PRIVACY POLICY
FOR THE WWW.ASTRAFOX.COM WEBSITE
Dear User,
We place great importance on protecting your personal data and handling it in accordance with applicable laws. Our goal is to provide you with complete information about how we process your data.
Below, we explain how we process your personal data in connection with your use of our website.
1. BASIC INFORMATION
1.1. This Privacy Policy describes the rules for handling the personal data of Users of https://astrafox.com (hereinafter the “Website”).
1.2. The controller of the personal data collected through the Website is
Astrafox Sp. z o.o., with its registered office in Warsaw,
ul. Poloneza 93, 02-826 Warsaw,
KRS: 0000193522, NIP: 525-21-71-560, REGON: 016263968,
hereinafter the “Controller” or “we.”
1.3. You can contact us by telephone at +48 22 355 21 60, by email at office@astrafox.pl, or by mail at the address of the Controller’s registered office.
1.4. Any entity using the Website is its “User.”
1.5. We process your personal data in accordance with applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter the “GDPR.”
1.6. The Controller has appointed a Data Protection Officer (DPO), whom you may contact in all matters related to the processing and protection of personal data by writing to iod@astrafox.pl.
2. PURPOSES AND LEGAL BASES FOR DATA PROCESSING
2.1. “Contact Us” contact form
2.1.1. If you write to us using the “Contact Us” contact form, we will process your personal data to answer your question and handle the matter about which you contact us, using the contact details you provide in the form. The legal basis for processing your personal data is the Controller’s legitimate interest in responding to the User’s messages and communicating with the User (Art. 6(1)(f) GDPR).
2.1.2. If you ask us to provide a commercial offer, your personal data will be processed for this purpose under Art. 6(1)(b) GDPR, i.e., to take steps at the request of the data subject prior to entering into a contract (if you will be a party to the contract), or on the basis of our legitimate interest in providing the requested offer (Art. 6(1)(f) GDPR) if you represent a legal entity.
2.1.3. [Marketing consents] If, when sending a message through the Contact Form, you voluntarily select the optional consents displayed below the form (for email marketing or telephone marketing), your personal data, depending on the consents you grant and the data you provide, will be processed for the following purposes:
a. Astrafox Sp. z o.o. sending you future marketing and commercial content concerning our offering electronically to the email address you provide in the form;
b. contacting you by telephone in the future to present marketing and commercial content concerning our offering at the telephone number you provide in the form.
2.1.4. Please note that our marketing contact will certainly not be intrusive and will take place, for example, when we have a new product, feature, or service to present to you.
2.1.5. Remember that you may withdraw your marketing consents at any time.
2.1.6. The legal basis for processing personal data for the marketing purposes described in Section 2.1.3 above is the Controller’s legitimate interest (Art. 6(1)(f) GDPR in conjunction with the marketing consents granted) in marketing and promoting its services, products, and business.
2.2. “Free Consultation” form
2.2.1. We will process the personal data provided through the “Free Consultation” form to select an appropriate consultant for you based on the challenge with which you approach us, contact you to arrange a free consultation, and then conduct it.
2.2.2. The legal basis for processing your data for the purposes above is our legitimate interest (Art. 6(1)(f) GDPR) in conducting the free consultation you requested, discussing your needs, and selecting appropriate solutions.
2.2.3. [Marketing consents] If, when requesting a Free Consultation, you voluntarily select the optional consents displayed below the form (for email marketing or telephone marketing), your personal data, depending on the consents you grant and the data you provide, will be processed for the following purposes:
c. Astrafox Sp. z o.o. sending you future marketing and commercial content concerning our offering electronically to the email address you provide in the form;
d. contacting you by telephone in the future to present marketing and commercial content concerning our offering at the telephone number you provide in the form.
2.2.4. Please note that our marketing contact will certainly not be intrusive and will take place, for example, when we have a new product, feature, or service to present to you.
2.2.5. Remember that you may withdraw your marketing consents at any time.
2.2.6. The legal basis for processing personal data for the marketing purposes described in Section 2.2.3 above is the Controller’s legitimate interest (Art. 6(1)(f) GDPR in conjunction with the marketing consents granted) in marketing and promoting its services, products, and business.
2.3. Access to free Webinars, E-books, and lessons, and subscription to notifications about new Pogromcy Pie Chartów podcasts
2.3.1. As a User of our Website, you may register for free webinars and lessons, request free E-books, and subscribe to notifications about new Pogromcy Pie Chartów podcasts.
2.3.2. To receive access to the free materials and notifications about new podcasts, you must provide your email address. We will send a confirmation link to that address, and once you click it, you will receive access to the webinars, E-books, and lessons.
2.3.3. The legal basis for processing your email address for the purposes above is our legitimate interest (Art. 6(1)(f) GDPR) in providing access to free materials.
2.3.4. We will process your email address and any other data you voluntarily provide in the form for statistical purposes, which also constitutes our legitimate interest (Art. 6(1)(f) GDPR).
2.3.5. [Marketing consents] If, when registering for free webinars or lessons, you select the optional consents displayed below the form (for email marketing or telephone marketing), your personal data, depending on the consents you grant and the data you provide, will be processed for the following purposes:
a. Astrafox Sp. z o.o. sending marketing and commercial content concerning our offering electronically to the email address you provide in the form;
b. contacting you by telephone to present marketing and commercial content concerning our offering at the telephone number you provide in the form.
2.3.6. Please note that our marketing contact will certainly not be intrusive and will take place, for example, when we have a new product, feature, or service to present to you.
2.3.7. Remember that you may withdraw your marketing consents at any time.
2.3.8. The legal basis for processing personal data for the marketing purposes described in Section 2.3.5 above is the Controller’s legitimate interest (Art. 6(1)(f) GDPR in conjunction with the marketing consents granted) in marketing and promoting its services, products, and business.
3. USERS’ RIGHTS
3.1. Under the rules set out in the GDPR, you have the following rights concerning the data you provide through our Website:
3.1.1. the right of access to your data and to request a copy of it (Art. 15 GDPR);
3.1.2. the right to request rectification of your personal data (Art. 16 GDPR);
3.1.3. the right to request erasure of your data (Art. 17 GDPR);
3.1.4. the right to request restriction of data processing (Art. 18 GDPR);
3.1.5. the right to request data portability, i.e., to receive from the Controller personal data in a structured, commonly used, machine-readable format, to the extent that the data is processed by automated means on the basis of consent or for entering into and performing a contract (Art. 20 GDPR);
3.1.6. the right to object to the processing of personal data based on a legitimate interest, including for marketing purposes (Art. 21 GDPR);
3.1.7. the right to withdraw consent—if data is processed on the basis of consent given, the User has the right to withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal;
3.1.8. the right to withdraw consent to email or telephone marketing—if you have consented to being contacted for marketing and commercial purposes at the email address or telephone number you provided in the form, you have the right to withdraw that consent at any time.
3.1.9. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing of your personal data violates the GDPR.
3.2. How can you exercise your rights?
3.2.1. To exercise your rights, please send a request specifying your demand to office@astrafox.pl or iod@astrafox.pl.
3.2.2. If you do not receive any response from us within 14 days (emails sometimes fail to arrive or are directed to spam), please call +48 22 355 21 60 or +48 500 492 209.
3.2.3. If you receive marketing and commercial messages by email, you can always unsubscribe from the mailing list (cancel your subscription) and thereby withdraw your marketing consent by clicking the link at the bottom of the message.
4. DATA RECIPIENTS
4.1. For our Company and the Website to function properly, we must use the services of external entities. The Controller uses only the services of entities that provide sufficient guarantees that they have implemented appropriate technical and organizational measures so that processing meets the requirements of the GDPR and protects the rights of data subjects.
4.2. Users’ personal data may be disclosed to the following recipients or categories of recipients: service providers supplying the Controller with IT, technical, and organizational solutions that enable the Controller to conduct the company’s business, including the Website and the electronic services provided through it (in particular, providers of computer software used to operate the Website, email and server hosting providers, and providers of business management software and technical support to the Controller), as well as providers of legal and advisory services that provide appropriate support to the Controller (a law firm or debt collection company).
5. RETENTION PERIOD
5.1. Personal data processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR) will be processed for as long as that interest exists or until an effective objection to the processing is made.
5.2. Data processed for marketing contact purposes will be processed until an objection to processing for that purpose is made or consent to marketing contact is withdrawn.
5.3. Data processed on the basis of a contract (Art. 6(1)(b) GDPR) will be processed for the duration of the contract and subsequently for the limitation period applicable to mutual claims.
6. INFORMATION ON WHETHER PROVIDING DATA IS REQUIRED OR VOLUNTARY
6.1. Providing personal data is voluntary but may be necessary to fulfill a particular processing purpose.
6.2. Required fields in the forms available on the Website are marked with an asterisk. Entering any other data in the forms is voluntary.
7. INFORMATION ON THE ABSENCE OF PROFILING AND TRANSFERS OF DATA OUTSIDE THE EEA
Users’ personal data will not be subject to automated decision-making, including profiling, and will not be transferred outside the European Economic Area.
Privacy Policy dated November 14, 2022.