Legal notice

Legal notice

1. The Client acknowledges that their personal data will be processed by

 

KAST-Jakub Staszkiewicz

Królewskie Wzgórze 20/40, Gdańsk Polska

NIP: [584 150 74 73], REGON: [523830225]

, email: adjstd@icloud.com, hereinafter referred to as the "Administrator," in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"). The Administrator can be contacted via email at: adjstd@icloud.com.

2. The provided personal data will be processed for the purpose of responding to the submitted inquiry or fulfilling an order.

3. The Client’s personal data, including name, email address, phone number, and address, will be processed for the following purposes:
- Providing marketing, promotional, and offer information regarding the Administrator’s investments via email, if consent has been given (legal basis: Art. 6(1)(a) GDPR) – until consent is withdrawn.
- Direct marketing of products and services (legal basis: Art. 6(1)(f) GDPR) – until the purpose of processing ceases.
- Taking actions at the Client's request before entering into a contract, if such a request has been made by the Client (legal basis: Art. 6(1)(b) GDPR) – for the duration related to taking actions aimed at entering into a contract.
-Arranging a meeting with the Client regarding the services provided by the Administrator and offered products, which is a legitimate interest of the Administrator (legal basis: Art. 6(1)(f) GDPR) – until an objection to processing is submitted or the purpose of processing ceases, whichever occurs first.
- Analyzing activity to present personalized content, based on the Client’s consent, if such consent has been given (legal basis: Art. 6(1)(a) GDPR) – until consent is withdrawn.
- Potential establishment, exercise, or defense of legal claims (legal basis: Art. 6(1)(f) GDPR) – no longer than necessary until the expiry of the relevant statute of limitations for claims as provided by the Civil Code, i.e., up to 6 years.
- Compliance with legal obligations incumbent on the Administrator (legal basis: Art. 6(1)(c) GDPR) – for the duration required by applicable laws.

Recipients of Personal Data

Recipients of the Client's personal data may include:
- Entities processing data on behalf of the Administrator, participating in the execution of specific tasks by the Administrator: suppliers of IT systems and IT services; entities providing advisory, consulting, marketing, audit, organizational, legal, tax, and accounting services to the Administrator, whereby such entities process data based on a contract with the Administrator and only according to the Administrator's instructions.
- Authorities entitled to receive the Client’s data based on legal provisions.

Personal data may also be transferred to certain subcontractors and suppliers of IT systems located in countries outside the European Economic Area (EEA) where the European Commission has not determined an adequate level of data protection. If such a situation occurs, personal data will be transferred outside the EEA, and the Administrator will implement appropriate safeguards to ensure that such transfer complies with applicable data protection regulations.

Data Provision

Providing data is voluntary. The consequence of not providing this data will be the inability to process the Client's personal data for direct marketing of products and services, taking actions at the Client's request before entering into a contract, or arranging a meeting with the Client regarding the services provided by the Administrator and offered products.

Rights of the Data Subject

Every person has the right to access their data and rectify, delete, restrict processing, the right to data portability, the right to object to processing, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. A statement of withdrawal of consent for the processing of personal data must be submitted in writing to the address Plac gen. Józefa Wybickiego 18/5 in Gdańsk, Poland, or electronically to the email address: adjstd@icloud.com.

Every person has the right to lodge a complaint with the President of the Office for Personal Data Protection if they believe that the processing of their personal data violates the provisions of the GDPR.

Automated Processing and Profiling

The Client’s personal data will be processed in an automated manner, including profiling. Automated decision-making will be based on the data left in contact forms and information about the Client’s activity on the website (identifying interests in specific products, content, and usage of the website). The consequence of such processing will be the creation of personalized marketing communication (displaying personalized messages) and transferring data to the Administrator’s sales department.

Profiling means processing personal data involving the use of the Client's personal data to evaluate certain characteristics of the Client, particularly to identify interests in specific properties, content, and usage of the website. Automated decision-making for the purposes of creating personalized marketing communication is based on the Client's consent.