I. General provisions

1. This Privacy Policy governs the collection, processing and storage of personal data necessary for the provision of services electronically through theITgarden.com website (hereinafter: the Service).
2. TheITgarden sp. z o. o. with its registered office in 00-680 Warsaw, 16/4 Poznańska Street (hereinafter: Administrator) is the administrator of Users' personal data.
3. Personal data is processed in accordance with Regulation 2016/679 of the European Parliament and the EU Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).
4. The data collected by the Administrator will be:
   • processed in accordance with the law,
   • processed for clearly defined purposes and not subjected to further processing incompatible with those purposes,
   • substantively correct and adequate in relation to the purposes for which they are processed,
   • kept no longer than necessary to achieve the purpose of processing.

 

II. Purpose and legal basis of data processing

1. The Administrator processes personal data necessary for the provision and development of the offered services available through the Website and its individual functionalities.
2. Personal data will be processed for the following purposes:
   • communication with the User in order to provide him/her with the necessary information and build a relationship with him/her, which constitutes the Administrator's legitimate interest (Article 6/1/f GDPR);
   • to promote the Administrator's own products and/or services and those of its Partners by directing Marketing Information (newsletter) via e-mail, provided that the User has consented to receive such notifications via e-mail (Article 6/1/a GDPR);
   • to provide access to information on news from the industry directly related to the Administrator's business, provided the User has consented to receive such notifications via e-mail (Article 6/1/a GDPR);
   • for analytical and statistical purposes on the basis of the Administrator's legitimate interest consisting in conducting verification of Users' activity and preferences for optimization of services and products and applied functionalities of the Service (Article 6/1/f GDPR);
   • possible establishment, investigation of claims or defense against them on the basis of the Administrator's legitimate interest consisting in the protection of its rights (Article 6/1/f GDPR).
3. In each of the above-mentioned cases (paragraph 2), providing data is voluntary, but it may be necessary to use other functionalities of the Service.

 

III. Period of processing of personal data

1. Personal data will be processed for the period during which a person remains an active User of the Service (has a User account), and after that time for the period necessary to comply with the law, investigate or defend against possible claims.
2. Data processed on the basis of consent will be processed until the withdrawal of the granted consent, with the proviso that the withdrawal of this consent does not affect the compliance of data processing that was carried out before this withdrawal.

 

IV. Information about processing

1. Personal data, depending on the purpose of processing, may be disclosed to:
   • entities affiliated with the Administrator,
   • entities cooperating with the Administrator,
   • subcontractors, in particular entities providing and operating selected IT systems and solutions,
   • entities handling online payments,
   • entities providing courier and postal services,
   • law firms.
2. Personal data processed by the Administrator, will not/will not be transferred outside the European Economic Area or to international organizations.

 

V. User rights

1. The Service User has the right to:
   • access to the content of their personal data,
   • rectification of data,
   • deletion of data,
   • limitation of data processing,
   • data portability,
   • object to processing that takes place on the basis of the controller's legitimate interest,
   • withdraw consent at any time without affecting the legality of the processing carried out on the basis of that consent before its withdrawal.
2. The user has the right to lodge a complaint to the President of the Office for Personal Data Protection in a situation in which he considers that the processing violates his rights and freedoms.
3. Automated decision-making, including profiling, does not occur in data processing.

 

VI. Final provisions

1. The Administrator reserves the right to make changes to this Privacy Policy, at the same time ensuring that the Users' rights under this document will not be restricted.
2. The User will be informed of any changes to the Privacy Policy through an announcement available on the Website.