Privacy Policy

1. Who is the administrator of your data?

The administrator of your personal data is the FOUNDATION FOR ENTREPRENEURSHIP DEVELOPMENT 'TWÓJ STARTUP' based in Warsaw (registered office address: ul. Żurawia 6/12, lok. 766, 00-503 Warsaw). This privacy policy applies to the Foundation's services provided by the organized business unit Stormhood, contact details: phone number +48452226353, e-mail address: info@stormhood.xyz, operated by Vadym Kutsenko.

2. Why do we process your data?

  • In connection with services provided via Stormhood, consisting of providing online software tools created to protect users from fraudsters on social media. That is, for the purpose of concluding or performing a contract (Article 6(1)(b) of the Regulation), your data will be stored until the contract is performed.
  • For marketing purposes and promotion of products offered by the Foundation for Entrepreneurship Development 'Twój StartUp' based in Warsaw, which is our legitimate interest (Article 6(1)(f) of the Regulation). Your data will be processed until you object.
  • To fulfill all legal obligations incumbent on us in connection with the cooperation undertaken (Article 6(1)(c) of the Regulation), this purpose is related to legal obligations to store certain documents for the period specified by law, e.g.:
    • The Accounting Act of 29.09.1994 (Journal of Laws of 2017, item 1858);
    • The Tax Ordinance Act of 29 August 1997 (Journal of Laws 1997 No. 137, item 926);
    • The Act of 1 March 2018 on Counteracting Money Laundering and Terrorism Financing (Journal of Laws 2018, item 723).
  • For the possible establishment, exercise, or defense of claims, which is our legitimate interest (basis: Article 6(1)(f) of the Regulation). Data will be processed until the statute of limitations for claims.
  • If consent is given, your data will be processed within the scope and purpose indicated in the given consent (basis: Article 6(1)(a)). Data will be processed until consent is withdrawn.

3. What data is processed?

To conclude a contract, we require you to provide data in the contract/order form (if you do not provide it, we will not conclude the contract/fulfill the order). Additionally, we may ask for optional data, which does not affect the conclusion of the contract (if we do not receive it, we will not be able, for example, to call your contact number).

During the term of the contract, while providing services, we may come into possession of other data about you. The appearance of your personal data with us is a consequence of the operation of our services that you use.

4. Who will the data be shared with?

  • Public authorities, to the extent that they do not receive data as part of specific proceedings under the law, e.g., in connection with counteracting money laundering;
  • Entities that process your personal data on behalf of the Foundation under a data processing agreement concluded with the Foundation (so-called processors). These include, among others: Foundation beneficiaries, IT specialists, archiving companies, hosting companies;
  • External data controllers (so-called Parallel Controllers to whom data is shared, e.g., legal advisors and attorneys, courier or postal companies, entities acquiring receivables - in case you do not pay our invoices on time);
  • Entities located outside the EEA, but only when necessary and with an adequate level of protection, primarily through:

    a. Cooperation with entities in countries for which an appropriate decision of the European Commission has been issued;

    b. Use of standard contractual clauses issued by the European Commission.

The administrator always informs about the intention to transfer personal data outside the EEA at the stage of their collection.

5. Is the data profiled?

We inform you that your data will not be subject to profiling, i.e., automated analysis of your data and making predictions about your preferences or future behavior (profiling means, for example, in the case of marketing profiling, determining which offer you may be most interested in based on your previous choices).

6. What rights do you have?

  • The right to access the personal data we process (Article 15 of the Regulation).
  • The right to rectify the entrusted personal data, including correcting it (Article 16 of the Regulation).
  • The right to delete personal data from our systems, the so-called 'right to be forgotten' - if you believe there are no grounds for us to process your data, you may request that we delete it (Article 17 of the Regulation).
  • The right to restrict the processing of personal data - you may request that we restrict the processing of personal data only to their storage or performing agreed actions if we have incorrect data about you or process it without basis; or you do not want us to delete it because you need it to establish, exercise, or defend claims; or for the duration of an objection to data processing (Article 18 of the Regulation).
  • The right to data portability – you have the right to receive from us, in a structured, commonly used, machine-readable format (e.g., '.csv' format), your personal data that we hold on the basis of a contract or consent. This right will apply if we have the data in electronic form – if we only have the data in paper form, you will not be able to exercise this right. You may instruct us to send this data directly to another entity (Article 20 of the Regulation).
  • The right to withdraw consent to the processing of personal data - at any time you have the right to withdraw your consent to the processing of personal data that we process on the basis of consent – Article 7(3) of the Regulation. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Consent may be withdrawn by sending an e-mail to: info@stormhood.xyz.
  • The right to object - you may object to the processing of your data if the basis for using the data is our legitimate interest - Article 21 of the Regulation. In such a situation, after considering your request, we will no longer be able to process the personal data covered by the objection on this basis, unless we demonstrate the existence of legitimate grounds for processing that override your interests, rights, and freedoms.
  • If you believe that the processing of personal data violates the provisions of the Regulation, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.

7. Contact

If you need additional information related to the protection of personal data or wish to exercise your rights, please contact us at: rodo@twojstartup.pl.