Information Clause

DATA CONTROLLER

Nextbike Polska S.A. Under restructuring with its seat in Warsaw, ul. Przasnyska 6B, 01-756 Warsaw shall be the data controller of your personal data („Controller”). You can contact us via traditional post at the above-specified address or by writing to us an email at [email protected].

PURPOSES OF DATA PROCESSING AND LEGAL BASIS FOR DATA PROCESSING

Personal data are processed by the Controller for the below purposes:

  1. Conclusion and execution of Agreement according to the principles specified in the Kajteroz System Terms of Use with regards to natural persons acting on their own behalf pursuant to Art. 6 sec. 1 letter b of GDPR, since personal data processing is obligatory for the conclusion and execution of this agreement according to the principles specified in the Kajteroz System Terms of Use,
  2. Realization of obligations stemming from the provisions of law, applicable with respect to the Controller’s activity pursuant to Art. 6 par. 1 letter c of GDPR; that is, fulfilment of legal obligations resting on the Controller, including those stemming from the accounting regulations, tax regulations or other special regulations.
  3. Marketing of own products and services, including also the transfer of commercial information about products, services, promotional offers and events – pursuant to Art. 6 sec. 1 letter a of GDPR, that is, consent of the data subject if such consent has been expressed.
  4. Archiving – pursuant to Art. 6 sec. 1 letter f of GDPR, that is, our legally justified interest which is the necessity to store evidence of conducted activity.

DATA RECIPIENTS, TRANSFER OF DATA OUTSIDE EEA

The anticipated personal data recipients include: companies providing IT support services for the controller, providers of services of electronic post and other IT services, post operators/courier companies, entities servicing electronic payment services; consulting companies with which the controller cooperates, entities supporting controller’s marketing actions, entities authorized to obtain personal data pursuant to the controller’s order or entities which provide services/goods to the controller which are necessary in order for him to conduct economic activity as well as companies from the Nextbike group.

At a certain stage, transfer of personal data to third countries (from outside EEA) may take place. The Controller shall carry the above out pursuant to standard safeguard clauses (Art. 46 sec. 2 of GDPR) and – if necessary – he shall apply additional guarantees of protection of personal data in accordance with the standards in place in this regard or ensure other mechanisms which comply with the law and which legalize such transfer to third countries.

PERIOD OF DATA STORAGE

Your personal data, processed in relation to the concluded agreement, shall be stored for the period necessary for its execution, no longer however than for the period necessary to pursue claims which may stem from such agreement. For accounting purposes, data shall be processed within the period of 5 years from the end of the calendar year in which a given event occurred. Personal data processed by us for marketing purposes are processed until the moment of withdrawal of consent for their processing.

ENTITLEMENTS

You are entitled to access your personal data, amend them, remove them, limit their processing, transfer data, submit objection due to reasons related to a specific situation of the data subject towards data processing pursuant to the legally justified interest (Art. 6 sec. 1 letter f of GDPR) as well as to withdraw consent at any time (in the scope in which it was granted) without the impact of this action on compliance with law of the processing conducted on the basis of such consent prior to its withdrawal. You are entitled to submit a complaint to the relevant supervisory body, in particular, in the country of your permanent residence, your workplace or place of conduct of the alleged breach. In Poland such supervisory body is the Chairman of the Personal Data Protection Office, address: ul. Stawki 2, 00-193 Warszawa.

VOLUNTARY NATURE OF DATA SUBMISSION AND AUTOMATIC DECISIONS

Submission of data is voluntary; however, their submission is necessary for the conclusion of agreement (agreement conclusion condition). Indication of data for marketing purposes is voluntary and their non-submission causes inability to carry out marketing actions towards you. Your personal data shall not be used to undertake automated decision-making or profiling.