Dear Sir/Madame,
On May 25, 2018, the Regulation 2016/679 of the European Parliament and the European Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC will come into force (referred to as "GDPR") In connection with the above, we have prepared for you information regarding the processing of personal data.
We hereby inform you that we process your personal data. Details of the processing can be found below and in the Privacy Policy on our website.
I.Personal data controller
We, Jett Studio Sp. z o.o. [a limited liability company], with its registered office in Warsaw, are the Controller of your personal data. You can contact us regarding the protection of your personal data and the exercise of your rights via e-mail: administrator@jettstudio.pl or in writing to: 04-667 Warsaw, ul. Trakt Lubelski 414A
- Purposes and basis for data processing
* in order to evaluate the service and perform the service based on your consent (basis in Art. 6 (1)(a) of the GDPR):
* in order to conclude a sales/service contract based on your interest in our offer (basis in Art. 6 (1)(b) of the GDPR);
* in order to perform and on the basis of the sales/service contract you have concluded with us (basis in Art. 6 (1)(b) of the GDPR);
* in order to process the complaint, based on the concluded sales or performance of the service contract (basis in Art. 6 (1)(b) of the GDPR);
* in order to send e-mail notifications for the realisation of the legitimate interest of the Company (basis in Art. 6 (1)(f) of the GDPR);
* in order to issue an invoice and meet other obligations arising from the provisions of tax law (basis in Art. 6 (1)(c) of the GDPR);
* for analytical purposes, which is our legitimate interest (basis in Art. 6 (1)(f) of the GDPR);
* for archival (evidentiary) purposes to secure information in the event of a legal need to prove facts, which is our legitimate interest (basis in Art. 6 (1)(f) of the GDPR);
* in order to possibly determine, investigate or defend against claims, which is our legitimate interest (basis in Art. 6 (1)(f) of the GDPR);
* in order to examine customer satisfaction and determine the quality of our service, which is our legitimate interest (basis in Art. 6 (1)(f) of the GDPR);
* in order to offer products and services directly (direct marketing), including matching them to your needs with the help of profiling, which is our legitimate interest (basis in Art. 6 (1)(f) of the GDPR);
* in order to offer you directly (direct marketing) products and services of companies cooperating with us (our partners), e.g. in the form of discount coupons, including matching them to your needs with the help of profiling (which is explained below), what is our and our partners' legitimate interest (basis in Art. 6 (1)(f) of the GDPR), to the extent specified by us and by a documented analysis of the legitimate interest;
* in order to use cookies on the website, which allows to process personal data on the basis of a voluntary granted consent (basis in Art. 6 (1)(a) of the GDPR)
* in order to send newsletters via e-mail on the basis of a voluntary granted consent (basis of Art. 6 (1)(a) of the GDPR)
III. Categories of your data that we process:
Name, address, telephone number, e-mail, computer ID
- Data recipients
We may share your personal data with the following categories of entities:
subcontractors, i.e. entities that we engage to process your data:
accounting and IT companies, claim adjusters, marketing agencies
- Transfer of Personal Data to Third Countries or International Organisations
- Like most entrepreneurs, we use various popular services and technologies offered by such entities as Google, Facebook, and Microsoft. These companies are based outside the European Union, and therefore in the light of the provisions of the GDPR are treated as third countries.
The GDPR imposes certain restrictions on transfer of personal data to third countries, because, since European legislation does not apply there, as a rule, the protection of personal data of European Union citizens may unfortunately be insufficient. Therefore, each personal data controller is required to establish the legal basis for such transfer.
- While using the services and technologies, we ensure that we transfer personal data to entities only from the United States, and only to those who joined the Privacy Shield Program, pursuant to the European Commission Implementing Decision of July 12, 2016 — more information on this subject can be found on the European Commission website available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_pl. Entities that have joined the Privacy Shield Program guarantee that they will comply with the high standards of personal data protection that are in force in the European Union, that is why using their services and offered technologies in the processing of personal data is legal.
- At any time, we will give you additional explanation regarding the transfer of personal data, in particular when this issue raises your concern.
- You have the right to obtain a copy of personal data transferred to a third country at any time.
- Data retention period
- We store your data obtained in order to conclude a sales/service contract for the period of contract negotiations and until the end of the calendar year following the year in which you last contacted us regarding its conclusion.
- We process your data obtained in connection with the conclusion of the sales contract until the end of the limitation period for potential claims from the contract
- We store your basic contact details for the purposes of direct marketing of our products and services until you object to their processing for this purpose, withdraw your consent if we processed them on the basis of so-called marketing consent, or we will determine that they have become outdated.
VII. Your rights:
You are entitled to:
- a) access your data and to receive a copy thereof
- b) rectify (correct) your data
- c) erase your data.
- d) restrict processing of your data
- e) raise objections to data processing:
- f) request the data to be transferred:
- g) file a complaint with a supervisory authority
- h) withdraw your consent to data processing
You have the right to withdraw your consent to the processing of personal data that we process on the basis of your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing which has been made on the basis of your consent prior to its withdrawal.
In order to exercise your rights, please send a request to the following email address: administrator@jettstudio.pl Remember, before exercising your rights we will have to make sure that you are you, i.e. identify you properly.
VIII. Information about the required/voluntary data submission
Providing your data is:
* the condition of concluding the contract
* voluntary
If you don't provide your data:
* we can refuse to conclude a contract