PrivacyPolicy

This notice covers information on the processing of personal data by Sixteractive spółka z ograniczoną odpowiedzialnością, entered in the register of entrepreneurs of the National Court Register (KRS), NIP: 6423246303, REGON: 525884834 - whether wholly or partly by automated means, and by means other than automated, of personal data forming or intended to form part of a data set, as required by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the "GDPR".

I. Data Controller

The controller of your personal data is Sixteractive spółka z ograniczoną odpowiedzialnością, entered in the register of entrepreneurs of the National Court Register (KRS), NIP: 6423246303, REGON: 525884834. You can contact us as follows:

• by post to the address: Ks. K. Szwedy 7a/7, 44-207 Rybnik (marked "GDPR"),
• by email: info@sixteractive.com
• by phone: +48 516 256 609

II. Representatives and Correspondents

The processing of personal data of "representatives" - including employees, persons representing a given entity or individual, including proxies, persons designated for contact, for providing information, or for performing specific tasks - of the following entities:

• contractors or potential contractors of the Company,
• organizational units, legal or natural persons, or other types of entities cooperating with the Company on a basis other than a contract,
• entities from the Company's business environment,
• other types of entities contacting the Company on any matter,
• personal data of persons who are correspondents on their own behalf, other than current or potential contractors.

1. Legal Basis and Purposes of Processing

If you are a "representative" or a person referred to in this point II above, we process your personal data on the basis of Article 6(1)(c) GDPR, for the purpose of fulfilling legal obligations, or on the basis of Article 6(1)(f) GDPR, that is, for purposes arising from our legitimate interests consisting in conducting our business activity - and this, depending on the circumstances of a given case, includes among others the purpose of:

• communication and handling correspondence,
• establishing or maintaining contacts relating to the Company's business activity,
• presenting an offer or considering a received offer, or otherwise establishing cooperation,
• concluding a contract and carrying out actions preceding its conclusion, such as negotiations and the exchange of documents,
• relating to the performance of a contract concluded with a contractor,
• document flow,
• carrying out required actions before competent authorities, including public administration bodies,
• establishing or pursuing potential claims, or defending against such claims.

2. Source of Data

If we did not obtain your personal data directly from you, it comes from the entity on whose behalf you act, or from a party to a contract concluded with the Company, or from publicly available registers and databases, including the National Court Register (KRS), the Central Register and Information on Economic Activity (CEIDG), the Public Information Bulletin (BIP), or websites.

Where data is obtained other than directly from you, we may process the following categories of personal data: basic identification data, including first and last name, identification data assigned by public authorities, electronic identification and location data, address data, contact data (email address, phone number), data on place of employment and the position or function held, professional qualifications held, or other data provided to the Company in connection with cooperation or contact.

3. Retention Period

Personal data processed on the basis of the Company's legitimate interest will be stored until that interest ceases to apply, in particular for the time necessary to secure information in case of a legal need to demonstrate facts, or until the expiry of the limitation period for potential claims.

4. Recipients of Data

• persons authorized by us to process data in the performance of their duties,
• other entities, where necessary for us to fulfill obligations arising from concluded contracts or legal provisions, including to properly perform a service or exercise our rights,
• entities providing postal and courier services, banks, insurers, tax advisors, law firms,
• entities to whom we have outsourced services related to the processing of personal data,
• courts and public authorities to whom the Company is obliged or authorized to disclose your data.

5. Your Rights

You have the right to access your personal data, the right to request the rectification and completion of your personal data, the right to request the erasure of your personal data where the circumstances set out in Article 17 GDPR occur, the right to request the restriction of processing of your personal data in the cases set out in Article 18 GDPR, the right to the portability of your personal data that we process by automated means on the basis of a contract or consent, the right to object, and the right to lodge a complaint with the supervisory authority responsible for personal data protection, i.e., the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw).

You have the right to object to the processing of your data for purposes arising from our legitimate interests.

6. Voluntary Provision of Data

Providing data is voluntary but necessary to achieve the purpose for which the data is processed. In some cases, providing personal data is a statutory or contractual requirement.

7. Automated Decisions and Transfers Outside the EEA

In the course of processing your data, no automated decision-making, including profiling, will take place. We do not transfer your data outside the territory of the European Union and the European Economic Area.

III. Contractors Who Are Natural Persons

1. Legal Basis and Purposes of Processing

If you are our contractor or potential contractor, we process your personal data on the basis of Article 6(1)(b) GDPR for the purpose of concluding a contract and carrying out actions preceding its conclusion, such as negotiations and the exchange of documents, or for the purpose of performing a contract; on the basis of Article 6(1)(c) GDPR for the purpose of performing obligations set out in legal provisions, including tax provisions; or on the basis of Article 6(1)(f) GDPR for purposes arising from our legitimate interests consisting in the functioning of our enterprise and the conduct of our business activity, and in particular - depending on the circumstances of a given case - for the purposes of:

• communication and handling correspondence,
• establishing or maintaining contacts relating to the Company's business activity,
• presenting an offer or considering a received offer, or otherwise establishing cooperation,
• concluding a contract and carrying out actions preceding its conclusion, such as negotiations and the exchange of documents,
• relating to the performance of a contract concluded with a contractor,
• document flow,
• carrying out required actions before competent authorities, including public administration bodies,
• establishing or pursuing potential claims, or defending against such claims.

2. Source of Data

If we did not obtain your data directly from you, this data comes from publicly available registers and databases, including the National Court Register (KRS), the Central Register and Information on Economic Activity (CEIDG), the Public Information Bulletin (BIP), or websites.

Where data is obtained other than directly from you, we may process the following categories of your personal data: basic identification data, including first and last name, identification data assigned by public authorities, financial identification data, electronic identification and location data, address data, contact data (email address, phone number), data on professional qualifications held, or other data provided to us in connection with cooperation or contact.

3. Retention Period

Your data obtained for the purpose of concluding and performing a contract will be stored until the end of the limitation period for any claims arising from it. Data processed on the basis of our legitimate interest will be stored until that interest ceases to apply, in particular for the time necessary to secure information in case of a legal need to demonstrate facts, or until the limitation period for potential claims expires. Data processed for the purpose of fulfilling a legal obligation will be stored for the period resulting from legal provisions.

4. Recipients of Data

• persons authorized by us to process data in the performance of their duties,
• other entities, where necessary for us to fulfill obligations arising from concluded contracts or legal provisions, including to properly perform a service or exercise our rights,
• entities providing, among others, postal and courier services, banks, insurers, tax advisors, law firms,
• entities to whom we have outsourced services related to the processing of personal data,
• courts and public authorities to whom the Company is obliged or authorized to disclose your data.

5. Your Rights

You have the right to access your personal data, the right to request the rectification or completion of your personal data, the right to request the erasure of your personal data where the circumstances set out in Article 17 GDPR occur, the right to request the restriction of processing of your personal data in the cases set out in Article 18 GDPR, the right to the portability of your personal data that we process by automated means on the basis of a contract or consent, the right to object, and the right to lodge a complaint with the supervisory authority responsible for personal data protection, i.e., the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw).

You have the right to object to the processing of your data for purposes arising from our legitimate interests.

6. Voluntary Provision of Data

Providing data is voluntary but necessary to achieve the purpose for which the data is processed. In some cases, providing personal data is a statutory or contractual requirement.

7. Automated Decisions and Transfers Outside the EEA

In the course of processing your data, no automated decision-making, including profiling, will take place. We do not transfer your data outside the territory of the European Union and the European Economic Area.