Privacy policy

We understand the importance of protecting personal data, which is why we have prepared this document for you (hereinafter referred to as: „Privacy policy”), where you will find all the necessary information regarding our processing of your personal data and the use of cookies.

We place great importance on the security and legal compliance of personal data processing. Therefore, we employ state-of-the-art organizational and technical safeguards to ensure the best possible protection of the personal data you provide. We also guarantee that we process it in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: „GDPR”), as well as the Act of 10 May 2018 on the Protection of Personal Data, and other personal data protection regulations.

For this reason, based on Article 13(1) and (2) of the GDPR, we inform you that:

The administrator of your personal data is:

SIGNSAFE GROUP SP. Z O.O. with its registered office in Gdańsk (80-416) at al. Gen. Józefa Hallera 134/197, entered into the register of entrepreneurs kept by the District Court for Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register under KRS number: 0000742005, with NIP: 1182178080 and REGON: 380903532.

email address: info@signsafe.app

Personal data you entrust to us and the purposes for processing them

preparing a commercial offer in response to a client's interest, which is a legally justified interest of the data controller (Art. 6(1)(f) GDPR);

provision of services via the Website and fulfillment of contractual obligations, based on the concluded agreement (Article 6(1)(b) GDPR);

handling of the complaint process, based on the obligation incumbent upon the data controller in connection with applicable legal provisions (Art. 6(1)(c) GDPR);

accounting operations related to issuing and receiving settlement documents, based on tax law regulations (Article 6(1)(c) GDPR);

Archiving of data for the purpose of establishing, investigating, or defending against claims, or for the need to prove facts, which constitutes a legitimate interest of the data controller (Article 6(1)(f) GDPR);

telephone contact or electronic mail, in particular in response to inquiries addressed to the data controller, which is the legitimate interest of the data controller (Article 6(1)(f) GDPR);

transmitting technical information regarding the functioning of the Online Service and services used by the client, which is a legitimate interest of the data controller (Art. 6(1)(f) GDPR);

marketing, which is based on his legitimate interest (Article 6(1)(f) GDPR) or on the basis of prior consent (Article 6(1)(a) GDPR).

Data recipients

The recipients of personal data processed by the data controller may include entities cooperating with the data controller when this is necessary for the performance of a contract concluded with the data subject.

The recipients of personal data processed by the data controller may also include subcontractors – entities whose services the data controller uses for data processing, e.g., accounting offices, law firms, IT service providers (including hosting services).

The data controller may be required to disclose personal data on the basis of applicable legal provisions, in particular to disclose personal data to authorized state bodies or institutions.

 

Automated decision-making, profiling

We do not make decisions about you in an automated manner, nor do we use profiling.

 

Transfer of data outside the European Economic Area or to an international organization
User's personal data may be transferred to third parties whose services the Administrator uses in connection with the operation of the service. Due to the use of Linkedin and YouTube services, User's personal data may be transferred to the United States of America (USA), Canada, and other countries. These entities guarantee an appropriate level of personal data protection required by European regulations.
As part of the Administrator's activities on the website, social media plugins have also been embedded. The purpose and scope of data collection, as well as its further processing and use by service providers, are described in the privacy policies of the entities listed below:

LinkedIn – https://pl.linkedin.com/legal/privacy-policy

YouTube - https://policies.google.com/privacy?hl=pl

Personal data retention period

The data controller stores personal data for the duration of the contract concluded with the data subject and after its termination for purposes related to pursuing claims related to the contract, performance of obligations resulting from applicable law, but for a period not longer than the statute of limitations in accordance with the provisions of the Civil Code.

The data controller stores personal data contained in billing documents (e.g., invoices) for the period specified by the provisions of the Value Added Tax Act and the Accounting Act.

The data controller stores personal data processed for marketing purposes for a period of 10 years, but no longer than until the withdrawal of consent for data processing or the objection to data processing is lodged.

The data controller stores personal data for purposes other than those indicated in paragraphs 1-3 for a period of 3 years, unless consent to the processing of data has been withdrawn earlier, and the processing of data cannot be continued on a basis other than the consent of the data subject.

 

Your rights regarding our processing of your personal data

Every data subject has the right:

  • access – to obtain confirmation from the administrator as to whether personal data concerning her is being processed. If data about a person is being processed, she is entitled to access it and obtain the following information: about the purposes of processing, categories of personal data, information about recipients or categories of recipients to whom the data have been or will be disclosed, about the period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period, about the right to request from the controller rectification, erasure or restriction of the processing of personal data relating to the data subject, and to object to such processing (Art. 15 GDPR);
  • obtaining a copy of the data – acquiring a copy of the data being processed, with the first copy being free of charge, and for subsequent copies, the controller may charge a reasonable fee based on administrative costs (Article 15(3) GDPR);
  • Corrections – requests for correction of personal data that are inaccurate or for the completion of incomplete data (Art. 16 GDPR);
  • data deletion - requests for deletion of her personal data if the controller no longer has legal grounds for processing them or the data are no longer necessary for the purposes of processing (Art. 17 GDPR);
  • processing restrictions – requests to restrict the processing of personal data (Art. 18 GDPR), when: the data subject contests the accuracy of the personal data – for a period enabling the controller to verify the accuracy of those data, the processing is unlawful, and the data subject opposes their erasure and requests restriction of their use instead, the controller no longer needs the personal data, but they are required by the data subject for the establishment, exercise or defence of legal claims, the data subject has objected to processing – pending the verification whether the legitimate grounds of the controller override those of the data subject;
  • data portability – to receive personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1), and if the processing is carried out by automated means (Art. 20 GDPR);
  • objection – to object to the processing of her personal data for the legitimate interests of the administrator, on grounds relating to her particular situation, including profiling. In such a case, the administrator shall assess the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims. If, according to the assessment, the interests of the data subject are more important than the interests of the administrator, the administrator shall be obliged to cease processing data for those purposes (Article 21 GDPR).

To exercise the aforementioned rights, the data subject should contact the administrator using the provided contact details and inform them which right they wish to exercise and to what extent.

 

Complaint to the supervisory authority

If you believe that the processing of your personal data infringes data protection regulations, you have the right to lodge a complaint with a supervisory authority, in particular in a Member State of your habitual residence, place of work, or place of the alleged infringement.

In Poland, the supervisory authority within the meaning of GDPR is the President of the Personal Data Protection Office.
Cookies files„
 General Information
Our website, like all other sites, uses „cookies” (hereinafter referred to as CookiesCookies are small text files that are saved on your end device (e.g. computer, tablet, smartphone) in connection with the use of a website, which can be read by our teleinformatic system (first-party cookies) or the teleinformatic system of third parties (third-party cookies). Their use is intended to ensure the correct functioning of the website.

These files enable us to identify the software you are using and, therefore, customize the service to your individual needs. Cookies typically contain the name of the domain they originate from, their storage duration on your device, and an assigned value.
Types of Cookie Files
We use two types of cookies:

  • Session cookiesare stored on your device and remain there until the end of your browser session. The saved information is then permanently deleted from your device's memory. The session cookie mechanism does not allow for the download of any personal data or any confidential information from your device.
  • Durable cookiesare stored on your device and remain there until you delete them. Ending the browser session or turning off the device does not delete them from your device. The persistent cookie mechanism does not allow for the retrieval of any personal data or any confidential information from your device.

Celebration
We also use third-party cookies for the following purposes:

  • web service configuration;
  • promotion of the service using social media, i.e. LinkedIn, which is administered by LinkedIn Ireland Unlimited Company, located in Ireland. The privacy policy is available at this link: https://pl.linkedin.com/legal/privacy-policy
  • popularization of the service through social media, i.e. YouTube, administered by Google Ireland Ltd., based in Ireland; Google's Privacy Policy is available at the following link: https://policies.google.com/privacy?fg=1;

To learn about the rules for using cookies, we recommend familiarizing yourself with the privacy policies of the companies mentioned above.

Using your web browser settings or service configuration, you can change the settings related to Cookies yourself at any time, defining the conditions for their storage and access by Cookies on your device. You can change these settings to block the automatic handling of Cookies in your web browser settings or to inform you each time Cookies are placed on your device. Detailed information about the possibilities and methods of handling Cookies is available in your software's (web browser's) settings.

Safety
The cookies we use are safe for your devices. In particular, it is not possible for viruses or other unwanted or malicious software to enter your devices through cookies.

Social media

We have social media profiles on LinkedIn and YouTube („fan pages”). On these fan pages, we regularly publish and share content related to the services we provide.

Social media administrators record user behavior using cookies and other similar technologies with every interaction with our fan pages and other LinkedIn and YouTube sites. Social media administrators have access to general statistics on user interests and demographics (such as age, gender, location) of users visiting fan pages. As part of using social media, the scope and purposes of data processing on social media are determined by the administrators of those services.