Privacy Policy of Bangproof.com and its attorney SNOWEE Sp. z o.o.

This document contains information about compliance with information disclosure obligations and the protection of personal data with regard to the processing of personal data under the General Data Protection Regulation (hereinafter referred to as GDPR).

Data Controller

The controller of the provided data is SNOWEE Sp. z o.o. located in Poland, Karola Miarki 3a/5, 45-367 Opole (hereinafter referred to as Company or Controller).

Legal basis for processing of the personal data

Legal Basis for processing of the personal data is determined by:

( art. 6 par. 1 lit. a GDPR) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

(art. 6 par. 1 lit. b GDPR) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

(art. 6 par. 1 lit. f GDPR) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

Collected data

Controller is processing only the personal data allowed to be processed e.g. name, surname, address, company name, an identification number, location data, e-mail address, an online identifier, phone number. (art. 4 lit. 1 GDPR)

Sharing collected data

Your personal data may be transferred to subcontractors supporting the Company in the performance of its tasks, e.g. public administration bodies, accounting offices, law offices, IT companies etc. All subcontractors cooperating with the Company have signed a personal data entrustment agreement and meet the requirements of the GDPR.

Term of using collected data

Your personal data will be subjected to the standard process implemented by the Company, during which the data has been collected or until the withdrawal of consent for their processing.

Storage of collected data

We process your personal data:

• ? for the duration of the campaign you agreed to,
• ? as long as you won't withdraw the consent for their processing
• ? and after that process completion for the purposes of:
  
  i.e. to prove compliance with the provisions on the processing of personal data, we will be processing the data for the period in which the Company is required to retain data to document the fulfilment of legal requirements and enable the verification of their fulfilment by public authorities.

Rights of the data subject have

1) Right to information. This right provides the data subject with the ability to ask a Company for information about what kind of personal data (his or her) is being processed and the rationale for such processing. For example, a customer may ask for the list of personal data processors with whom his or her subject data is shared.

2) Right to access. This right provides the data subject with the ability to access to his or her personal data that is being processed. This request provides the right for data subjects to see or view their own personal data, as well as to request copies of the personal data.

3) Right to rectification. This right provides the data subject with the ability to ask for modifications to his or her personal data in case the data subject believes that said data is not up to date or accurate.

4) Right to withdraw consent. This right provides the data subject with the ability to withdraw a previously given consent for processing of their personal data for any purpose. The request would then require the company to stop the processing of the personal data that was based on the consent provided earlier.

5) Right to object. This right provides the data subject with the ability to object to the processing of their personal data. Normally, this would be the same as the right to withdraw consent, if consent was appropriately requested and no processing other than legitimate purposes is being conducted. However, a specific scenario might occur in which a customer asks that his or her personal data should not be processed for certain purposes while a legal dispute is ongoing in court.

6) Right to object to automated processing. This right provides the data subject with the ability to object to a decision based on automated processing. Using this right, a customer may ask for his or her request (for instance, a loan request) to be reviewed manually, because he or she believes that automated processing of his or her loan may not take into account their particular situation.

7) Right to be forgotten. Also known as right to erasure, this right provides the data subject with the ability to ask for the deletion of their personal data. This will generally apply to situations where a customer relationship has ended. It is important to note that this is not an absolute right, and depends on your retention schedule and retention period in line with other applicable laws.

8) Right for data portability. This right provides the data subject with the ability to ask for the transfer of his or her personal data. As a part of such request, the data subject may ask for his or her personal data to be provided back (to him or her) or transferred to another controller. When doing so, the personal data must be provided or transferred in a machine-readable electronic format.

Raising a complaint

If you want to use your rights or raise a complaint you should either: - Send a letter to the company address with the description of the complaint - Send an e-mail to info@bangproof.com with a following subject: PERSONAL DATA

Supervisor authority

in Poland is The Personal Data Protection Office.