Privacy Policy

1. Who is the controller of your data?

The controller of your personal data is Fundacja Rozwoju Przedsiębiorczości “Twój StartUp”, with its registered office in Warsaw (registered office address: ul. Żurawia 6/12, lok. 766, 00-503 Warsaw, Poland).

This privacy policy applies to the Foundation’s services provided by the organized part of the enterprise „Remote Media System”. Contact details: phone +48 666 158 101, email: [email protected].

2. Why do we process your data?

A. In connection with the website creation services provided through „Remote Media System”, that is, for the purpose of concluding or performing a contract (Article 6(1)(b) GDPR). Your data will be stored until the contract has been performed.

B. For marketing purposes and to promote the products offered by Fundacja Rozwoju Przedsiębiorczości “Twój StartUp”, with its registered office in Warsaw, which is our legitimate interest (Article 6(1)(f) GDPR). Your data will be processed until you object (if you do not send commercial information, this item may be removed).

C. To fulfill the legal obligations incumbent on us in connection with the cooperation undertaken (Article 6(1)(c) GDPR). This purpose relates to the legal obligation to keep certain documents for the periods specified by law, for example under:

• the Accounting Act of September 29, 1994 (Journal of Laws of 2017, item 1858);
• the Tax Ordinance Act of August 29, 1997 (Journal of Laws of 1997, No. 137, item 926);
• the Act of March 1, 2018 on Counteracting Money Laundering and Terrorist Financing (Journal of Laws of 2018, item 723).

D. For the possible establishment, pursuit or defense of claims, which is our legitimate interest (Article 6(1)(f) GDPR). The data will be processed until the claims become time-barred.

E. Where you have given consent, your data will be processed within the scope and for the purpose stated in the consent (legal basis: Article 6(1)(a) GDPR). The data will be processed until the consent is withdrawn.

3. What data is processed?

To conclude a contract, we require the data requested on the contract or order form (if you do not provide it, we will not conclude the contract or fulfill the order). We may also ask for optional data that does not affect the conclusion of the contract (if we do not receive it, we will not be able, for example, to call your contact number).

While the contract is in force, in the course of providing services, we may obtain other data about you. Your personal data comes to us as a result of the services you use.

4. Who will your data be shared with?

A. Public authorities, to the extent that they do not receive data as part of a specific proceeding under the law, for example in connection with counteracting money laundering;

B. Entities that process your personal data on behalf of the Foundation under a data processing agreement concluded with the Foundation (so-called processors). These include, among others: beneficiaries of the Foundation, IT specialists, archiving companies and hosting companies;

C. External data controllers (so-called parallel controllers) to whom the data is made available, for example legal advisers and attorneys, courier and postal operators, and entities purchasing receivables — if you fail to pay our invoices on time;

D. Entities located outside the EEA, but only when necessary and with an adequate level of protection ensured, in particular through:

• a. cooperation with entities in countries for which the European Commission has issued an adequacy decision;
• b. the use of standard contractual clauses issued by the European Commission.

The controller always informs you, at the stage of data collection, of any intention to transfer personal data outside the EEA.

5. Is the data used for profiling?

Your data will not be subject to profiling, that is, automated analysis of your data to make predictions about your preferences or future behavior. (In marketing, profiling means, for example, determining which offer you are most likely to be interested in based on your previous choices.)

6. What rights do you have?

A. The right of access to the personal data we process (Article 15 GDPR);

B. The right to rectify the personal data you have provided, including correcting it (Article 16 GDPR);

C. The right to have your personal data deleted from our systems, the so-called “right to be forgotten” — if you believe there are no grounds for us to process your data, you may request that we delete it (Article 17 GDPR);

D. The right to restrict the processing of personal data — you may request that we limit processing to storage only or to activities agreed with you if the data we hold about you is incorrect or we process it without grounds; if you do not want us to delete it because you need it to establish, pursue or defend claims; or for the duration of your objection to processing (Article 18 GDPR);

E. The right to data portability — you have the right to receive from us, in a structured, commonly used and machine-readable format (for example, CSV), the personal data concerning you that we hold on the basis of a contract or your consent. This right applies when we hold the data in electronic form; if we hold the data only on paper, you will not be able to exercise it. You may ask us to send this data directly to another entity (Article 20 GDPR);

F. The right to withdraw consent to the processing of personal data — you may withdraw at any time your consent to the processing of personal data that we process on the basis of consent (Article 7(3) GDPR). Withdrawing consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. To withdraw consent, send an email to: [email protected]. The right to object: you may object to the processing of your data if the basis for using the data is our legitimate interest (Article 21 GDPR). In that case, after considering your request, we will no longer be able to process the personal data covered by the objection on that basis, unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms;

G. If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

7. Contact

If you need further information on personal data protection or wish to exercise your rights, please contact us by email at: [email protected].

Questions about this document — [email protected].