PRIVACY POLICY

PERSONAL DATA PROCESSING INFORMATION

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as: "GDPR"), we inform that:

1. The data controller of your personal data is ORANGE WEST Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, at ul. Głębocka 5/44, 03-287 Warszawa, e-mail: kontakt@dealmakersofficial.pl. 

2. The data controller may process personal data:
   a) pursuant to Article 6(1)(b) of the GDPR in order to perform an agreement to which the data subject is a party, or to take steps at the request of the data subject prior to entering into an agreement,
   b) pursuant to Article 6(1)(c) of the GDPR in connection with the provisions of generally applicable law in order to fulfill legal obligations incumbent on the Controller, 
   c) pursuant to Article 6(1)(f) of the GDPR in order to pursue legitimate interests of the controller, including direct marketing of its own products and/or services.

   d) In connection with the implementation of the purposes indicated above, the Controller may process, in particular, the following personal data: name and surname, email address, telephone number, billing details, company name, position, and other data voluntarily provided by the data subject in connection with registration for Dealmakers Summit or use of the Event Application.

3. The recipients of your personal data may be natural persons, legal entities, public authorities not conducting specific proceedings in accordance with Union or Member State law, units and/or other entities to whom personal data may be disclosed. Data recipients may include, for example: entities with which the Controller has concluded personal data processing outsourcing agreements, law firms, statutory auditors, entities providing correspondence delivery services, service providers, especially ICT providers.

4. Personal data will be stored for the period necessary to achieve the objectives specified in point 2, in particular:
   a) from the moment of taking action at the request of the data subject prior to entering into an agreement or from the conclusion of the agreement until the expiry of the agreement and/or the power of limitation of claims / completion of court and/or administrative proceedings,
   b) from the moment of data acquisition to the time specified in the provisions of generally applicable law and/or,
   c) from the moment of data acquisition until the exercise of the right referred to in point 5 below.

5. To the extent specified in Articles 15-22 of the GDPR, you are entitled to the following rights: 
   a) the right to access personal data, including the right to obtain a copy of such data,
   b) the right to request rectification (correction) of personal data,
   c) the right to request erasure of personal data (the so-called right to be forgotten), 
   d) the right to request restriction of personal data processing,
   e) the right to data portability,
   f) the right to object to the processing of data.

6. Requests to exercise these rights may be submitted in writing: directly at the registered office of the Controller / sent to the address of the registered office of the Controller / electronically to the e-mail address: kontakt@dealmakersofficial.pl.

7. If you obtain information about unlawful processing of your personal data by the Controller, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

8. Providing personal data is voluntary, but necessary to enter into and perform the contract, in particular to register, purchase a ticket, and participate in Dealmakers Summit. In cases where the obligation to provide data results from legal regulations, providing such data is mandatory.

9. In the event of obtaining personal data from sources other than the data subject, the Controller obtains them from publicly available sources, including websites, publicly accessible registers maintained by public administration bodies (including CEiDG, KRS), business cards, press, and/or from other entities sharing personal data.

10. In the event of obtaining personal data from sources other than the data subject, the Controller may process data such as: name and surname, residential/registered office address, e-mail address, telephone number, and/or other data obtained by the Controller.

11. During the processing, data may be transferred to third countries.

12. The provided data will be the basis for automated decision-making, including profiling.