The controller of personal data is Gamut Analytics spółka z ograniczoną odpowiedzialnością with its registered office in Konstancin-Jeziorna, ul. Słoneczna 8, 05-520 Konstancin-Jeziorna, entered into the Register of Entrepreneurs of the National Court Register under the KRS number: 0000755257, whose registration files are kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, with a NIP number: 1231415196 and REGON number: 381662266, hereinafter referred to as the “Controller”.
For all matters relating to the processing of your personal data, you can contact:
Gamut Analytics Sp. z o.o., Ul. Słoneczna 8, 05-530 Warszawa
e-mail: par@gamut.pl
Data protection is carried out in accordance with the requirements of generally applicable laws, in particular the Act of 18.07.2002 on the provision of electronic services, and the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).
At the same time, we would like to point out, given the responsibilities of the Controller, that we pay particular attention to the issue of privacy, as well as to data security.
The Service performs functions to obtain information about you as a user of the Website and your behaviour in the following ways:
- through the information voluntarily entered on the forms.
- by storing cookies (“cookies”) on your end device.
through information in the forms:
- The Service collects information voluntarily provided by you as a user.
- The service can also save information about the connection parameters (time stamp, IP address).
The data you provide in the contact form are treated as confidential and are not made available to third parties except with your consent as a user of the site. By default, your data as a user of the service is not transferred outside the European Economic Area or to international organizations. In case of transfer to recipients in third countries, the Controller will use the standard contractual clauses adopted by the European Commission which set out the basic guarantees for the security of your data.
A website owned by the Controller may include social media features, such as Facebook or Twitter buttons. These features may collect certain information about visitors to our website, such as IP address or browsing history, and may install cookies on visitors’ browsers. Please note that the processing of personal data collected in this way is subject to the rules adopted by the operators of social media networks and therefore this Privacy Policy does not apply to them. Data will be processed for marketing purposes until you withdraw your consent to such processing.
The data collected is used to monitor and see how you, as a user, use our services to improve the service by providing more efficient and seamless navigation. We monitor user information using tools that record user behaviour on the site. In addition, you can disable or restore the collection of “cookies” by changing the settings in your web browser. Instructions for managing cookies are available in the settings of your software (web browser.
Additional personal information, such as e-mail address, is only collected where the user has explicitly consented to it by filling out the form. We retain and use the above data only as necessary to perform the function.
Deleting cookies or turning them off in your browser may result in the Site not working properly and may limit your access to various features of the Site.
The information collected includes your IP address, browser type, language, operating system type, Internet service provider, time and date information, location, and information submitted to the site via the contact form.
Legal basis and purpose of personal data processing
The legal bases for data processing are: taking necessary actions prior to the conclusion of the contract, conclusion and performance of the contract and provision of services in accordance with the contract – Article 6(1)(b) and (f) of GDPR, as the so-called legitimate interest of the Controller, which is to assert and defend his rights, marketing purposes of the Controller including profiling for marketing purposes and for analytical purposes – Article 6(1)(b) and (f) of GDPR, as the so-called legitimate interest of the Controller, or Article 6(1)(a) – consent given, Marketing purposes, including analytical purposes and profiling of third parties, including partners of the Controller- Article 6(1)(a) of GDPR – consent, if consent is not given, personal data are not processed for this purpose, fulfilment of the Controller’s legal obligations arising from applicable regulations law – Article 6(1)(c) of GDPR – processing is necessary to comply with legal requirements to which the Controller is subject,
asserting claims related to the contract concluded with you / services provided – Art. 6 (1) (b) and (f) of GDPR as the so-called legitimate interest of the Controller, which is to assert claims and defend his rights. The specific purpose and basis of processing shall be given in a separate notice to data subjects.
Your personal data will be stored until the statute of limitations for claims under the contract / provision of services or until the expiration of the obligation to store data under the law, in particular the obligation to store accounting documents relating to the contract. We process all data processed for accounting purposes and for tax reasons for 5 years calculated from the end of the calendar year in which the tax liability arose. After the above-mentioned periods, your data will be deleted or anonymized.
Your personal data may be shared with third parties for the purposes mentioned above for marketing purposes if you consent to the specific marketing purposes for which the sharing is necessary.
Moreover, the data may be disclosed to entities processing personal data on behalf of the Controller among others, group companies, IT service providers, entities processing data to collect debts, notaries, banks, building administrators and housing communities, marketing agencies – whereby such entities process data based on a contract with the Controller and only in accordance with our instructions.
You have the right of access to your data and the right to request their rectification, erasure, restriction of processing. At the same time, if the basis for the processing of your personal data is a legitimate interest of the Controller you may object to the processing of your personal data. You have the right to object to the processing for direct marketing purposes, including profiling and for analytical purposes, to the extent that the processing of your personal data is based on consent, you have the right to withdraw your consent. Withdrawal of consent does not affect the lawfulness of processing that was done based on consent before its withdrawal.
In so far as your data are processed for the purpose of concluding and performing a contract/providing service or processed based on consent – you also have the right to personal data portability. You will then receive your personal data in a structured, commonly used, machine-readable format. Furthermore, it is possible to send the data in question to another data controller.
You also have the right to lodge a complaint to the supervisory authority responsible for personal data protection, i.e., the President of the Office for Personal Data Protection.