Privacy Policy

Our privacy policy and how we use your data

Information clause regarding the processing of personal data for the purpose of concluding and performing the contract

ADMINISTRATOR IDENTITY

The data administrator is PLANBY NOW sp. z o.o. based in Warsaw, street: Aleja Bohaterów Września 22, lok.161, 02-389 Warsaw, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0001150217, NIP 7011242093.

CONTACT DETAILS OF THE ADMINISTRATOR

You can contact the data administrator via the e-mail address [email protected] or in writing to the address of the administrator's registered office.

PROCESSING PURPOSES AND LEGAL BASIS

  • The Administrator processes personal data in order to perform the contract for the provision of services to you or to take actions necessary to conclude the contract or start the provision of services, as well as to settle the services;

  • The provision of services consists in particular in making the internet platform available for use at: www.planbynow.app and providing services via it or related to it.

  • The administrator also processes data for purposes based on his legitimate interest. The legitimate interest of the Administrator is to provide customers with offers and available promotions conducted by the Administrator, to collect debts, as well as to pursue and defend against claims.

  • The Administrator processes personal data for marketing purposes, including profiling to determine your preferences or needs regarding products offered and services provided by the controller, as well as to present an appropriate offer related to the products and services offered by the controller. The legal basis for data processing is the necessity of processing for the purposes of the controller’s legitimate interests.

  • The legal basis for the processing of your personal data is the necessity to perform the contract and the legitimate interest of the Administrator.

CATEGORIES OF PERSONAL DATA

The processing of personal data includes the following categories of your data: name and surname, e-mail address, username on the website and password (authentication data)

DATA RECIPIENTS

Your personal data may be transferred:

  • Entities cooperating with the Administrator who provide or service payments due to the Administrator,

Information clause regarding the processing of personal data for the purpose of concluding and performing the contract


  • Entities processing personal data on behalf of the administrator, in particular IT service providers, in particular entities storing data, providers of automated mailing services or marketing agencies.

DATA STORAGE PERIOD

Your personal data will be processed for the duration of the contract until your account on the website is deleted. The personal data storage period may be extended each time by the limitation period for claims, if the processing of personal data is necessary to pursue possible claims or to defend against such claims by the administrator. Your personal data will be processed for the duration of the legitimate interest of the administrator, unless you object to the processing of data for marketing purposes.

INFORMATION ABOUT THE INTENTION TO TRANSFER DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION

Your personal data may be transferred outside the EEA as part of the Administrator's use of the services of suppliers of IT systems and solutions, who may store personal data on servers located outside the EEA (including in the United States), or as part of the Administrator's provision of services related to the conducted business activity – to the extent necessary for their implementation.


  1. The transfer of your personal data outside the EEA, referred to in point 1, will take place on the basis of a decision of the European Commission stating an adequate level of personal data protection under the legislation of a third country or using appropriate legal safeguards, which in particular are standard contractual data protection clauses approved by the European Commission, and, in justified situations, also using measures complementing the transfer tools to ensure compliance with the level of protection of personal data of the European Union.


  2. In the absence of a decision of the European Commission confirming the appropriate level of personal data protection under the legislation of a third country or in the absence of appropriate legal safeguards, your personal data may be transferred to a third country on the basis of one of the grounds listed in Art. 49 section 1 GDPR, in particular based on your express consent. You have the right to obtain a copy of your personal data transferred to a third country.

RIGHTS OF DATA SUBJECTS

You have the right to access your data and the right to request its rectification, deletion or limitation of its processing.

As your data is processed in an automated manner on the basis of a contract, you also have the right to transfer personal data that you have provided to the administrator, i.e. to receive your personal data from the administrator in a structured, commonly used form.

Information clause regarding the processing of personal data for the purpose of concluding and performing the contract


machine-readable format used. You can send this data to another data administrator.

RIGHT TO OBJECT

To the extent that the basis for the processing of your personal data is the legitimate interest of the administrator, you have the right to object to the processing of your personal data, i.e. you have the right to object to the processing of data for direct marketing purposes.

THE RIGHT TO SUBMIT A COMPLAINT TO THE SUPERVISORY AUTHORITY

You also have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data in the Member State of your habitual residence, place of work or place of the alleged infringement.

INFORMATION ON THE OPPORTUNITY OR OBLIGATION TO PROVIDE DATA

Providing personal data to create an account is necessary to conclude and perform the contract - without providing personal data, it is not possible to conclude a contract and provide services to you. Providing data for marketing purposes is voluntary.