Dear Sir or Madame,

Protecting your privacy is important to us. We ensure the security of the personal data entrusted to us and make every effort to improve this protection.

In order to clarify how we collect, process and use information regarding the Website Users, we present below a document that clearly explains how we protect the privacy of our Users so that you can feel safe and enjoy the services offered through our Website.

Please note that depending on the scope of services you use, one of the documents available below will apply:

  1. Newsletter privacy policy and PWN Group Websites cookie policy
  2. libra.ibuk.pl Website privacy policy

Newsletter privacy policy and pwn group websites cookie policy

  • Who is the controller of website user personal data

    In order to explain the principles and method of collecting, processing and using information about users of the websites of the capital group PWN (i.e. Wydawnictwo Naukowe PWN S.A., EPWN Sp. z o.o., hereinafter respectively: "Companies" and "Grupa PWN"), we present the below document, which transparently explains how we protect the privacy of our users, so that they can feel safe and enjoy using the services offered on the websites belonging to the PWN Group.

    • Wydawnictwo Naukowe PWN S.A. with its seat in Warsaw, ul. Gottlieba Daimlera 2, 02- 460 Warsaw, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, Thirteenth Commercial Division of the National Court Register under KRS number 0000067444, Tax. Id. No.: 526-01-52-235, Company Id. No. REGON: 012822460, share capital/paid-in capital: PLN 4,250,606.00;
    • EPWN Sp. z o.o. with its seat in Warsaw, ul. Gottlieba Daimlera 2, 02-460 Warsaw, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, Thirteenth Commercial Division of the National Court Register, under the KRS number: 0000442101, Tax. Id. No.: 525-25-43-576, Company Id. No. REGON: 146437353, share capital/paid-in capital: PLN 12,000,000.00.

    The Companies entered into a mutual agreement setting out their respective responsibilities in relation to the joint controlling of personal data. The main arrangements are available in Clause 15 below.

  • how to contact us?

    Spółki ustaliły wspólny adres do kontaktu w sprawach dotyczących przetwarzania danych osobowych:

    • at email address: iod@epwn.pl
    • at mailing address: ul. G. Daimlera 2, 02-460 Warszawa

    Requests for rectification or deletion of personal data should be sent to us at the following address: iod@epwn.pl

  • How to contact our data protection officer?

    We have appointed one Data Protection Officer for the entire PWN Group. You can contact the Officer at the email address or mailing address indicated above, with a note "IOD".

  • What data do we collect on the websites and for what purpose?

    The scope and purpose of our data collection depends on your activity on the Website.

    • Newsletter

      For Users who have provided us with their e-mail address or telephone number for this purpose, we provide newsletter services, i.e., the provision of commercial information on products or services offered by us. Providing this data is voluntary yet indispensable to receive the newsletter.

      The personal data are processed:

      • in case of sending marketing contents to the User within the newsletter - the legal basis of processing is the legitimate interest,
      • for the purpose of possible establishment, investigation or defence against claims - the legal basis of the processing is the legitimate interest consisting in protection of our rights
      • for analytical and statistical purposes - the legal basis of the processing is the legitimate interest, consisting in conducting analyses of Users’ activity on the Website in order to improve the applied functionalities and enhance our offer.
    • Creating an account on the Websites of the PWN Group

      In case of some of our Websites, we inform you of the possibility of creating a joint account which enables you to log in to various services of the PWN Group. In this case, when creating an account on one of the Websites belonging to the PWN Group, you are asked to provide the necessary data to create and maintain the account, i.e., to provide an e-mail address, a login and a password or to accept these data to be downloaded from the Facebook platform.

      Providing data marked as obligatory is necessary to set up an account and failing to provide such data results in the lack of possibility to set up an account on the Website. Provision of other data is optional. In the case of registration via Facebook platform, with your consent we only collect the data necessary for account registration and maintenance.

      The personal data are processed:

      • in order to provide services related to the maintenance and operation of the account on the Website - the legal basis for the processing is the indispensability of the processing to perform the contract, while with regard to the data disclosed on an optional basis - the legal basis for the processing is consent;
      • for the purpose of possible establishment, investigation or defence against claims - the legal basis of the processing is the legitimate interest, consisting in protection of our rights;
      • for analytical and statistical purposes - the legal basis of the processing is the legitimate interest, consisting in conducting analyses of Users’ activity on the Websites and their way of using the account, as well as their preferences, to improve the applied functionalities;

        • for the publication of non-profiled advertisements of our goods or services, the legal basis of the processing is the legitimate interest, consisting in direct marketing;
        • in order to inform you about circumstances relating to our Websites and not having the nature of commercial information - the legal basis for processing is the legitimate interest, consisting of informing about our activities.
    • User data collected automatically upon entering the Websites

      The IT system used by the Websites automatically collects in logs the data related to the device used by you to connect to the Websites. These data include: type of device, operating system, type of Internet browser, screen resolution, colour depth, IP address, Internet Service Provider (ISP), address of entering the Website and your precise geographic location.

      We also process the data you leave behind as part of navigating our Websites (including the data you leave behind in so-called cookies), data about visited websites, applications and content in which you are interested, including advertising, your searches, your clicks, the way you use our services, including your purchase history, in particular when you click on ads delivered to you in the environment of our services.

      Within optimization, technical service performance, statistics, security and self-marketing we process data for the following purposes:

      • tailoring the service to your needs,
      • creating a profile of personalized content,
      • selecting personalized content,
      • technical delivery of content or advertising,
      • maintenance and technical support of services,
      • measuring the performance of content or advertising,
      • statistical measurements,
      • developing and improving services, applying market research to generate customer feedback on services, and
      • ensuring service security, fraud prevention and error correction, whereby geolocation data and data resulting from the scanning of a device for identification purposes may be processed for the security purposes and only to the extent necessary,

      For the purposes of optimisation, technical performance, statistics, security and self-marketing, we use the following specific functions and special features:

      • matching and linking offline data sources,
      • combining information about your different devices,
      • receiving and using the automatically sent characteristics of your device to identify you.

      The above data is processed by us on the basis of our legitimate interest. In case your data is processed based on the legitimate interest of the PWN Group, you have the possibility to express your objection by contacting us: iod@epwn.pl

      Please note, however, that where we process data based on the legitimate interest of the PWN Group, we always perform a balancing test between our legitimate interest and your rights. For essential purposes, functions, and special functions such as maintenance and support of technical services, providing security, fraud prevention and error correction, technical delivery of advertising or content, statistical measurements, performance measurements of content or advertising, an objection may not be effective

  • Targeting and profiling

    Displayed advertising and editorial material are targeted and profiled using your information.

    Targeting is the process of selecting a target audience that is most interested in a given editorial or advertising material.

    Profiling is the process of automated processing of your data, which involves using your data to evaluate certain factors specific to you, in particular to analyse or forecast your interests or your other behaviour, e.g., consumer preferences, online credibility, location.

    Displayed advertisements and editorial content are targeted and profiled using your information as follows and according to the following criteria:

    • Your activity within the PWN Group Services and Websites, in particular the editorial materials you use and purchases you make;
    • Your activity and interactions with advertising materials;
    • Your location, the size of the town from which you come;
    • Information stored on your end device, in particular the type of end device, the type of browser, the operating system you are using, the language set in the operating system you are using.

    Your profile information may be used to profile advertising and content on the PWN Group’s Services and Websites as well as other locations on the Internet, i.e., outside of the PWN Group’s Services, Portals and Websites.

    This is especially true for ad networks that collect and broker ad sales. Ad networks collect user data from all the sites they partner with and then use that data to serve ads that are best suited to your interests.

  • Freedom to provide data

    Providing data is voluntary, however, failure to provide data (including refusal of access to information and their storage on your device, including with the use of cookies) marked as necessary to provide services to you will prevent their provision, in particular the inability to provide you with information, content and offers you are looking for.

  • How long do we process your personal data for?

    The processing period depends on the type of service provided and the purpose of the processing. As a general rule, data are processed:

    • until you withdraw your consent;
    • until you lodge an effective objection
    • until you successfully request for deletion.

    The processing period may be extended if the processing is necessary for the establishment, investigation or defence against possible claims, and thereafter, only if and to the extent required by law.

  • What rights do users have?

    We guarantee to you all data subjects’ rights, including the right:

    • to access the data, including the right to obtain copies;
    • to rectify the data;
    • to delete the data;
    • to limit the processing;
    • to transfer the data;
    • to lodge an objection;
    • to lodge a complaint with the President of the Office for the Protection of Personal Data;

    If your data is processed on the basis of consent you may additionally exercise your right to withdraw consent to the extent that it is processed on that basis. Withdrawal of the consent does not affect the legality of the processing that has been performed on the basis of the consent in the period prior to its withdrawal.

    Consent is voluntary and you can give it by accepting cookies or you can withdraw it at any time using your browser settings.

    If you wish to exercise your rights, please contact us first.

  • With whom do we share the personal data you give us?

    Personal data on the basis of an appropriate contract are transferred to the processors acting on our behalf, including but not limited to IT service providers. Such processors will only process data in accordance with our instructions and in a confidential and secure manner. We have the right to control how the data entrusted by you are processed.

    In other cases, personal data may be disclosed to entities authorized solely on the basis of legal regulations.

  • Transfer of data outside the eea area

    Due to our use of certain IT solutions, some personal data may be transferred outside the EEA. This applies to data from social media plug-ins, as stated in Clause 13. SOCIAL MEDIA and analytics data shared with our partners as stated in Section 14. OUR PARTNERS' TOOLS.

    Before transferring your personal data, we verify whether an adequate level of protection of your personal data is ensured in third countries, i.e., countries outside the European Economic Area. However, in certain situations, the transfer of your personal data to third countries may involve risks due to the lack of decision establishing relevant degree of protection outside the European Economic Area and the lack of safeguards and effective remedies in third countries.

  • Cookie policy

    The Websites use cookies. These are small text files placed by the PWN Group on Users’ devices (e.g., computers) through web browsers. These files allow certain information to be stored on your device, and then read by the website that created these files. Cookies usually contain, apart from the domain name of the website of their origin, also the time of their storage on the end device and a unique number.

    We use cookies to:

    • match the content of websites to individual User preferences and optimise the use of websites by the User (cookies allow in particular to recognize the device of the User of the website and display the website accordingly, so that it is best suited to the User’s individual needs);
    • maintain the User’s session on the website after logging in (it is very useful for the User, because it prevents the necessity of logging in again (entering the login and password) on each subpage of the website);
    • create statistics (so that we can better understand how Users of our website use the websites, and consequently improve the structure and content of these pages);
    • provide Users with advertising content that matches their individual preferences, e.g. in a manner that takes into account the User’s interests or place of residence (individualisation of the advertising message) and with the guarantee of excluding the possibility of presenting the User with the same advertisement more than once; remarketing consisting in the display of advertisements from clients whose websites you have visited or whose goods or services you were interested in, e.g. you have previously clicked on the client’s advertisement;
    • interconnect multiple devices belonging to the same end User for one or more of the purposes described above.

    The website does not store any information about the hardware configuration of the computer or programs installed on the User’s computer.

    Types of cookies

    Due to the lifespan of cookies and other similar technologies, we use two main types of cookies:

    • session files - temporary files stored in the User’s end device until logging out, leaving the website and application or deactivating software (web browser);
    • permanent files - stored in the User’s end device for the time specified in the parameters of cookies or until they are deleted by the User.

    We use cookies and other similar technologies for the following purposes:

    • necessary for the operation of the service and the application - to enable you to use our services, such as authentication cookies used for services that require authentication;
    • files used to ensure security, such as those used to detect abuse of authentication;
    • performance files - enabling the collection of information on the manner of use of websites and applications;
    • unctional files - making it possible to “remember” the User’s selected settings and to personalize the User’s interface, e.g., with regard to the chosen language or region, font size, appearance of the website and application, etc.;
    • advertising files - to provide Users with advertising content more tailored to their interests;
    • statistical files - used to count the statistics of websites and applications.

    Changing the cookies settings

    Usually, the User's web browser allows the storage of cookies on the User's end device by default. At any time, however, Users of the website have the opportunity and right to change their cookie settings. In order to change the cookie settings, Users should read detailed information on the possibilities and ways of using cookies, which are available in the settings of their web browser.

    If you do not agree to download cookies on their device, you can block their placement by configuring the web browser accordingly.

    Unfortunately, if you block cookies from Websites, we cannot guarantee proper work of the Websites. If you do not change the cookie settings, these files will be downloaded to your end device. This means that we will store information on your end device and access this information.

  • Web push notifications

    We use Web push notifications on our Websites to provide you with short notifications, in particular the latest news and information about our services. Notifications are provided in real time and handled by the web browser you use and which stores a unique identifier.

    You need to give your consent to receive web push notifications from us. You can withdraw your consent to receive notifications at any time using your browser settings.

  • Social media

    The Websites may use plug-ins and other tools provided by social networking sites such as Facebook, Twitter and Pinterest.

    In connection with the use of the website that includes such a plug-in, the User's browser establishes a direct connection to the servers of the administrators of the social networks (service providers). The content of the plug-in is transmitted by the respective service provider directly to the User’s browser and integrated into the Website. Thanks to this integration, service providers receive information that the User’s browser has displayed the Website, even if the User does not have a profile with a given service provider or is not logged in at the moment. Such information (together with the IP address) is sent by the User’s browser directly to the server of the relevant service provider (some servers are located in the USA) and stored there.

    If the User has logged in to one of the social networks, that service provider will be able to directly associate the visit on the Website with the User’s profile on that social network. If the User uses a particular plug-in, e.g., the "Like" or "Retweet" button, the relevant information will also be sent directly to the server of the relevant service provider and stored there. In addition, this information will be published on the relevant social network and will be shown to the people added as User’s contacts.

    The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and the User’s rights in this respect and the possibility to make settings to ensure the protection of Users’ privacy are described in the privacy policies of individual service providers.

    Facebook – https://www.facebook.com/privacy/explanation

    Twitter – https://twitter.com/en/privacy

    Pinterest - https://policy.pinterest.com/en/privacy-policy

    If the User does not want the social networks to attribute the data collected during the User’s visit to the Website directly to their profile on the social network, it is necessary to log out from the social network before visiting the Website. It is also possible to completely prevent the website from loading plug-ins by using appropriate extensions for the User's browser, e.g., blocking scripts.

  • Our partners' tools

    We also rely on third-party services and tools to provide our services and to improve and analyse them. These parties pursue only the purposes we have specified. Below you can find information about our partners and the tools they use.

    • Google Analytics

      We use the Google Analytics tool provided by Google Inc. (Google) based in the USA. We use cookies to collect and analyse information such as the number of visits to our Websites, the effectiveness of our marketing campaigns and the time spent on our Websites. We only use this information to improve the quality of the services.

    • Crazy Egg

      We use the Crazy Egg Web analytic service provided by Crazy Egg Inc. based in the USA to collect statistical information about the use of our Website. Using Crazy Egg Inc. technology, visitor information is collected and transmitted to Crazy Egg Inc. servers. The technology allows us to collect, analyse, and visualize the User's actions while visiting this Website. Cookies are also used for this purpose. You can revoke your consent at any time by changing the cookie settings in your browser.

    • Synerise

      In the Websites we also use a tool called Synerise, made available by Persooa sp. z o. o. based in Warsaw, which examines the User's activity on the Website, for example by checking what kind of content is read by the User, what purchases are made and on that basis it enables:

      • automatic content personalization in sent newsletters (e-mail, SMS) and in push notifications and advertisements displayed on the Website;
      • customization of the displayed offer;
      • analysis of the effectiveness of conducted advertising campaigns.
  • Basic principles of personal data joint controlling in pwn group

    1. In connection with the personal data joint controlling under the terms described in this Privacy Policy, the Joint Controllers have entered into an agreement on cooperation and joint controlling of personal data of the Users of the Websites.
    2. Each of the joint controllers is responsible for securing and properly organizing the processing of personal data on its own.
    3. With regard to responding to requests from the data subject (in particular, requests and statements regarding the right to information and transparent communication, access to personal data, rectification, deletion, restriction of processing, transfer of personal data, objection to the processing of personal data), the Joint Controller who has received the request or statement shall be the competent one.
    4. With regard to Joint Controller’s obligations to manage and report personal data breaches to the supervisory authority and the data subject, the Joint Controller who identified the breach shall be the competent one.
    5. Each of the Joint Controllers is independently obliged to meet the information duties towards the data subjects.
  • Changes to the privacy policy

    The policy is kept under review and updated as necessary. The current version of the policy was adopted and is effective as of 7 January 2021.

Privacy policy of libra.ibuk.pl website ("website")

  • Who is the controller of website user personal data?

    The Users’ personal data Controller, i.e., the entity responsible for ensuring security of the Users' personal data ("Controller"), is "Wydawnictwo Naukowe PWN" S.A. with its seat in Warsaw, ul. Gottlieba Daimlera 2, 02-460 Warsaw, entered into the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, Thirteenth Commercial Division of the National Court Register, under the KRS number: 0000067444, Tax. Id. No.: 526-01-52-235, share capital/paid-in capital: PLN 4.250.606,00.

  • How to contact us?

    If you have any questions or comments about our Website and data processing, please contact us:

    • at email address: iod@epwn.pl
    • at mailing address: ul. G. Daimlera 2, 02-460 Warszawa

    Requests for rectification or deletion of personal data should be sent to us at the following address: pomoc@libra.ibuk.pl.: pomoc@libra.ibuk.pl.

  • How to contact our data protection officer?

    The Data Controller has appointed a Data Protection Officer who can be contacted at the above-mentioned e-mail address or at the mailing address, with a note "IOD".

  • What data do we collect within the website and for what purpose?

    The scope and purpose of our data collection depends on your activity on the Website.

    • Placing an order on the Website

      If it is possible for you to place an order on the Website for products offered by us, your personal data is processed in order to process the order placed.

      In certain cases, placing an order requires an account on the Website.

      Providing data marked as obligatory is necessary to fulfil the order and failing to provide such data results in non-acceptance of the order. Provision of other data is optional.

      The personal data are processed:

      • in order to fulfil the order (including the examination of any complaints) - the legal basis for the processing is the indispensability of the processing to perform the contract, while with regard to the data disclosed on an optional basis - the legal basis for the processing is consent;
      • in order to comply with statutory obligations incumbent on the controller, resulting in particular from tax and accounting regulations, consisting, inter alia, in the necessity to issue a bill for the sale of goods and to archive it - the legal basis for processing is a legal obligation;
      • for the purpose of possible establishment, investigation or defence against claims - the legal basis of the processing is the legitimate interest, consisting in protection of our rights;
      • for analytical and statistical purposes - the legal basis of the processing is the legitimate interest, consisting in conducting analyses of Users’ activity on the Website, as well as their purchasing preferences, to improve the applied functionalities.
    • Creating an account on the Website

      In case of creating an account on the Websites, the User is asked to provide the necessary data to create and maintain the account, i.e., provide an e-mail address, a login and a password or to accept these data to be downloaded from the Facebook platform or Google.

      Providing data marked as obligatory is necessary to set up an account and failing to provide such data results in the lack of possibility to set up an account on the Website. Provision of other data is optional. In the case of registration via Facebook platform or Google, with your consent we only collect the data necessary for account registration and maintenance.

      The personal data are processed:

      • in order to provide services related to the maintenance and operation of the account on the Website - the legal basis for the processing is the indispensability of the processing to perform the contract, while with regard to the data disclosed on an optional basis - the legal basis for the processing is consent;
      • for the purpose of possible establishment, investigation or defence against claims - the legal basis of the processing is the legitimate interest, consisting in protection of our rights;
      • for analytical and statistical purposes - the legal basis of the processing is the legitimate interest, consisting in conducting analyses of Users’ activity on the Website and their way of using the account, as well as their preferences, to improve the applied functionalities.
    • Contact forms

      If you wish to contact us, e.g., to ask questions regarding our offer, you shall provide personal data marked as obligatory in the form. Provision of other data is optional.

      The personal data are processed:

      • for the purpose of identification of the User and answering the question contained in the contact form - the legal basis for processing is the performance of the contract;
      • for analytical and statistical purposes - the legal basis of the processing is the legitimate interest, consisting in conducting analyses and statistics of matters reported by the Users, inter alia, in order to improve functioning of the Website and to enhance our offer.
  • How long do we process your personal data for?

    The processing period depends on the type of service provided and the purpose of the processing. As a general rule, data are processed:

    • as long as we provide the service or fulfil the order;
    • until you withdraw your consent;
    • until you lodge an effective objection
    • until you successfully request for deletion.

    The processing period may be extended if the processing is necessary for the establishment, investigation or defence against possible claims, and thereafter, only if and to the extent required by law. For example, under the current Accounting Act, we are required to archive receipts for 5 years, beginning at the end of the calendar year in which the tax deadline has passed.

  • What rights do users have?

    We guarantee the exercise of all data subjects’ rights, including the right:

    • to access the data, including the right to obtain copies;
    • to delete the data;
    • to transfer the data;
    • to withdraw consent at any time (which does not affect the lawfulness of the processing carried out before the withdrawal of consent);
    • to rectify the data;
    • to limit the processing;
    • to lodge an objection;
    • to lodge a complaint with the President of the Office for the Protection of Personal Data;

    If you wish to exercise your rights, please contact us firsT.

  • With whom do we share the personal data you give us?

    If it is necessary to deliver an order placed on the Website, your personal data may be shared with postal operators or couriers for the sole purpose of delivering your order.

    Personal data on the basis of an appropriate contract may be transferred to the processors acting on the behalf of the Controller, including but not limited to IT service providers, marketing agencies etc. Such processors shall only process data in accordance with our instructions and in a confidential and secure manner. We have the right to control how the data entrusted by you are processed.

    The data provided to log in to the Account (i.e., e-mail address and password) will be made available to other companies of the PWN group (i.e., ePWN Sp. z o. o. and PZWL Wydawnictwo Lekarskie Sp. z o. o.) in order to facilitate the creation of an account by the User on the website of these companies. The legal basis for the disclosure of data within the above scope is the legitimate interest of the Controller and the User, consisting in facilitating the creation of an account.

    In other cases, personal data may be disclosed to entities authorized solely on the basis of legal regulations.

  • Transfer of data outside the eea area

    We do not transfer your personal data outside the EEA.

  • Changes to the privacy policy

    The policy is kept under review and updated as necessary. The current version of the policy was adopted and is effective as of 7 January 2021.