This Privacy Policy for Have a Book Monika Lewandowska (doing business as “Have a Book”) (“we”, “us”, or “our”) describes how and why we collect, store, use, and share (“process”) your personal information when you use our services (“Services”), including when you:

·         visit our website at https://www.haveabook.eu/ or any website of ours that links to this Privacy Policy

·         interact with us in other ways, such as inquiries, cooperation, or participation in events

The data controller is:
Have a Book Monika Lewandowska
Leśna 1/4, 80-322 Gdańsk, Poland

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at digital@haveabook.pl.

Summary of key points

This summary provides key points from our Privacy Policy.

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information?

Some of the information may be considered “special” or “sensitive” in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.

Do we collect any information from third parties?

We do not collect any information from third parties.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. Learn more about how we process your information.

In what situations and with which parties do we share personal information?

We do not sell or exchange your personal information with third parties. We may share limited information with service providers that help us operate our Services, such as Google Analytics, which provides website usage statistics.

What are your rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights?

The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Policy in full.

What information do we collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

·         Identification data: first name, last name, company name

·         Contact details: email address

·         Message content: information you provide in the contact form or in direct communication with us

·         Consent information: records of your consent (e.g., for receiving marketing communications)

Sensitive Information. We do not process sensitive information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

Location Data. We collect approximate location information based on your IP address (for example, country or city). We do not collect precise geolocation data, such as GPS coordinates. You can limit the collection of this information by adjusting your browser or cookie settings, or by using the Google Analytics opt-out tools provided by Google (https://tools.google.com/dlpage/gaoptout).

How do we process your information?

In Short: We process your information to provide, improve, and administer our Services, to communicate with you, for basic website security, and to comply with legal obligations. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

•         To respond to user inquiries or provide support. We may process your information to reply to your messages and address any issues you raise.

•         To maintain the security and proper functioning of our website (for example, preventing errors or unauthorized access).

What legal bases do we rely on to process your personal information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

•         Consent. We may process your information if you have given us permission (consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.

•         Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.

•         Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

When and with whom do we share your personal information?

In Short: We do not sell or trade your personal information. We may share limited information only with trusted service providers that help us operate our Services.

We may share your personal information in the following situations:

•         Service Providers. We use third-party providers to support the operation of our website and related Services (for example, website hosting, email communication tools, and Google Analytics). These providers may process limited personal information on our behalf in line with our instructions.

•         Legal Requirements. We may disclose your information if required to do so by law or in response to valid requests by public authorities (for example, a court or government agency).

Do we use cookies and other tracking technologies?

In Short: We use cookies and similar technologies to ensure the proper functioning of our website and to collect analytics data.

We use cookies and similar tracking technologies (such as small text files stored in your browser) when you interact with our website. These technologies help us:

•         maintain the security and performance of our Services,

•         remember your preferences (such as language settings),

•         understand how visitors use our website through analytics.

We do not use cookies for targeted advertising, remarketing, or abandoned cart reminders.

Google Analytics.

We use Google Analytics to help us understand how visitors use our website. Google Analytics may collect information such as your IP address, browser type, operating system, referring URLs, pages visited, and time spent on the site. To opt out of being tracked by Google Analytics, you can install the browser add-on available at: https://tools.google.com/dlpage/gaoptout

For more information about how Google handles data, please see: https://policies.google.com/privacy.

You can manage or disable cookies in your browser settings. Please note that some parts of the website may not function properly if you disable cookies.

How long do we keep your information?

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Policy unless otherwise required by law.

We retain your personal information for as long as necessary to respond to your inquiries, perform a contract, comply with legal obligations, or until you withdraw your consent where applicable. Once the data is no longer needed, we delete or anonymise it.

Do we collect information from minors?

In Short: We do not knowingly collect personal information from children under 18 years of age.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect or process personal information from children. If we become aware that personal data of a minor has been provided to us, we will delete it promptly. If you believe that a child has provided us with personal information, please contact us at digital@haveabook.pl.

What are your privacy rights?

In Short: In some regions you have rights that allow you greater access to and control over your personal information.

Depending on your location, you may have certain rights under applicable data protection laws. These may include the right to:

•         request access to and obtain a copy of your personal information,

•         request rectification or erasure,

•         restrict the processing of your personal information,

•         object to the processing of your personal information,

•         where applicable, request data portability.

If we rely on your consent to process your personal information, you may withdraw your consent at any time by contacting us at digital@haveabook.pl. This will not affect the lawfulness of processing carried out before withdrawal.

If you believe that we are unlawfully processing your personal information, you have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO), https://uodo.gov.pl.

Do we make updates to this policy?

In Short: Yes, we will update this Policy as necessary to stay compliant with relevant laws.

We may update this Privacy Policy to stay compliant with applicable laws or to reflect changes in how we handle personal information. The updated version will be indicated by the “Last updated” date at the top of this page. We encourage you to review this page periodically.

How can you contact us about this policy?

If you have any questions or comments about this Privacy Policy, please contact us at digital@haveabook.pl

How can you review, update, or delete the data we collect from you?

If you would like to request access to the personal information we hold about you, ask for corrections, or request that we delete your data, please contact us at digital@haveabook.pl. We will handle your request in line with applicable data protection laws.