LeilyCloud

Privacy notice of FUNDACJA ROZWOJU PRZEDSIĘBIORCZOŚCI „TWÓJ STARTUP”
A. Identity of data controller
The Data Controller of Your personal data is the FUNDACJA ROZWOJU PRZEDSIĘBIORCZOŚCI „TWÓJ STARTUP” with its registered office in Warsaw (address: ul. Żurawia 6/12, location 766, 00-503 Warsaw).
B. Purpose of processing
We would like to inform You, that Your personal data will be processed on the legal basis of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / WE (hereinafter as „GDPR”) for the following purposes:
a. To verify POA to act on behalf of the Contractor including verification of provided personal data in public registers, to contact You in matters related to the performance of the Agreement and for legitimate interests pursued by the data controller (the basis of Article 6 point 1 letter b and f of the GDPR). The data will be processed until the contract is performed, and in the scope of archiving the data provided in contract, until the claims are expired;
b. Compliance with legal obligations (Article 6 (1) (c) of GDPR), this purpose is related to the legal obligations of storing and processing of specific documents for the time specified in legal regulations, e.g.
• Ustawa z 29.09.1994 r. o rachunkowości (Dz. U. z 2017 r. poz. 1858);
• Ustawa z dnia 29 sierpnia 1997 r. - Ordynacja podatkowa (Dz. U. 1997 nr 137 poz. 926);
• Ustawy z dnia 1 marca 2018 r. - o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu (Dz. U. 2018 poz. 723);
• Regulation (EU) 2023/988 of the European Parliament and of the Council of 10 may 2023 on general product safety (GPSR) (Official Journal of the European Union L 135).
c. In order to possibly determine, investigate or defend against claims, which is our legitimate interest (the basis of Article 6 (1) (f) of GDPR). The data will be processed until the claims expire

C. Source
Your personal data was collected directly in connection to performance of a contract or provided by the Contractor being Party to the contract.

D. Data transfer
a) Public authorities, to the extent that they do not receive data as part of specific legal proceedings, e.g. in connection with counteracting money laundering;
b) Entities that process Your personal data on behalf of the Foundation on the basis of a a data processing agreement (“processors”). These will include: Beneficiaries of Data Controller, IT specialists, archiving companies, entities providing banking and payment services, hosting companies and employees and associates of Data Controller ;
c) External data controllers (the so-called Parallel Data Controller, to whom the data is shared, e.g. legal advisors and lawyers, entities conducting courier or postal activities, entities purchasing receivables - if You do not pay our invoices on time),
d) protection, primarily through:
• Cooperation with entities in countries for which a adequacy decision has been issued by European Commission;
• Application of standard contractual clauses issued by the European Commission.
Data controller always informs about the intention to transfer personal data outside the EEA at the stage of collecting them.

E. Data profiling
Please be advised that Your data will not be subject to profiling, i.e. automated analysis of Your data and development of predictions about preferences or future behaviours (profiling means, e.g. in the case of marketing profiling, determining which offer You might be most interested in based on for Your earlier election).
F. Your Rights
a) The right to access personal data processed by us(Article 15 of GDPR),
b) The right to rectify entrusted personal data, including its correction (Article 16 of GDPR),
c) The right to erase personal data from our systems, the so-called "right to be forgotten "- if You think there are no grounds for us to process Your data, You can request that we delete it (Article 17 of GDPR),
d) The right to restrict processing of personal data - You can request that we limit the processing of personal data only to their storage or performance of activities agreed with You, if we have incorrect data about You or we process them unreasonably; or You do not want us to remove them because You need them to determine, pursue or defend claims; or for the duration of the objection to data processing (Article 18 of GDPR),
e) The right to data portability - You have the right to receive from us in a structured, commonly used machine-readable format (e.g. ".csv" format) personal data about You in whose possession we are under a contract or consent. You will have this right if You have data in electronic format - if You only have data in paper form, You will not be able to exercise this right. You can order us to send this data directly to another entity (Article 20 of GDPR),
f) Right to object - You can object to the processing of Your data if the basis for using the data is our legitimate interest - art. 21 of GDPR. In such a situation, after examining Your request, we will no longer be able to process the personal data covered by the opposition on this basis, unless we demonstrate the existence of legitimate grounds for data processing that is considered to prevail over Your interests, rights and freedoms.
g) If in Your opinion the processing of personal data violates the provisions of GDPR, You have the right to lodge a complaint to the supervisory body, i.e. the President of the Office for Personal Data Protection
G. Contact

If You need additional information related to the protection of personal data or want to exercise Your rights, please contact us at: rodo@twojstartup.pl