What do we mean by personal data and their processing?
Personal data are any information relating to an identified or identifiable living individual. Specific information, which when combined, can lead to the identification of an individual’s identity, also constitutes personal data. By processing personal data, we mean performing any operations on personal data, regardless of whether they are performed in an automated manner or not (e.g., collecting, storing, recording, arranging, modifying, viewing, using, sharing, restricting, deleting or destroying).
Who is the administrator of your personal data?
The administrator of your personal data, meaning the entity deciding on the purposes and methods of processing personal data, is #BeReadyGROUP based in Warsaw 00-075 at 61, Koszykowa St.. You can contact the Administrator by sending correspondence to the address: 00-075 Warsaw, 61, Koszykowa St., as well as by email: [EMAIL ADDRESS]. To contact the Data Protection Officer at #BeReadyGROUP or to inquire about personal data, please send an email: email@example.com or traditional correspondence to the address: 00-075 Warsaw, 61, Koszykowa St..
What data do we process?
We process personal data that you provide or make available to us while browsing our website and as part of using its functionalities. We also conduct automated analysis of your activity on our website. The personal data we collect is provided by you voluntarily, but they are necessary to use the functionalities of our website, such as responding to questions asked using the contact form or error reporting form on the website. We only collect the data that is necessary for the implementation and provision of services included in the forms available on our pages in the following scope:
contact and teleaddress data (such as name and surname, telephone number, email address); technical data and website search data, which may be personal data (e.g. IP addresses, cookie identifiers, browsing history data, user device information, etc.).
What is the purpose of processing the personal data you provide and the legal basis along with justification?
Contact form service
The Administrator provides the possibility of contacting him using an electronic contact form. Using the form requires providing personal data necessary to establish contact and respond to the inquiry. Providing data marked as mandatory is required to accept and handle the inquiry, and providing other data is voluntary. Personal data are processed for the purpose of identifying the sender and handling his inquiry sent via the provided form – the legal basis for processing is the legitimate interest of the Administrator (Art. 6 par. 1 lit. f of the GDPR). Regarding personal data provided optionally, the legal basis for processing is consent (Art. 6 par. 1 lit. a of the GDPR).
Website error reporting form service
The Administrator provides the user with the opportunity to report an error on the website. Using the form requires providing data necessary to establish contact and identify the detected error – the legal basis for processing is the legitimate interest of the Administrator (Art. 6 par. 1 lit. f of the GDPR). Regarding personal data provided optionally, the legal basis for processing is consent (Art. 6 par. 1 lit. a of the GDPR).
How long do we process personal data? What are the criteria for setting such periods?
The period of processing personal data depends on the purposes for which they were collected and the legal regulations imposing certain legal obligations on #BeReadyGROUP in this regard. #BeReadyGROUP may process personal data until an effective objection to data processing is reported in cases where the legal basis for processing is the legitimate interest of the Administrator (Art. 6 par. 1 lit. f of the GDPR) or until the expressed consent is withdrawn.
The period of processing personal data may be extended if processing is necessary to determine and pursue claims or defend against claims, and after that time only in cases and to the extent that will be required by law.
What rights do you have as data subjects?
In accordance with applicable regulations, you have the following rights in connection with the processing of personal data by #BeReadyGROUP:
- the right to access your data, including obtaining copies of the data;
- the right to request rectification of data;
- the right to delete data (the right to be forgotten);
- the right to file a complaint with the supervisory authority for personal data protection, which is the President of the Personal Data Protection Office in Poland – https://www.uodo.gov.pl/pl (if you have any comments or doubts, we encourage you to contact us in advance);
- the right to restrict data processing;
- the right to object (objection to the processing of data in the legitimate interest of the administrator).
If data is processed based on consent, you can additionally take advantage of:
the right to withdraw consent. Withdrawing consent does not affect the legality of processing carried out on the basis of consent before its withdrawal.
To exercise the above rights, please send correspondence to firstname.lastname@example.org or by mail to: 00-075 Warsaw, 61, Koszykowa St.
To whom do we disclose your data?
Your data may be transferred to entities processing personal data on behalf of the Administrator, primarily to IT service providers and marketing agencies. These entities process data based on a contract with the Administrator and strictly according to his instructions. In such cases, third parties are required to maintain the confidentiality and security of information, and it is verified whether they provide adequate personal data protection measures.
Your data may also be made available to entities authorized to obtain them based on applicable law, e.g. law enforcement agencies.
List of trusted partners:
[PARTNER NAME] – (more information on the page: [LINK TO PARTNER]).
Social media platforms
The Administrator processes personal data of users visiting the Administrator’s profiles on social media platforms (Facebook, YouTube, Instagram, Twitter, LinkedIn). These data are processed solely in connection with the operation of the profile, including to inform Users about the Administrator’s activity and to promote various events, services, and products. The legal basis for processing personal data by the Administrator for this purpose is his legitimate interest (Art. 6 paragraph 1 letter f of the GDPR), which is to promote his own brand.
Separate privacy protection rules and procedures apply on the aforementioned services. Detailed information on this subject can be found on separate subpages of these services.
Automated decision making
Your personal data will not be used for automated decision-making, including profiling, in such a way that as a result of such automated processing of personal data any decision could be made that would have legal effects on you or similarly significantly affect you.