PRIVACY POLICY
This document ("Privacy Policy") sets out the principles of processing personal data of natural persons, in particular website visitors, by Qalcwise.com sp. z o. o. ("Qalcwise"). www.qalcwise.com, contacting Qalcwise by e-mail, telephone or via the contact form, receiving the newsletter and other commercial information or being customers of the marketplace website (https://marketplace.qalcwise.com/) (“Customer” or “Customers”). Qalcwise processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ( General Data Protection Regulation ("GDPR").
ADMINISTRATOR
The administrator of personal data is Qalcwise.com sp. z o. o. with its registered office in Warsaw (address: 02-674 Warszawa, ul. Marynarska 15), entered into the register of entrepreneurs of the National Court Register under KRS number 0000302926, NIP 7010115493, REGON 141368883, share capital PLN 50.000,00 .XNUMX PLN ("Administrator").
SCOPE OF PROCESSED DATA AND THE PURPOSE OF PROCESSING
Qalcwise administers and processes Customers' personal data to varying extents depending on the purpose for which their processing is required, as well as on the scope of services provided and consents expressed to the processing of personal data.
Customer data may be used by Qalcwise for, among others, the following purposes:
- taking actions aimed at concluding a contract in connection with the Customer's request, including in order to prepare an offer, and in the event of concluding a contract, also in order to implement the concluded contract, pursuant to Art. 6 section 1 letter b) GDPR, until the subject of the contract is fully implemented or until it is terminated or expires. The scope of data processed includes name, surname, company, address, email, telephone number, position, NIP (tax identification number), bank account number;
- responding to an inquiry sent via e-mail, contact form or other means of communication, based on the need to pursue the Administrator's legitimate interest in answering the inquiry, pursuant to Art. 6 section 1 letter f) GDPR, until the inquiry is answered or until an effective objection to the processing of the Customer's data is submitted. The scope of data processed includes the data indicated in the inquiry, including name, surname, company, address, email, telephone number, position;
- marketing of own products and services, including sending a newsletter, based on the need to pursue the legitimate interest of the Administrator consisting in conducting activities in the field of direct marketing of own products and services, pursuant to Art. 6 section 1 letter f) GDPR or after obtaining the Customer's consent, pursuant to Art. 6 section 1 letter a) GDPR, as well as after obtaining additional consents specified in Art. 10 of the Act on the provision of electronic services and Art. 172 of the Telecommunications Law. The data for this purpose may be processed by the Administrator until an objection is raised or until consent is withdrawn. The scope of data processed includes name, surname, company, address, email, telephone number, position, IP address;
- creating statistics and summaries that will serve to improve the effectiveness of marketing activities and build a business strategy. If personal data is used for this purpose, their processing will be based on the need to implement the legitimate interest of the Administrator in the form of conducting analytical and statistical activities aimed at the development of the Administrator, pursuant to Art. 6 section 1 letter f) GDPR, until an effective objection to data processing is submitted. The scope of data processed includes the date and time of the visit, the IP number of the device, the type of the device's operating system, approximate location, type of web browser, time spent on the website or website, visited subpages and other activities;
- determining, investigating or defending against any claims that may arise in connection with the use of Qalcwise services, website or website. The data will be used based on the need to implement the Administrator's legitimate interest in securing claims, pursuant to Art. 6 section 1 letter f) GDPR, for the period provided for by law regarding the limitation of claims. The scope of data processed includes name, surname, company, address, email, telephone number, position, NIP (tax identification number) and bank account number.
Providing personal information is voluntary. The consequence of not providing them will be the inability to conclude and perform the contract (in the case specified in point a. above) or the inability to achieve other purposes for which the data were used.
DATA PROCESSING PERIOD
Customer data processed pursuant to Art. art. 6 section 1 letter b) or c) GDPR will be processed for the period specified in the provisions of generally applicable law (e.g. Accounting Act, Tax Ordinance Act) or until the limitation period for claims arising from the legal relationship between the Administrator and the Customer expires.
Customer data processed pursuant to Art. 6 section 1 letter a) GDPR will be processed until consent is withdrawn or limited.
Customer data processed pursuant to Art. 6 section 1 letter f) GDPR will be processed until the Customer files an effective objection. If the Customer objects to the processing of his data based on the legitimate interest of the Administrator, the Administrator will be entitled to further process DOK only if it is demonstrated that there are valid, legally justified grounds for processing that override the interests, rights and freedoms of the data subject.
DATA RECIPIENTS
The administrator may transfer personal data to entities processing them on his behalf, e.g. service subcontractors (including entities providing and operating selected IT systems and solutions, Internet domain providers, entities processing online payments, entities providing courier and postal services, accounting services, suppliers of tools used to analyze activity on the website and website and direct marketing to people using the website), marketing agencies. The Administrator obliges entities processing personal data to maintain security measures at the level specified in the GDPR.
The Administrator may also transfer personal data to entities authorized to obtain them under applicable law, e.g. courts or law enforcement authorities, when they make a request based on an appropriate legal basis.
Personal data may be transferred by the Administrator to entities based outside the European Economic Area or in countries which, in the opinion of the European Commission, do not ensure an adequate level of personal data protection. In the event of transfer of data to entities based outside the European Economic Area or in countries which, according to the European Commission, do not ensure an adequate level of protection of personal data, the transfer of personal data takes place on the basis of an agreement containing the Standard Contractual Clauses of the European Union or another instrument consistent with the GDPR.
The customer may obtain copies of the transferred data by sending an appropriate request to the following address: support@qalcwise.com
RIGHTS OF PERSONS TO WHOM THE DATA CONCERN.
The customer has the right to request access to data, rectification, deletion or limitation of their processing, as well as the right to withdraw consent to the processing of personal data, raise an objection and exercise other rights, including:
- obtain comprehensive information whether a file containing his personal data exists and to determine the data controller, his registered office address and full name,
- obtaining information about the purpose, scope and method of processing data contained in such a file,
- obtaining information from when data is processed in a given file, as well as providing the content of this data in a generally understandable form,
- obtaining information about the source from which the data concerning him comes, unless the administrator is obliged to maintain the secrecy of classified information or professional secrecy in this respect,
- obtaining information on how data is shared, in particular information on the recipients or categories of recipients to whom the data is made available,
- request supplementing, updating, rectification of personal data, temporary or permanent suspension of their processing or their deletion,
- submitting a request to stop data processing,
- data portability requests.
The data subject has the right to lodge a complaint with the President of the Office for Personal Data Protection regarding personal data processing activities. Contact details: Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw
Last updated February 08.02.2024, XNUMX