Privacy policy
Introduction
Policy. This document, hereinafter referred to as Privacy Policy', sets out the rules for the processing of personal data of persons visiting and using the website https://eurodebt.eu or a dedicated web application, hereinafter collectively referred to as the "Portal." These persons will be hereinafter referred to as "Users".
Administrator. The owner of the Portal and at the same time controller of personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR ), is Eurodebt spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (00-095) at Plac Bankowy 2, with NIP 6182186461, hereinafter referred to as "Administrator."
Data Protection Inspector. The Administrator has appointed a data protection officer, who should be contacted regarding any questions related to the method of processing personal data by the Administrator, as well as in order to exercise the rights of natural persons under the GDPR. To contact the data protection officer, please send an e-mail to: inspektor@eurodebt.eu.
Purposes and scope of data processed via the Portal
The User's personal data are processed via the Portal for the following purposes:
registering an account on the Portal, leading to the creation of an individual User account and management of this account. Legal basis: art. 6 section 1 letter b) GDPR
enabling the use of the Portal's functionalities. Legal basis: art. 6 section 1 letter b) GDPR
contacting the User and handling complaints. Legal basis: art. 6 section 1 letter b) and c) GDPR
pursuing possible claims from the User, in particular as a result of illegal use of the Portal or regulations. Legal basis: art. 6 section 1 letter f) GDPR
The User's personal data will not be subject to profiling
In order to achieve the above-mentioned purposes, the following categories of User's personal data will be processed:
name and surname
company name (if any)
correspondence address
email address
telephone number
The User provides the above-mentioned personal data when registering an account on the Portal. Providing personal data is voluntary, but necessary to provide the User with services via the Portal.
Cookies. When using the Portal, additional information may be downloaded, in particular: the IP address assigned to the User's computer or the external IP address of the Internet provider, domain name, browser type, access time, operating system type. Principles of processing the above-mentioned categories of personal data are specified in the Cookies Policy available HERE.
Users' rights under the GDPR.
Right to access data. Legal basis: Art. 15 GDPR
The User has the right to obtain from the Administrator confirmation whether personal data is processed, and if this is the case, the User has in particular the right to obtain:
access to your personal data
information about the purposes of processing, categories of personal data processed, about the recipients or categories of recipients of this data, the planned period of storage of the User's data or about the criteria for determining this period (when it is not possible to determine the planned period of data processing), about the User's rights under the GDPR and the right to lodge a complaint with the supervisory authority, about the source of this data, about automated decision-making, including profiling, and about the safeguards used in connection with the transfer of this data outside the European Union.
a copy of your personal data.
The right to rectify data. Legal basis: Art. 16 GDPR.
The User has the right to request the Administrator to immediately correct his or her personal data if he or she finds it to be incorrect. Taking into account the purposes of processing, the User has the right to request that incomplete personal data be completed, including by providing an additional statement, by sending a request to the e-mail address: inspektor@eurodebt.eu.
The right to delete data (“right to be forgotten”). Legal basis: Art. 17 GDPR.
The user has the right to request the deletion of personal data, in particular if:
the personal data are no longer necessary in relation to the purposes for which they were collected or processed.
withdrew specific consent, to the extent that personal data were processed on its basis.
objected to the use of his data for marketing purposes.
personal data are processed unlawfully.
personal data must be deleted in order to comply with a legal obligation provided for by Union law or the law of a Member State to which the Controller. subject to.
the personal data were collected in connection with the offering of information society services.
The right to restrict data processing. Legal basis: Art. 18 GDPR.
The user has the right to request restriction of the processing of his or her personal data. Submitting a request, until it is considered, prevents the use of certain functionalities or services, the use of which will involve the processing of the data covered by the request. The administrator will not send any messages, including marketing ones.
The user has the right to request restriction of the use of personal data when:
questions the accuracy of your personal data - then the Administrator limits their use for the time needed to check the accuracy of the data, but no longer than 7 days.
the processing of the data is unlawful, and instead of deleting the data, the User requests the restriction of their processing.
personal data are no longer necessary for the purposes for which they were collected or used, but they are needed by the User to establish, pursue or defend claims.
has objected to the use of his or her data - then the limitation takes place for the time needed to consider whether - due to the special situation - the protection of the interests, rights and freedoms of the User outweighs the interests pursued by the Administrator by processing the User's personal data.
The right to transfer data. Legal basis: Art. 20 GDPR.
The User has the right to receive his personal data that he provided to the Administrator and then send them to another personal data administrator of his choice. The User also has the right to request that personal data be sent by the Administrator directly to such an administrator, if technically possible. In such a case, the Administrator will send the User's personal data in the form of a file in the .csv format, which is a commonly used, machine-readable format that allows the received data to be sent to another personal data administrator.
Right to object to data processing. Legal basis: Art. 21 GDPR.
The User has the right to object at any time - for reasons related to his particular situation - to the processing of his personal data, including profiling, if the Administrator processes his data based on a legitimate interest, e.g. marketing of the Administrator's products and services, keeping statistics on the use of individual functionalities of the Portal and facilitating the use of the website, as well as satisfaction surveys.
Resignation by e-mail from receiving marketing messages regarding products or services will mean the User's objection to the processing of his personal data, including profiling for these purposes.
If the User's objection turns out to be justified and the Administrator has no other legal basis for processing personal data, the User's personal data will be deleted to the processing of which the User has objected.
The right to lodge a complaint with the President of the Office for Personal Data Protection regarding the violation of the User's rights to the protection of personal data or other rights granted under the GDPR, to the address of the Office for Personal Data Protection ul. Stawki 2, 00-193 Warsaw (tel. 22 531-03-00; e-mail: kancelaria@uodo.gov.pl).
Response deadline. If the User exercises the right resulting from the above rights, the Administrator complies with the request or refuses to comply with it immediately, but no later than within one month after receiving it.
However, if - due to the complexity of the request or the number of requests - the Administrator will not be able to meet the request within a month, he will meet it within the next two months, informing the User within one month of receiving the request - about the intended extension of the deadline and its reasons.
Recipients of personal data
The User's personal data are transferred to entities cooperating with the Administrator in ensuring the functioning of the Portal. These include: suppliers providing hosting services, accounting services, providing marketing systems, systems for analyzing website traffic, or systems for analyzing the effectiveness of marketing campaigns.
Territorial scope of data processing
Users' personal data will be processed only within the European Economic Area (EEA).
Time of personal data processing
If the basis for the processing of personal data is consent (Article 6(1)(a) of the GDPR), then the User's personal data are processed by the Administrator until the consent is revoked, and after the consent is withdrawn, for a period of time corresponding to the limitation period for claims that the Administrator may raise against him. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.
If the basis for data processing is the performance of a contract (Article 6(1)(b) of the GDPR), then the User's personal data are processed by the Administrator for as long as it is necessary to perform the contract, and after that for a period corresponding to the limitation period for claims. Unless a specific provision provides otherwise, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.
Moreover, despite the request to delete personal data in connection with raising an objection or withdrawing consent, the Administrator may retain certain personal data to the extent that processing is necessary to establish, pursue or defend claims, as well as to fulfill a legal obligation requiring processing under EU law or the law of a Member State to which the Administrator is subject. This applies in particular to personal data including: name, surname, e-mail address, which data is retained for the purposes of considering complaints and claims related to the use of the Administrator's services, or additionally the residential address/correspondence address, order number, which data is retained for the purposes of considering complaints and claims related to concluded sales contracts or the provision of services.

