A. Identity of data controller
The Data Controller of Your personal data is the ALONA SLOSTINA with its registered office in Warsaw.
B. Purpose of processing
A. In connection with services provided by a2studio.pro – Alona SLostina I.e in order to conclude or perform a contract (Article 6 (1) (b) of GDPR), Your data will be stored until the contract has been performed;
B. For marketing and promotion of products offered by the A2studio Marketing&Branding agency , which are our legitimate interest (Article 6 (1) (f) of GDPR). Your data will be processed until You object.
C. Compliance with legal obligations (Article 6 (1) (c) of GDPR), this purpose is related to the legal obligations of storing and processing of specific documents for the time specified in legal regulations, e.g.
• Ustawa z 29.09.1994 r. o rachunkowości (Dz. U. z 2017 r. poz. 1858);
• Ustawa z dnia 29 sierpnia 1997 r. – Ordynacja podatkowa (Dz. U. 1997 nr 137 poz. 926);
• Ustawy z dnia 1 marca 2018 r. – o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu (Dz. U. 2018 poz. 723).
D. In order to possibly determine, investigate or defend against claims, which is our legitimate interest (the basis of Article 6 (1) (f) of GDPR). The data will be processed until the claims expire
E. In the event of consent, Your data will be processed within the limits and purpose indicated in the consent provided (basis from Article 6 (1) (a) of GDPR). The data will be processed until the consent is withdrawn
C. Data categories
To conclude the contract, we require the data provided in the contract / order form (if You do not provide it, we will not conclude the contract / we will not complete the order). In addition, we can ask for optional data that does not affect the conclusion of the contract (if we do not receive it, we will not be able to, e.g. call the contact number).
During the term of the contract, we receive other data about You when providing services. The appearance of Your personal data with us is a consequence of the operation of our services that You use.
D. Data transfer
A. Public authorities, to the extent that they do not receive data as part of specific legal proceedings, e.g. in connection with counteracting money laundering;
B. Entities that process Your personal data on behalf of the Foundation on the basis of a data processing agreement (“processors”). These will include: Beneficiaries of Data Controller, IT specialists, archiving companies, hosting companies;
C. External data administrators (the so-called Parallel Data Controller, to whom the data is shared, e.g. legal advisors and lawyers, entities conducting courier or postal activities, entities purchasing receivables – if You do not pay our invoices on time),
D. Entities located outside the EEA, but only when necessary and with an adequate level of protection, primarily through:
• Cooperation with entities in countries for which a adequacy decision has been issued by European Commission;
• Application of standard contractual clauses issued by the European Commission.
Data controller always informs about the intention to transfer personal data outside the EEA at the stage of collecting them.
E. Data profiling
Please be advised that Your data will not be subject to profiling, i.e. automated analysis of Your data and development of predictions about preferences or future behaviours (profiling means, e.g. in the case of marketing profiling, determining which offer You might be most interested in based on for Your earlier election).
F. Your Rights
A. The right to access personal data processed by us (Article 15 of GDPR),
B. The right to rectify entrusted personal data, including its correction (Article 16 of GDPR),
C. The right to erase personal data from our systems, the so-called “right to be forgotten “- if You think there are no grounds for us to process Your data, You can request that we delete it (Article 17 of GDPR),
D. The right to restrict processing of personal data – You can request that we limit the processing of personal data only to their storage or performance of activities agreed with You, if we have incorrect data about You or we process them unreasonably; or You do not want us to remove them because You need them to determine, pursue or defend claims; or for the duration of the objection to data processing (Article 18 of GDPR),
E. The right to data portability – You have the right to receive from us in a structured, commonly used machine-readable format (e.g. “.csv” format) personal data about You in whose possession we are under a contract or consent. You will have this right if You have data in electronic format – if You only have data in paper form, You will not be able to exercise this right. You can order us to send this data directly to another entity (Article 20 of GDPR),
F. The right to withdraw consent to the processing of personal data – at any time You have the right to withdraw consent to the processing of personal data that we process on the basis of consent – article 7 section 3 of the Regulation. Withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. Withdrawal of consent occurs by sending an e-mail to the address: email@example.com
G. Right to object – You can object to the processing of Your data if the basis for using the data is our legitimate interest – art. 21 of GDPR. In such a situation, after examining Your request, we will no longer be able to process the personal data covered by the opposition on this basis, unless we demonstrate the existence of legitimate grounds for data processing that is considered to prevail over Your interests, rights and freedoms.
H. If in Your opinion the processing of personal data violates the provisions of GDPR, You have the right to lodge a complaint to the supervisory body, i.e. the President of the Office for Personal Data Protection
If You need additional information related to the protection of personal data or want to exercise Your rights, please contact us at: firstname.lastname@example.org