1. Data Controller

The data controller is I5167 SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, based at Żurawia 71, 15-540 Białystok, Poland, registered in the National Court Register under number 0001118785, NIP: 9662195504, REGON: 529259702 (hereinafter referred to as the “Controller”).

2. Purpose of Processing Personal Data

The personal data of website users will be processed by the Controller for the following purposes:

a. Execution of agreements entered into with users and actions taken before their conclusion,

b. Enabling contact with the user,

c. Fulfillment of legal obligations of the Controller,

d. Realization of legitimate interests of the Controller, such as analysis and statistics.

3. Legal Basis for Data Processing

The legal basis for the processing of personal data is:

a. The user’s consent,

b. The execution of the agreement,

c. Fulfillment of legal obligations,

d. The legitimate interest of the Controller.

4. Types of Personal Data Processed

The Controller processes the following personal data of users:

a. First and last name,

b. Email address,

c. Phone number,

d. Residential address,

e. Other data provided to the Controller in connection with the execution of services or legal obligations.

5. Retention Period for Personal Data

Personal data will be stored for no longer than necessary to achieve the purposes for which they are collected and processed, including the duration of the agreement, the period for the limitation of claims, and the time required by applicable laws (e.g., tax-related).

6. Recipients of Personal Data

Only the following parties will have access to the personal data processed by the Controller:

a. Authorized employees and collaborators of the Controller, who are obligated to use the data in accordance with the purposes outlined in this policy,

b. External entities that the Controller collaborates with in connection with business activities, such as providers of legal, IT, financial, accounting, courier, postal, and marketing services, and providers of analytical tools,

c. Entities authorized by law, such as public authorities, courts, prosecutors, or the police, when required by the applicable legal basis.

The sharing of personal data as described above will take place in accordance with applicable regulations and ensuring data security.

7. Rights of the Data Subject

Users have the right to:

a. Access their data,

b. Rectify or supplement their data,

c. Request the deletion of their data (the right to be forgotten),

d. Restrict the processing of their data,

e. Transfer their data,

f. Object to the processing of their data,

g. Withdraw consent to data processing when consent is the basis for processing,

h. File a complaint with the President of the Personal Data Protection Office.

8. Profiling

The Controller does not carry out profiling that would have legal effects or similarly significantly affect the rights and freedoms of users.

9. Transfer of Data to Third Countries

The Controller may transfer personal data to third countries (outside the European Economic Area), particularly when using services provided by cloud service providers or third-party analytical tools. When transferring data outside the EEA, the Controller ensures an adequate level of protection for personal data in accordance with GDPR by using standard contractual clauses or other appropriate safeguards.

10. Marketing Communication

The Controller does not send marketing communication or newsletters. If such communication is introduced, users will be informed and asked for consent.

11. Contact with the Data Controller

To exercise the rights or obtain additional information regarding personal data processing, please contact:

I5167 SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

Żurawia 71, 15-540 Białystok, Poland

NIP: 9662195504, REGON: 529259702