Privacy Policy CarbonQ Group

This Privacy Policy is where you will find information about who is the administrator of your personal data, the purpose, scope, and duration of its processing. Additionally, you will learn to whom and under what conditions we may disclose your data, as well as what rights you have in connection with its processing.

We have created this Privacy Policy to ensure you find all the necessary information required by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, applicable from 25 May 2018 (“GDPR”).

Whenever we refer to data below, we mean your personal data provided to us or obtained by us from other sources, such as your name, residential address, email address, or phone number.

 

Who is the Administrator of My Personal Data?

The administrator of your personal data is the entity within the CARBONQ group that is the seller, service provider, or organizer of the contest or other promotional activity, which consists of:

1. CARBONQ CORPORATION Spółka z ograniczoną odpowiedzialnością in Katowice (postal code: 40-246), located at ul. Porcelanowa 23B, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court Katowice-Wschód in Katowice, VIII Commercial Division of the National Court Register, under the number KRS: 0000844422, NIP: 9542815571, share capital 5,000.00 PLN;
2. CARBONQ POLAND Spółka z ograniczoną odpowiedzialnością in Sosnowiec (postal code: 41-219), located at ul. Stefana Banacha 11, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court Katowice-Wschód in Katowice, VIII Commercial Division of the National Court Register, under the number KRS: 00001054057, NIP: 6443576794, share capital 5,000.00 PLN.

How can I contact you regarding personal data matters?

You can contact us:

1. In writing at the address of the appropriate CARBONQ group entity; or
2. By email at odo@carbonqcorp.com or odo@carbonqpoland.pl.

In what situations do you process my personal data?

We process your personal data whenever you purchase goods from us, use our services, or represent your organization in signing a contract, act as a designated contact person, or participate in our competitions and promotional activities. Each time you contact us with an issue or complaint, we also process your personal data. We process your data when we send you marketing information about us or our business partners. Sometimes, we process your personal data when other administrators of your data, who provide services to you, request us to do so.

Do I have to provide my data?

Providing your data is voluntary, but some of your data may be necessary to enter into a contract and properly provide our services, or to meet the requirements specified by legal regulations that we must comply with.

What data do you process?

We process both the data you have provided to us and the data we have independently developed (e.g., using cookies or other tools we use) or that has been made available or entrusted to us by other data controllers, such as Partners (recipients of our goods and services).

We also process data provided by the device you use when utilizing our services (cookies). We ensure that we process only the data necessary for the purpose for which we collect it (data minimization).

If you represent your organization in signing a contract or act as a designated contact person, we process, among other things, your name, surname, job title, phone number, and email address.

For what purpose do you process my data?

We process your personal data primarily for purposes necessary to conclude and perform a contract, including handling complaints, such as a sales contract, providing services, including services provided electronically, or taking actions at your request before concluding a contract. If necessary, we may contact you on our own initiative for technical issues, for example, if you have trouble starting a service or if we want to know your opinion about our products or services. Processing some of your data is also necessary to fulfill our obligations under legal regulations, such as the obligation to store certain data for a specified time, collecting certain information for user verification and identification, or providing data to authorized authorities or entities, such as regulations on counteracting money laundering and financing of terrorism, tax laws, accounting laws, out-of-court consumer dispute resolution, or consumer rights.

We also process your data for other legitimate purposes, including:

1. Monitoring your activity on our services (including with cookies and tools we use),
2. Profiling your interests and needs (also using cookies) to direct only those products and services to you that may interest you,
3. Direct marketing of our products or services – this allows us to inform you about our offers,
4. Learning your opinion about the services we provide,
5. Establishing, pursuing, and defending potential claims arising from our business activities,
6. Monitoring, preventing, and detecting potential fraud or abuse committed through the services we provide,
7. Assessing the risk associated with providing certain services,
8. Performing contracts with contractors and maintaining contact regarding their execution.

If you have given us your consent, we may send you our newsletter or contact you about new offers by phone, email, or mobile message. When you participate in a contest or other promotional activity organized by us, we process your data to organize the contest or promotion, select winners, and award prizes.

If you are interested in commercial offers from our partners and have consented to receive them, we may send you commercial messages on their behalf or share your data with them so they can send you these messages directly.

If we decide to process your data for a purpose other than that for which it was collected, we will inform you and ask for your consent, if required by law.

On what legal basis do you process my data?

The legal basis for data processing is:

1. The conclusion and performance of a contract, or
2. Your consent, or
3. The legitimate interests of the data controller, or
4. Our compliance with obligations arising from applicable legal regulations, depending on the type of service we provide, including but not limited to:

• the Accounting Act of 29 September 1994,
• the Act on Value Added Tax of 11 March 2004,
• the Act on Counteracting Money Laundering and Financing of Terrorism of 1 March 2018,
• the Act on Providing Services by Electronic Means of 18 July 2002,
• the Personal Data Protection Act of 10 May 2018.

We process your data in accordance with applicable data protection regulations, including GDPR.

Why do you send me emails?

You receive emails from us in the following cases:

1. You sent a message to our email address and expect a response from us,
2. You are a user of our service and we are contacting you regarding the conclusion or implementation of a contract,
3. We are contacting you to address a complaint,
4. You are participating in a contest or other promotional activity and we are contacting you regarding the progress of the contest or activity,
5. We are contacting you on behalf of our Partner,
6. You have consented to receive commercial information about us or our Partners,
7. Legal regulations require us to provide you with specific information; depending on the type of service provided, these include information delivered under the Consumer Rights Act.

If you believe that you are not the intended recipient of the received message, please inform us through the complaint form and delete the message without opening any attachments.

How long will you process my data?

We will process your data for the shortest time possible. The data processing duration for specific cases is as follows:

1. If we process your personal data based on a contract, the processing will last as long as the contract is in effect and for the period of limitation of any potential claims.
2. If you have given consent for processing for a specific purpose, we will process your personal data until you withdraw your consent.
3. Data that we process as part of our legitimate interest will be processed as long as this interest persists. In particular cases, such as data processing for direct marketing purposes, including profiling, we may process your data until you object.

Data processed to fulfill our obligations under applicable legal regulations will be processed for as long as required by those regulations.

To whom will you disclose my data?

We do not disclose your data to third parties or entities. Exceptions to this rule are situations when:

1. You give voluntary consent for such disclosure. Your consent can be withdrawn at any time.
2. The disclosure is necessary to provide the service. Recipients of your data may include:

• The bank or other payment service provider – data necessary to complete the payment service,
• In particular cases, your data may be disclosed to entities authorized to do so based on generally applicable legal regulations (e.g., law enforcement agencies, other payment service providers). Each request for disclosure is carefully examined by us, and data is transferred only if we determine through this analysis that there is a valid and effective legal basis for requesting disclosure to these entities.

At the same time, you should know that we use the assistance of external entities to perform certain tasks, such as document destruction, data storage, and marketing services. In such cases, we entrust personal data to subcontractors for a specific purpose, while remaining the data controller and responsible for its security. The operations we perform are carried out using computer networks, including cloud servers with the participation of external providers.

We do not transfer your data to third countries.

Will my data be subjected to automated decision-making (including profiling)?

No, your data will not be subjected to automated decision-making, including profiling.

How do you protect my data?

We take full responsibility for the security of your data that we process, and therefore, we apply appropriate technical and organizational security measures to ensure confidentiality, protection against unauthorized or unlawful processing, and accidental loss, destruction, or damage of your data.

We protect your data primarily by using state-of-the-art technologies, adhering not only to applicable legal regulations but also implementing additional solutions to ensure the security of your data. The primary means of protection include using secure connections (e.g., SSL protocols), data encryption, and applying other technical, software, or organizational solutions (e.g., limiting and controlling access to data). We ensure that your data is processed only by authorized persons and entities.

What are my rights?

Since you entrust us with your personal data, we have obligations towards you that you have the right to enforce:

1. 1. 1. 1. 1. You have the right to obtain information from us about whether we process your personal data, for what purpose we process it, what categories of your data we possess, the categories of recipients of your data, and the planned period for which we will store your data.
            2. You have the right to access the data we process, correct any incorrect data, or complete incomplete data.
            3. You may request the deletion of the data we process. Your request will be promptly fulfilled unless legal regulations oblige us to continue processing your data, if there is a legal obligation we must fulfill, if your personal data is necessary for establishing, pursuing, or defending claims, or if there is another legally justified interest that justifies further processing of the data. Your data will be deleted when:
               • It is no longer necessary for the purposes for which it was collected or otherwise processed,
               • It was processed based on your consent, which you have withdrawn, and there is no other legal basis for processing the data,
               • You objected to the processing of your data within the scope of our legitimate interest, and there are no other circumstances justifying further processing of the data,
               • The personal data was processed unlawfully,
               • The personal data must be deleted due to a legal obligation.
            4. You can withdraw your consent for us to process your personal data at any time, provided that the basis for processing is your consent. Data processing will thus be legal until you withdraw your consent.
            5. You have the right to request that we limit the processing of your data in the following cases:
               • You report that the data we process is incorrect; the limitation applies until the data’s correctness is verified,
               • There is no legal basis for processing, and you oppose the definitive deletion of your data,
               • We no longer need your data for the purposes we collected it for, but you need it to defend your interests or pursue claims,
               • You have objected to the processing of your data; the limitation applies until it is determined whether there is a prevailing basis for processing over your objection.
            6. You have the right to object to the processing of your data within the scope of our legitimate interest.
               • We will promptly cease such processing unless there is an overriding basis for the objection.
               • Your objection will always be considered in relation to data processing for direct marketing purposes, including profiling, to the extent that profiling is related to direct marketing.
            7. Please note that as a result of exercising the rights mentioned in points 3-6 above, there is a possibility that we may cease providing certain services (in whole or in part) for which the processing of certain personal data is necessary.
            8. You have the right to receive your personal data that you have provided to us in a machine-readable format and to transfer that data to another data controller. This applies to data processed in an automated manner:
               • which we process based on your consent, or
               • which we process based on a contract concluded with you.
            9. If you believe that your rights have been violated, you can file a complaint with the supervisory authority, namely the President of the Office for Personal Data Protection.
            10. You have the right not to be subjected to automated decision-making processes, including profiling, if such actions have legal effects on you or significantly affect you in another way. However, we may use automated decision-making if such a decision:
                • Is necessary for the conclusion or performance of a contract,
                • Is permitted based on separate legal regulations, or
                • Takes place with your consent.
            11. If you are subjected to automated decision-making, including profiling, you have the right to obtain human intervention to review your situation and the decision made, you can present your position, or challenge the decision made.

What are cookies?

Cookies are data files, particularly small text files, that are saved and stored on the device through which you use our online services.

How do you use cookies and similar technologies?

We use cookies and similar technologies to store information or access information stored on the device through which you use our services. By using cookies, we can tailor the services to your individual preferences, as well as profile and monitor your activity on our services.

The cookies we use are safe for your devices; they are free from viruses or unwanted software. Cookies contain the domain name from which they originate, the time they are stored on the device, and an assigned value. These files in no way allow for the extraction of any information from your device, only access to selected information.

What are the types of cookies?

We use different types of cookies, which vary in type and duration. We can categorize these files based on the time they are stored on your device into:

1. Session cookies – these are stored on your device and remain there until the session of a given browser ends. The stored information is then permanently deleted from the device’s memory,
2. Persistent cookies – these are stored on your device until they are deleted or expire. Ending the browser session does not delete them from your device.

   We can also divide the cookies we use based on their origin into:

3. First-party cookies – these are placed directly by us in the services,
4. Third-party cookies – these are placed in the services by external entities whose components are invoked by us (e.g., Google Analytics, Gemius SA, Crazy Egg).

For what purpose do you use cookie-type technologies?

We use cookies for, among others, the following purposes:

1. Configuring services, including adjusting their content or functionality to your preferences and optimizing their performance,
2. Authenticating users of our services to maintain a session after logging in – this allows you to navigate between subpages of the services without needing to log in each time,
3. Creating anonymous statistics that allow us to analyze how our services are used – this helps us improve their structure and content,
4. Obtaining information about the source from which a person came to our site (e.g., an advertisement banner displayed on a third-party website),
5. Customizing advertisements presented through the services,
6. Ensuring the security and reliability of the services.

How can I manage my consent for your use of cookies?

The use of cookies to store information or gain access to information stored on your device is possible only if you have given prior consent to such action, unless the storage or access to information is necessary to provide the service you have requested by electronic means – in such a situation, your consent is not required.

1. You can give your consent through the settings of the software used to access the services, for example, through the settings of the web browser you use or the settings of the device software you use.
2. You may refuse or withdraw your consent at any time by changing the appropriate settings of the browser or software installed on the device you are using.
3. In many cases, the software that enables the use of our services (primarily web browsers) by default allows for the handling and storage of cookies on your device. Therefore, we recommend that you check the settings and make changes in accordance with your privacy preferences if necessary. Remember that you can change the settings to block the automatic handling of cookies.
4. If you consent to the settings of the software you use to allow for the handling of cookies, this is equivalent to your consent to use them according to the principles described in this Privacy Policy. In this case, we will be entitled to use cookies and similar technologies to store information or gain access to information stored on your device.
5. If you decide to disable the handling of cookies, you may encounter difficulties in using some functionalities of our services.

When providing telecommunications services or services provided by electronic means, we may also install software on your device or use such software. However, we will inform you of this before installation and ask for your consent for its installation and use.