PRIVACY POLICY

1. Who is the data controller?

The controller of your personal data is the FOUNDATION FOR ENTREPRENEURSHIP DEVELOPMENT “TWÓJ STARTUP” NIP: 5213641211 with its registered office in Warsaw (address: ul. Żurawia 6/12, lok. 766, 00-503 Warsaw).

This privacy policy applies to services provided by the Foundation through an organized part of the enterprise „Cherniauskaya stylist” – contact details: phone number +48512277568, email address: basedonbase.com@gmail.com, carried out by Hanna Charniauskaya.

2. Why do we process your data?

1. In connection with services provided by Cherniauskaya stylist involving clothing design and sales, i.e., to conclude or perform a contract (Art. 6(1)(b) of the GDPR). Your data will be stored until the contract is completed.
2. For marketing and promotion of products offered by the Foundation “Twój StartUp” based on our legitimate interest (Art. 6(1)(f) of the GDPR). Your data will be processed until you object.
3. To fulfill legal obligations related to our cooperation (Art. 6(1)(c) of the GDPR), including document retention obligations for the period defined by law, such as:
   • Accounting Act of 29.09.1994 (Journal of Laws 2017, item 1858);
   • Tax Ordinance Act of 29 August 1997 (Journal of Laws 1997 No. 137, item 926);
   • Act of 1 March 2018 on counteracting money laundering and terrorist financing (Journal of Laws 2018, item 723).
4. To establish, exercise or defend legal claims, which is our legitimate interest (Art. 6(1)(f) of the GDPR). Data will be processed until claims become time-barred.
5. With your consent, your data will be processed within the scope and purpose indicated in the consent (Art. 6(1)(a) of the GDPR) until it is withdrawn.

3. What data do we process?

To conclude a contract, we require data provided in the agreement/order form. If not provided, we cannot conclude the contract. Optional data may be requested, e.g., a contact phone number. During service provision, we may obtain additional data as a result of you using our services.

4. Who will your data be shared with?

1. Public authorities, as permitted by law, e.g., in connection with anti-money laundering measures.
2. Entities processing personal data on behalf of the Foundation based on data processing agreements (so-called processors), such as Foundation beneficiaries, IT specialists, archiving and hosting companies.
3. External data controllers (so-called co-controllers), e.g., legal advisors, couriers, postal services, or debt collection agencies if payments are not made on time.
4. Entities located outside the EEA, only when necessary and with adequate protection, mainly through:
   • Cooperation with entities in countries recognized by the European Commission as providing an adequate level of protection;
   • Use of the European Commission’s standard contractual clauses.

The controller will always inform you at the time of data collection if data is to be transferred outside the EEA.

5. Will the data be profiled?

Your data will not be subject to profiling, i.e., automated analysis to predict your preferences or behavior (e.g., marketing profiling to suggest the most suitable offer).

6. What are your rights?

1. The right to access your data (Art. 15 GDPR),
2. The right to rectify inaccurate data (Art. 16 GDPR),
3. The right to erasure of your data („right to be forgotten”) if there is no legal ground to process them (Art. 17 GDPR),
4. The right to restrict processing (Art. 18 GDPR),
5. The right to data portability – to receive your data in a structured, machine-readable format (e.g., .csv) if processed electronically (Art. 20 GDPR),
6. The right to withdraw consent at any time via email to: basedonbase.com@gmail.com (Art. 7(3) GDPR),
7. The right to object to data processing based on legitimate interest (Art. 21 GDPR),
8. The right to lodge a complaint with the President of the Personal Data Protection Office.

7. Contact

If you need more information about data protection or wish to exercise your rights, please contact us at: rodo@twojstartup.pl