour on the Service in an automated manner and displays Facebook ads on this basis. The information collected by the aforementioned tool does not allow the Administrator to identify the User, however it may be used directly by Facebook in the form of combining it with other information collected by Facebook and used for marketing purposes. Each user can, from the cookie settings available on the Website, agree or disagree to the use of Facebook Pixels in their case. The information collected in this way will be transmitted to and stored by Facebook Inc. on servers in the United States. Detailed rules regarding Facebook's privacy policy (including information on how you can block Facebook's data collection) can be found at: https://www.facebook.com/privacy/explanation.
TikTok Pixel
In order to measure the effectiveness of advertisements and to analyse actions taken by users on the Website, the Administrator uses the TikTok Pixel tool, which collects information about user activity in an automated manner. The data collected through the TikTok Pixel may be used to broadcast advertisements to relevant audiences, create groups of advertising audiences and use other advertising tools offered by TikTok (TikTok Technology Limited, Ireland). This information may be processed by TikTok in accordance with its privacy policy. Each user can, from the cookie settings available on the Website, agree or refuse to agree to the use of the TikTok Pixel. Detailed information on TikTok's personal data processing policies is available at: https://www.tiktok.com/legal/privacy- policy-eea?lang=pl.
Google Ads
The Website has Google Ads service codes plugged in, which are used to create remarketing lists in order to tailor personalised advertising on Google's advertising network. The aforementioned advertising tool allows the Administrator to promote the Website in search results and on websites belonging to third parties. Cookies and remarketing tags are used to display advertisements based on the User's interests on the basis of previously visited websites. Further data processing for this purpose occurs if the User has given Google permission to use information from his or her individual Google account for the purpose of personalising advertisements. In the aforementioned situation, if the User is logged in when using the Website on Google, Google uses the User's data in combination with data from Google Analytics to create target groups used for remarketing on different devices. At any time, it is possible to deactivate the display of advertisements in this way and the cookies used for remarketing through the Ads Preference Manager https://adssettings.google.com/authenticated. In addition, the User has the option to disable marketing cookies from the Website. More information on Google Ads can be found in Google's privacy policy at: https://support.google.com/adspolicy/answer/54817?hl=pl
Cloudflare
The website uses the service of CloudFlare, Inc., 665 3rd pc. #200, San Francisco, CA 94107, USA. It is a service that mediates data between the user and the web host in order to secure and speed up the website, and collects statistical data on website traffic. It prevents attacks on the website and prevents information leakage. CloudFlare, Inc. may store cookies on the user's device. This process is intended to ensure that the website operates as efficiently as possible, and the personal data required for this, such as the IP address or cookie ID, is processed exclusively for this purpose (Article 6(1) f GDPR). CloudFlare, Inc. uses servers in Europe; however, some data may be transferred to servers outside the European Union, mainly to servers in the USA. The privacy policy of CloudFlare, Inc: - https://www.cloudflare.com/privacypolicy/ Cookies policy of CloudFlare, Inc: - https://www.cloudflare.com/cookie-policy/
Managing cookie settings
The user can set his/her browser in such a way that cookies are not stored on his/her device and that he/she is asked for permission each time before cookies are activated. The user can also delete re-activated cookies at any time.
Detailed information can be found at the links below:
  • Internet Explorer: https://support.microsoft.com/pl-pl/help/17442/windows- internet-explorer-delete-manage-cookies
  • Microsoft Edge: https://support.microsoft.com/pl-pl/help/4027947/microsoft- edge-delete-cookies
  • Mozilla Firefox: https://support.mozilla.org/pl/kb/ciasteczka
  • Google Chrome: https://support.google.com/chrome/answer/95647?hl=pl
  • Safari: https://support.apple.com/pl-pl/guide/safari/sfri11471/mac
or by using the "Help" function in your browser.
Please note that the deactivation of Cookies may lead to limitations of functionality on our Website.

The period of data processing by the Controller depends on the type of service or product offered and the purpose of the processing. As a general rule, data shall be processed for the duration of the provision of the service or the fulfilment of the order, until the consent given is withdrawn or an effective objection is made to the processing of the data.
The processing time may be extended when the processing is necessary for the establishment and assertion of claims or the defence against claims. After the end of the processing period, the data are irreversibly deleted or anonymised.
Users' data will be stored for the following period:
  • data relating to the maintenance of a User's account - for the duration of its maintenance on the Website, and no longer than until the User requests its deletion, unless further storage is justified by the statute of limitations for claims,
  • data relating to the fulfilment of orders for services and products - for a period of 5 years from the end of the year in which the sale took place, unless further retention is justified by the limitation period for claims,
  • personal data obtained by the Administrator on the basis of consent - until such consent is withdrawn, unless their further storage is justified by the limitation period for claims
  • data related to the performance of marketing activities - until an objection is raised, unless further storage is justified by the limitation period for claims,
  • related to responding to an enquiry - until you withdraw your consent, unless further storage is justified by an overriding interest of the Administrator, such as defence against possible claims,
  • data relating to the handling of a complaint or withdrawal from a contract - for a period of 5 years from the end of the year in which the complaint was handled or the contract withdrawn, unless further retention is justified by the expiry of the statute of limitations for claims
  • the operation of the newsletter service - until you unsubscribe from the newsletter, unless further storage is justified by the limitation period for claims,
  • keeping statistics - until an objection is raised,
  • the establishment, investigation or defence of claims, for the period of time necessary for that purpose,
  • archiving purposes - for as long as necessary for that purpose.

In connection with the provision of services, personal data will be disclosed to external entities, including in particular suppliers responsible for the operation of ICT systems, entities such as banks and payment operators, accounting service providers, marketing agencies (for marketing services).

In connection with the use of a social media user targeting process to identify the target customer group that will be most interested in the advertised product, there may be situations in which the targeting entity together with the social media provider, i.e. Meta Platforms Ireland Ltd. based in Ireland and Meta Platforms, Inc. based in the United States, will be joint controllers of personal data.
Co-administration will be particularly the case:
  • Primary targeting involving a group of target users identified on the basis of available targeting criteria related to those users in order to reach an audience that is likely to be interested in advertising and provide them with more relevant advertising content - with regard to the processing of personal data resulting from the selection of relevant targeting criteria and the display of advertising to the target group, and the processing of personal data by the social media provider in order to inform the targeting entity of the results of the targeting campaign;
  • Pixel targeting - in relation to the collection of personal data and its transmission via pixels, as well as in relation to the matching and subsequent display of the advertisement to the social media user and in relation to any provision of information related to the targeting campaign.

The Website may contain links to other websites which are not under the Administrator's control and which are not covered by this Policy. If the User accesses such sites using the links provided, the operators of those sites may collect information used later in accordance with their privacy policies, which may differ from this Policy. Such external sites have their own privacy policies and the Administrator is not responsible in relation to such policies.

The Administrator, in the course of its business, cooperates with technology companies - Meta Platforms Ireland Ltd, Google Ireland Limited, conducting business of an international nature, whose registered offices or branches are located in the EEA, however, due to the nature of their activities, there may be transfers of Users' personal data to third countries. The Administrator itself may only transfer personal data outside the EEA if it is necessary to do so, and guarantees an adequate degree of protection, primarily by:
  • cooperation with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued as to whether an adequate level of protection of Personal Data is ensured;
  • the use of standard contractual clauses issued by the European Commission;
  • the application of binding corporate rules approved by the competent supervisory authority.
Users' personal data may be transferred to third countries in accordance with the regulations and privacy policies of Meta (Facebook and Instagram) and Google, see the links for more information:
  • Google - https://policies.google.com/privacy/frameworks?hl=pl
  • Facebook and Instagram - https://www.facebook.com/privacy/policy/? entry_point=data_policy_redirect&entry=0

Each person whose data is processed, within the limits of the law, has the right of access to the content of their personal data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object. Each User whose personal data are processed on the basis of their consent has the right to withdraw their consent at any time without affecting the lawfulness of the processing carried out on the basis of their consent prior to its withdrawal.
Any person whose data is processed also has the right to lodge a complaint with the President of the Office for Personal Data Protection (PUODO) if he or she considers that the processing of personal data concerning that person violates the provisions of the GDPR.

Administrator may subject Users' personal data, including newsletter subscribers and Clients' personal data, to ongoing analysis in order for Administrator to determine Users' preferences, which will serve to accurately determine Users' preferences and allow for the best possible adjustment of content in the Service and on Administrator's social media profiles to potential recipients, as well as directing individualised advertising messages and e-mails to Users. Furthermore, data such as transactions performed by Users within the Service, as well as their activity within the Service may be subject to analysis. Furthermore, the activity of Users using the Administrator's Facebook and Instagram profiles may be analysed, in an automated manner through tools provided by Meta. In addition, the aforementioned analyses will be carried out by service providers, including Meta, Shopify and Google. The Administrator emphasises that the aforementioned automated processing will not have any legal effect on Users or similarly significantly affect the situation, rights or freedoms of Users. The User may object to profiling at any time.

We may update this Policy periodically. When we do, the changes will be posted on the Service. If you do not agree with the changes, you should stop using the Service.