Privacy and Cookies Policy

I. GENERAL INFORMATION

1. This Privacy and Cookie Policy (hereinafter referred to as the “Policy”) is for informational purposes and specifies the principles of personal data processing and the use of cookies and other similar technologies within the online store operated at: https://wydawnictwo.ug.edu.pl (hereinafter referred to as the “Online Store” or “Website”).
2. The Policy has been prepared to ensure compliance with applicable regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
3. The Administrator takes special care to protect the privacy of individuals using the Online Store and to ensure the security of data processing.

II. DATA CONTROLLER

1. The personal data controller is: University of Gdańsk; ul. Jana Bażyńskiego 8, 80-309 Gdańsk (hereinafter referred to as the “Controller”).
2. University of Gdańsk Publishing House, as an organizational unit of the University of Gdańsk, operates an online store at https://wydawnictwo.ug.edu.pl and in this respect participates in the processing of personal data.
3. The Controller has appointed a Data Protection Inspector, who can be contacted:
   iod@ug.edu.pl
4. Contact with the Controller in matters concerning personal data is possible:
   1. by electronic means through the Data Protection Inspector: iod@ug.edu.pl,
   2. in writing to the registered office address: University of Gdańsk, ul. Jana Bażyńskiego 8, 80-309 Gdańsk.

III. DEFINITIONS

For the purposes of this Policy, the following meanings shall apply:

1. User – any natural person visiting the Online Store or using one or more services described in the Policy.
2. Personal Data – any information about an identified or identifiable natural person.
3. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
4. Cookies – IT data stored on Users’ end devices, intended for the use of websites.
5. Online Store – a website available at https://wydawnictwo.ug.edu.pl, through which it is possible to browse the offer and place orders without the need to create an account.

IV. SCOPE AND PURPOSES OF PERSONAL DATA PROCESSING

1. Conclusion and performance of the contract

In order to carry out activities related to the proper conclusion and performance of the contract, the legal basis for the processing of your personal data is Article 6, paragraph 1, letter b of the GDPR. In connection with the implementation of the above-mentioned purposes, data is processed in particular as part of the following activities:

1. 1. necessary for the proper acceptance and fulfillment of an order placed via the Online Store form. In this case, the following data are processed: first name and last name, email address, telephone number, address(es) indicated for delivery of the order, billing data: first name, last name, Tax Identification Number (NIP), billing address; 
   2. related to the proper performance of the contract. In this case, the following data are processed: first name and last name, address(es) indicated as appropriate for delivery of the order. 

Providing data is voluntary, but necessary for the proper conclusion and performance of the contract. Failure to provide data will result in the inability to use the Administrator’s services. Personal data will be processed:

1. 1. for the purposes necessary to properly place an order (conclude a contract) on the Website – for a period of 30 days from the 1st day of the month following the order date,
   2. for the purposes related to the proper performance of the contract – for a period of 30 days from the 1st day of the month following the order date.
2. Data archiving after the performance of the contract/service

In order to fulfill the obligations incumbent on the data controller and resulting from applicable law, including in particular obligations related to the implementation of tax regulations, the legal basis for the processing of your data is Article 6, paragraph 1, letter a) of the GDPR. c GDPR. 

We will process personal data for periods specified in applicable law, but no shorter thanthan for a period of 5 years, counted from 1 January following the date of the last economic event related to a given
customer.

3. E-mail Newsletter Service

Within the scope of the Newsletter service, your data are processed based on your consent, the legal basis for data
processing is Article 6 paragraph 1 letter a of the GDPR, to the extent necessary for the proper
implementation of this service – the legal basis for data processing is Article 6 paragraph 1 letter b of the
GDPR, and within the framework of the legitimate interest pursued by the data controller – the legal basis
for data processing is Article 6 paragraph 1 letter f of the GDPR. In connection with the provision of the
service, the following data is processed:

1. 1. e-mail address (Newsletter E-MAIL),

Providing personal data is voluntary, but necessary to subscribe to and use the Newsletter services. Failure to
provide data will result in the inability to use the service. Personal data used in the provision of the Newsletter
service will be processed until the User unsubscribes – in accordance with the terms and conditions of the
Newsletter service.

4. Social Media

Within the scope of activities carried out via social media, we will process your data for the following purposes:

1. 1. maintaining our profile/channel on social media, under the terms and conditions specified therein, and
      informing you through them about our activities, events we organize, and products and services we offer;
   2. contacting/interacting with you through the profile/channel functionality;
   3. analyzing the functioning, popularity, and use of our profile/channel;
   4. sending commercial information, including invitations to events we organize, through the profile/channel
      functionality. profile/channel.

The legal basis for processing your data for the above-mentioned purposes is the legitimate interest, i.e. Article
6 paragraph 1 letter b) of the GDPR. f GDPR, which involves promoting our activities and expanding our group
of supporters, as well as answering your questions. 

We process personal data for the duration of your activity related to our profile/channel, and then at the latest
until your social media account is deleted, or your data is deleted from our profile/channel.

5. Other activities carried out by the Data Controller

In connection with the implementation of other tasks, we may process your data in particular for the following
purposes and scopes:

1. 1. In order to establish, pursue and enforce claims, and defend against claims in court proceedings or
      before other enforcement authorities, data necessary to prove the existence of a claim or data resulting
      from legal requirement, court order or other legal procedure. 

Data used for the above purposes is processed until the claims cease/are satisfied, but no longer than the statute of
limitations for any claims specified by law. The legal basis for processing is: Article 6 paragraph 1 letter c
and Article 6 paragraph 1 letter f, respectively. f GDPR;

5. 2. In order to process complaints, grievances, and requests, and to answer questions, we process personal
      data provided in the contact form or during a telephone conversation. 

The legal basis for data processing within the scope of the complaint procedure, handling complaints and requests, in
the framework of responding to questions submitted in another form, as well as the processing of data contained in
documents attached to complaints, grievances, or requests, are, respectively: Article 6 paragraph 1 letter a and
Article 6 paragraph 1 letter b) of the GDPR. f GDPR;

5. 3. for the purpose of organizing competitions, personal
      data provided by the user during the application/registration for the competition are processed.
      Detailed information on the processing of personal data and the legal basis for processing the data of
      competition participants is provided in each competition’s regulations. 
   4. for the purpose of presenting our marketing communications distributed outside the Website,  we use the services of external suppliers. These services consist of displaying our marketing messages on websites other than the redakcja.ug.edu.pl website, which are distributed by the suppliers on a remarketing basis. Details regarding the processing of personal data described in this section can be found in the cookie provisions. The legal basis for processing is Article 6, paragraph 1, letter a) and Article 6, paragraph 1, letter f) of the GDPR;

V. CATEGORIES OF PERSONAL DATA

The Controller processes the following categories of personal data:

1. contact details, including order data – (customers, users of the Website)
2. data regarding activity on the Website – (customers, users of the Website),
3. data regarding complaints complaints and requests – (customers, users of the Website),

VI. RIGHTS OF PERSONS IN CONNECTION WITH THE PROCESSING OF THEIR PERSONAL DATA

Every person whose data is processed by the Controller has the following rights:

1. the right to access their data,
2. the right to rectify their data,
3. the right to have their data deleted if:
   1. the consent to the processing of personal data is withdrawn,
   2. the personal data are no longer necessary for the purposes for which they were collected or processed,
   3. the objection is raised to the use of data for marketing purposes,
   4. the objection is raised to the use of data to adapt the Controller’s services to the preferences of the data subject,
   5. the personal data are processed unlawfully,
4. the right to restrict data processing,
5. the right to object to data processing,
6. the right to data portability,
7. the right to withdraw consent at any time, provided that the withdrawal of consent does not affect the processing of data carried out by the Controller before its withdrawal.

Additionally, each person also has the right to lodge a complaint with the supervisory authority (PUODO) if they believe that the processing of their personal data by the Controller violates the provisions of applicable law.

VII. TAILORING THE SERVICE TO USER INTERESTS AND PREFERENCES

Based on data obtained from users of our Website, we tailor the content of online advertisements to their preferences. The legal basis for these activities is Article 6, Section 1 letter f of the GDPR, i.e., a legitimate interest in promoting our services and products and selecting the best possible offer for our customers. The scope of data we collect as part of tailoring services to user interests and preferences can be determined or changed by the user by accepting the cookie policy, or by modifying the settings of the web browser used, e.g., by disabling ad personalization. In this regard, we refer you to the relevant regulations and settings of your browser, as well as to our cookie policy.

VIII. SHARING PERSONAL DATA

As a Data Controller, we use the services of companies that support us in providing our customers with the highest standard of service. We may commission/entrust these companies with the processing of your data on our behalf and for our benefit. Data transfer most often occurs in the case of cooperation with a specific service provider (e.g., a data storage provider, a provider of tools used in online communication) or a subcontractor (e.g., a company providing services). In such a situation, the transfer of data does not authorize other entities to process it at will, but only to use it for the purposes expressly indicated by us. In no case does the transfer of data release us, as the Personal Data Controller, from responsibility for its processing.  

Your data may also be transferred to public authorities, but only if they are authorized to do so by applicable law.

Our service providers are based mainly in Poland and other countries of the European Economic Area (EEA). Some of our providers are based outside the EEA. Due to the transfer of User data outside the EEA, including to the USA, we have ensured that our providers guarantee a high level of personal data protection within the services they provide.

COOKIES POLICY

This Policy applies to “cookies” and applies to websites operated by University of Gdańsk; ul. Jana Bażyńskiego 8, 80-309 Gdańsk.

Cookies are understood as IT data.Cookies, in particular text files, stored on end-user devices, intended for use with websites. These files allow the
user’s device to be recognized and the website to be displayed appropriately, tailored to their individual preferences.
Cookies typically contain the name of the website they originate from, their storage time on the end-user device, and a
unique number.

We use cookies to:

1. adapt the content of the Website pages to the User’s preferences and to optimize the use of the Website’s
   content; In particular, these files allow us to recognize the Website User’s device and properly display the
   website, tailored to their individual needs.
2. Create statistics that help us understand how Website Users use the websites provided, which allows us to
   improve their structure and content.
3. Maintain the Website User’s session (after logging in), thanks to which the User does not have to re-enter their
   login and password on every subpage of the Website.

What “cookies” do we use?

1. Two basic types of cookies are used within the Website:
   1. “Session cookies” – these are temporary files that are stored on the User’s end device until they log
      out, leave the website, or disable the software (web browser). 
   2. “Persistent” (persistent cookies) – these are files stored on the User’s end device for the time
      specified in the cookie parameters or until they are deleted by the User.
2. The following types of cookies are used within the websites:
   1. “essential” cookies, enabling the use of services available within the websites, e.g., authentication
      cookies used for services that require authentication within the websites,
   2. cookies used to ensure security, e.g., used to detect abuse of authentication within the websites,
   3. “performance” cookies, enabling the collection of information about how the websites are used,
   4. “functional” cookies, enabling the “remembering” of settings selected by the User and personalizing the
      User interface, e.g., in terms of the selected language or region of the User’s origin, font size,
      website appearance, etc.,
   5. “advertising” cookies, enabling the delivery of advertising content to Users more tailored to their
      interests,
   6. “Analytical” web analytics cookies enable us to better understand how users interact with webpage
      content in order to better organize the layout of our website. They collect information about how
      visitors use our website, the type of website from which users have been referred, and the number and
      duration of visits to this website. This information does not record specific personal data about the
      user, but is used to compile aggregated statistics about website usage. For this purpose, we use Google
      Analytics.

Cookies used by the publisher’s website:

Name	Domain	Purpose	Duration	Type
sbjs_migrations	wydawnictwo.ug.edu.pl	Identifying the source of the visit and tracking user actions to improve the user experience.	session	Analytical
sbjs_current_add	wydawnictwo.ug.edu.pl	Identifying the source of the visit and tracking user actions to improve the user experience.	session	Analytical
sbjs_first_add	wydawnictwo.ug.edu.pl	Identifying the source of the visit and tracking user actions to improve the user experience.	session	Analytical
sbjs_current	wydawnictwo.ug.edu.pl	Identifying the source of the visit and tracking user actions to improve the user experience.	session	Analytical
sbjs_first	wydawnictwo.ug.edu.pl	Identifying the source of the visit and tracking user actions to improve the user experience.	session	Analytical
sbjs_udata	wydawnictwo.ug.edu.pl	Identifying the source of the visit and tracking user actions to improve the user experience.	session	Analytical
sbjs_session	wydawnictwo.ug.edu.pl	Identifies the source of the visit and tracks user actions to improve the website experience.	1 hour	Analytical
Elementor (Elementor)	wydawnictwo.ug.edu.pl	Allows the website owner to implement or change the website content over time real.	never	Necessary
wc_cart_hash_…	wydawnictwo.ug.edu.pl	Maintaining cart contents (shortened code part, preserving uniqueness).	never	Other (Technical)
wpEmojiSettingsSupports	wydawnictwo.ug.edu.pl	Helps determine whether the browser can display emoticons correctly.	session	Necessary
wc_fragments_…	wydawnictwo.ug.edu.pl	Maintaining cart contents (shortened portion of the code, preserving uniqueness).	session	Other (Technical)

Legal basis for processing:

The legal basis for processing personal data using cookies is: 

1. consent expressed by the user (Art. 6 sec. 1 letter a GDPR) – by introducing individual preference settings for the use of cookies in the user’s browser, 
2. performance of a contract or in order to take steps prior to entering into a contract (Art. 6 sec. 1 letter b GDPR) – to maintain the user’s session, transfer an order, coordinate the payment process, etc.
3. legitimate purpose of the data controller (Art. 6 sec. 1 letter f GDPR) – collecting statistical information, optimizing the website’s adaptability to user needs, etc. 

Do cookies contain personal data?

Personal data collected using cookies may only be collected to perform specific functions for the user. Such data is encrypted to prevent unauthorized access.

How long will we process cookies?

If the User consents to the storage of cookies, they will be processed/stored for a maximum of 365 days from the date of consent. After this period, the User will be asked to consent to their storage again during their next visit.

Deleting cookies

By default, web browsing software allows cookies to be placed on the end device. These settings can be changed to block the automatic handling of cookies in the web browser settings or to notify the User each time they are sent to the User’s device. Detailed information about the possibilities and ways of handling “cookies” is available in the software (web browser) settings.

1. Internet Explorer (https://support.microsoft.com/pl-pl/help/17441/windows-internet-explorer-change-reset-settings)
2. FireFox (https://support.mozilla.org/pl/kb/firefox-opcje-preferencje-i-u setting) 
3. Opera (https://help.opera.com/pl/touch/settings/)
4. Chrome (https://support.google.com/accounts/answer/3118621?hl=pl) 

RestrictionsDisabling the use of cookies may affect some of the website’s functionalities.  

What security measures are used on the website?

The publisher’s website is equipped with security measures designed to protect data under its control against loss,
misuse, or modification. The publisher undertakes to protect all information disclosed to it by customers in
accordance with security and confidentiality standards. The publisher provides users with the option to unsubscribe
from subscribed newsletters.