PRIVACY POLICY

General Provisions

  1. The administrator of personal data is INVESTEKO Serwis Sp. z o.o. with its registered office in Świętochłowice at ul. Wojska Polskiego 16G, hereinafter referred to as the 'Administrator', which is also the Service Provider.
  2. Your personal data is processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
  3. We take special care to protect the interests of the individuals whose data we process, and in particular, we ensure that the data collected by us are:
    • processed lawfully;
    • collected for specified, legitimate purposes, and not further processed in a manner incompatible with those purposes;
    • adequate, relevant, and limited to what is necessary for the purposes for which they are processed and kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of processing.

Purposes and Legal Bases of Data Processing

  1. Your personal data is collected and processed only on the basis of appropriate legal grounds, and the scope of processing depends on the type of service provided.
  2. The personal data processed by the Administrator includes data provided in the form: name, email address, and organization size. Data contained in the content of messages sent to us, which we receive with your voluntary consent, are also processed.
  3. The Administrator processes personal data necessary for the provision and development of the services offered through the Service and its specific functionalities.
  4. The personal data will be processed for the following purposes:
    • Communication with the User to provide necessary information and build positive and reliable relations with them, which constitutes a legitimate interest of the Administrator (Art. 6(1)(f) of the GDPR);
    • Promotion of Administrator's own products and/or services by directing marketing communications electronically if the User has given consent to receive such notifications via email (Art. 6(1)(a) of the GDPR);
    • Providing responses to inquiries directed to us by phone or through the contact form available on the website – the processing is based on Art. 6(1)(f) of the GDPR, i.e., the legitimate interest of the administrator related to building and developing relationships with our customers and aiming to sell goods and services;
    • Providing access to information about innovations in the industry directly related to the Administrator's activities, if the User has given consent to receive such notifications via email (Art. 6(1)(a) of the GDPR);
    • For analytical and statistical purposes based on the legitimate interest of the Administrator, which involves conducting verification of Users' activities and preferences for the optimization of services, products, and functionalities of the Service (Art. 6(1)(f) of the GDPR);
    • For potential establishment, investigation, or defense of claims based on the legitimate interest of the Administrator in protecting their rights (Art. 6(1)(f) of the GDPR). In each of the above cases (point 2), providing data is voluntary but necessary to receive offers and information.

Data Processing Period

  1. Personal data will be processed for the period during which the person remains in contact with the Administrator, and after that time, for the period necessary to comply with legal regulations, pursue or defend against potential claims, but not longer than 3 years from the date of termination of the agreement for the provision of services electronically.
  2. Data processed based on consent will be processed until the consent is withdrawn, with the reservation that the withdrawal of consent does not affect the lawfulness of the processing performed prior to such withdrawal.

Information about Processing

  1. Depending on the purpose of data processing, personal data may be disclosed to:
    • Depentities affiliated with the Administrator,
    • podmiotom współpracującym z Administratorem,
    • subcontractors, in particular entities providing and servicing selected IT systems and solutions,
    • podmiotom obsługującym płatności internetowe,
    • courier-postal service providers,
    • law firms.
  2. Personal data processed by the Administrator will not be transferred outside the European Economic Area or to international organizations.

Rights of Individuals

  1. The Service User has the right to:
    • access their personal data,
    • rectify their personal data,
    • erase their personal data,
    • erase restrict the processing of their personal data,
    • transfer their personal data,
    • object to the processing carried out on the basis of the legitimate interest of the administrator,
    • withdraw consent at any time without affecting the lawfulness of the processing carried out based on the consent before its withdrawal.
  2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the processing of personal data violates their rights and freedoms.
  3. During the data processing, there is no automated decision-making, including profiling.