INFORMATION ON THE PROCESSING OF PERSONAL DATA

1. Data of the personal data administrator

The administrator of the Customer's personal data is the Service Provider, i.e. ITMORE limited liability company with its registered office in Pruszcz Gdański, at ul. Jana Kochanowskiego 6A / 4; 83-000 Pruszcz Gdański, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register, under the KRS number: 0000600881, NIP: 6040169091, REGON: 36369104600000. Contact with the Personal Data Inspector (IOD) is possible at: office@flowgres.com.

2. Principles of personal data processing

Personal data is processed for the purpose and scope specified in the Act on the provision of electronic services of July 18, 2002 (Journal of Laws No. 144, item 1204, as amended), in order to implement the Service Agreement.

The collected data may also be processed in the event of possible claims, for tax purposes and to ensure the highest quality of the Service.

The scope of entrusted data includes, among others the following personal data of Users using the Services: name, surname, billing address, e-mail address, telephone number, information on the use of the Service, IP address, technical data of the Customer's devices. In order to perform the Agreement or perform other legal action with the Customer, the Service Provider may process other data necessary due to the nature of the service provided or the method of its settlement.

When using the Service, in addition to the data entered by Users, data may also be automatically collected regarding the User's IP address, browser type, and operating system type.

3. The basis for the processing of personal data

Personal data will be processed in order to enable the provision of the Service pursuant to art. 6 sec. 1 point b) GDPR. The legal basis for data processing is the Agreement. Failure to provide personal data may prevent the conclusion and implementation of the Agreement. The data will be processed until the Agreement is fulfilled (for the duration of the Service), and then until the claims expire and in accordance with the obligations resulting from applicable legal provisions. After the end of using the Service, the Service Provider processes the personal data necessary to settle the Service and pursue claims for payment for the use of the Service, necessary for the purposes of advertising, market research, and customer behavior and preferences, with the results of these studies intended for the purpose of improving the Services, with the consent of the Customers. and on the terms specified in the provisions of law.

Expressing consent to the processing of data for marketing purposes enables the Customer to receive information about offers, promotions and services offered by the Service Provider. The legal basis for data processing for marketing purposes is the Customer's consent, which may be withdrawn at any time. The data will be processed until the consent is withdrawn. Personal data of persons visiting the website of the Service Provider may be processed in some cases on the basis of the legitimate interest of the data controller.

4. Recipients of personal data.

The service provider may transfer personal data to the following categories of entities:

• companies providing services related to the provision of servers, maintenance and support for IT systems;
• banks and the entity servicing electronic payments;
• legal and tax companies in the case of legal advice and representing the interests of the Service Provider in the event of such a need;
• companies providing marketing services if the Customer agrees to the processing of data for marketing purposes.

5. Rights of data subjects.

KThe customer has the right to access their data and the right to rectify, delete, limit processing, the right to transfer data, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing, which was made on the basis of consent before its withdrawal. . The customer has the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

6. Transfer of personal data outside the EEA or an international organization.

The service provider does not transfer the processed data outside the EEA or to an international organization. In order to ensure the technical operation of the Flowgres Application and ensure data durability, the data may be copied, multiplied and stored on servers located in server rooms operated by third parties, providing data storage and security services for the Service Provider, while all servers are located in the European Union.

7. Automated decision making and profiling.

The Service Provider, in the event of the Customer's consent, may make automated decisions based on personal data obtained in connection with the provision of the Services, including profiling.