TABLE OF CONTENTS:
I. Introduction - contact information
II. Legislation on the protection of personal data
III. Principles of processing your personal data
IV. Users' rights in connection with the processing of personal data
V. Security of personal data
VI. How we process your data
VII. Consent - withdrawal of consent
VIII. Data storage
IX. Recipients of data sharing with other entities
X. Data processing using cookies and other Internet technologies
XI. Changes to the Policy
XII. Price lists
I. Introduction – contact details
This Privacy Policy contains general information regarding the use (processing) by www.platformainwestora.pl of the personal data of persons visiting or using the services provided by the website owned by DEALDONE spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, at ul. Marszałkowska 58.
We respect the privacy of our Users and therefore we provide this Privacy Policy so that every User knows to what extent his/her personal data is processed, including being able to decide independently, consciously and freely whether to use our website.
In this Privacy Policy, we have decided to describe in general terms how and to what extent we collect Users' personal data, for what purposes we use this data, who we share it with and how we protect it. In the Privacy Policy, the User will also find information about the rights to which Users are entitled in accordance with the applicable data protection regulations.
The policy is general and presents only some issues related to the processing of personal data. This policy is detailed in the Website Regulations and information clauses that will be presented to the User when collecting personal data from him.
Insofar as we use cookies or other data collection technologies on our websites, we provide more information in the Cookie Policy.
Contact details of the Administrator, i.e. DEALDONE limited liability company with its registered office in Warsaw, at ul. Marszałkowska 58.
Address: ul. Marszałkowska 58, 00-545 Warsaw
Website: www.platformainwestora.pl
Email: biuro@platformainwestora.pl
II. Data protection regulations
The Privacy Policy is based on the following regulations:
● Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L No. 119, p. 1) – also referred to as the “GDPR”
● the Telecommunications Act of July 16, 2004 (consolidated text: Journal of Laws of 2017, item 1907, as amended)
● Act of July 18, 2002, on the provision of services by electronic means (i.e. Journal of Laws of 2017, item 1219, as amended)
III. Principles of processing your personal data
We appreciate the trust placed in us by our Users. When processing Users' personal data, we make sure that the data is processed in a safe, reliable, lawful and transparent manner for the User.
Below, we present the most important principles we follow:
We only collect personal data to the minimum extent necessary to fulfill the purposes for which it is collected.
The purposes for which Users' personal data is collected are clearly defined and based on legal regulations - we do not process data in a way that is incompatible with these purposes.
● We make sure that the Users' personal data is up to date and correct and we respond immediately to every request for data rectification or update.
● We realize the Users' right to access and correct their personal data.
We also exercise the User's right to delete personal data, withdraw consent, limit processing, transfer data, object to data processing, and not be subject to a decision based solely on automated data processing, including profiling.
We limit the storage of personal data in accordance with the law, only to the period necessary for the realization of the purposes for which it is collected, unless there are events that may extend the data storage period.
We protect Users' personal data against loss, unauthorized access, accidental loss or alteration, and other unlawful forms of processing.
If personal data is made available to other entities, this is done in a secure manner, contractually secured and in accordance with applicable law.
IV. Users' rights in connection with the processing of personal data
The website implements the rights of Users related to the processing of their personal data. These rights arise from the applicable legal regulations regarding personal data, in particular the GDPR (Articles 16-21).
The user has the right to:
● Withdraw consent to the processing of personal data at any time, if consent is the legal basis for data processing (see point VII below); for the use of cookies, see more in the Cookies Policy.
● Access to data: you have the right to receive confirmation from the website as to whether your personal data is being processed by the website and how.
● Rectification of outdated or inaccurate personal data, as well as the right to have it completed if it is incomplete.
● Objection to the processing of your personal data: if we process personal data based on our legitimate interest (e.g. for analytical, statistical, evidentiary, or archival purposes), then in the event of your objection, we will have to stop processing your data, unless we demonstrate the existence of significant, justified basis for processing, which should objectively take precedence over your inconvenience or are necessary to establish, pursue or defend claims (e.g. evidence purposes, or in the case of pursuing claims by/against the website). The right to object also applies in the case when processing concerns direct marketing, including profiling (regardless of whether the legal basis for such processing is consent or our legitimate interest; in any case, your objection or withdrawal of consent in this respect will result in us ceasing to process your data for these purposes), regarding the use of cookies, see more in the Cookies Policy.
● Deletion of personal data by the website (“right to be forgotten”) basically consists of requesting the administrator to immediately delete personal data; however, according to Article 17 of the GDPR, there are exceptions to this right (in particular for the purposes of establishing, investigating or defending claims).
Restriction of the processing of personal data, which in practical terms may consist of temporarily blocking access to your data or transferring the data to another system.
Data portability: you have the right to receive a copy of the personal data you have provided to us if the processing is based on your consent or on a contract, and is carried out by automated means.
Submitting a complaint to the supervisory body - the President of the Office for Personal Data Protection.
All requests regarding the processing of personal data, including your rights, can be sent by e-mail to: bok@platformainwestora.pl or in writing to: DEALDONE Sp. z o.o. ul. Marszałkowska 58, 00-545 Warsaw. In the case of a request to withdraw consent, see also point VII below.
Your requests will be fulfilled without undue delay, but no later than one month after receipt. This period may be extended by a further two months due to the complexity of the request or the number of requests, of which you will be informed. Until the request is fulfilled, however, you may receive information from us that you have opted out of by withdrawing your consent.
To the extent that the User submits their requests to the website, please provide your name and contact details (telephone number or e-mail address, and in the case of written requests, also your home address). In order to process some requests, we may need further confirmation of the User's identity.
V. Personal data security
The website takes technical and organizational measures to protect personal data against unlawful or unauthorized access or use, as well as against accidental destruction, loss or violation of integrity. The principle of security assurance guided us when designing IT infrastructure, standards and business practices. Our security procedures include in particular: access security, backup system, monitoring, review and maintenance, security incident management.
As part of ensuring the security of personal data processed, we undertake to take into account:
● confidentiality – we will protect data from accidental disclosure to third parties,
● integrity – we will protect data from unauthorized modification,
● availability – we will ensure access to your data by authorized persons if necessary.
Your personal data may only be processed by third parties if they undertake to provide appropriate technical and organizational measures to ensure the security of the processing of personal data and the confidentiality of such data. Every employee of the website who has access to personal data is authorized to do so and is obliged to maintain confidentiality.
The personal data you enter on our websites is encrypted and protected by SSL.
VI. How do we process your data?
For what purpose and on what basis do we process user data?
The website processes your personal data only for specific, explicit and lawful purposes. We will not process your data in a way that is incompatible with these purposes.
The website informs the User each time about the purpose and legal basis for the processing of personal data in a separate message.
The main bases for the processing of your personal data by the website may be:
Consent - for one or more specific purposes (for example, when sending commercial and marketing information, sending a newsletter, providing marketing information). Consent may be given as a result of active action by the User (e.g. leaving data and sending a form) or by checking a checkbox.
Performance of a contract or steps prior to entering into a contract (e.g. in connection with the provision of electronic services).
Legitimate interests, except where your interests or fundamental rights and freedoms take precedence over these interests (described in each case in the information clauses, e.g. for evidentiary purposes).
In some cases, the basis for the processing of personal data may also be the protection of the vital interests of the person or compliance with a legal obligation in order to fulfill a legal obligation incumbent on the administrator (this particularly concerns the obligations incumbent on the website as a seller of goods).
Insofar as we use cookies or other technologies on our websites and process personal data with their help, we provide more information in the Cookie Policy.
Method of data collection
The company collects Users' personal data when they fill in forms on the website, contact the customer service office, send questions or messages via our social networking sites. We may then retain the information that Users have voluntarily provided by writing to or contacting us) as well as automatically collected data contained in system logs and cookies (for more information, see the Cookie Policy).
The provision of personal data is voluntary, but often necessary to process an order or a request from a User via online forms. In this case, the provision of data by you is voluntary, but necessary for the provision of such a service (in each case with your consent expressed by you leaving your details and sending the form).
What data can we process?
The personal data we are referring to can cover a wide range of data, depending on the category of the data subject and whether you are already our customer or a person potentially interested in our products or services.
In each case, we will determine and process only the necessary scope of data.
In the course of our website activities, we may process the following personal data: identification data (e.g. first name, surname), contact details (e.g. telephone number, email address, residential address), location data, data concerning your orders, commissions, complaints, and in the case of business entities, also company name and tax identification number.
The scope of data stored in connection with the use of cookies is described in detail in the Cookies Policy.
VII. Consent – withdrawal of consent
In the relationship with the User, also within the services offered through the website consisting in providing commercial and marketing information, the User may be asked to consent to the processing of personal data for marketing purposes regarding products or services offered by the website, including electronic marketing, if it is your consent that can constitute the appropriate legal basis for the processing of personal data. Consent may also be given by so-called “explicit action”, e.g. resulting from the fact that you voluntarily leave your data and ask to be contacted or send an inquiry to the extent specified in the consent.
Users, Customers and Potential Customers can withdraw their consent at any time by contacting the Data Controller directly.
If you have subscribed to the newsletter, you can withdraw your consent by clicking on the unsubscribe link in each email.
In other cases of consent obtained by the company, you should follow the information provided in the relevant information clauses.
Withdrawing your consent does not have any negative consequences or unpleasantnesses – however, you must be aware that withdrawing your consent may result in you not being able to use services such as receiving the newsletter, receiving replies, receiving offers or advertisements, invitations to events, open days and technical inspections, for which the law requires us to obtain your consent.
The withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent before its withdrawal.
A request to withdraw consent will be considered promptly. After the request has been processed, we will stop processing personal data for marketing purposes, including the receipt of marketing and commercial information by email and telephone. However, until the request has been processed, it is possible that the User may receive information from us that they have opted out of by withdrawing their consent, due to the time needed to process the request in our systems.
If we have User data for other purposes (e.g. contract fulfillment, service, evidence, assertion of claims), we may continue to process it for these purposes on a different legal basis.
For more information on the withdrawal of consent to the installation and use of cookies, please refer to the Cookie Policy.
VIII. Data retention
The company stores personal data for the period necessary to fulfill the purposes of which the User has been informed. The period of storage of personal data is determined in accordance with applicable law. The User has the right to obtain information from us about the probable storage time of personal data.
IX. Data recipients sharing data with other entities
With your consent, depending on the purpose of data processing and the content of the consent to processing and disclosure, your personal data may be disclosed to the entities indicated in the consent.
In some cases, the data may also be disclosed to other data controllers if there is a valid legal basis for doing so.
We may also share your data with other recipients, i.e. processors – companies providing services on our behalf, to whom we outsource activities requiring data processing, in particular in the field of IT services, marketing services (including marketing agencies), and order delivery services.
For marketing purposes (e.g. answering questions about the offer or giving additional consent for future marketing), the recipients of your personal data as data processors may be authorized distributors of the goods offered by the shop.
We would like to point out that in the event that the data recipients process personal data from the User independently and on their own behalf, e.g. offer products and services through their own channels without the website's involvement or provide services in their own name, they will become separate data controllers and, to this extent, bear their own responsibility for the processing of such personal data, not being subject to the terms of our Policy.
The website may contain links to other websites, social networking sites or websites of cooperating entities. By visiting a third-party website, Users will be subject to a separate privacy and personal data protection policy for that website. Please read the privacy and personal data protection policies of the respective websites.
X. Data processing using cookies and other internet technologies
In connection with the User's use of the website, the website also collects data contained in system logs, cookie files or uses other similar internet technologies (e.g. codes, pixels, plug-ins). For more information on the use of cookies and other internet technologies, please refer to the Cookie Policy
XI. Changes to the Policy
The company reserves the right to make changes to this policy, which may result from the need to adapt to changes in the law or applicable privacy standards or to expand our offer. Therefore, the company will inform about any changes with an appropriate message on its websites.