Privacy and data protection policy

6 November 2020

General information

.

We place great importance on protecting your data. The following Privacy and Data Protection Policy explains the collection, processing and use of your data via our website, as well as information about the processing of personal data by EXN sp. z o.o. based in Warsaw.

.

Operator/Data Administrator

.

The operator of the exn.com.pl website is EXN sp. z o.o. with its registered office in Warsaw, 18 Twarda Street, 00-105 Warsaw (KRS: 0000851787, NIP: 5252830293, REGON: 386630236). The operator of the website is the administrator of personal data (“Administrator“) within the meaning of the provisions of Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (Official Journal of the EU L No. 119 of 2016; “RODO”).

.

Contact

.

In matters related to the processing of personal data, please contact:

.
    .
  1. email, directing the email to: biuro@exn.com.pl
    2. .
  2. w by means of written correspondence, directing your mail to the following address our Wrocław Office: al. Armii Krajowej 12A/6, 50-541 Wrocław.
. .

Personal data processing

.

Personal data means any information about an identified or identifiable natural person. This includes, for example, information such as name, postal address, email address or telephone number. The security of personal data is an important issue for us. For this reason, the operation of our website is carried out in accordance with the applicable data protection legislation, in particular the RODO.

Data from website contact form

.
    .
  • Subject processing: As part of the contact form available on our website website under the “Contact Us” tab, we acquire the data necessary to contact the user of the website in relation to his/her message sent through this form, i.e. his/her name or name or other name of the sender and e-mail address. We may also acquire other personal data if it is provided in the body of the message.
    • .
  • Objectives processing: The personal data provided are used to answer to answer the questions asked, to process the requests and demands of the of the contacted persons or the performance of a contract or the intention to conclude a contract the conclusion of a contract, as well as the legally justified interest of the Administrator or a third party, i.e. the performance of actions contacting a user of the website Administrator, as well as to establish, assert or defend their claims – depending on the scope of the contact.
  • Basis of processing: Article 6(1)(f) RODO, alternatively also Article 6(1)(a) RODO. a RODO.
    • .
  • The provision of of this data is voluntary, however, it is necessary in order to answer reply to the message sent.

Personal data obtained by email or telephone contact

.
    .
  • Subject Processing: Within the framework of email correspondence and telephone conversation, it is possible to is possible to obtain the contact details of the contact person, in particular his or her name, e-mail address or telephone number, as well as possibly other data. as well as possible collection of other personal data if provided in the message. if provided in the message or conversation.
    • . .
  • Objectives processing: The personal data provided is used to answer answering a question, dealing with requests and demands of to respond to your enquiries, to process your requests and demands, or to perform a contract or take to perform a contract or take steps to conclude a contract, as well as for the purposes of legitimate interest of the Administrator or of a third party, i.e. to third party, i.e. to carry out contact activities in relation to a client or potential customer or other contact person, as well as as well as to establish, assert or defend their claims – depending on the scope of the contact.
    • .
  • Basis of processing: Article 6(1)(f) RODO, alternatively also Article 6(1)(a) or (b) RODO. a or b RODO.
    • .
  • The provision of of this data is voluntary, however, it is necessary in order to respond reply to the message sent or to pursue the interests of the contacting person.

Storage period for acquired data

.

We try process personal data only for the shortest possible timeframe. We only save your data for as long as is necessary for the purpose in question or as long as required by legal provisions. If there is a legitimate interest of the Administrator or a third party, we store your data for no longer than for the period of limitation of any possible claims which may arise in connection with the service provided or the fulfilment of the interest which you have addressed to us.

.

Data from the contact form on the website and those obtained through Contact from the contact form on the website and those obtained by email or telephone are stored until until the matter has been dealt with by the sender and the response is given, after which time it may be stored until the statute of limitations for claims which may arise arising from the correspondence or other contact

Recipients of data

.

Recipients of the processed personal data may be entities cooperating with the Administrator, in particular entities providing legal, accounting, auditing, postal or courier services and others, necessary for the fulfilment of the aforementioned purposes of processing. If contact with the Administrator relates to ongoing investments, recipients may also be entities participating in specific investments.

Rights of data subjects

.

Every person whose data is processed by the Controller, under the terms of the legal provisions, in particular the RODO, has the following right to:

. .
    .
  1. requests access to personal data;
  2. rectification of personal data, e.g. when they are incorrect or incomplete;
    3. .
  3. revoke consent to the processing of your data at any time, to the extent that insofar as the data are processed on the basis of the consent given, however, without affecting the lawfulness of the processing, which was carried out on the basis of consent before its withdrawal;
    4. .
  4. delete or limitation of the processing of personal data;
  5. to lodge object to the processing of your data;
  6. transfer of data to another personal data controller;
  7. not be subject to to decisions on automated processing of personal data, including profiling (we inform you that you are not subject to such profiling (we inform you that you are not subject to such decisions).
.

We would also like to inform you also that if you believe that the processing of your of your personal data violates the applicable data protection legislation Personal Data Protection Regulations, in particular the RODO, you have the right to lodge a complaint with the President of the Office for the Protection of Personal Data. However, before taking such action, in order to clarify a doubtful issue concerning protection of your personal data, we recommend that you contact the Administrator.