Privacy policy

This Privacy policy sets out the principles for the processing of personal data obtained through the website www.shapecodesystem.com (hereinafter referred to as: the “Website” or “Site”).

Respecting your rights as data subjects and respecting the applicable legislation, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as ‘GDPR’, the Act of 10 May 2018 on the protection of personal data (Dz. U. [Polish Journal of Laws] of 2018, item 1000, hereinafter referred to as the ‘Act’) and other relevant data protection legislation, we undertake to maintain the security and confidentiality of the obtained personal data. All employees were properly trained to process personal data and, as Data Controller, we have implemented appropriate safety, technical, and organisational measures to ensure the highest level of personal data protection. Data protection procedures and policies in place are in line with the GDPR to ensure the lawfulness and fairness of our data processing processes and the enforceability of any rights you have as a data subject. In addition, if necessary, we cooperate with the supervisory authority in the Republic of Poland, i.e. the President of the Office for Personal Data Protection (hereinafter referred to as “POPDR”).

Data Controller – the controller of personal data at DUOLIFE S.A. with its registered office in Więckowice, ul. Topolowa 22, 32-082 Więckowice (Poland), entered in the National Court Register with KRS No.: 0000638495, NIP No.: 6751485320, REGON No.: 122746305.

This policy shall not apply to other websites and companies whose web addresses/contact details are provided on the Website. The privacy policy set out below applies only to the www.shapecodesystem.com website and does not apply to other sites that may be accessed from www.shapecodesystem.com

Upon leaving the www.shapecodesystem.com website, please read the information concerning the websites you visit.

By using the www.shapecodesystem.com website, you accept the privacy policy presented below. DUOLIFE S.A., managing the www.shapecodesystem.com website, reserves the right to amend the privacy policy at any time. Updates to the privacy policy shall be published on the website.

Information collected about the user, the type of data processed, the purposes and the legal basis

DUOLIFE S.A. collects information on natural persons performing an act in law not directly related to their activity, on natural persons conducting a business or professional activity on their own behalf and on natural persons representing legal persons or organisational units that are not legal persons, to which the law grants the legal capacity, conducting a business or professional activity on their own behalf, hereinafter collectively referred to as ‘Users’.

We collect the following personal data on our Website:

name and surname – may be processed when you, as a user of our Website, provide it to us to express your opinions that may appear on our Website.

the device’s IP address – information resulting from the general principles of Internet connections, such as the IP address (and other information contained in system logs), is used for technical and statistical purposes, including in particular the collection of general demographics (e.g. about the region from which the connection is made),

3. The following constitute the legal basis for processing your personal data:

article 6(1)(b) of the GDPR, i.e. the necessity for the performance of a contract to which you are party or to take steps at your request prior to entering into a contract, or

article 6(1)(c) of the GDPR, i.e. the necessity to comply with legal obligations incumbent on the Controller, or

article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Controller in the establishment, pursuit or defence of claims until the lapse of the period of prescription, or until the conclusion of the relevant proceedings, if any were initiated during that period, or

article 6(1)(a) of the GDPR, i.e. your consent to the processing of personal data for specific purposes where other legal grounds for processing personal data do not apply,

4. When using the Website, additional information may be collected, in particular: the IP address assigned to the User’s computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type.

5. Navigation data may also be collected from Users, including information about links and references they choose to click on or other actions they take on our Website. Legal basis – legitimate interest (Article 6(1)(f) GDPR) to facilitate the use of services provided electronically and to improve the functionality of these services.

6. For the purposes of establishing, investigating and enforcing claims, certain personal data provided by the User as part of using the Website’s functions may be processed, such as: name, surname, data regarding the use of the services should the claims arise due to the way the User uses the services, other data necessary to justify the claim, including the extent of the damage suffered. Legal basis – legitimate interest (Article 6(1)(f) GDPR) to establish, pursue and enforce claims and to defend against claims in proceedings before courts and other state authorities.

Disclosure of user data to third parties and how long is it stored?

The User’s personal data is transferred to the service providers selected by DUOLIFE S.A. to operate the Website. Service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, are either subject to DUOLIFE S.A.’s instructions as to the purposes and means of processing such data (processors) or determine the purposes and means of processing themselves (controllers).
Depending on the service expected, your data may be disclosed to our representatives and contractors for the purposes of handling your request and, if so desired, to provide you with information about the products and services offered. This data shall not be disclosed to any other person unless so required by applicable law or unless an appropriate agreement is in place to guarantee the protection of your rights. In addition, data concerning the users of our website and their preferences may be collected and disclosed in the form of statistics, whereby such statistics remain anonymous and do not contain data allowing the identification of individual users.
DUOLIFE S.A. employs the following categories of data processors: legal and other counsels, data storage, telemarketing, marketing and survey companies, email and SMS gateway companies, identification and certification services, debt collection companies, invoicing companies.

Location Service providers are mainly based in Poland and other countries in the European Economic Area (EEA).

5. Users’ personal data is stored:

a) If the basis for the processing of personal data is consent, then the User’s personal data is processed by DUOLIFE S.A. for as long as the consent is not revoked, and after revoking the consent for a period of time corresponding to the period of prescription of claims that DUOLIFE S.A. may pursue and that may be pursued against it. Unless otherwise set out in a specific regulation, the prescription period is six years, and three years for claims for periodic performances and claims relating to the operation of business.

b) Where the basis for data processing is the performance of a contract, then the User’s personal data is processed by DUOLIFE S.A. for as long as is necessary for the performance of the contract, and thereafter for a period corresponding to the period of prescription of claims. Unless otherwise set out in a specific regulation, the prescription period is six years, and three years for claims for periodic performances and claims relating to the operation of business.

6. Navigation data may be used to provide Users with a better service, to analyse statistical data and to adapt the Website to Users’ preferences, as well as to manage the Website.

7. DUOLIFE S.A. undertakes not to transfer, sell or grant use of the personal data of its customers/users to other parties without the customer’s/user’s consent unless required by applicable law. DUOLIFE S.A. treats the personal data of users as confidential. Every user of the www.shapecodesystem.com website has the right to access their personal data, erase their personal data, rectify their personal data, restrict the processing of their personal data, object to the processing of their personal data and to data portability at any time, provided that some of the rights are not unconditional and we are not obliged to satisfy certain requests. You have the right to lodge a complaint with the supervisory authority of the President of the Personal Data Protection Office. You have the right to receive from us a copy of the information that we hold about you. You may exercise this right once every 6 months unless there is a legitimate reason to obtain this information more frequently.

8. The personal data provided shall be protected through the implementation of appropriate technical and organisational measures in accordance with applicable legislation to protect personal data against unauthorised and unlawful processing and against accidental loss, destruction, disclosure, damage or amendment.

9. You only provide us with data that we shall use to provide the requested service. Your personal data shall not be processed by us for longer than is necessary to provide the service in question or in accordance with applicable law.

Rights of data subjects

1. Right to withdraw consent – legal basis: article 7(3) of the GDPR.

a) The user has the right to withdraw any consent they have given to DUOLIFE S.A.

b) Withdrawal of consent takes effect from the moment of withdrawal.

c) Withdrawing consent does not affect the lawful processing carried out by DUOLIFE S.A. prior to the revocation.

d) Withdrawal of consent shall not entail any negative consequences for the User. However, it may prevent the User from further use of services or functionalities that DUOLIFE S.A. is legally allowed to provide only with consent.

2. Right to object to data processing – legal basis: article 21 GDPR.

a) The User has the right to object at any time – for reasons related to their particular situation – to the processing of their personal data, including profiling, if DUOLIFE S.A. processes their data on the basis of a legitimate interest, e.g. marketing of DUOLIFE S.A. products and services, keeping statistics on the use of particular functionalities of the Website and facilitating the use of the Website, as well as conducting satisfaction surveys.

b) Opting out, in the form of an email, from receiving marketing communications concerning products or services shall imply the User’s objection to the processing of their personal data, including profiling for these purposes.

c) Should the User’s objection prove to be reasonable and DUOLIFE S.A. has no other legal basis for the processing of personal data, the User’s personal data shall be deleted if the User has objected to the processing thereof.

3. Right to erasure (’right to be forgotten’) – legal basis: article 17 GDPR.

a) The User the right to request the deletion of all or some of their personal data.

b) The User has the right to request the deletion of personal data if:

a. personal data is no longer necessary for the purposes for which it was collected or processed;

b. the User has withdrawn specific consent within the scope that the personal data was processed pursuant to their consent;

c. has objected to the use of their data for marketing purposes;

d. personal data is processed unlawfully;

e. personal data must be erased in order to comply with a legal obligation under EU law or the law of a Member State that DUOLIFE S.A. is subject to;

f. the personal data was collected in connection with the provision of information society services.

c) Despite the request for erasure of personal data due to the filing of an objection or withdrawal of consent, DUOLIFE S.A. may retain certain personal data insofar as the processing is necessary to establish, pursue or defend claims, as well as to comply with a legal obligation requiring processing under EU law or the law of a Member State that DUOLIFE S.A. is subject to. This applies in particular to the following personal data: first name, surname, e-mail address. This data is saved for the purpose of handling complaints and claims relating to DUOLIFE S.A. products or the use of DUOLIFE S.A. services. Additionally, this data includes your address of residence/correspondence address, your order number, and is saved for the purpose of handling complaints and claims relating to sales contracts or the provision of services.

4. Right to restriction of data processing – legal basis: article 18 GDPR.

a) You have the right to request the restriction of the processing of your personal data. Submitting a request, until its resolution, prevents the use of certain functionalities or services, the use of which involves the processing of the data within the scope of the request. DUOLIFE S.A. shall also not send any communications, including marketing-related ones.

b) You have the right to request the restriction of the use of your personal data in the following cases:

a. when they question the accuracy of their personal data, in which case DUOLIFE S.A. restricts the use of the data for the time required to inspect the accuracy of the data, but for no longer than 7 days;

b. when the processing of the data is unlawful and instead of deletion, the User requests the restriction of the use of the data;

c. when the personal data is no longer necessary for the purposes for which it was collected or used but is needed by the User to establish, pursue or defend a claim;

d. when they have objected to the use of their data, in which case the restriction shall be for the time necessary to consider whether, due to the particular situation, the protection of the interests, rights and freedoms of the User outweighs the interests pursued by the Controller in processing the User’s personal data.

5. Right of access to data – legal basis: article 15 GDPR.

a) The User has the right to obtain confirmation from the Controller as to whether it is processing personal data and, if so, the User has the right to:

a. access personal data,

b. obtain information about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of such data, the intended period of storage of the User’s data or the criteria for determining this period (where it is impossible to determine the intended period of processing), the User’s rights pursuant to the GDPR and the right to lodge a complaint with a supervisory authority, the source of such data, automated decision-making, including profiling, and safety measures applied in connection with transferring such data outside the European Union;

c. obtain a copy of their personal data.

6. Right to rectification of data – legal basis: article 16 GDPR.

a) The user has the right to request the Controller to immediately rectify inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to request the supplementation of incomplete personal data, including by providing an additional statement, by submitting the request to the DUOLIFE S.A. e-mail address. Rodo@duolife.eu

7. Right to data portability – legal basis: article 20 GDPR.

a) The User has the right to receive their personal data that they have provided to the Controller and then send it to another personal data controller of their choice. The User shall also have the right to request that the personal data be sent by the Controller directly to such a controller insofar as this is technically possible. In this case, the Controller shall send the User’s personal data in the form of a file in .csv format, which is a commonly used, machine-readable format that allows the data received to be sent to another personal data controller.

8. In the event the User files a claim arising out of the above-mentioned rights, DUOLIFE S.A. shall either comply with the request or refuse to comply with it immediately, but no later than one month after receiving it. However, if – due to the complexity of the request or the number of requests – DUOLIFE S.A. is unable to comply with the request within one month, it shall comply with the request within the next two months, informing the User, within one month of receiving the request, of the intended externsion of the deadline and the reasons for it.

9. The User may lodge complaints, queries and applications with the Controller regarding the processing of their personal data and the exercise of their rights.

10. The User has the right to lodge a complaint with the President of the Personal Data Protection Office regarding the infringement of their data protection rights or other rights granted pursuant to the GDPR.

Cookies

Types and use of cookies

1.1. Web cookies used by the Controller are safe for the User’s Device. In particular, it is not possible for viruses or other unwanted software or malware to enter the User’s Devices via this route. These files allow the software used by the User to be identified and the Service to be customised for each individual User. Cookies usually contain the name of the domain from which they originate, the length of time they are stored on the Device and the assigned value.

1.2. The Controller uses two types of Cookies:

Session cookies: are stored on the User’s Device and remain there until the session of a given browser is concluded. Stored information is then permanently deleted from the Device’s memory. The mechanism of session cookies does not allow any personal data or any confidential information to be obtained from the User’s Device.
Persistent cookies: these are stored on the User’s Device and remain there until deleted. Ending the session of a particular browser or switching off the Device does not remove them from the User’s Device. The Persistent Cookies mechanism does not allow the collection of any personal data or any confidential information
from the User’s Device.

1.3. The Website uses also other available technologies which allow information to be stored in the browser in the relevant data stores (Session Storage, Local Storage), and are also placed in the code fragments of analytical tools supplied by other providers, which allow cookies to be stored in the domains of these services.

Find below the individual categories of Cookies that are used on our Website:

Technical cookies – necessary to ensure proper functioning of the Website. They relate to the functionality of our websites and allow us to improve the services we offer through them, e.g. by allowing information to be transferred between the pages of our website to avoid the need to re-enter information, or by recognising your preferences when you return to a page on our Website.

We use them to:

ensure safety;
maintain a session when the User visits the site and logs into their account;
ensure that the website is displayed properly – depending on the device selected by the User;
adapt our services to the User’s choices;
remember whether the User consents to the display of certain content.

Analytical cookies – allow us to recognise and count the number of Users visiting our Website, to see how visitors navigate the Website when
using it, and to record the content they browse and take interest in. This helps us to determine how often pages and adverts are visited and which pages on our Website are the most popular. This enables us to improve our services by ensuring that our users find the information they are looking for. They are also necessary in order to settle accounts with our partners, to measure the effectiveness of our marketing activities without identifying personal data.

We use them to:

research website traffic statistics and identify traffic sources (redirection paths);
research demographic statistics;
detect various types of fraud;
e.g. artificial internet traffic (bots), DDoS attacks;
reduce unwanted marketing activities;
measure the effectiveness of marketing activities carried out to the benefit of the Website, e.g. in Google’s advertising network, affiliate programmes, external websites;
make a settlement with Trusted Partners for advertising services based on user activity, e.g. clicks.

Marketing cookies – are used when the User has given their consent and only when the functionalities and forms of advertising used by our Service require this.

We use them to:

display advertisements that are relevant and interesting to a particular user. They concern the profiling of advertisements displayed both on external websites and on our Website, according to users’ preferences in terms of the choice of goods, based on data held by the Website, including users’ behaviour on the Website.

Moreover:

1.4. The Controller uses First-party cookies for the proper configuration of the Website, and in particular for:

adapting the content of the Website pages to the User’s preferences and optimising the use of the Website pages,
to remember the settings selected by the User and to personalise the User’s interface, e.g. regarding the User’s chosen language or region of origin.

1.5. The Controller uses First-party cookies to authenticate the User on the Website and to ensure the User’s session on the Website, and in particular to:

maintain a session of the Website User (after logging in), thanks to which the User does not have to re-enter their login and password on each sub-page on the Website,
correctly set up selected functions of the Website, enabling in particular the verification of the authenticity of the browser session,
to optimise and increase the efficiency of the services provided by the Controller.

1.6. The Controller uses First-party cookies to complete the processes necessary to ensure the full functionality of the websites, in particular to:

adapt the content of the Website pages to the User’s preferences and optimise the use of the Website pages. In particular, these files allow for the recognition of the basic parameters of the User’s Device and the appropriate display of the website adapted to their individual needs,
the correct operation of the affiliation programme, enabling in particular the verification of the sources of Users’ redirects to the Website’s pages.

1.7. The Service administrator uses Third-party cookies to present multimedia content on the Website’s pages, which are downloaded from the external website www.youtube.com (Third-party cookies administrator: Google Inc., based in the USA).

1.8. The Service Administrator uses Third-party cookies to collect general and anonymous statistical data on Users – pursuant to the Administrator’s legitimate interest [Article 6(1) (f) GDPR, taking into account the User’s consent to the installation of the relevant cookies and the transfer of data to the United States in connection with the use of Google Analytics and Google Signals analytical tools (Third-party cookies administrator: Google Inc., based
in the USA).

These tools allow the Administrator to use the information contained, among others, in the collected cookie files in an optimised manner, also to process the collected information in such a way that it supports the Administrator’s activities on the Website. Depending on the User’s browser settings, their personal data (collected, i.a.
in the form of cookies) may be processed by automated means (including profiling). An analytical tool – Google Analytics and Google Signals – is used for profiling.

1.9. The Service administrator uses Third-party cookies in order to popularise the Website by means of social networks Facebook.com (Third-party cookies administator: Facebook lnc. based in the USA or Facebook lreland based in Ireland).

1.10. The User has the option to restrict or block Cookie files from accessing their Device. Using the Website is still possible with this option enabled, except for functions that require Cookie files by their nature. When accessing the Website, the User may choose not to consent to the use of
analytical and marketing Cookies. In such a case, we shall not be able to keep detailed statistics and adjust our advertising based on the information collected on our Website. However, general advertising will continue to be displayed both on the Website and on other websites.

1.11. To broadcast advertisements on the Internet, as well as within the scope of other tools such as Google reCAPTCHA (spam protection tool), we use technologies provided by Google and Meta (Facebook), so please note whether you consent to the use of these tools, including the profiling of advertisements on the Internet and Facebook. You can check and manage your privacy and security settings in your Google account using the following link: g.co/privacytools. For more information on Google’s privacy policy, the technologies used by Google and Google’s terms of service, please visit https://policies.google.com/privacy?hl=pl#infochoices. For information on Meta’s (Facebook) privacy policy and to manage your privacy settings, please visit https://pl-pl.facebook.com/privacy/explanation/.

See the Cookies Table for more detailed information on the Cookie files we use, retention period and the current list of third-party companies whose services we use or whose technologies we implement on our Website.

Possibilities of defining the conditions of storing or gaining access by Cookies

2.1. The User may, independently and at any time, change Cookie settings, stipulating the conditions for storing Cookie files and the access they may gain to
to the User’s Device. The User may change the settings referred to in the preceding sentence by means of the settings of the Internet browser or by means of the configuration of the service. These settings can be adjusted in such a way as to block the automatic Cookie support in the web browser settings or inform the Website User about them every time they are placed on the device. Go to software (web browser) settings for information on the possibility and methods of Cookie support.

2.2. The user can delete Cookies at any time using the available functions in the web browser they are using.

2.3. Restricting the use of Cookie files may affect some of the functionalities available on the Website.

ABOUT COOKIES ON DUOLIFE WEBSITES

When you browse our Websites, we collect information about your visit and the way you navigate our Websites. We use Cookie files for this purpose.

What are Cookies?

We use Cookies on the myduolife.com website. These are small data files placed on your computer or other device by your browser. The files store
various information about the User and their preferences.

Some cookies are created by other companies whose services we use. They can only use the data for a specific purpose. We also do not observe user behaviour outside the Website.

Why do we use Cookies?

We use them primarily for statistical purposes to see how often individual pages of the Websites are visited. We use this data to improve the content
and the functions of our Websites. We do not collect personal data for this purpose.

Cookie files are also used to remember how you use our Websites and to make it easier for you to browse them. This allows us to better adjust the content presented to you.

We also use cookies for advertising purposes in order to tailor advertising messages to User’s preferences, including in adverts broadcast with third-party partners. Such information is anonymous and does not contain any personal information.

Cookies on our Websites are particularly used for:

maintaining the Website user so that the user does not have to re-enter their login and password on each subpage of the Website,
remembering the User’s selected settings and personalising their user interface, e.g. with regard to the language they have chosen, font size, website appearance,
collecting statistical information on how Website pages are used,

Note:

It is necessary to accept Cookies from this Website to ensure proper functioning of the Website and its use by the Users.

Disabling the use of Cookies may prevent you from logging into the Website or interfere with its correct operation.

How long are Cookie files active?

The Cookies we use are placed for different periods. Some of these expire when the browser is closed, others remain active for days, months or even years, mainly to ensure that information about the user’s choices is retained. Persistent cookies are used to help us identify new and returning Website Users.

How do I object to the installation and remove Cookie files?

You can not consent and prevent the placement of Cookie files on your computer by changing your browser settings. You can also remove existing Cookie files.

Obviously, by refusing to have Cookie files placed, you can still use our Website. However, you may lose the possibility to use all the functionalities,
which may result in a suboptimal experience of using the Website.
We are committed to adapting the Service as much as possible to the Users’ needs and preferences.

How to turn off Cookies?

Web browsers allow the storage of cookies by default. If the User doesn’t want to allow Cookies, they may change the settings of their browser on their computer or other device they use to access our Website. The User’s continued use of our Website without adjusting the settings means
that the User agrees to receive technical cookies on our Website, which, as we have indicated, are necessary for us to ensure proper functioning of the Website.

Most web browsers have a function that allows the User to view and remove cookies, including cookies on our Website.

However, it should be emphasised that the webpage of our Website does not render it possible to save or view Cookie files which may prevent the full and proper use of our Website.

If the User uses different devices to access and browse our Website (e.g. computer, smartphone, tablet), they should ensure that each browser on each device is adjusted to their Cookie preferences.

The method of turning off Cookie files depends on the web browser used by the User. The following presents the method of disabling Cookie files in Google Chrome, Firefox, Safari, Opera and Internet Explorer.

Disabling cookies in the Google Chrome web browser

Select the three vertical dots in the top right corner next to the address bar of the Google Chrome browser.
Click the ‘Content’ button in the Privacy safety section.
In the Cookies and page data section, you can change the following cookie settings:

Block all cookies
Block third-party cookies

Read more about Google Chrome browser settings:

https://support.google.com/chrome/#topic=7438008

Disabling cookies in the Firefox web browser

In the top right corner of the Firefox browser window, click the Open menu function (three horizontal lines) and select Settings.
Then, from the Privacy and security section, select the cookies and site data tab.
Select the appropriate security level or configure your own by choosing which elements and scripts to block – cookies:

All third-party cookies
All

Read more about Firefox browser settings:

https://support.mozilla.org/pl/kb/W%C5%82%C4%85czanie%20i%20wy%C5%82%C4%85czanie%20obs%C5%82ugi%20ciasteczek

Disabling cookies in the Safari web browser

Select the menu command Safari > Preferences, click on Privacy, and then do any of the following:

Block all cookies
Prevent cross-site tracking

Find out more about Safari browser settings:

https://support.apple.com/kb/PH19214?viewlocale=pl_PL&locale=pl_PL

Deactivating cookies in the Opera browser

In the top right corner by the Opera browser address bar, select three horizontal lines.
Select ‘go to full browser settings’.
Click ‘Cookies and site data’ in the ‘Privacy and security’ section.
You can change the following settings of the Cookie files:

Block all cookies
Block third-party cookies

Find out more about Opera browser settings:

http://help.opera.com/Windows/12.10/pl/cookies.html

Disabling cookies in the Edge browser

Select the three horizontal dots in the top right corner by the Edge browser address bar.
Click ‘Settings’.
Select the ‘Cookies and site permissions’ section, click ‘Manage and delete cookies and site data’.
You can change the following settings of the Cookie files:

Block
third-party cookies

Final provisions

The provisions of this Privacy Policy apply accordingly, to the extent possible, to all persons with whom we have a legal relationship and to whom we are also the Controller of their personal data.
The Privacy Policy is subject to change, of which DUOLIFE S.A. shall inform Users 7 days in advance.
In matters not regulated by this Privacy Policy, the relevant provisions of generally applicable law shall apply. In the event of any inconsistency between the provisions of this Privacy Policy and the aforementioned regulations, these regulations shall prevail.
All enquiries, requests and complaints regarding the processing of personal data by the Controller shall be sent to the following e-mail address: Rodo@duolife.eu or in writing to the Controller’s address.

Modified on: September 11, 2024