Privacy Policy

PERSONAL DATA PRIVACY POLICY
www.Servers24.pl
Effective from 20.04.2022

§ 1

Identity of the Data Controller

1. The controller of personal data provided during the use of the Service operating under the name Servers24.pl is Servers24.pl Rafał Brudnicki, ul. Bohaterów Warszawy 4, 05-800 Pruszków, Tax ID (NIP): 526-286-30-64.
   Data are processed in accordance with currently applicable laws; i.e., Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), the Act of 10 May 2018 on data protection, as well as the Act of 18 July 2002 on the provision of electronic services.

§ 2

Definitions Used

1. The following definitions apply in this policy:
   a. Service – the online service available at the address Servers24.pl, through which the User can: browse its content, contact the data controller, order commercial and marketing information.
   b. Data Controller – the entity that determines the purposes and means of processing data; in this policy it means: Servers24.pl Rafał Brudnicki, ul. Bohaterów Warszawy 4, 05-800 Pruszków, Tax ID (NIP): 526-286-30-64.
   c. User – a natural person whose data is concerned and who uses the services available on the Servers24.pl Service.
   d. Personal Data – any information that can lead to the identification of a natural person without excessive time and cost, including identification, address, and contact data.

§ 3

Purposes of Data Processing

1. The data controller processes personal data for the following purposes:
   a. performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract,
   b. necessity of processing for purposes arising from the legitimate interests pursued by the controller or a third party,
   c. registration and account creation in the Service,
   d. providing answers to questions submitted via the contact form or using contact data available on the Service website,
   e. signing up for and participation in events (including webinars, training, meetings) organized by Servers24.pl or in cooperation with company partners,
   f. marketing of products and services of the data controller or company partners via electronic or traditional means,
   g. sending commercial and marketing information of the data controller to the e-mail address provided by the User during newsletter or blog subscription, with the consent of the data subject,
   h. sending reviews about the data controller’s services and products through external satisfaction survey services (such as Opineo, Ceneo, etc.) with the consent of the data subject, i. asserting rights and claims by the data controller or the data subject.
2. Providing data is voluntary.
3. Failure to provide personal data results in the inability to conclude and perform a contract and to carry out actions aimed at concluding a contract.

§ 4

Methods of Data Collection

1. The User’s personal data are collected directly from the data subjects, i.e., through:
   a. filling out a contact form with contact data when submitting an inquiry through the website form,
   b. filling out a newsletter subscription form,
   c. registering an account in the Service,
   d. registering for events organized by Servers24.pl,
   e. providing data to prepare and conclude a contract,
   f. direct contact with the data controller using contact details available on the website or in a traditional form at the place of business activity.

§ 5

Scope of Processed Data

1. The scope of processed personal data has been limited to the minimum necessary to provide services in the scope of:
   a. submitting an inquiry via the contact form or using contact data available on the website: first name and last name, e-mail address, phone number, any other data voluntarily provided by the data subject,
   b. subscribing to the newsletter: first name and last name, e-mail address, phone number, company name,
   c. subscribing to blog content: first name and last name, e-mail address, phone number, company name,
   d. registering for an event: first name and last name, e-mail address, phone number, company name,
   e. placing an order, preparing and concluding a contract, as well as issuing an invoice: first name and last name, e-mail address, phone number, position, name of the represented company, company address, tax ID (NIP), REGON, bank account number.

§ 6

Data Processing Period

1. Personal data are processed for the period necessary to achieve the purpose for which they were collected, i.e.:
   a. for the duration of the concluded contract,
   b. for the period necessary to document the performed contract or service by the controller or a third party, including issuing a bill or invoice – data are stored for 5 years counted from the end of the calendar year in which the tax payment deadline expired,
   c. until the consent is withdrawn, if data processing is based on the consent of the data subject.

§ 7

Data Recipients

1. The User’s personal data may be entrusted to other entities for the purpose of performing services on behalf of the data controller, in particular to:
   a. producers, suppliers, and distributors of IT solutions,
   b. economic information offices,
   c. financial and credit institutions,
   d. entities processing personal data on behalf of the Controller based on a personal data processing agreement,
   e. personal data may also be shared with entities supporting the data controller, including courier and postal services and online payment processing.

§ 8

Rights of Data Subjects

1. The data subject has the right to:
   a. access their data and rectify it,
   b. delete data, unless other legal provisions require the data controller to archive data for a specified period,
   c. data portability if the basis for data processing is a contract or consent and data processing is automated,
   d. object to data processing for direct marketing purposes pursued as a legitimate interest of the controller, and limit processing,
   e. not be subject to automated profiling if the controller takes decisions based solely on automated profiling that produce legal effects or similarly affect the data subject,
   f. control data processing and obtain information about who is the data controller, the purpose, scope, and manner of data processing, the content of data, source of data, and data sharing, including recipients or categories of recipients,
   g. withdraw consent at any time if data processing was based on consent. Withdrawal does not affect the lawfulness of processing prior to withdrawal, h. lodge a complaint with the President of the Personal Data Protection Office (PUODO) if the data subject considers that data processing violates applicable regulations.
2. To exercise rights regarding data control, access, correction, and other rights, contact the data controller.

§ 9

Final Provisions

1. The data controller reserves the right to change this privacy policy, especially if required by applied technical solutions, changes in legal regulations concerning data privacy, or other significant changes affecting the information provided to Users.
2. In case of changes to the policy, appropriate modifications will be introduced and will apply from the date of their publication on the Service website.