𝗚𝗗𝗣𝗥 𝗣𝗿𝗶𝘃𝗮𝗰𝘆 𝗣𝗼𝗹𝗶𝗰𝘆 𝗜𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻

In connection with implementation of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR”), we would like to inform you of the rules regulating the processing of your personal data and on your rights connected with it.

The rules presented below will be applicable starting from 25 July 2021.

𝗜. 𝗜𝗱𝗲𝗻𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝘁𝗵𝗲 𝗰𝗼𝗻𝘁𝗿𝗼𝗹𝗹𝗲𝗿

Your personal data will be administered by personel administering SocioJump at [email protected].

𝗜𝗜. 𝗧𝗵𝗲 𝗽𝘂𝗿𝗽𝗼𝘀𝗲𝘀 𝗮𝗻𝗱 𝘁𝗵𝗲 𝗹𝗲𝗴𝗮𝗹 𝗯𝗮𝘀𝗶𝘀 𝗼𝗳 𝘁𝗵𝗲 𝗽𝗿𝗼𝗰𝗲𝘀𝘀𝗶𝗻𝗴 𝗼𝗳 𝘆𝗼𝘂𝗿 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮:

Adminitrator processes your personal data for the following purposes:

1. to initiate, upon your request, actions to conclude an agreement with Administrator or when it is necessary for the performance of an agreement with the Administrator (Article 6.1(b) of GDPR)
2. in certain situations it may prove necessary to process your data due to exercise of Administrator legitimate interest (Article 6.1(f) of GDPR

𝗜𝗜𝗜. 𝗧𝗵𝗲 𝗼𝗯𝗹𝗶𝗴𝗮𝘁𝗶𝗼𝗻 𝘁𝗼 𝗽𝗿𝗼𝘃𝗶𝗱𝗲 𝘆𝗼𝘂𝗿 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮

You must provide your personal data to conclude and perform an agreement with the Adminitrator. If you fail to provide all required personal data, this will prevent Administrator from concluding the agreement with you and providing services to you.

𝗜𝗩. 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻 𝗼𝗻 𝘁𝗵𝗲 𝗿𝗲𝗰𝗶𝗽𝗶𝗲𝗻𝘁𝘀 𝗼𝗳 𝘆𝗼𝘂𝗿 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮

In connection with the processing of your personal data for the purposes indicated in point II, your personal data may be disclosed to the following recipients or recipient categories:

1. mailing companies,
2. couriers,
3. accounting office

𝗩. 𝗣𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮 𝗽𝗿𝗼𝗰𝗲𝘀𝘀𝗶𝗻𝗴 𝗽𝗲𝗿𝗶𝗼𝗱𝘀

Your personal data will be processed for a period necessary for achievement of the objectives indicated in point II, i.e. in the scope of performance of the agreement concluded between you and Administrator, for a period until the end of its performance, and after that period for a period and in a scope required under the legal provisions or for implementation by Administrator of a legitimate interest of the data controller in the scope as prescribed in point II above, and if you give your consent to the data processing after termination or expiry of the agreement, until you withdraw your consent.

𝗩𝗜. 𝗥𝗶𝗴𝗵𝘁𝘀 𝗼𝗳 𝘁𝗵𝗲 𝗱𝗮𝘁𝗮 𝘀𝘂𝗯𝗷𝗲𝗰𝘁

Administrator would like to ensure you that all persons whose personal data are processed by the Administrator enjoy the respective rights resulting from GDPR. In view of the foregoing, you have the following rights:

1. the right to access personal data, including the right to obtain copies of such data;
2. the right to demand correction of personal data – if the data are incorrect or incomplete;
3. the right to demand removal of personal data (the so-called right to be forgotten) – if:

• the data are no longer necessary for the purposes for which they have been collected or processed,
• the data subject raises an objection against data processing,
• the data subject withdraws the consent on which the processing is based and there is no other legal basis for the processing,
• the data are processed in violation of the law,
• the data have to be removed for purpose of fulfillment of an obligation resulting from the legal provisions;

4. the right to demand limitation of the processing of personal data—if:

• the data subject questions the correctness of personal data,
• the processing of data is in violation of the law and the data subject opposes removal of the data, demanding their limitation instead,
• the controller no longer needs the data for own purposes, but the data subject needs them for determination, defense or pursuit of claims,
• the data subject raises an objection against data processing, until it is determined if legally justified reasons on the part of the controller are superior to the basis of the opposition;

5. the right of data portability – if:

• the processing takes place on the basis of an agreement with the data subject or on the basis of consent expressed by such person, and
• the processing takes place in an automated manner;

6. the right to oppose the processing of personal data, including profiling – if:

• certain reasons arise which are connected with your specific situation, and
• the processing of data relies on the necessity for purposes resulting from Administrator’s legitimate interest referred to in point II above;

𝗩𝗜𝗜. 𝗧𝗵𝗲 𝗿𝗶𝗴𝗵𝘁 𝘁𝗼 𝗿𝗲𝘃𝗼𝗸𝗲 𝘁𝗵𝗲 𝗰𝗼𝗻𝘀𝗲𝗻𝘁 𝘁𝗼 𝗽𝗿𝗼𝗰𝗲𝘀𝘀 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮

In the scope in which you have given your consent to the processing of personal data, you may revoke it. Revoking the consent does not affect the legality of the data processing carried out on the basis of the consent before it is revoked.

𝗩𝗜𝗜𝗜. 𝗧𝗵𝗲 𝗿𝗶𝗴𝗵𝘁 𝘁𝗼 𝗳𝗶𝗹𝗲 𝗮 𝗰𝗼𝗺𝗽𝗹𝗮𝗶𝗻𝘁 𝘄𝗶𝘁𝗵 𝗮 𝘀𝘂𝗽𝗲𝗿𝘃𝗶𝘀𝗼𝗿𝘆 𝗮𝘂𝘁𝗵𝗼𝗿𝗶𝘁𝘆

If you find that the processing by the Administrator of your personal data violates the provisions of GDPR, you may file a complaint with the relevant supervisory authority.

𝗜𝗫. 𝗧𝗿𝗮𝗻𝘀𝗳𝗲𝗿 𝗼𝗳 𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗹 𝗱𝗮𝘁𝗮 𝘁𝗼 𝗲𝗻𝘁𝗶𝘁𝗶𝗲𝘀 𝗳𝗿𝗼𝗺 𝗯𝗲𝘆𝗼𝗻𝗱 𝘁𝗵𝗲 𝗘𝘂𝗿𝗼𝗽𝗲𝗮𝗻 𝗘𝗰𝗼𝗻𝗼𝗺𝗶𝗰 𝗔𝗿𝗲𝗮 (𝗘𝗘𝗔) 𝗼𝗿 𝗶𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗼𝗿𝗴𝗮𝗻𝗶𝘇𝗮𝘁𝗶𝗼𝗻𝘀

In cases justified and necessary due to circumstances, the Administrator may disclose your personal data to entities having their registered office outside the EEA (USA, Singapore, India, China, Hong Kong, Canada and international organizations (e.g. SWIFT), as well as other entities having their registered office outside the EEA or international organizations to which the transfer is necessary for the purpose of performing the agreement (e.g. execution of your orders connected with the agreement). As a principle, data will be transferred outside the EEA on the basis of standard contractual clauses concluded with the recipient, the content of which has been determined by the European Commission and ensures the highest standards of personal data protection applied in the market. You have the right to obtain copies of such data through the Administrator.