What is GDPR?
GDPR (General Data Protection Regulation) is an EU regulation that governs the rules for processing personal data of natural persons in the European Union. It came into force on May 25, 2018, and aims to ensure a high level of protection for your personal data.
Data Controller
The controller of your personal data is spring stoat, with its registered office at ul. Marszałkowska 87/42, 00-683 Warsaw. You can contact us regarding data protection at: [email protected].
Your Rights under GDPR
Right of Access (Art. 15)
You have the right to obtain confirmation as to whether or not we are processing your personal data, and where that is the case, access to the personal data and information regarding the purposes of the processing, categories of data, recipients, retention period, and source of data.
Right to Rectification (Art. 16)
If your data is inaccurate or incomplete, you have the right to request its rectification or completion.
Right to Erasure (Art. 17)
In certain situations, you can request the erasure of your personal data, e.g., when the data is no longer necessary for the purposes for which it was collected or when you withdraw your consent to processing.
Right to Restriction of Processing (Art. 18)
You can request the restriction of data processing, e.g., if you contest the accuracy of the data or if the processing is unlawful, but you object to the erasure of the data.
Right to Data Portability (Art. 20)
You have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit this data to another controller.
Right to Object (Art. 21)
In the case of processing data based on the legitimate interest of the controller, you can object to this processing.
Right to Withdraw Consent
If processing is based on your consent, you can withdraw it at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
How to Exercise Your Rights
To exercise your rights, please contact us in writing at the business address or electronically at: [email protected]. In your request, you should provide data that allows for your identification and specify which right you wish to exercise.
We will respond to your request without undue delay, but no later than within one month of receipt. In the case of complex requests or a large number of requests, this period may be extended by a further two months, of which you will be informed.
Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in Poland, this is the President of the Personal Data Protection Office (PUODO).
Contact details: Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
Data Security
We implement appropriate technical and organizational measures to ensure the security of your personal data and protect it against unauthorized access, loss, or destruction.
Last updated: January 2024