PRIVACY POLICY OF BLACK TIGER POLAND

SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

(hereinafter referred to as the “Privacy Policy”)

 

Data Controller

The Data Controller of your personal data (hereinafter referred to as “Data” or “Personal Data”), is Black Tiger Poland spółka z ograniczoną odpowiedzialnością [limited liability company] with its registered office in Warsaw (02-972), ul. Prymasa Augusta Hlonda 10/73, registered in the Register of Entrepreneurs of the National Court Register, maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under KRS No.: 0000855139, NIP (Tax Identification Number): 5272934044, REGON (Statistical Identification Number): 386797887, share capital of PLN 2,522,650.00 (hereinafter referred to as the “Company”,”Data Controller” or “Black Tiger”).

The Data Controller processes your Data in accordance with national and European laws, ensuring the security of Personal Data, that is, in particular, the reliability, confidentiality, availability, integrity and accountability of the activities carried out. In order to make our processing transparent to you, we provide you with this Privacy Policy, which contains detailed information on the processing of Personal Data. This Privacy Policy contains information that you should know pursuant to the Regulation of the European Parliament and of the Council (EU) of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing the Directive 95/46/EC (hereinafter referred to as: “GDPR”).

You can contact Black Tiger in writing via mail to the following address: ul. Prymasa Augusta Hlonda 10/73, 02-972 Warsaw, by email to: [kontakt@blacktigerpoland.tech] or by phone at: 795 121 973.

We would like to point out that the website operated by Black Tiger at www.blacktigerpoland.tech (hereinafter referred to as the “Website”) may contain redirections to third-party websites to which this Privacy Policy does not apply.

 

Purposes and legal basis of Personal Data processing

Depending on the nature of your relationship with Black Tiger, in carrying out our business functions we process the Data to different extents and purposes, as detailed below:

  1. The Company’s customers and contractors (including potential customers and contractors):

Black Tiger processes Data of (potential) customers and contractors, i.e.: first and last name, contact data, tax identification number (NIP), statistical identification number (REGON)r, business address and data related to settlements arising from the concluded agreement, on the basis of:

  1. Article 6 section 1 letter b of the GDPR – for the performance of a contract concluded with a customer/ contractor or in order to take steps – even prior to entering into a contract – at the request of a potential customer/ contractor;
  2. Article 6 section 1 letter c of the GDPR – in order to fulfill the Data Controller’s legal obligations, related in particular to tax and accounting issues;
  3. Article 6 section 1 letter f of the GDPR – for purposes arising from the legitimate interests pursued by the Data Controller, consisting in (1) the possible need to assert or defend claims arising from a (potential) contract, (2) marketing of the Data Controller’s services, and (3) development of further cooperation with the customer/ contractor;
  4. in the event that on your own initiative you provide the Data Controller with Data that was not expected by Black Tiger, such action shall be deemed to be equivalent to your consent to the processing of such Data for the purposes for which it was provided – the processing shall then take place pursuant to Article 6 section 1 letter a of the GDPR or Article 9 section 2 letter a of the GDPR (in the case of special categories of Data).

Special categories of Personal Data may be processed only if they are independently provided to the Data Controller; the Data Controller does not expect (potential) customers or contractors to provide special categories of Data.

  1. Persons designated by customers/ contractors (including potential customers and contractors) for business contacts:

Black Tiger processes Data of persons designated by (potential) customers and contractors for business contacts, i.e.: first and last name, position held with (potential) customer/ contractor, business e-mail address, business phone number.

The aforementioned Data is obtained by the Company from the (potential) customer/ contractor and processedon the basis of:

  1. Article 6 section 1 letter f of the GDPR – for purposes arising from the legitimate interests pursued by the Data Controller, consisting in: (1) performance and settlement of the contract entered into with the customer/ contractor, (2) development of further cooperation between the Data Controller and the customer/ contractor, (3) taking steps to enter into a contract with a potential customer/ contractor, (4) marketing of the Data Controller’s services, and (5) any need for the Data Controller to assert claims or defend its rights;
  2. in the event that on your own initiative you provide the Data Controller with Data that was not expected by Black Tiger, such action shall be deemed to be equivalent to your consent to the processing of such Data for the purposes for which it was provided – the processing shall then take place pursuant to Article 6 section 1 letter a of the GDPR or Article 9 section 2 letter a of the GDPR (in the case of special categories of Data).

Special categories of Personal Data may be processed only if they are independently provided to the Data Controller; the Data Controller does not expect special categories of Data to be provided.

  1. Website users:

Black Tiger processes the following Data in order to enable users of the Website to use the contact form placed on the Website (these are the Data necessary to complete the form enabling the user to contact Black Tiger): first and last name, e-mail address, telephone number of the user, indication of the entity on behalf of which the user contacts the Company, and possible information containing Data that the user independently and voluntarily provides in the in the contact form.

In addition, in connection with the use of the Website, Black Tiger processes information about user’s activity on the Website, primarily to ensure the correct operation of the services: computer’s IP address, information contained in cookies (more information about cookies is available in the Cookie Policy), session data, its date and time, browser and operating system data, device data. This information does not contain data on the identity of users, but in combination with other information may constitute the Data.

Processing of the aforementioned Data is carried out on the basis of:

  1. Article 6 section 1 letter b of the GDPR , for the performance of a contract for the provision of services by electronic means, the subject of which is the service of providing the user with the possibility of using a contact form;
  2. Article 6 section 1 letter f of the GDPR, for purposes arising from the legitimate interests pursued by the Data Controller consisting of the Data Controller’s possible need to assert claims or defend its rights;
  3. in the event that the User, on User’s own initiative, provides the Data Controller with Data that was not expected by Black Tiger, such action shall be deemed to be equivalent to the User’s consent to the processing of such Data for the purposes for which they were provided – the processing shall then take place pursuant to Article 6 section 1 letter a of the GDPR or Article 9 section 2 letter a of the GDPR, in the case of special categories of Data.

Special categories of Personal Data may be processed only if they are independently provided to the Data Controller; the Data Controller does not expect special categories of Data to be provided.

  1. Users of social media operated by the Company:

In order to enable users to use the Company’s social media, Black Tiger processes the following Data in particular: the User’s first and last name or User’s name, information about “likes”, the content of comments, posts and messages posted by the User, including correspondence conducted with Black Tiger using tools available on social media.

Processing of the aforementioned Data is carried out on the basis of:

  1. Article 6 section 1 letter b of the GDPR, for the performance of a contract for the provision of services by electronic means, the subject of which is the service of providing the user with the possibility of using the Company’s social media;
  2. Article 6 section 1 letter f of the GDPR, for purposes arising from the legitimate interests pursued by the Data Controller consisting of the Data Controller’s possible need to assert claims or defend its rights;
  3. in the event that the user, on user’s own initiative, provides the Data Controller with Data that was not expected by Black Tiger, such action shall be deemed to be equivalent to the user’s consent to the processing of such Data for the purposes for which they were provided – the processing shall then take place pursuant to Article 6 section 1 letter a of the GDPR or Article 9 section 2 letter a of the GDPR, in the case of special categories of Data.

Special categories of Personal Data may be processed only if they are independently provided to the Data Controller; the Data Controller does not expect special categories of Data to be provided.

 

Automated decisions and profiling

Black Tiger will not make decisions based solely on automated processing or profiling on the basis of your Data.

 

Transfer of Personal Data

Recipients of Data, while taking into account the principle of Data minimization, may be, in particular: (1) entities within the Black Tiger capital group, or (2) entities processing Data at the Company’s request, with which the Company enters into Data processing agreements (e.g. entities providing legal or IT services to Black Tiger).

As a rule, Personal Data will not be transferred outside the European Economic Area (hereinafter “EEA”). However, given the services provided by the Company’s subcontractors in the implementation of ICT services and IT infrastructure, the Data may be transferred to recipients which will also include entities from third countries, i.e. countries outside the EEA.

In the case of the transfer of Data to countries outside the EEA, the transfer is made only to countries that, in accordance with the decision of the European Commission, provide an adequate degree of protection of Personal Data in accordance with EEA standards. For recipients on the territory of countries not covered by the European Commission’s decision – in order to ensure an adequate degree of such protection – the Company will enter into agreements with recipients of your Data, based on standard contractual clauses issued by the European Commission in accordance with Article 46 section 2 letter c of the GDPR – for more information on the said protections, please visit: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

 

Rights relating to the processing of Personal Data

In connection with the processing of Data, you have the right to:

  1. access the content of the Data (pursuant to Article 15 of the GDPR);
  2. request to rectify the data (pursuant to Article 16 of the GDPR);
  3. request the erasure of data (pursuant to Article 17 of the GRPR);
  4. request to restrict the processing of Data (pursuant to Article 18 of the GDPR);
  5. transfer of Data – to the extent of Data processed on the basis of your consent or in connection with a concluded contract (pursuant to Article 20 of the GDPR);
  6. lodge an objection – in the case of Data processed on the basis of Black Tiger’s legitimate interests (pursuant to Article 21 of the GDPR);
  7. revoke at any time the consent given – with respect to Data processed solely on the basis of consent. The withdrawal of your consent shall not affect the lawfulness of processing based on the consent before its withdrawal.

The above rights may be exercised by submitting a relevant statement to the Company sent (1) by regular mail to the following address: ul. Prymasa Augusta Hlonda 10/73, 02-972 Warsaw, (2) by e-mail to: kontakt@blacktigerpoland.tech.

In connection with the processing of your Data, you have the right to lodge a complaint with a supervisory authority.

 

Voluntariness of Personal Data provision

Your provision of Data is voluntary, but necessary for Black Tiger to fulfill the purposes set forth in this Privacy Policy.

 

Period of Personal Data processing

Your Data will be processed for the period necessary to fulfill the purpose for which it was collected or until you withdraw your consent or the Data Controller takes into account any objection raised against the processing of your Personal Data.

Subsequently, the Data may be processed – to the extent necessary – for the period that results from generally applicable laws and is necessary to establish, assert or defend claims.