WHISTBOARD.COM PRIVACY POLICY
WHAT DOCUMENT ARE YOU DEALING WITH?

This privacy policy (hereinafter the “Policy”) applies to all persons who use the whistboard.com website (hereinafter the “Visitor” and the “Website” respectively).

The Policy is for information purposes only, which means that it does not create any obligations for Visitors (it is not a contract or a regulation). The purpose of the Policy is to clearly present the rules for handling and processing personal data.

WHO IS THE CONTROLLER OF YOUR DATA?

The independent controllers of your personal data collected through the Website (including through the use of cookies or similar technologies, if used within the Website) or other channels of communication with the Visitor are:

Olesiński i Wspólnicy sp. k. based in Wrocław (Powstańców Śląskich Street 2-4, 53-333 Wrocław), entered in the Register of Entrepreneurs of the National Court Register, maintained by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under the number 0000620058 – telephone contact: (+48) 71 75 00 700, e-mail contact to data protection officer: odo@olesinski.com

Deviniti sp. z o.o. with its registered office in Wrocław (ul. Sudecka 153, 53-128 Wrocław), entered in the register of entrepreneurs of the National Court Register, kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under number 0000223645 – e-mail contact: info@deviniti.com

hereinafter referred to as “Administrator” / “Administrators”.

HOW DO WE CARE ABOUT YOUR PERSONAL DATA?

The Administrators attach great importance to the security and legality of the processing of personal data. Personal data of Visitors are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (Official Journal of the EU.L No. 119, p. 1) (“RODO”) and other currently applicable data protection laws. Personal data means information about an identified or identifiable natural person. 

FOR WHAT PURPOSES AND ON WHAT BASIS IS YOUR DATA PROCESSED?

Your personal data may be processed by each of the Controllers for the following purposes:

corresponding with Visitors, including replying to messages (legal basis: Article 6(1)(f) RODO – legitimate interest pursued by the Administrator);
taking action prior to entering into a contract at the request of the person whose data are being processed or the need to perform a contract already entered into (legal basis: Article 6(1)(b) RODO – necessity to perform the contract or take action prior to entering into it);
marketing activities, statistical and market analyses (legal basis: Article 6(1)(f) RODO – legitimate interest pursued by the Administrator);
Improving the operation of the Website and enabling Visitors to use its functionalities (legal basis: Article 6(1)(f) RODO – legitimate interest pursued by the Administrator);
to establish, defend and pursue claims that may arise within the relationship between you and any of the Administrators (legal basis: Article 6(1)(f) RODO – legitimate interest pursued by the Administrator).
IS DATA PROCESSING NECESSARY?

The processing of your personal data is carried out on a voluntary basis; however, it may be necessary in order to make use of certain functionalities of the Website, to respond to an enquiry, to conduct correspondence or to take other actions by a given Administrator.

HOW LONG WILL WE STORE YOUR DATA?

As a rule, your data will be processed until the above-mentioned purposes of processing are fulfilled, and in the case of marketing activities – until you lodge an objection, unless the law requires longer processing of such data or it will be stored longer in case of potential claims, for the period of their limitation specified by the law, in particular the Civil Code. In any case, the longer period of storage of personal data shall be decisive.

WHO WILL BE THE RECIPIENTS OF YOUR DATA?

Entities that cooperate with the Controllers may be involved in the processing of your personal data, in particular those that technically assist in the smooth running of the Website, including communication with Visitors (e.g. support in sending emails), providers of hosting or ICT services, companies that maintain software, as well as providers of legal and consultancy services.

WHAT RIGHTS DO YOU HAVE?
Each Visitor has the right at any time to:

lodge a complaint to the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw);
to transfer personal data which he/she has provided to the Administrator and which is processed by automated means and the processing of which is based on consent or on a contract, e.g. to another administrator
access to personal data (including e.g. receiving information which personal data are processed)
request rectification and restriction of processing (e.g. where the personal data is incorrect) or erasure of personal data (e.g. where it has been processed unlawfully);
to withdraw any consent given at any time, whereby the withdrawal of consent shall not affect the processing carried out by the Administrator in accordance with the law prior to the withdrawal of consent;
object to the processing of personal data concerning him/her carried out for the legitimate interests of the Controller or of a third party (where there are no other valid legitimate grounds for processing overriding the interests of the Visitor).
IS YOUR DATA TRANSFERRED TO A THIRD COUNTRY?

Where the Administrator uses tools to support its day-to-day operations that are provided by, for example, Google, the Visitor’s personal data may be transferred to a country outside the European Economic Area, in particular the United States of America (USA) or another country where an entity that cooperates with that company maintains tools for processing personal data in cooperation with the Administrator.

The security of personal data is ensured by standard contractual clauses approved by the European Commission. Efforts are also being made for partners to be covered by the EU-US Privacy Shield programme (more information on this is available at: https://www.privacyshield.gov/).

The Visitor has the right to obtain a copy of the safeguards applied by the relevant Administrator regarding the transfer of personal data to a third country. Contact details are indicated in Section II of this Policy.

LINKS TO OTHER WEBSITES

The Website may contain links to other websites. The Administrators encourage you to familiarise yourself with the regulations and privacy policies of other websites. This Policy applies only to the indicated actions of the Administrators.

CHANGES TO THE PRIVACY POLICY

Any changes to the Privacy Policy shall be published on the Website along with an indication of the date of their introduction.

Privacy policy version from: 16.02.2020