Document publication date: 01/03/2024.

As BrightWatt Partners, we treat your personal information and its protection responsibly and with every effort to keep it secure. The following Privacy Policy applies to personal information that we process in connection with our business.

This Privacy Policy, is based on personal data laws (including but not limited to the provisions of RODO i.e. the General Data Protection Regulation of April 27, 2016) and the Act of May 10, 2018. in the protection of personal data.

We stipulate that the content of the Privacy Policy is subject to change at any time. In addition, we cooperate with entities that provide a high level of protection for the personal data we process.

The administrator of your personal data processed in connection with our activities is BrightWatt Partners Sp. z o.o, with its registered office at Twarda 18 Street, 00-105 Warsaw, Poland, NIP 5252997538, KRS 0001094752, REGON 52815242200000

Purpose and basis of personal data processing

1. Your personal data is processed at the time of your contact with our company via the attached application forms, by email or by phone.
   1. The scope of personal data processed includes: name, surname, email address, contact number, data contained in the body of the message, other data provided when filling out the application form and during correspondence.
   2. The legal basis for the processing of personal data is Article 6(1)(a) of the RODO, which allows for the processing of personal data on the basis of consent for the purpose of responding to a message, and Article 6(1)(a) of the RODO, which allows for the realization of the legitimate interest of efficient and effective communication between the site administrator and the user.
      
      
2. Your personal data is processed for archival and evidentiary purposes, for the purpose of securing information that can be used to prove facts.
   1. The scope of personal data processed includes all the personal data mentioned above.
   2. The legal basis for such processing is Article 6(1)(f) of the RODO, which allows the processing of personal data if by doing so the controller pursues its legitimate interest (in this case, the controller’s interest is to have personal data to prove facts related to the use of the site, performance of a contract, processing of data on a legitimate legal basis).

3. Your personal data is processed for the purposes of establishing, investigating or defending against claims
   
   3. The scope of personal data processed includes all personal data mentioned above.
   4. The legal basis for such processing is Article 6(1)(f) of the RODO, which allows the processing of personal data if, by doing so, the controller pursues its legitimate interest (in this case, the controller’s interest is to have personal data to establish claims, pursue claims or defend against claims by users of the site or third parties or customers).
      
      

4. Your data is processed for the purposes of managing the site, using tools to improve the site and analyzing data related to the use of the site.
   4. The scope of personal data processed includes IP address and user behavior on the site.
   5. The legal basis for such data processing is Article 6(1)(f) of the RODO, which allows personal data to be processed if, by doing so, the controller pursues its legitimate interest (in this case, the controller’s interest is to act to optimize the site, including the content presented on the site, to the users’ needs).

5. Your data is processed for the purposes of using cookies on the site.
   5. The scope of personal data processed includes IP address and user behavior on the site.
   6. The legal basis for such processing is Article 6(1)(a) of the RODO, which allows us to process personal data with your consent. You give your consent during your first visit to the site.

6. Your personal data is processed for purposes related to the fulfillment of personal data protection obligations (e.g., the obligation to create registers and records)
   6. The scope of the data is defined by law and varies depending on the content of the given legal obligation incumbent on the controller
   7. The basis for the processing is Article 6(1)(c) of the RODO, i.e. it is carried out on the basis of legal provisions that prescribe the processing of personal data.

User rights related to the processing of personal data

We inform you that you have the following rights related to the processing of your personal data:

1. Right of access to information – means that any person whose personal data is processed has the right to be informed about the purposes of the processing and all relevant aspects related to it. A Privacy Policy, which you are currently reading, has been established to ensure this right.
2. The right of access to personal data – means that if you receive a request for access to personal data, as a data controller I am obliged to provide information regarding the processing of such data. I am obliged to perform this task without undue delay, within a period of no more than one month. If it is impossible to meet this deadline, I am obliged to notify the requesting person at least of the fact that his data is being processed, and I may extend the deadline for responding by another two months.
3. The right to rectification of personal data – means that any person has the right to demand that the data controller correct or complete his/her personal data if it is incorrect or incomplete.
4. The right to erasure of personal data, the right to be forgotten – means that any person has the right to demand that the data controller erase his or her personal data and inform the persons to whom the data has been made available of the fact of erasure. The person also has the right to demand the deletion of his personal data made available to the public by the data controller, as well as information about the recipients of such data.
5. The right to restrict the processing of personal data – means that any person has the right to request the restriction of the processing of his or her personal data in the event of a dispute over the accuracy of the data, or when the data is no longer needed for the purposes of the processing, but the person wishes to retain it for other legitimate interests.
6. The right to object to the processing of personal data – means that any person has the right to object to the processing of his or her personal data by the data controller, if there are grounds to justify that such processing violates his or her rights or interests.
7. The right to data portability – means that any person has the right to receive his or her personal data that he or she has provided to the data controller in a structured, commonly used format and has the right to transfer such data to another data controller if the processing is based on consent or contract and by automated means of processing.
8. The right to lodge a complaint – means that any person who considers that the processing of his/her personal data violates the law has the right to lodge a complaint with the supervisory authority, namely the President of the Office for Personal Data Protection.
9. Right to withdraw consent – means that any person has the right at any time to withdraw consent to the processing of his/her personal data, which was granted on the basis of consent. The withdrawal of consent does not affect the legality of the processing of personal data carried out prior to its withdrawal.

Your personal information may be transferred to third parties we use in running BrightWatt Partners. Attached is a list of the entities we work with.

1. Data processors in the European Economic Area:
   1. PL SPÓŁKA Z OGRANICZONA ODPOWIEDZIALNOŚCIĄ, ul. KS. JAKUBA WUJKA 7/26, 61-581 POZNAŃ, WIELKOPOLSKIE, NIP 7831711517, Regon 302693647, KRS 0000503852 – Hosting and domain maintenance services
2. Data processors outside the European Economic Area:
   LinkedIn Corp. – Marketing tool
   Google LLC – Marketing tool

Providing personal data

The provision of personal information is voluntary and at your discretion, however, in some cases it is necessary to provide certain personal information in order to make an inquiry or contact you via the application form.

In the situation of contacting our company on matters related to the services we provide, providing your contact information may be necessary to answer your questions.

If there is a legal requirement to share your data, for example, under the law, you are obliged to disclose it.

Processing time for personal data

In accordance with applicable laws, we will process your data only for the time necessary to achieve the specified purpose. At the end of this period, your personal data will be permanently deleted or destroyed.

Withdrawal of consent to process personal data

If the processing of your personal data was based on the consent you gave, you have the right to withdraw that consent at any time at your discretion. To withdraw your consent to the processing of personal data, simply send an email directly to the administrator’s address indicated at the beginning of this document.

It is worth noting that the withdrawal of consent to process personal data does not affect the legality of existing data processing until the consent is withdrawn. Otherwise, until you revoke your consent, I am authorized to continue processing your personal data in accordance with applicable laws.

Cookies and tools implemented on the website

This website, like many others, uses cookies. Cookies are short textual information stored on the device you use when browsing the web. They can be read by us (“own cookies”), used to ensure the proper operation of this site and to improve our offerings, and by systems belonging to other parties whose services we use (“external cookies”). We remind you that you have the right to change your cookie settings via your browser settings or to delete them.

When you visit the website for the first time, you will see information about the use of cookies.

Using our website involves sending queries to the server on which our website is hosted. Each query sent to the server is recorded in the server logs, which contain information such as your IP address, the date and time of the query, and details of the web browser and operating system you are using.

The data stored in the server logs are not linked to specific people using our service and are used only for administrative purposes. The contents of the server logs are not made available to anyone except those authorized to administer the server.

Final provisions

The content of this Privacy Policy is subject to change, for example, if there is a change in the service provider or the scope of functionality on the site. The update date of the Privacy Policy is located at the beginning of the document for your clarity and transparency.