Privacy Policy

§ 1.
GENERAL


  1. All and any words and expressions used herein and beginning with a capital letter (for example Client) should be understood in accordance with their definition included in § 1 of the Terms and Conditions of Electronic Provision of Services in the Saas Model.
  2. The Controller of the personal data of the Clients and their users collected through the Website is Moralnie Sp z o o. with registered office in 41-215 Sosnowiec, Poland at ul. Wagowa 28 entered by the Court KATOWICE – SOUTH IN KATOWICE, 8TH COMMERCIAL DEPARTMENT OF THE NATIONAL COURT REGISTER to the Register of Entrepreneurs under the KRS number: 0001090841, (hereinafter: Controller) who can be contacted by the Clients via the e–mail: [email protected]
  3. Personal data of the Clients and their Users are processed by the Controller in accordance with the provisions of applicable laws, including in particular the provisions of the Act of 10 May 2018 on the protection of personal data (consolidated text in Dz.U. journal of laws of 2019, item 1781), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC and the Act of 18 July 2002 on the provision of electronic services (consolidated text in Dz.U. journal of laws from 2020 item 344).
  4. The Controller takes special care to protect the interests of data subjects, and in particular ensures that the data collected by the Controller are processed in accordance with the law, collected for the purposes indicated in the Agreement and not subjected to further processing inconsistent with these purposes. In addition, the Controller declares that the data processed by them are adequate in relation to the purposes for which they are processed and stored in a form that allows identification of the persons to whom they relate, no longer than it is necessary to achieve the purpose of processing.
  5. Personal data is processed in order to perform the Service, including for the performance of the Agreement, and also in cases where processing is necessary to perform a task carried out in the public interest or when it is necessary to fulfil legally justified purposes of the Controller, in particular for the purposes of direct marketing of own products or services, or for other purposes to which the Client agrees, if it is required accordingly with applicable laws.
  6. The Client can check a box to express their consent to the Service Provider processing their personal data of the e-mail address for the purpose of sending marketing information regarding Services offered by the Service Provider via electronic means of communication, pursuant to Article 10(1) and (2) of the act on the provision of electronic services (consolidated text in Dz.U. journal of laws from 2020 item 344). In the case of giving consent referred to above, the Service Provider reserves the right to send electronically to the Client’s e-mail address marketing information regarding the Service Provider’s products, commercial information and other marketing materials.
  7. The Controller does not provide personal data to any unauthorised recipients in accordance with the mandatory provisions of law in this respect. The Controller may entrust another entity, by way of an agreement concluded in writing, with the processing of personal data on behalf of the Controller. The data may be made available only to entities authorised to receive them under the mandatory provisions of law.
  8. The Controller stores personal data for the period necessary to perform the Agreement and for the time specified in applicable laws and no longer than it is necessary for the purposes of legitimate interests pursued by the Controller or by a third party, i.e. for the purpose, but not limited to, of pursuing claims for the conducted activity, for the purposes to which the data subject has consented to the processing of their personal data, these data are stored until the consent is withdrawn.
  9. Personal data will be archived and stored in the Controller’s Database to meet the objectives resulting from Article 6 (1) letter f) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC for the period resulting from applicable laws and for the period necessary to pursue claims.
  10. The Controller applies appropriate technical and organisational measures to ensure the security of personal data provided by the Clients, in particular preventing access to them by third parties or their processing in violation of the law, preventing data loss, damage or destruction
  11. The Controller appoints a Data Protection Officer (hereinafter referred to as: DPO) who can be contacted in all matters, including the exercise of rights related to the processing of personal data by the Data Controller.
  12. DPO contact: [email protected]

§ 2.
BASIS, PURPOSE AND SCOPE OF THE PERSONAL DATA COLLECTION, AND THEIR RECIPIENTS


  1. Providing personal data by the Client is voluntary, however, the consequence of not providing personal data will be the inability to provide the Service.  In order to gain access to the Service, it is necessary to set up an Account by completing the Registration Form, including providing the e-mail address of the Client.
  2. The basis for the processing of personal data of the Service Recipient or its users is the need to perform the Agreement concluded upon the acceptance of the Terms and Conditions.
  3. The Controller declares that it undertakes to use personal data in accordance with the law and only to the extent necessary to perform the Services specified in the Terms and Conditions and for the purposes set out therein. Personal data of the Clients are processed by the Controller in order to:
    • perform the SaaS Service Agreement (pursuant to Article 6(1)(a) and (b) of the GDPR);
    • fulfil the Service Provider’s legal obligation (pursuant to Article 6(1)(c) and (3) of the GDPR);
    • perform marketing activities of own products or services (pursuant to Article 6(1)(f) of the GDPR);
    • pursue or secure claims (pursuant to Article 6(1)(f) of the GDPR).
  4. Each time, the purpose, scope and recipients of data processed by the Controller result from the actions taken by the Client on the Website.
  5. In order to provide the most advantageous, tailored, personalised offer for its Clients and its users and for the purposes necessary to conclude or perform the Agreement between the data subject and the Controller, as well as in the event of the express consent of the data subject, the Controller may use “profiling”, which means a form of automated processing of personal data, which consists in the use of personal data to evaluate certain personal aspects of a natural person. The data subject has the right to object at any time – for reasons related to their particular situation – to the processing of personal data concerning them based on profiling.
  6. The Client’s personal data may be transferred to entities authorised to receive them under applicable laws, including the competent judicial authorities. The Client’s personal data may also be transferred to third parties indicated by the Controller in connection with the services provided to the Clients as part of the Service, i.e. partners providing the following:
    • marketing services;
    • debt collection services;
    • bookkeeping and accounting services;
    • advising and consulting services;
    • online payment services.
  7. The Controller uses Cookie files to collect information related to the use of the Service by the Client. Cookies enable the adaptation of the Service to the needs of the Clients and other persons using it, ensuring the development of the Service’s functionality, for statistical purposes.  The Controller informs that restrictions on the use of Cookies may affect the functionality of the Website.
  8. In order to obtain additional information regarding this Privacy Policy and matters regarding the rules of processing and protection of personal data at the Controller’s, as well as in order to contact the Data Protection Officer, please contact the above address or e-mail: [email protected]

§ 3.
EXERCISE OF THE SUBJECTIVE RIGHTS


  1. The data subject is bestowed with the right to request from the Controller access to their personal data, the right to rectify, delete or limit processing, the right to object to processing in certain statutory cases, the right to transfer their personal data and the right to submit a complaint to the supervisory authority. The scope of the rights of the data subject results from the basis for the processing of personal data and is specified in applicable laws.
  2. The Client’s withdrawal of consent to the processing of personal data will be tantamount to termination of the Agreement for the provision of Services, and in this case the Controller shall not be liable for the inability to perform their obligations towards the Client. The Client’s withdrawal of consent shall not affect the lawfulness of processing based on the Client’s consent before its withdrawal.
  3. For the execution of the rights mentioned under § 3 (1) above, please contact DPO under the following address: [email protected]
Push0
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.