Privacy policy

We are the Data Controller

We control your personal data. We determine the purposes and means of the processing. We do it in 100% compliance with the GDPR. This guarantees that we duly respect your rights when using your data.

Where we have got your personal data from and what they are?

Every time you contact us means that you make available to us at least some of your personal data. They take various forms, not just your name. They also include: your phone number, IP address, e-mail address and many, many others. Personal data are a broad and developing category. They are any information that makes it possible to determine your identity. Providing your personal data is voluntary. Without access to them, we will be unable to respond to your needs.

On what grounds and for what purposes we process your data

You make your data available to us on various grounds (e.g. explicit consent). Even a specific action taken by you (e.g. taking interest in our offer or concluding and performing a contract) also means that we have access to them by necessity. The processing may be automated (e.g. data profiling). This gives you a more customised offer. It has no negative or significant impact on your situation. We can process the data on other grounds specified in the GDPR (legal obligation, vital interests of the data subject, task carried out in the public interest / official authority, legitimate interests pursued by the controller or by a third party). Efficient communication with you is the main purpose of the processing. That is how we respond to your needs. We may use the data to: optimise the Xdeep operational model, pursue or enforce claims (or defend against them), conduct analyses for our company and satisfy the accountability obligation arising from the GDPR. With your consent, we may use the data for marketing purposes, as well as save them on cookies and collect data from websites and mobile apps.

Scope of the data and period of their storage

We follow the principle of minimisation – we process data only to the necessary extent. In terms of duration, we also use them for as short as is appropriate for the grounds for and purposes of their processing.

Your rights to personal data

The GDPR allows you to: gain access to your data, rectify and erase them, restrict their processing and have them transmitted. You can exclude your data from automated decision-making (including profiling). You are entitled to object to the processing of your data.

Right to lodge a complaint

You have the right to lodge a complaint regarding the manner in which we process your data. In that case, you would lodge it with a supervisory authority. The supervisory authority is the Head of the Office for Personal Data Protection (00-193 Warszawa, ul. Stawki 2).

Contact

Regarding data, just message us at biuro@xdeep.pl