Contact Information of Digital Shelf Sp. z o.o., Data Controller:
Digital Shelf Sp. z o.o., ul. Aleksandra Gieysztora 2/52, 02-999 Warsaw
Data Protection Legislation
This Privacy Policy refers to the following data protection regulations:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1) – also known as “GDPR” (applied from 25.05.2018 along with new national regulations).
Principles of Personal Data Processing
Below are the key principles we follow:
- We collect personal data only to the minimal extent necessary to achieve the purposes for which they are collected.
- The purposes for collecting Users’ personal data are clearly defined and based on legal provisions – we do not process data in a manner inconsistent with these purposes. We process data for the following purposes:
- Execution of contracts (GDPR Art. 6(1)(b));
- Fulfillment of legal obligations of the Controller (GDPR Art. 6(1)(c));
- Based on previously given consent to the extent and purpose specified in the consent (GDPR Art. 6(1)(a));
- For purposes arising from legitimate interests pursued by the controller (GDPR Art. 6(1)(f)).
- We ensure the accuracy and correctness of Users’ personal data and promptly (within 30 days at the latest) respond to any requests for rectification or updating of data. This period may be extended due to the complex nature of the request or the number of requests by an additional 60 days, of which we will inform.
- We realize the right of Users to access their personal data and to correct them.
- We also realize the rights of Users to delete personal data, withdraw consent, restrict processing, data portability, object to data processing, and not be subject to a decision based solely on automated processing, including profiling.
- We limit the storage of personal data in accordance with legal provisions, only to the period necessary to achieve the purposes for which they are collected, unless there are events that may extend the data storage period.
- We protect Users’ personal data from loss, unauthorized access, accidental loss or alteration, and other unlawful forms of processing.
- If personal data are shared with other entities, it is done securely, contractually protected, and in accordance with applicable laws.
- Data will be processed for the period during which the user account is registered in the system, the period resulting from our legal obligations, or if processed based on consent – until its withdrawal.
- Personal data may be transferred to processing entities with whom we cooperate to provide our services, e.g., companies providing IT systems, companies providing services necessary for tasks related to the functioning of the system, applications.
Users’ Rights
The User has the right to:
- Withdraw consent to the processing of personal data at any time.
- Access data: the right to receive confirmation whether personal data are being processed and how.
- Correct outdated or inaccurate personal data, and the right to complete them if they are incomplete.
- Object to the processing of personal data if we process personal data based on our legitimate interest (e.g., analytical, evidential, archival purposes); in case of an objection, we must stop processing data unless we demonstrate compelling legitimate grounds for processing that should objectively take precedence over the inconvenience or involve defending our claims (e.g., in legal proceedings). The right to object also applies if the processing involves direct marketing, including profiling, based on our legitimate interest, e.g., in connection with profiling based on cookies. In this case, processing of personal data for this purpose must be immediately stopped.
- Delete personal data (“right to be forgotten”) generally means requesting the controller to immediately delete the relevant personal data.
- Restrict the processing of personal data, which in practical terms may involve temporarily blocking user access to data or transferring data to another system.
- Data portability: the right to receive a copy of personal data if the processing is based on consent or on a contract and is carried out in an automated manner.
- Lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
- Any requests regarding the processed personal data, including the rights entitled, can be sent by email to [email protected] or by mail to Digital Shelf Sp. z o.o., ul. Aleksandra Gieysztora 2/52, 02-999 Warsaw.
- Requests will be fulfilled without undue delay, but no later than within 30 days after receiving it. This period may be extended due to the complex nature of the request or the number of requests by an additional 60 days, of which we will inform. Until the request is fulfilled, it may happen that information from which consent was withdrawn will be sent.
Consent – Withdrawal of Consent
In relation with the User, also within the services offered through the application, the User may be asked to consent to the processing of personal data for marketing purposes, including electronic marketing, if consent constitutes the proper legal basis for the processing of personal data. We do not require consent when it is not necessary in a specific case (although the obligation to obtain consent may result from other legal provisions, e.g., consent for telephone or electronic marketing).
The User has the right to withdraw consent by contacting the Controller.
Withdrawal of consent does not involve any negative consequences or inconveniences – however, you must know that withdrawal may result in the inability to use services for which the law requires us to obtain consent.
Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
Data Storage
The Controller stores personal data for the period necessary to achieve the purposes for which the User has been informed. The period of storing personal data is strictly in accordance with applicable legal provisions. The User has the right to obtain information from us about the probable period of storing personal data.
Sharing Data with Other Entities
With the User’s consent, depending on the purpose of processing data and the content of the consent to processing and sharing, personal data may be shared with other entities.
Profiling
As part of processing Users’ personal data, we may carry out profiling.
Changes to the Policy
The Controller reserves the right to make changes to this policy, which may result from the need to adapt to changes in the law or applicable privacy standards, or to expand our offer.
Admin contact:
Digital Shelf Sp. z o.o, ul. Aleksandra Gieysztora 2/52, 02-999 Warszawa.