DGIM STUDIO PRIVACY POLICY

1. Who is the controller of your data?

The controller of your personal data is the ENTREPRENEURSHIP DEVELOPMENT FOUNDATION “TWÓJ STARTUP”, with its registered office in Warsaw (registered address: ul. Żurawia 6/12, unit 766, 00-503 Warsaw).

The above Privacy Policy applies to services of the Foundation provided through an organised part of the enterprise – DGIM Studio. Contact details: telephone number +48 660 180 846, e-mail address: imogi@dgimstudio.com, services performed by Ivan Mahileuchyk.

2. Why do we process your data?

A. In connection with services provided via DGIM Studio consisting of graphic design services, i.e. for the purpose of concluding or performing a contract (Article 6(1)(b) of the Regulation), your data will be stored until the contract is performed.

B. For marketing purposes and promotion of products offered by the Entrepreneurship Development Foundation “Twój StartUp” with its registered office in Warsaw, which constitutes our legitimate interest (Article 6(1)(f) of the Regulation). Your data will be processed until an objection is raised.

C. For the fulfilment of all legal obligations incumbent upon us in connection with the undertaken cooperation (Article 6(1)(c) of the Regulation); this purpose is related to legal obligations to retain certain documents for the period specified by law, e.g.:
• the Accounting Act of 29 September 1994;
• the Tax Ordinance Act of 29 August 1997;
• the Act of 1 March 2018 on counteracting money laundering and terrorist financing.

D. For the purpose of possible establishment, pursuit or defence against claims, which constitutes our legitimate interest (Article 6(1)(f) of the Regulation). Data will be processed until the limitation period for claims expires.

E. If consent is given, your data will be processed within the scope and for the purpose specified in the consent given (Article 6(1)(a) of the Regulation). Data will be processed until the consent is withdrawn.

3. What data is processed?

In order to conclude a contract, we require the provision of data in the contract / order form (if such data is not provided, we will not conclude the contract / perform the order). Additionally, we may request optional data that does not affect the conclusion of the contract (if such data is not provided, we may not be able, for example, to contact you by phone).

During the performance of the contract, while providing services, we may obtain other personal data of the data subject. The appearance of your personal data in our possession is a consequence of the operation of our services which you use.

4. To whom will the data be disclosed?

A. Public authorities, to the extent that they obtain data not within specific proceedings under the law, e.g. in connection with counteracting money laundering;

B. Entities that process your personal data on behalf of the Foundation on the basis of a personal data processing agreement (so-called processors), including, among others: beneficiaries of the Foundation, IT specialists, archiving companies, hosting companies;

C. External data controllers (so-called parallel controllers) to whom data is disclosed, e.g. legal advisers and attorneys, courier or postal service providers, entities acquiring receivables – in the event of failure to pay our invoices on time;

D. Entities located outside the EEA, but only where necessary and with an adequate level of protection ensured, in particular through:
a. cooperation with entities in countries for which a relevant decision of the European Commission has been issued;
b. application of standard contractual clauses issued by the European Commission.

The controller always informs data subjects of the intention to transfer personal data outside the EEA at the stage of data collection.

5. Is the data profiled?

We inform you that your data will not be subject to profiling, i.e. automated analysis of your data and the creation of predictions regarding preferences or future behaviour (profiling means, for example, in the case of marketing profiling, determining which offer you may be most interested in based on your previous choices).

6. What rights do you have?

A. The right of access to personal data processed by us (Article 15 of the Regulation);

B. The right to rectify entrusted personal data, including correcting it (Article 16 of the Regulation);

C. The right to erase personal data from our systems, the so-called “right to be forgotten” – if, in your opinion, there are no grounds for processing your data, you may request that we delete it (Article 17 of the Regulation);

D. The right to restrict the processing of personal data – you may request that we limit the processing of personal data exclusively to its storage or to agreed activities, if we have incorrect data about you or process it unlawfully; or if you do not want us to delete it because it is necessary for establishing, pursuing or defending claims; or for the period of an objection lodged against data processing (Article 18 of the Regulation);

E. The right to data portability – you have the right to receive from us, in a structured, commonly used and machine-readable format (e.g. “.csv”), personal data concerning you which we process on the basis of a contract or consent. This right applies only where we hold data in electronic form – if data is held solely in paper form, this right cannot be exercised. You may request that we transmit such data directly to another entity (Article 20 of the Regulation);

F. The right to withdraw consent to the processing of personal data – at any time you have the right to withdraw consent to the processing of personal data processed on the basis of consent (Article 7(3) of the Regulation). Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Consent may be withdrawn by sending an e-mail to: imogi@dgimstudio.com

G. The right to object – you may object to the processing of your data if the legal basis for processing is our legitimate interest (Article 21 of the Regulation). In such a case, after examining your request, we will no longer process personal data covered by the objection on this basis, unless we demonstrate the existence of compelling legitimate grounds for processing which override your interests, rights and freedoms.

H. If, in your opinion, the processing of personal data violates the provisions of the Regulation, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.

7. Contact

If you require additional information related to personal data protection or wish to exercise your rights, please contact us at the e-mail address: rodo@twojstartup.pl