PRIVACY POLICY
e-containers.eu
| Purpose of data processing | Legal basis for processing and data retention period | Data retention period | Scope of processed data |
|---|---|---|---|
| Performance of the contract with the Client or taking steps at the request of the data subject prior to entering into the above-mentioned contracts | Article 6(1)(b) of the GDPR (performance of a contract). | • For the duration of the above-mentioned contract, until the expiration of any legal obligations related to accounting • Data will be processed until the end of the period during which claims may be legally pursued | • Company name • Email address • Phone number • Address (street, house number, apartment number, postal code, city, country) • Company name • Tax Identification Number |
| Direct marketing | Article 6(1)(f) of the GDPR (legitimate interests of the controller). The controller may process data for the purpose of direct marketing only after obtaining consent and in the absence of objection from the data subject. | • Until consent is withdrawn – remember, you can withdraw your consent at any time. Processing of data until you withdraw your consent remains lawful. • Data will be processed until the end of the period during which claims may be legally pursued | • Email address • Phone number |
| Marketing | Article 6(1)(a) of the GDPR (consent). | • Until consent is withdrawn – remember, you can withdraw your consent at any time. Processing of data until you withdraw your consent remains lawful. • Data will be processed until the end of the period during which claims may be legally pursued. • Until you unsubscribe from the newsletter. | • Company name • Email address • Phone number • Address (street, house number, apartment number, postal code, city, country) |
| Accounting / Bookkeeping | Article 6(1)(c) of the GDPR in connection with Article 86 §1 of the Tax Ordinance or Article 74(2) of the Accounting Act. | • Data will be processed until the end of the period during which claims may be legally pursued. • Data is stored for the period required by law (tax records or accounting records - usually 5 years). | • Company name • Email address • Phone number • Address • Tax Identification Number (NIP) • Company name |
| Processing a refund | Performance of the Contract or taking steps at the request of the data subject prior to entering into the Contract (Article 6(1)(b) of the GDPR). | • 5 years after the termination of business relations with the Client | • Company name • Email address • Phone number • Address • Business entity data |
| Establishing, pursuing, or defending claims that may be raised by the Controller or against the Controller | Article 6(1)(f) of the GDPR | • Data is stored for the duration of our legitimate interest, but no longer than the statute of limitations for claims against the data subject arising from our business activities. | • Email address • Phone number • Address • Tax Identification Number (NIP) • Company name |
| Conducting research and analyses to improve the performance of available services | Article 6(1)(f) of the GDPR (legitimate interests of the controller). | • Data will be processed until the end of the period during which claims may be legally pursued. • Until the expiration or deletion of cookies used for analytical purposes. | • Company name • Email address • Phone number • Address • Computer components • Settings • Installed software |
| Collection of telemetry data | Article 6(1)(f) of the GDPR (legitimate interests of the controller). | • Until the expiration or deletion of cookies used for analytical purposes. | • IP address • Approximate location based on IP address • User identifier • Software usage and sharing |
| Client account registration | Performance of the Contract or taking steps at the request of the data subject prior to entering into the Contract (Article 6(1)(b) of the GDPR). | • 5 years after the termination of business relations with the Client | • Company name • First and last name • Email address • Phone number • Personal Identification Number • Address • Business entity data |
| Sending notifications to the Client | Performance of the Contract (Article 6(1)(b) of the GDPR) Fulfillment of a legal obligation (Article 6(1)(c) of the GDPR) | • 5 years after the termination of business relations with the Client | • Company name • Email address • Phone number • PESEL • Address • Business entity data |
| Providing customer service | Performance of the Contract (Article 6(1)(b) of the GDPR). | • 5 years after the termination of business relations with the Client • 2 years after the last update of the Client’s inquiry | • Company name • Email address • Phone number • Address • Business entity data |
| Proper functioning of the Portal | Maintaining and improving the performance of the Portal (Article 6(1)(f) of the GDPR). | • 5 years after the termination of business relations with the Client | • As in the cell above • Information about actions performed on the Portal (clicks, visit duration, etc.) |
| Tracking Portal visits for security purposes | Protection and security of the Portal (Article 6(1)(f) of the GDPR). | • 3 years | • User ID • IP address • Browser • Content and URLs accessed • Date and time of connections |
| Protecting Clients from the use of disclosed login passwords | Protection and security of the Portal (Article 6(1)(f) of the GDPR). | • Time necessary for the Administrator to verify the password | • User ID • Client password |
| Enabling the Client to reset their password | Protection and security of the Portal (Article 6(1)(f) of the GDPR). | • 5 years after the termination of business relations with the Client | • First and last name • Company name • Email address • Business entity data • Client password • User ID |
| Monitoring compliance with regulations, contracts, and privacy policies | Protection and security of the Portal (Article 6(1)(f) of the GDPR). | • 5 years after the termination of business relations with the Client | • Transaction data • Business entity data |
| Processing requests regarding personal data | Article 6(1)(c) of the GDPR | • For the duration of the Administrator’s legitimate interest, but no longer than the statute of limitations for claims. | • First and last name • Company name • Email address • Phone number • Address • Tax Identification Number |
| Providing information to law-enforcement authorities and other state institutions | Article 6(1)(c) of the GDPR | • The period of the existence of the Controller’s legitimate interest (limitation period for claims). | • First and last name • Email address • Telephone number • Address • Tax ID • Company name |
| Fulfilment of the legal obligation set out in Article 16(1), (4), (5) and (6) of the DSA | Article 6(1)(c) of the GDPR | • Until notification of the decision made by the Controller regarding the submitted notice • Until notification of the possibility of appealing the decision | • First and last name • Email address • Telephone number • Address • Tax identification number • Company name |
| Processing of personal data based on proceedings conducted before competent public administration authorities | Article 6(1)(c) of the GDPR | • For the duration of such an obligation. | • First and last name • Email address • Telephone number • Address • Tax identification number • Company name |