Privacy Policy - Meetendly

Meetendly’s Privacy Policy

effective date 27.01.2021

Polska wersja: https://meetendly.com/polityka-prywatnosci

General provisions

1. This Privacy Policy sets out the rules for the processing of personal data via the website available at https://meetendly.com (hereinafter referred to as the „Website”).
2. The controller of personal data collected via the Website is Wojciech Dasiukiewicz, registered in the Central Register and Information on Economic Activity under the name „Wojciech Dasiukiewicz OCTOCODE”, address Osiek nad Notecią, ul. Kasztanowa 1, 89-333 Osiek nad Notecią (Poland); tax id no. (NIP): 7642656562; email: [email protected], website: https://meetendly.com/; (hereinafter referred to as the „Controller”).
3. The Privacy Policy is the fulfillment of the Controller’s obligations under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as „GDPR”.

Ways and purposes of personal data processing

1. Using the Website involves the processing of User’s personal data for the following purposes:
  1. Contacting the Controller – for this purpose, User provides their email address, name, surname and other data contained in the message. Providing an email address is voluntary, but necessary to contact the Controller via email. In this case, personal data is processed in order to contact the User, and the basis for processing is the User’s consent resulting from the initiation of contact (Article 6 (1) (a) of the GDPR). The data will also be processed after contacting the Controller. The legal basis for such processing is the legitimate purpose of archiving correspondence for the purpose of documenting its course in the future (Article 6 (1) (f) of the GDPR).
  2. Setting up and maintenance of a User account – for this purpose, the Controller processes personal data provided by the User in the registration form, i.e. name, email address and password and in the account settings, i.e. telephone number, nickname. The legal basis is Article 6 (1) (b) of the GDPR, i.e. performance of a contract for the provision of services.
  3. Settlement of paid services – for this purpose the Controller processes personal data provided by the User through the account, such as: name and surname, company name, tax identification number, correspondence address and payment card details – pursuant to art. 106e section 3 of the Act of March 11, 2004 on tax on goods and services and Article 6 (1) (c) of the GDPR, in order to fulfill the legal obligation incumbent on ADO, in the form of the obligation to issue a VAT invoice, as well as Article 6 (1) (b) of the GDPR in order to perform the contract for the provision of services.
  4. Complaint handling – for this purpose, the Controller may process some personal data provided by the User, as well as data on the use of services that are the cause of the complaint or questions, data contained in the documents attached to the complaint or questions – pursuant to Article 6 (1) lit. b GDPR, in order to fulfill the obligation to consider the complaint, as well as Article 6 (1) (f) GDPR, i.e. the legitimate interest of the Controller, consisting in improving the quality of the Services and building positive relationships with Users;
  5. Cookies on the Website – on the basis of User’s consent (Article 6 (1) (a) GDPR).
  6. Analyzing data collected automatically when using the Website – in this case, personal data is processed on the basis of the legitimate interest of the Controller (Article 6 (1) (f) of the GDPR).
  7. Processing for archival and evidence purposes, for the purposes of securing information that may be used to prove facts – this is a legitimate interest of the Controller (Article 6 (1) (f) of the GDPR).
  8. Confirmation of the performance of the Controller’s obligations and pursuit of claims or defense against claims that may be directed against the Controller, as well as for the purpose of preventing or detecting fraud – based on the Controller’s legitimate interest, which is the protection of rights, confirmation of the performance of obligations and obtaining due remuneration from Users (Article 6 (1) (f) of the GDPR).
  9. Sending the Newsletter – pursuant to Article 6 (1) (a) GDPR, i.e. the User’s consent granted before subscribing to the Newsletter, and for the purpose of implementing direct marketing addressed to Users, pursuant to Article 6 (1) (f) GDPR, i.e. the legitimate interest of the Controller.
2. Personal data is not processed for the purpose of automated decision making without the express consent of the Users.

Personal data sharing

1. Personal data may be transferred to the following entities whose services are used by the Controller in order to run the Website and to provide services through it:
  1. Newsletter handler:
    1. UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania;
  2. Hosting provider:

DigitalOcean, LLC, 101 Avenue of the Americas, 10th Floor New York, NY 10013);

Internet traffic monitors:
1. Google LLC. (1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA)
2. Facebook, Inc. (1 Hacker Way, Menlo Park, CA 94025, USA)
3. Hotjar (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, Malta).
Entities providing social plugins:

Facebook, Inc. (1 Hacker Way, Menlo Park, CA 94025, USA)

The purpose and scope of data collection and their further processing and use by service providers referred to in clause 1, as well as the possibility of contact and the User’s rights in this regard and the possibility of making settings that ensure privacy protection are described in the privacy policies of those service providers.

Period of personal data storage

1. The Controller stores personal data for as long as it is necessary to achieve the purposes for which they were collected. Usually, personal data is stored for the duration of the use of individual services, until the contract for the provision of a given service is terminated, unless a longer statutory storage period applies.
2. After deleting the User’s account, the User’s personal data will be anonymized, with the exception of the following data: name, surname, e-mail address, purchase and payment history and information about the consent (these data will be stored for a period of 6 years from the removal of the Account for the purpose of considering complaints and possible claims. related to the use of services).
3. Users’ personal data contained in cookies are stored for a period corresponding to the life cycle of cookies stored on their devices (see section VI).
4. Data collected as part of complaints and questions are processed for the period necessary to consider a given complaint or question, but no longer than for a period of 3 years from the receipt of a given message. If a given message constitutes or may constitute evidence in proceedings before a court or other state authority, the Controller may store such messages and the personal data contained therein until the final conclusion of the proceedings.
5. When the basis for the processing of personal data is the legitimate interest of the Controller, they will be stored until the Controller recognizes the objection raised to the processing of data for these purposes as effective.

User’s rights in connection with the processing of personal data

1. Anyone who provides the Controller with their personal data declares that they provide it voluntarily and consent to their processing in accordance with the Terms & Conditions and the Privacy Policy.
2. After logging into the account, the User has access to the personal data provided by them and may:
  1. correct, change or delete personal data,
  2. delete the account, which results in the deletion of data, subject to section IV.
3. The User has the right to limit the processing of their personal data, to object to the processing and the right to transfer data (in the form of an exported .pdf file) upon request to the Controller in the form of an e-mail to the Controller’s address.
4. In order to prevent the re-registration of people whose account has been blocked due to unauthorized use of Meetendly, the Controller may refuse to delete the data necessary to block the possibility of re-registration (legal basis: Article 19 section 2 point 3 in connection with Article 21 section 1 of the Act of July 18, 2002 on the provision of electronic services).
5. The user has the right to lodge a complaint with the supervisory body – the President of the Personal Data Protection Office.
6. Requests will be implemented without undue delay, not later than within 30 days from the date of receipt of the request. Within this period, the Controller will answer or inform about a possible extension of the deadline and explain the reasons. If the Controller has doubts as to whether a specific request was made by an authorized person, he may ask a few additional questions to verify the identity of the applicant.

Cookies

General information

1. 1. The Website, like almost all other websites, uses Cookies to provide Users with the best possible experience. During the User’s first visit to the Website, information on the use of Cookies is displayed. If they do not change their browser settings, they consent to the use of Cookies.
  2. Cookies are digital data, in particular small text information, saved and stored on devices (e.g. computer, tablet, smartphone) through which the User uses the Website’s pages.
  3. Cookies used by the Controller are safe for Users’ devices. In particular, it is not possible for viruses or other unwanted software or malware to enter Users’ devices this way. Cookies allow us to identify the software used by the User and individually adjust the functionality of the Website. Cookies usually contain the name of the domain they come from, the storage time on the device and the assigned value.

Types of Cookies and their purpose

1. The Website uses three types of Cookies:
  1. own Cookies – used to ensure the proper operation of the Website.
  2. Third-party Cookies
    1. Google Analytics i Google Search Console – tools provided by Google LLC, used to create statistics and analyze them in order to optimize the Website. They automatically collect information about the User’s use of the Website. The information collected in this way is most often transferred to a Google server in the United States and stored there. Due to the IP anonymization activated by the Controller, the User’s IP address is shortened before forwarding. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there. The anonymized IP address provided by the User’s browser is, as a rule, not combined with other Google data. Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it uses the model contractual clauses approved by the European Commission to ensure an adequate level of personal data protection required by the GDPR. In order to prevent the collection of data collected by this type of Cookies by Google, as well as the processing of this data by Google, the User may install a browser plug-in at: https://tools.google.com/dlpage/gaoptout. Details related to data processing as part of Google Analytics are available at https://support.google.com/analytics/answer/6004245.

a marketing tool available as part of Facebook and provided by Facebook Inc. As part of this tool, the User may receive personalized Controller’s ads on Facebook. The data collected in this way is most often transferred to a Facebook server in the United States and stored there. The information collected as part of Facebook’s Pixel is anonymous, i.e. it does not allow the Controller to identify the User. The Controller only knows what actions the User has taken on the Website. Facebook may, however, combine this information with other information about the User collected as part of the User’s use of Facebook and use it for its own purposes, including marketing. Such Facebook activities are not dependent on the Controller, and information about them is available in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation. The User can manage their privacy settings in this regard also via their Facebook account. Due to the fact that Facebook Inc. is based in the USA and uses infrastructure located in the USA, it uses model contractual clauses approved by the European Commission to ensure an adequate level of personal data protection required by the GDPR.

HotJar – a tool enabling the collection of information about the User’s behavior on the Website for analytical purposes. This information does not allow the Controller to identify the User. The Controller only knows what actions a User has taken on the Website. Hotjar’s infrastructure is located in the European Union. Details related to the processing of personal data under Hotjar are available at: https://www.hotjar.com/legal/compliance/gdpr-commitment/ and https://www.hotjar.com/legal/policies/privacy/.

Cookies settings:
1. The User may independently and at any time change the settings for Cookies, specifying the conditions for their storage and access to the User’s device via Cookies. Changes to the settings referred to in the previous sentence can be made by the User using the settings of their web browser. These settings can be changed in particular in such a way as to block the automatic handling of Cookies, or to inform about them each time Cookies are placed on the User’s device. Detailed information on the possibilities and methods of handling cookies is available in browser settings.
2. The User may at any time delete Cookies using the functions available in the web browser they use. Restricting the use of Cookies may affect some of the Website’s functionalities.

Server logs

Using the Website involves sending inquiries to the server on which the Website pages are stored. Each query directed to the server is saved in the server logs. Logs include User’s IP address, server date and time, information about the web browser and the User’s operating system. Logs are saved and stored on the server. The data stored in the server logs are not associated with specific Users and are not used by the Controller to identify Users. The server logs are only auxiliary material used to administer the Website and their content is not disclosed to anyone except those authorized to administer the server.

Social media plugins

1. The Website includes a Facebook Messenger plugin. If the User uses a plug-in, e.g. by starting a chat, the relevant information will be sent directly to the Facebook server and stored there.
2. The plugin is necessary for the Controller to develop and promote the Website, maintain contact with current and future Users, as well as collect information in order to design and offer better services in the future. Facebook does not provide the Controller with information about the collected data and how it is used. The purpose and scope of data collection and their further processing and use by Facebook, as well as the possibility of contact and the rights of data subjects and the possibility of making settings to protect privacy are described in the privacy policy: https://www.facebook.com/privacy/ explanation/.

External links

1. The Website may contain links to websites of other entities. Personal data provided by the User via such websites is not subject to this Privacy Policy and the Controller is not responsible for the processing of personal data via such websites.
2. When using a link to another website, read the privacy policy of the personal data controller of that website, specifying the method of collecting and processing data when visiting it.

Newsletter

In order to subscribe to the Newsletter, the User provides the Controller with the following personal data: email address, name, surname, via the subscription form available on the Website. Providing this personal data is voluntary, but necessary to subscribe to the Newsletter.

Contact form

1. The Controller provides a form on the Website in order to enable Users to contact the Controller.
2. In order to send a message via the form, User provides the Controller with the following personal data: email address, first name, surname, which is entered into the appropriate fields of the contact form.

Security and personal data protection authority

1. The Controller guarantees the confidentiality of all personal data provided to him. The Controller ensures that all security and personal data protection measures required by law are taken. Personal data is collected with due diligence and adequately protected against access by unauthorized persons.
2. If you believe that the Controller is processing personal data unlawfully, you can file a complaint with the competent authority, which is the President of the Personal Data Protection Office of Poland (Prezes Urzędu Ochrony Danych Osobowych).