Privacy policy

PRIVACY POLICY - BEATBYBRICK

1. Who is the Data Controller? The Controller of your personal data is the Entrepreneurship Development Foundation "Twój StartUp" with its registered office in Warsaw (address: ul. Żurawia 6/12, lok. 766, 00-503 Warsaw, Poland). This privacy policy applies to the Foundation's services provided by the organized part of the enterprise "BeatByBrick". Contact details: phone number +48 534 548 726, e-mail address: vanessakunawicz0@gmail.com, operated by Vanessa Kunawicz (Beneficiary's name and surname).

2. Why do we process your data? A. In connection with the services provided through BeatByBrick, which consist of the sale of brick albums, i.e., in order to conclude or perform a contract (Art. 6(1)(b) of the GDPR). Your data will be stored until the contract is performed. B. For marketing and promotional purposes of products offered by the Foundation "Twój StartUp" based on our legitimate interest (Art. 6(1)(f) of the GDPR). Your data will be processed until you object. C. To fulfill any legal obligations incumbent on us in connection with the cooperation (Art. 6(1)(c) of the GDPR). This purpose is related to the legal obligations to store specific documents for the time specified in legal provisions, e.g.:

  • Accounting Act of September 29, 1994;

  • Tax Ordinance Act of August 29, 1997;

  • Act of March 1, 2018, on counteracting money laundering and terrorism financing. D. For the possible establishment, exercise, or defense of legal claims, which is our legitimate interest (Art. 6(1)(f) of the GDPR). Data will be processed until the claims are time-barred. E. If you grant consent, your data will be processed within the limits and purpose specified in the consent (Art. 6(1)(a) of the GDPR). Data will be processed until the consent is withdrawn.

3. What data is processed? To conclude a contract, we require data on the contract/order form (if you do not provide it, we will not conclude the contract / fulfill the order). Additionally, we may ask for optional data that does not affect the conclusion of the contract (if we do not receive it, we will not be able to, e.g., call your contact number). During the term of the contract and the provision of services, we come into possession of your other data. The appearance of your personal data with us is a consequence of the operation of our services that you use.

4. Who will the data be shared with? A. Public authorities, to the extent they do not receive data under specific legal proceedings, e.g., in connection with anti-money laundering. B. Entities that process your personal data on behalf of the Foundation based on a data processing agreement (Data Processors). These include Foundation Beneficiaries, IT specialists, archiving companies, hosting companies. C. External Data Controllers (so-called Parallel Controllers) to whom data is shared, e.g., legal advisors and advocates, couriers or postal operators, debt collection entities (in case of failure to pay our invoices on time). D. Entities located outside the EEA, but only when necessary and with an adequate level of protection, primarily through: a. Cooperation with entities in countries for which a relevant European Commission decision has been issued; b. Use of standard contractual clauses issued by the European Commission. The Controller always informs about the intention to transfer personal data outside the EEA at the stage of its collection.

5. Is the data profiled? Please be advised that your data will not be subject to profiling, i.e., automated analysis of your data and developing predictions about your preferences or future behavior.

6. What are your rights? A. Right of access to your personal data (Art. 15 GDPR). B. Right to rectification of personal data, including its correction (Art. 16 GDPR). C. Right to erasure of personal data ("right to be forgotten") - if you believe there is no basis for us to process your data, you can request its deletion (Art. 17 GDPR). D. Right to restriction of processing - you may request that we restrict processing to storage only, if we have incorrect data or process it without legal basis, or if you need it to establish, exercise or defend claims, or for the duration of an objection raised (Art. 18 GDPR). E. Right to data portability - you have the right to receive from us in a structured, commonly used machine-readable format (e.g., ".csv") the personal data concerning you, which we hold based on a contract or consent. You may request us to transmit this data directly to another entity (Art. 20 GDPR). F. Right to withdraw consent - you have the right to withdraw your consent to data processing at any time (Art. 7(3) GDPR). Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent can be withdrawn by sending an email to: beatbybrick@gmail.com. G. Right to object - you can object to the processing of your data if the basis for its use is our legitimate interest (Art. 21 GDPR). H. If, in your opinion, the processing violates the GDPR, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office in Poland.

7. Contact If you need additional information related to personal data protection or want to exercise your rights, please contact us at: rodo@twojstartup.pl

PART II - COOKIE POLICY

Cookie Policy Cookies are text files created automatically by web browsers when visiting or using websites. They are sent by the website and saved on the user's device. Through them, the controller receives information allowing, among other things, the proper functioning of the site, ensuring security, and improving its performance.

Data Controller The Data Controller is the Entrepreneurship Development Foundation "Twój StartUp" with its registered office in Warsaw (ul. Żurawia 6/12, lok. 766, 00-503 Warsaw), entered into the National Court Register under KRS number 0000442857; NIP: 5213641211; REGON: 146433467, contact details: phone +48 534 548 726, e-mail: vanessakunawicz0@gmail.com in connection with the organized part of the enterprise named BeatByBrick operated by Vanessa Kunawicz.

Types of cookies used:

  • Necessary/Technical: Essential for the proper functioning of the website (e.g., keeping login sessions, remembering cookie consent).

  • Functional: Remember and adapt the platform to your choices.

  • Analytical: Allow us to check the number of visits and traffic sources. We use solutions from Google, Mailchimp, and Hotjar.

  • Marketing: Allow for adjusting advertising content to the user's interests.

  • Social media cookies: Installed by our partners to match advertising content in social media.

Cookie Storage Time:

  • Session: Stored until you leave the site or close the browser.

  • Persistent: Exist until manually deleted or for a specific time defined in the browser.

Type of data collected: IP address, device type, time spent on the site, actions taken on the site, connection location.

How to withdraw consent: You can block cookies in your web browser settings (Firefox, Chrome, Microsoft Edge, Safari). Blocking cookies may result in incomplete or incorrect functioning of the website.

Contact: For questions or to exercise your rights, contact us at the addresses indicated in the "Data Controller" section. In case of a breach, you have the right to lodge a complaint with the President of the Personal Data Protection Office at https://uodo.gov.pl/.