The protection of personal data is the highest priority for Quality Investment Sp. z o.o. Below are the information on the handling of personal data and the use of cookies.

§ 1 GENERAL PROVISIONS

1. The administrator of the personal data of customers and visitors to the website who voluntarily provide us with data during visits to our website, Facebook profile, within the scope of services provided by the Seller electronically, or in other cases defined in the Terms of Service is the company Quality Investment Sp. z o.o., ul. Raciborska 2/23, Krakow, entered in CEIDG; e-mail: biuro@qinvestment.pl, hereinafter referred to as the “Administrator” for the purposes of this policy.
2. Customer’s personal data is processed in accordance with the general Data Protection Regulation (GDPR) and national data protection regulations, including the Act on the Protection of Personal Data and the Act on Providing Services by Electronic Means dated July 18, 2002 (Journal of Laws 2017.1219 as amended).
3. The Data Administrator takes special care to protect the interests of individuals whose data is processed, ensuring that the collected data is processed lawfully, collected for specified lawful purposes and not subjected to further processing inconsistent with these purposes, factually correct and adequate in relation to the purposes for which they are processed and stored in a form that allows the identification of persons to whom they relate, no longer than is necessary for the purpose of processing.
4. The Data Protection Officer has not been appointed by the Data Administrator.
5. It is possible to visit the Administrator’s website without providing personal data identifying an individual. Personal data is stored after the browser session ends and, for example, used during the next visit to the website. Providing other personal data is voluntary, but may be necessary for entering into a contract or for any other purpose for which the data subject gives consent.

§ 2 PURPOSE, SCOPE, AND LEGAL BASIS FOR DATA COLLECTION

1. The purpose of processing personal data by the Administrator is:
   • Establishing, shaping content, changing, executing or terminating the contractual relationship between the Service Provider and the Service Recipient regarding the provision of services through the website.
   • Direct marketing of Administrator’s own products or services;
   • Analysis through cookies
2. The Administrator processes the following personal data of Service Recipients: first and last name; email address; contact phone number;. In the case of Service Recipients entering into agreements for services related to improving physical condition, the Service Provider may require the provision of other data, including health status. Providing data may be necessary to avoid health and life-threatening situations for the Service Recipient. These data are never transmitted electronically, they are not disclosed through the website but can be stored in the Administrator’s customer service programs.
3. Providing personal data as referred to in para. 2 is voluntary but may be necessary in certain situations to conclude an agreement for improving physical condition services or a contract for services provided electronically. The required data range is indicated in the Terms of Quality Investment Sp. z o.o. 
4. The legal basis for the processing of Service Recipient’s personal data is the necessity for the purposes resulting from legally justified interests pursued by the Administrator consent or the necessity of performing a contract of which the Customer is a party or taking actions at his request before or after its conclusion, as well as direct marketing of Administrator’s own products or services.
5. Personal data provided by customers will not be made available to other entities except for those who have a legal basis, including based on data processing agreements in a manner no less restrictive than that provided by the Data Administrator.

§ 3 USAGE DATA

1. The Administrator may process the following data characterizing the manner in which the Service Recipient uses the Services (usage data) using appropriate software:
   • Identifiers identifying the end of the telecommunications network or the IT system used by the Service Recipient;
   • Information about the start, end, and scope of each use by the Service Recipient of the electronic services provided;
   • Information about the Service Recipient’s use of electronic services;
2. The usage data is anonymous and aggregate, that is, they do not identify individuals visiting the Service and are not disclosed to third parties.

§ 4 RIGHT TO CONTROL, ACCESS CONTENT OF DATA, AND MAKE CORRECTIONS

1. The customer has the right to access the content of their data and the right to correct, delete, limit processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of the processing prior to withdrawal. The rights that a customer can exercise depend, for example, on the legal basis on which their data is processed and the purpose of their processing.
2. Every person has the right to control the processing of data contained in the Administrator’s database related to them, especially the right to: request completion, updating, correction of personal data, temporary or permanent suspension of their processing or their deletion, especially if they are incomplete, outdated, untrue or have been collected in violation of the Act or are no longer necessary for the purpose they were collected.
3. In the case of processing data for direct marketing of the Administrator’s own products or services, the person whose data are processed is also entitled to bring a written request to stop processing their data and to object to the processing of their data.
4. To exercise the rights described above, a relevant request can be sent via email to: biuro@qinvestment.pl or in writing to the Administrator’s registered office address.
5. Everyone has the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO formerly GIODO) if they believe that the processing of their personal data violates the provisions of the general regulation on the protection of personal data of April 27, 2016.
6. Personal data will not be transferred to a third country/international organization.
7. The personal data will be stored for the duration of the agreement and for the period required by legal obligations, including 5 years from the issue of the last invoice/bill in accordance with the accounting act and in case of non-payment or other claims for the period necessary to pursue the claim (prescription). Data provided based on consent will be processed until the consent is withdrawn.
8. Data will not be processed in an automated manner including profiling, meaning that no decisions that have legal effects or similarly significantly impact on a person will be based solely on automated data processing and will not entail a decision automatically taken. However, it is essential to keep in mind that Partners collaborating with the administrator, identified in § 5 of this policy, process data collected through the website for targeted advertising to clients’ interests. The data that can be transmitted include the IP Address, geolocational data from the client’s IP Address, Mobile Advertising ID (MAID) (enabling mobile application developers to determine who is using their mobile applications), a mobile application Identifier, browser type, browser language, operating system type, and date and time that a customer visited the website, customer site behavior such as the browsing time and interests displayed by the customer, the relevant URL and search methods used to locate and visit the site, details on the customer’s use of tools (e.g., to search for specific content on the site) offered by the administrator’s partners, which may be available on the website. This data enables the creation of marketing profiles for ad recipients and analysis of the website’s functionality to customize it to customer preferences.
9. The data specified in paragraph 8 are collected through cookie files. Information on the use of cookies as well as on managing cookies, including blocking their use, can be found in § 5 of this policy.

§ 5 USE OF COOKIE FILES

1. Cookies are small text-numeric files placed on the user’s computer during the site/website visit. Cookies enable websites to recognize a user’s computer. In most cases, these files do not allow for the identification of network users. Cookies do not cause damage to the computer and do not contain viruses.
2. Two types of cookies are widely used – session and permanent cookies. Session cookies are temporary files that remain on the user’s device until they log out of the website or close the browser. Permanent cookies remain on the user’s device’s memory for the time specified in their parameters or until manually deleted.
3. The Administrator may use own cookies, in particular: for the correct configuration of the website, performing processes necessary for its full functionality, authenticating the customer on the site, ensuring the customer’s session continuity on the site, remembering the customer’s location, for analysis, and audit of viewership, as well as for providing advertising services.
4. The Administrator may use third-party cookies, in particular: in the scope of using analytical tools, providing advertising services to identify groups of customers sharing specific interests, to enable sharing content contained on the website on other websites.
5. The Administrator uses the following external cookies:
   • For liking the Administrator’s page or direct access to Quality Investment Sp. z o.o.  profile on Facebook using Facebook Connect regardless of whether you have a Facebook account and whether you are logged in to Facebook the administrator’s external cookie: Facebook Inc with a seat in the USA or Facebook Ireland with a seat in Ireland) – details and Facebook cookie policy https://www.facebook.com/policies/cookies
   • For locating Google Map and Google Earth services through Google services (external cookie administrator: Google Inc located in the USA) More information: https://privacy.google.com/intl/pl/businesses/mapscontrollerterms/
6. Below, you can give consent to the use of external cookies for profiling purposes in marketing installed through our websites and services, or see the previously made choice, which can be changed at any time.

The data administrator is not responsible for any malfunction of third-party websites mentioned on this site.

1. If users do not want to use cookies, they can manage their usage at any time, including opting out of this form of data collection in the following ways:
   • If users do not want to use cookies, they can manage their usage at any time, including opting out of this form of data collection in the following ways:
   • By modifying the internet browser settings, where in the security settings, temporary and permanently saved cookies can be independently allowed or blocked. Detailed information on the possibilities and methods of handling cookies is available in the help section of each browser’s menu.
   • By visiting the websites mentioned in para. 5 to opt out of using external cookies, including cookies for displaying interest-based advertisements (if the provider of the website or advertising network provides such an option).
   • Through specially designed tools for consumer choices to manage cookies used to display interest-based advertisements to users, such as here http://www.youronlinechoices.eu/ or here http://www.aboutads.info/choices/.
2. If cookies are deactivated using the methods specified in this paragraph, there is a risk that some features of our website will not be available, and some websites will be displayed incorrectly.

§ 7 END PROVISIONS

1. The website may contain links to other websites. The administrator recommends reviewing the privacy policy established there after switching to other websites. This privacy policy applies only to the Administrator’s service and site.
2. The Administrator uses technical and organizational measures to ensure the protection of processed personal data that are appropriate to the risks and categories of data protected, in particular protects data from being disclosed to unauthorized persons, taken by an unauthorized person, processed in violation of applicable laws, and changed, lost, damaged, or destroyed in accordance with applicable law.

This Privacy Policy is available to Users free of charge in PDF form, which can be downloaded to a private computer independently by the User without any restrictions.