Skip to main content

Privacy policy

    1. The controller of personal data is GNT Ventures Warszawa Sp. z o. o., ul. Gnilna 2, 80-847 Gdańsk.
    2. The personal data administrator may process personal data:
      • pursuant to art. 6 section 1 letter a) GDPR in order to perform the task for which the natural person has consented
      • pursuant to art. 6 section 1 letter b) GDPR in order to perform a contract to which the data subject is a party or to take action at the request of the data subject before concluding the contract,
      • pursuant to art. 6 section 1 letter c) GDPR in connection with the provisions of generally applicable law in order to fulfill the legal obligations incumbent on the Administrator,
      • pursuant to art. 6 section 1 letter f) GDPR in order to pursue the legitimate interests of the administrator, including: direct marketing of own products and/or services.
    3. The recipients of personal data may be processing entities with which the administrator has signed contracts
      entrusting processing and/or other entities to which transfer of data will be necessary to ensure the proper functioning of the administrator and/or pursue their own interests. Recipients may also be entities to which the data subject has allowed the administrator to provide personal data.
    4. Personal data will be stored for the period necessary to achieve the purposes specified in point. 2, in particular:
      • from the moment of consent to the processing of personal data until its withdrawal,
      • from the moment of taking action at the request of the data subject before concluding the contract or from the time of concluding the contract until the end of the contract and/or limitation of claims / termination of ongoing court and/or administrative proceedings,
      • from the moment of obtaining the data to the time indicated in the provisions of generally applicable law
        and/or,
      • from the moment of obtaining the data until the moment of exercising the right referred to in point 5 below.
    5. To the extent specified in Art. 15-22 GDPR, you have the following rights:
      • the right to access personal data, including the right to obtain a copy of this data,
      • the right to request rectification (correction) of personal data,
      • the right to request the deletion of personal data (the so-called right to be forgotten),
      • the right to request restriction of the processing of personal data,
      • the right to transfer data,
      • right to object to data processing.

      Applications for the exercise of rights may be submitted in writing at the Administrator’s office.

    6. If you become aware of unlawful processing of your personal data by the Administrator, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
    7. If the processing of personal data is based on the person’s consent to the processing of personal data (Article 6(1)(a) of the GDPR), you have the right to withdraw this consent at any time. This withdrawal does not affect the compliance of the processing carried out on the basis of consent before its withdrawal.
    8. In a situation where the processing of personal data is based on the consent of the data subject, providing personal data is voluntary. Providing personal data is obligatory when the premise for the processing of personal data is a legal provision or a contract concluded between the parties.
    9. In the event of obtaining personal data from sources other than the data subject, the Administrator obtains them from publicly available sources, including: from websites, publicly available registers kept by public administration bodies (including CEiDG, KRS), business cards, the press and/or from other entities providing personal data.
    10. If personal data is obtained from sources other than the data subject, the Administrator may process, among others: such data as: name and surname, residential/registered address, e-mail address, telephone number and/or other data obtained by the Administrator.
    11. During processing, the data will not be transferred to a third country.
    12. The provided data will not be the basis for automated decision-making, and will not be subject to profiling.