PRIVACY POLICY

We highly value the privacy protection of Users. Therefore, Users of our website are guaranteed the utmost standards of privacy protection.

In consideration of the above and in compliance with the requirements introduced by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L 119/1 of 4 May 2016) (hereinafter referred to as GDPR), this Privacy Policy is adopted to ensure the security of personal data by us.

This Privacy Policy establishes the principles of processing and protecting personal data provided by Users in connection with their use of the service. A User is any person whose data is processed and who uses the website (hereinafter referred to as the User).

This policy does not cover the processing of personal data for recruitment purposes. For information on the processing of personal data in this area, please refer to the Recruitment Information Clause available on the website.

I. PERSONAL DATA CONTROLLER

The controller of personal data contained in the service is Altavia Kamikaze Sp. z o.o. with its registered office in Lodz, address Piotrkowska Str. 262/264 (postal code: 90-361), entered into the National Court Register maintained by the District Court in Lodz, XX Economic Division of the National Court Register under the registration number KRS: 0000326038, tax identification number NIP: 7272738835 (hereinafter referred to as the Controller).

The company has appointed a data protection officer who can be contacted via email: iod@k2.pl or by traditional mail at the company's registered address.

II. BASIS OF PROCESSING AND DATA SCOPE

The scope of data we process depends on the information You provide to us, the chosen form of contact with us, and the information necessary in relation to our relationship. It primarily includes the content of our correspondence/communication, specifically: identification data, including name and surname; phone number, email address. We obtain this information directly from You. We process this information to respond to your inquiries, improve our communication, and for the marketing of our services. The legal basis for these actions depends on the context of communication. If they are general inquiries or conversations, the basis will be our "legitimate interest" as the controller (arising from the purposes mentioned above; art. 6(1)(f) of the GDPR). However, if the inquiry aims to conclude a contract or remains in connection with an already concluded contract, the legal basis will be "taking action at the request of the data subject before entering into a contract" or the necessity to perform the contract (Art. 6(1)(b) of the GDPR).

By providing this website, we offer You an electronic service. This service is free of charge and involves displaying the content of the page and enabling the use of its functionality. The data processed in connection with this is processed to ensure the proper functioning of the website, including displaying its content, maintaining sessions, and ensuring the security of use. The legal basis for processing data in the above case is the necessity of performing an agreement for the provision of electronic services, where the data subject is a party to the agreement, or taking action at the request of the data subject before entering into the agreement (Art. 6(1)(b) of the GDPR).

III. METHOD OF OBTAINING PERSONAL DATA

Personal data obtained directly from the User
The Controller acquires personal data in two ways. The first method involves obtaining personal data directly from the User, through the User's use of services and products offered by the Controller or contacting the Controller. Providing personal data is voluntary.

Personal data obtained from other sources
The Controller also acquires personal data from sources other than directly from the User, namely by registering the User's use of the Controller 's products and services through cookies and other technologies, as well as receiving error reports or usage data from software operating on the User's device.

IV. METHOD OF PROCESSING DATA – PURPOSES OF PROCESSING PERSONAL DATA BY THE CONTROLLER

The method of processing personal data by the Controller concerning the User depends on how the User uses the Controller's products and services. Therefore, the specific purposes of processing User data may vary depending on the product or service chosen by the User and how they use it.

Communication (performance of the contract, legitimate purpose pursued by the Controller)

The Controller uses the User's personal data to communicate with them in a personalized manner. This communication involves sending email messages. The communicated content to the User relates to the offered services, such as service availability and how to use them. Communication with the User also includes User support. Personal data is used to assist the User, resolve issues, and respond to their complaints.

Improving services (legitimate interest of the Controller)

The Controller uses the User's personal data for analytical and statistical activities to continuously improve the products and services offered, ensure better solutions, add new features and capabilities, gather a larger audience, and help establish contacts and find business opportunities. Personal data about Users is also used by the Controller for market research, public opinion research, and economic analysis to continuously improve the service.

V. SHARING OF PERSONAL DATA BY THE CONTROLLER

Only the following have access to your personal data:

1. - appropriately authorized employees or collaborators of the Controller, who are obligated to keep them confidential and not use them for purposes other than those for which the company obtained the data;
2. - entities that support us in providing services, including based on appropriate personal data processing agreements,
3. - recipients of the data may also include companies from the Altavia capital group.

All these entities have access only to the information that is necessary for the performance of specific actions.

Personal data of participants will not be transferred to a third country (i.e., a country other than a Member State of the European Union, Iceland, Liechtenstein, or Norway) or an international organization.

VI. USER RIGHTS

The User has the following rights:

Right to access data

The User is entitled to obtain confirmation from the Controller whether their personal data is being processed, and if so, has the right to access information about the details of the processing, including the purpose of processing and categories of processed data.

Right to rectify data

The User has the right to rectify any inaccurate personal data. They have the right to request the replacement, supplementation, or deletion of errors, defects, and incorrect information in the entire dataset related to them.

Right to erasure of data (right to be forgotten)

The User has the right to request the erasure of their personal data if one of the following circumstances occurs:

1. the User's personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
2. the User withdraws the consent on which the processing is based, and there is no other legal basis for the processing,
3. the User objects to the processing of their personal data,
4. the personal data was processed unlawfully,
5. the personal data must be erased to comply with a legal obligation under Union or Member State law to which the Controller is subject,
6. the personal data was collected in connection with the offering of information society services.

The right to be forgotten applies only if the User has exercised the right to erase personal data and only in a situation where the User's personal data has been made public by the Controller.

Right to restrict processing
The User has the right to restrict the processing of their personal data in the following cases:

1. the User questions the accuracy of personal data – for a period allowing the Controller to verify the accuracy of the data,
2. the processing is unlawful, and the User opposes the erasure of personal data, requesting instead the restriction of their use,
3. the Controller no longer needs the User's personal data for processing purposes, but the User needs it to establish, pursue, or defend claims,
4. the User has objected to the processing – until it is determined whether the legitimate grounds of the Controller override the objections of the User.

Right to data portability

The User has the right to receive their personal data concerning them, which they provided to the Controller, in a structured, commonly used, and machine-readable format, and the right to transmit this data to another controller.
The User also has the right to request that their personal data be transferred directly from the Controller to another controller, if technically feasible.

Right to object

The User has the right to object at any time, for reasons related to their particular situation, to the processing of their personal data:

1. in the public interest, as part of the exercise of public authority entrusted to the Controller,
2. for direct marketing purposes, including profiling related to such direct marketing,
3. for the legitimate interests pursued by the Controller.

The procedure for considering objections and all communication is free of charge, and objections can also be submitted electronically.

Right to lodge a complaint
The User has the right to lodge a complaint with the Data Protection Office, especially in the Member State of their habitual residence, place of work, or the place where the alleged infringement occurred. In Poland, a complaint can be directed to the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

VII. COOKIES AND OTHER TECHNOLOGIES USED BY THE CONTROLLER

The Controller uses cookies and other similar technologies to improve efficiency and offer Users increasingly advanced functionalities of the service, as well as more tailored advertisements. Cookies are pieces of code that are text files responding to HTTP requests directed to the Controller's server. They are used to ensure optimal handling of the User's visit to the service and enable faster and easier access to information. The stored information or access to it does not result in configuration changes in the User's device and the software installed on it. Information contained in cookies and similar technologies is considered personal data only in connection with other personal data available about the User. If the User does not agree to the storage and retrieval of information in cookies, they can change the cookie settings through their web browser or use the so-called opt-out option on the website of the provider of a particular technological solution. Detailed information regarding the technologies used by the Controller is available in the Cookies Policy on the service.

VIII. OTHER IMPORTANT INFORMATION

Security of Personal Data

The Controller implements various measures to ensure the security of the User's personal data. The secure use of the services offered is ensured by applied systems and procedures that protect against unauthorized access and disclosure of data to unwanted individuals. Additionally, the systems and procedures used by the Controller are regularly monitored to detect any potential threats. The personal data obtained by the Controller is stored in computer systems with strictly limited access.

Storage of Personal Data

The period of storage of User's personal data may vary depending on the fact that different processing purposes may be defined for the personal data of different Users. The Controller stores personal data for the period necessary to achieve specific purposes, namely:

1. for analytical and statistical purposes – for the period necessary to achieve the goals related to the effective implementation and development of the service,
2. for the provision of services to the User – for the duration of the agreement and the limitation period for claims,
3. for the period required by law in relation to settlements for provided services,
4. in the case of processing personal data for marketing purposes – for the duration of the business relationship with the User unless the User objects to the processing for these purposes earlier.

In each of the above cases, after the necessary processing period expires, the data may be processed only for securing claims.
User personal data is stored in the Controller's database, which employs technical and organizational measures to protect processed data in accordance with the requirements specified in the applicable laws. Access to the database is restricted to the Controller.

Profiling

Personal data will not be used for decisions based solely on automated processing, including profiling.

Changes to the Privacy Policy

To update the information contained in this Privacy Policy and ensure its compliance with applicable legal regulations, this Privacy Policy may be subject to change. With any changes to the document's content, the updated date will also be changed and displayed at the beginning of this Privacy Policy. Users will be informed of any significant changes through information placed on the website or directly. To obtain information about the protection of personal data, the Controller recommends that Users regularly review these Privacy Policy principles.

Contact Information

For any information regarding this Privacy Policy, Users can contact the Controller:

Via email: iod@k2.pl
Via traditional mail at the company's registered address.