Privacy Policy

Data Controller

Authologic sp. z o.o. with its registered office in Warsaw (02-482), ul. Złota 59, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS number: 0000851095, NIP 5223186837, REGON 38657853, share capital: PLN 23,750.00 ("We", "Us", "Our"), operating the website at: www.authologic.com.

Data controller contact details

You can contact Us via email at: kontakt@authologic.com, or in writing to our address: Authologic Sp. z o.o., ul. Złota 59, 00-120 Warsaw. In all matters related to the processing of your personal data, you can contact our Data Protection Officer, Ms. Karolina Legierska, available via email at: iod@authologic.com.


Information on the processing of personal data (type of data, purpose of processing, legal basis, retention period, necessity to provide data)



Processed data:

First and last name, IP address, email address, company name, job title, country of company registration, as well as analytical data

Purpose of processing:

For the purpose of access, including registration and login, to the test environment (hereinafter: "Sandbox"), which provides tools and APIs for testing services related to the technical handling of the verification process of a specific user dataset, and for the purpose of improving the quality and functionality of using the product.

Legal basis:

  • The necessity of processing to take steps at the request of the data subject prior to entering into a contract and for the performance of a contract (Art. 6(1) (b) GDPR);
  • Purposes of the legitimate interests pursued by Us (Art. 6(1)(f) GDPR), where the legitimate interest is the improvement of product quality and functionality; hence, the Data Controller records user session replays.

Retention period:

Your data will be stored for the duration of your test access to the Sandbox and no longer than the limitation period for potential claims arising from this access meaning no longer than 3 years, counting from the end of the calendar year from the day the test period ended. The Data Controller is under no obligation to store data after the User's account has been deleted.

Requirement to provide data:

Providing personal data is voluntary; however, refusal to provide data will make it impossible to create an account and access the Sandbox

Data source:

We receive your personal data directly from you.

Data recipients

We may transfer your personal data to entities processing personal data on Our behalf based on a signed data processing agreement, i.e., IT and email service providers, technology providers, accountants, and entities involved in the destruction of data media. If you have given your consent, we may also transfer your data to other entities (within the scope of your consent), including tool providers.

Data recipients outside the EEA

Your personal data may be transferred to recipients outside the European Economic Area (EEA). To ensure appropriate safeguards and the protection of your rights, we guarantee that personal data will be transferred outside the EEA based on:

  • An adequacy decision by the European Commission, stating that the recipient country ensures an adequate level of personal data protection;
  • Standard data protection clauses (so-called Standard Contractual Clauses) adopted by the European Commission;
  • Binding Corporate Rules – in cases where the data transfer is carried out by recipients who are members of international corporate groups.

European Commission decisions are available at the website eur-lex.europa.eu. To receive a template of the Standard Contractual Clauses, please contact Us. To receive a copy of the Binding Corporate Rules, please contact the entities that are party to them

Rights of data subjects

You have the right to request from Us:

  • access to your personal data,
  • its rectification,
  • its erasure,
  • restriction of its processing
  • the right to object to processing, and
  • the right to data portability.

You have the right to object at any time – on grounds relating to your particular situation – to the processing of your personal data based on the legitimate interest clause (Art. 6(1)(f) GDPR) or public interest (Art. 6(1)(e) GDPR), including profiling based on those provisions. In such a case, we will no longer process your data covered by the objection on this basis. Regulations grant Us the right to refuse this request if We can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement. In Poland, this authority is:

President of the Personal Data Protection Office (PUODO)

  • Address: ul. Stanisława Moniuszki 1A, 00-014 Warsaw
  • Phone: 22 531 03 00

Cookies

The cookie policy can be found here: https://authologic.com/cookies-policy

Definitions

  • You/User: An entity conducting business or professional activity whose personal data is processed in connection with using the Sandbox
  • GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 24 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
  • We: Authologic sp. z o.o. with its registered office in Warsaw (02-482), ul. Złota 59, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS number: 0000851095, NIP 5223186837, REGON 38657853, share capital: PLN 23,750.00, operating the website at: www.authologic.com