Privacy Policy

PRIVACY POLICY

 

We care about your privacy. We collect and process your data only if it is necessary for the proper provision of the service.

In accordance with GDPR, below we present the data processing principles applied by the Controller.

 

I. Who is the Data Controller?


The data controller is Business Mind sp. z o. o. with its registered office in Gdańsk 80-239, at ul. Ks. Leona Miszewskiego 18.

 

II. For what purpose do we collect your data? How long do we process it?

 

We may process your data for the following purposes:

 

1. Communication with you, including providing answers to questions submitted through the contact form, email, during online meetings, etc.


Data will be processed based on the legitimate interest of the Controller in communicating with Website Users (Article 6(1)(f) GDPR). Your data will be processed no longer than until you object or the business purpose ceases. Providing this data is voluntary but necessary to communicate with you. Data may also be processed for archiving purposes for internal use based on the legitimate interest of the Controller (Article 6(1)(f) GDPR) until you object or the business purpose ceases.

 

2. Conclusion and performance of a contract (placing an order).

3. Establishment, defense, and pursuit of claims

4. Fulfillment of legal obligations incumbent on the Controller (including tax and archiving obligations and those arising from the Anti-Money Laundering and Counter-Terrorism Financing Act).

Data necessary for the conclusion and performance of a contract will be processed for the duration of the contract, including the period for exercising rights arising from the contract, such as the right to file a complaint under warranty (Article 6(1)(b) and (f) GDPR). Providing this data is voluntary but necessary for the conclusion and performance of the contract.

Additional data provided for purposes including improving contract performance will be processed no longer than until you object or the business purpose ceases based on the legitimate interest in customer service (Article 6(1)(f) GDPR).

After this period, data will be processed for the limitation period of claims based on the legitimate interest of the Controller to defend against claims and to establish and pursue claims (Article 6(1)(f) GDPR).

Where data is necessary to fulfill legal obligations incumbent on the Controller (such as issuing and storing invoices) – data will be processed for this purpose for no longer than 6 years (archiving obligations for accounting documents) or, in the scope of obligations arising from the Anti-Money Laundering and Counter-Terrorism Financing Act – for a period of 5 years from the end of the business relationship/completion of an occasional transaction or risk analysis, unless legal provisions require a longer period (Article 6(1)(c) GDPR).

Data may also be archived for internal and statistical purposes until you object or the business purpose ceases based on the legitimate interest of the Controller (Art. 6(1)(f) GDPR).

5. Sending marketing information (including newsletters and other information about services, products, promotions, and free content).

Data will be processed based on the legitimate interest of the Controller for marketing the Controller’s products and services (Article 6(1)(f) GDPR). Your data will be processed no longer than until you object or the business purpose ceases – whichever occurs first. Providing data is voluntary but necessary to receive the newsletter.

For commercial communication purposes, I require your consent in accordance with Article 10 of the Act on the Provision of Electronic Services. You may withdraw it at any time by clicking the link in the email footer or by writing to me at the address provided above.

6. Administration and management of the website and groups on social media platforms (including Facebook, LinkedIn) in the case of processing data on social media platforms, including communication with you and directing marketing content to you.

This data will be processed only when you decide to like the page / join the group / select the “Follow” option or otherwise leave your data on the platform I manage, e.g., by posting or commenting. Data will be processed for the duration of the page/group’s existence or until you object, which may occur by unchecking the “Like” or “Follow” option, deleting a comment/post, or in another manner provided within the platform/page or by contacting me.

Please note that the rules relating to the page/fanpage/group are established by the Controller, while the rules for using the social media platform on which the page/fanpage/group is located are established by the entity managing those platforms.

7. Collection of sensitive data.

If you give your consent and if it is necessary for the purposes essential for the conclusion and proper performance of the contract, we will also process sensitive data (Art. 9(2)(a) GDPR). Data will be collected until the business purpose ceases or consent is withdrawn. Providing data is voluntary, but it is necessary for the proper performance of the contract.

III. To whom may we disclose your data?

We disclose your data to other entities only when it is necessary to achieve the processing purposes referred to in Section II.

If necessary, your data may be transferred to entities with whom we cooperate in achieving the aforementioned purposes: a hosting company, an IT company/website management entity, an advertising agency providing marketing services.

As a rule, data will not be transferred outside the EEA. However, if it is transferred outside the EEA, it will be based on your consent, standard contractual clauses, or other safeguards provided for in GDPR after fulfilling, among other things, the information obligation.

IV. What rights do you have?

In connection with GDPR, you have the right to:

  • access your personal data,
  • rectify your personal data,
  • erase your personal data,
  • restrict the processing of your personal data,
  • object to the processing of your personal data,
  • data portability,
  • withdraw consent; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.


If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office. In such a case, however, I encourage you to contact Business Mind first to clarify your concerns.

V. Legal provisions applicable to personal data


In matters not regulated, the applicable provisions of Polish and European law shall apply, in particular GDPR.

VI. Cookie Policy

 

The Controller uses technologies that track actions taken by the User within the Website:

  1. Facebook conversion pixel – to manage Facebook ads and conduct remarketing activities;
  2. Google Analytics code – to analyze Website statistics. Google Analytics uses its own cookies to analyze User actions and behavior on the Website. These files are used to store information, such as which page the User came from to the current website. They help improve the Website;

The Website does not automatically collect any information, except for information contained in cookies.

Cookies are IT data, in particular text files, which are stored on the User’s end device and are intended for use of the Website. Cookies typically contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.

Cookies are used to adapt the content of the Website to the User’s preferences and optimize the use of the Website; create statistics that help understand how Users use the Website, which enables improvement of its structure and content.

You can independently change your cookie settings. In many cases, the web browser allows cookies to be stored on the User’s end device by default. Detailed information about the possibility and methods of handling cookies is available in the software settings (web browser).

Failure to consent to cookies may limit the operation of certain functionalities on the Website.

JOINT CONTROLLERSHIP

The Controller jointly controls data collected for statistical purposes within the Facebook platform with Facebook Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. This data is processed based on joint controllership by the aforementioned entities. Detailed rules regarding joint data controllership, including information about your rights, are described on the Page Insights Information page.

The Controller processes data based on the legitimate interest of the Controller in conducting analyses of User activity and their preferences to improve functionalities and services provided. For matters concerning personal data, you may contact both the Controller and the Joint Controller.