Polityka prywatności

Privacy Policy

[General Provisions]

This Privacy Policy defines the rules for the processing and protection of personal data of individuals using the Website available at https://allintraders.ai, hereinafter referred to as the Data. The Privacy Policy constitutes an appendix to and an integral part of the Terms and Conditions, and all terms used herein shall have the meanings assigned to them in the Terms and Conditions.

Data means information concerning an identified or identifiable natural person to whom the data relates, i.e. a person who can be identified directly or indirectly, in particular on the basis of characteristics such as name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

The controller of the Data is ALLINTRADERS WORLD Sp. z o.o., with its registered office in Katowice at 138A Wojciecha Korfantego Avenue, 40-156 Katowice, entered in the register of entrepreneurs of the National Court Register by the District Court Katowice-East in Katowice, 8th Commercial Division of the National Court Register, under KRS number: 0001188901, holding Tax Identification Number (NIP): 6343059303, with share capital of PLN 184,751.99, e-mail: support@allintraders.ai.

The Data Controller has appointed a Data Protection Officer, who may be contacted in writing at the Data Controller’s registered office address or by e-mail at: support@allintraders.ai.

The Data Controller declares that the Data is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, and the Act of 10 May 2018 on the Protection of Personal Data, as well as regulations amending or replacing these acts, implementing regulations, and any other generally applicable laws.

For the purposes of this Privacy Policy, processing of Data means an operation or set of operations performed on Data or sets of Data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, or use.

[Data Sources]

Sources of Data include information obtained directly from Data Subjects, in particular in the course of Registration, Logging In, placing Orders, concluding Contracts or Paid Agreements, providing information via the Website, or communicating with Data Subjects, as well as information obtained from or through:

• state authorities, public registers, and other publicly available sources – including names and surnames, gender, dates of birth, identification numbers (including PESEL, NIP, REGON, and other numbers in the relevant registers of foreign entities), e-mail addresses, telephone numbers, fax numbers, business, residential, and mailing addresses (street, house number, city with postal code), and website addresses;
• payment processors – including names, gender, e-mail addresses, and financial transaction data (e.g. bank account numbers, credit or payment card numbers, and other unique identifiers);
• internet service providers – including location data, online identifiers (IP addresses), types of internet browsers, devices and systems used by the Data Subject, the websites accessed by the Data Subject and the actions taken on them, as well as the contents of cookies.

[Purposes and Legal Grounds for Data Processing]

Use of the Website by the Data Subject means that the Data Subject acknowledges that their Data may be processed for the following purposes and on the following legal grounds:

• responding to inquiries from Data Subjects, storing data in cookies, and collecting Data from websites and mobile applications – on the basis of the consent of the Data Subject;
• taking steps at the request of the Data Subject prior to entering into a Contract or Paid Agreement, and for the purpose of performing such Contract or Paid Agreement, in particular in order to:
  • provide services electronically through the Website, including enabling Registration, Logging In, placing Orders, entering into Contracts or Paid Agreements, and providing information through the Website;
  • ensure the smooth functioning and operation of the Website and the security of its use;
  • create, maintain, and manage an Account, including Account support and resolution of technical problems;
  • process an Order;
  • settle a transaction, including issuing an invoice;
  • amend, terminate, or cancel a Contract or Paid Agreement;
  • communicate with Data Subjects, including handling requests, complaints, and other correspondence addressed by Data Subjects to the Data Controller;
  • fulfill legal obligations incumbent upon the Data Controller, in particular accounting, tax, financial, and archival obligations;
• for purposes arising from the legitimate interests pursued by the Data Controller or third parties, including in particular:
  • establishing, exercising, or defending claims of the Data Controller (for evidentiary purposes);
  • protecting against claims of Data Subjects (for evidentiary purposes);
  • direct marketing of the Data Controller’s own services, including matching them to needs, i.e. profiling;
  • indirect marketing of services of third parties cooperating with the Data Controller, e.g. in the form of discount coupons, including matching them to needs, i.e. profiling;
  • conducting satisfaction surveys of Data Subjects;
  • determining the quality of service and the level of satisfaction of Data Subjects;
  • analytical, statistical, and management purposes, including internal management, statistical and research reporting, and analysis aimed at developing and improving services provided by the Data Controller;
  • conducting internal audits and inspections;
  • implementing business controls;
  • managing operations related to acquisitions, mergers, divisions, and transformations.

[Scope of Data]

The processed Data may include first names and surnames, gender, dates of birth, company names, identification numbers (including, but not limited to, PESEL, NIP, REGON, and other numbers in relevant registers of foreign entities), e-mail addresses, telephone numbers, fax numbers, business, residential, and mailing addresses (street, house number, city with postal code), financial transaction data (including, but not limited to, bank account numbers, credit or payment card numbers, and other unique identifiers), location data, online identifiers (IP addresses), types of internet browsers, devices and systems used by the Data Subject, the pages accessed by the Data Subject and the actions taken on them, the content of cookies, and other personal data voluntarily provided by the Data Subject through the Website, including by means of interactive forms or surveys or in the course of contacting the Data Controller.

[Voluntary Provision of Data]

Except where absolutely required by generally applicable law, the provision of Data by the Data Subject is voluntary; however, refusal to provide such Data shall make it impossible to Register, Log In, place Orders, conclude Contracts or Paid Agreements, provide information through the Website, or communicate with the Data Controller.

[Recipients of Data]

The Data Controller reserves the right to disclose the Data to competent authorities, including courts, government and local government administration bodies, preparatory proceedings authorities, enforcement authorities, and other legal protection authorities, business information bureaus, debt purchasers, and entities participating in processes of acquisition, merger, division, or transformation of business entities involving the Data Controller, on the basis of an appropriate legal ground and in accordance with generally applicable law.

The Data Controller reserves the right to entrust the processing of Data to third parties providing services to the Data Controller, in particular hosting services, Website management services, including customer support services, transport services (including postal operators and persons conducting postal or courier activities who are not postal operators), payment intermediation services (including banks and payment institutions), IT services, equipment repair services, marketing services, product review collection services, consulting, accounting, tax, financial, debt collection, legal, archiving and destruction services, record storage services, as well as loss adjustment services (including contractors providing such services).

The Data Controller also reserves the right to entrust the processing of Data to third parties providing to it, or directly to Data Subjects, services necessary for the use of the Website, including Registration, Logging In, placing Orders, concluding Contracts or Paid Agreements, providing information through the Website, or communicating with Data Subjects, including for the purpose of handling complaints.

Data may be processed in the territory of Poland, in another Member State of the European Union (EU), or in the territory of a state party to the Agreement on the European Economic Area (EEA). Data may also be processed outside the EEA, including by international organizations, through transfer by the Data Controller, but only where this is necessary to achieve the purposes set out above, and where such transfer and processing outside the EEA is covered by an appropriate level of protection consistent with the principles laid down in the GDPR, as recognized by a decision of the European Commission. The Data Controller shall inform Data Subjects of the intention to transfer Data outside the EEA at the stage of collection.

[Data Retention Periods]

The Data shall be stored by the Data Controller for as long as there is a legal basis for its processing, unless generally applicable law requires a longer retention period. Accordingly, the Data shall be retained for the following periods:

• until consent is withdrawn by the Data Subject – where processing is based on consent;
• until an objection is raised – where processing is necessary for purposes arising from the legitimate interests pursued by the Data Controller, subject to the relevant provisions above;
• until the expiry of obligations under the Contract or Paid Agreement and any claims related to their performance – where processing is necessary for the performance of the Contract or Paid Agreement, or to take steps at the request of the Data Subject prior to entering into the Contract or Paid Agreement;
• until the expiry of the Data Controller’s obligations under generally applicable law;
• until the expiry, including the limitation period, of the rights, claims, or obligations of the Data Controller and the Data Subject – where processing is necessary for purposes arising from the legitimate interests pursued by the Data Controller.

Upon expiry of the retention period, the Data shall be deleted or anonymized.

[Data Profiling]

Data may also be processed by automated means, including profiling, whereby information concerning the Data Subject’s activity on the Website, including concluded Contracts or Paid Agreements, or socio-demographic data, may be used in order to tailor marketing information to the Data Subject’s individual preferences.

[Rights and Obligations of Data Subjects]

The Data Subject has the right to request from the Data Controller:

• access to personal data and a copy of the complete Data, together with information concerning the processing of the Data;
• rectification of the Data by indicating data that is incorrect or outdated;
• deletion of the Data, provided that the Data Controller shall have the right to refuse deletion in cases provided for by generally applicable law;
• transfer of the Data by preparing and transmitting the designated Data to another controller or to the Data Subject in a structured, commonly used, machine-readable format;
• restriction of the processing of the Data.

The Data Subject also has the right to object, at any time, to the processing of Data based on the legitimate interests pursued by the Data Controller, including profiling based on such interests, on grounds relating to their particular situation. Such objection shall be binding upon the Data Controller unless the Data Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the Data Subject, or grounds for the establishment, exercise, or defense of legal claims.

Where the Data is processed for direct marketing purposes by the Data Controller, the Data Subject has the right to object at any time to the processing of such Data for that purpose, including profiling, insofar as the processing is related to such direct marketing.

Where Data is processed by the Data Controller on the basis of the Data Subject’s consent, such consent may be withdrawn at any time, and such withdrawal shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

The Data Subject may exercise the rights referred to above, in particular by sending an appropriate request by e-mail to support@allintraders.ai, together with their first name and surname, by telephone at +48 699 224 191, or in person at the Data Controller’s office.

If the Data Subject posts any Data concerning other individuals on the Website, they may do so only on condition that they do not violate generally applicable law or the personal rights of such individuals.

The Data Subject shall be entitled to use Data and content provided by other persons on the Website during and in connection with the use of the Website, and with their consent, in a manner consistent with generally applicable law, unless they obtain consent from such persons to process their Data and content to the extent and for the purpose provided for in this Privacy Policy and beyond the use of the Website.

The Data Subject also has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place where the alleged infringement occurred, if they consider that the processing of the Data violates the provisions of the GDPR. The supervisory authority in Poland is the President of the Personal Data Protection Office.

[Data Security]

The Data Controller applies technical and organizational measures to protect the Data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Where Data is collected and processed, information is transferred in encrypted form in order to prevent misuse by third parties. The security measures applied by the Data Controller are continuously reviewed and adapted to technological developments.

In order to provide Data Subjects with a high level of Data security, the Data Controller applies measures ensuring:

• the ability to continuously ensure the confidentiality, integrity, availability, and resilience of processing systems and services;
• the ability to restore the availability of and access to Data in a timely manner in the event of a physical or technical incident;
• regular testing, measuring, and evaluation of the effectiveness of technical and organizational measures for ensuring the security of processing.

[Use of Cookies]

Cookies are small text files stored locally in the temporary memory of the web browser on the computer of the person to whom the Personal Data relates and from which the Website was visited.

Cookies enable identification of the web browser in order to optimize the content offered by the Website and simplify its use. This data is not used to personally identify the person visiting the Website.

The use of cookies is governed by the Cookie Policy, which is attached to this Privacy Policy.

[Final Provisions]

In matters not regulated by this Privacy Policy, the provisions of law concerning Data processing, including the GDPR, shall apply.

The Data Controller reserves the right at any time to amend or supplement this Privacy Policy where such changes concern material provisions and are justified by important reasons, in particular:

• issuance of a judgment by a common court or a decision by a public authority resulting in the need to amend the Privacy Policy;
• a change in generally applicable law or a significant change in the market situation relating to the activities carried out by the Data Controller;
• improvement by the Data Controller of the security, functionality, or level of Data protection;
• extension or improvement of the functionality of the Website or discontinuation of certain functionalities available within the Website;
• changes in the subject matter of the Data Controller’s business activity (its expansion or limitation), in accordance with the causes or effects of such changes.

Any amendments shall not deprive Data Subjects of their acquired rights and shall have effect for the future, i.e. from the date of their introduction. A person who does not agree with the amendment of the Privacy Policy may cease using the Website at any time.