Privacy policy

Privacy policy

Administrator of your personal data

The administrator of your personal data is: Marcin Koźlik conducting business activity under the name “Tiburon” Marcin Koźlik, NIP 5992469859, REGON 080047545 with its registered office at Jagny 14, in Mierzyn 72-006, hereinafter referred to as the “Administrator”.

Information Obligation Regarding the Processing of Personal Data

in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L…, p. UE, L of 2016, No. 119, item 1) hereinafter referred to as the GDPR and the Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2002, No. 144, item 1204, as amended) as well as the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000).

Contact details

As the Controller, we have not appointed a Data Protection Officer. In all matters relating to the processing of personal data by us and the exercise of rights related to you can contact us at the following e-mail address: kontakt@osrodektaurus_pl, or in writing “Tiburon” Marcin Koźlik, with its registered office at 14 Jagny Street, in Mierzyn 72-006 with the note “Personal data”.

The scope of personal data processing

imię, nazwisko,
adres korespondencyjny (zamieszkania),
adres e-mail,
numer telefonu,
numery: NIP, REGON, KRS,
numer rachunku bankowego,
informacje o płatnościach i zadłużeniu.

Purpose of processing personal data and legal basis

  • performance of contracts concluded with the Administrator – legal basis – performance of a contract to which the data subject is a party or taking action at the request of the data subject before concluding the contract – Article 6(1)(b) of the GDPR Regulation, 
  • in relation to personal data in the form of your IP address, domain name, browser type, operating system type, processed for the purpose of running and functioning of our website, including data collected automatically in the course of your visits to our website – legal basis Article 6(1f) in conjunction with Article 22 of the GDPR Regulation (not related to profiling of your personal data),
  • performance of legal obligations incumbent on the Administrator (in particular: issuing and storing invoices / sales documents and other accounting documents, consideration of complaints) – legal basis – fulfillment of the legal obligation incumbent on the Administrator Article 6 paragraph 1 point c of the GDPR,
  • establishing, defending and pursuing claims – legal basis – legitimate interest pursued by the Administrator consisting in conducting business activity and therefore expanding the market for the offered goods and services – Article 6(1)(f) of the GDPR,
  • verification of payment credibility – legal basis – legitimate interest pursued by the Administrator consisting in conducting business activity and therefore expanding the market for the sale of offered goods and services – legal basis for the processing of personal data – Article 6(1)(f) of the GDPR, contact you: this data is necessary to enable us to contact you, for purposes directly related to the functioning of our company, including our website, for example with the possibility of concluding a sales contract our services and products, preparation of a valuation of our products and services for you) – legal basis of Article 6(1)(f) of the GDPR Regulation,

Recipients of your personal data

In addition, data may be transferred to entities processing personal data at the request of the Administrator providing IT support for the administrator, business partners of the administrator, companies providing consulting services IT service providers, entities processing data for the purpose of debt collection, marketing agencies, whereby such entities process data on the basis of an agreement with the Administrator and only in accordance with our instructions.

The storage time of your personal data

Your personal data will be stored for the period necessary to perform the Administrator’s tasks and fulfill the archiving obligation, which result from the provisions of law, including accounting regulations. In the case of claims, your personal data will be processed until they expire, resulting from the Civil Code or other legal provisions, if such a requirement arises. After the expiry of the above-mentioned deadlines, your data will be deleted or anonymised.

The rights of the data subject


the right to access your data and the right to request their rectification, deletion, limitation of processing. If the basis for the processing of your personal data is the legitimate interest of the Administrator, you can object to the processing of your personal data. In particular, you have the right to object to processing for direct marketing purposes, including profiling and analytical purposes,

  • to the extent that the basis for the processing of your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal,
  • to the extent that your data is processed in order to conclude and perform the contract / provide services or processed on the basis of consent – you also have the right to transfer personal data. In such a situation, you will receive your personal data from us in a structured, commonly used, machine-readable format. You can send this data to another data controller,
  • you also have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data. You can do it to the address “Tiburon” Marcin Koźlik with its registered office at 14 Jagny Street, in Mierzyn 72-006 or to the e-mail address: kontakt@osrodektaurus_pl, or to the President of the Office for Personal Data Protection –

Source of personal data

  • administrator’s business partners,
  • information obtained directly from you, e.g. when concluding a contract for the performance of our services,
  • Internet (in particular: the central database of The Register and Information on Economic Activity, the database of the search engine of the National Court Register, websites on which your personal data have been made, contact form).

Transferring data outside the EEA

Personal data processed by the Administrator are transferred by us outside the EEA. Due to the fact of cooperation with the Administrator with its affiliates and service providers based outside the EEA, your personal data may be transferred to the following countries that are not members of the EEA: USA. On 12 July 2016, the European Commission adopted an adequacy decision (EU-US Privacy Shield Program), which allows the transfer of personal data of EU citizens while ensuring an appropriate security standard for the above-mentioned procedures.