Privacy Policy

Effective date: 28.05.2020.

1. INTRODUCTION

1. This privacy policy defines the manner in which STREAMcoi uses personal data of the users visiting our websites, interacting with us and using our services. It also informs the users what rights they have and how they are protected by the law.
2. It is important for every user to read this privacy policy in order to be able to use the websites and services of STREAMcoi in an informed manner (including the knowledge on how data are used and why they are used).
3. If you have any questions or you would like to exercise your right to privacy, you should follow the instructions contained in this privacy policy. The STREAMcoi team is available to help you.

2. DATA CONTROLLER

1. Your personal data are controlled by inSTREAMLY spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, Poland, ul. Williama Heerleina Lindleya 16, 02-013 Warsaw, entered in the Register of Entrepreneurs of the National Court Register by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under KRS number: 0000812512, NIP [Tax No.]: (PL)7010954779. You can contact STREAMcoi in the following manner: contact@STREAMcoi.com.

3. STATEMENT ON THE COPPA

1. The website and the services of STREAMcoi contain information which is not addressed to children (persons below the age of 13). This website as well as services and websites related thereto (including services and websites of partners of STREAMcoi) are not intended for children, and STREAMcoi does not knowingly collect data about children.

4. DATA BEING COLLECTED

1. STREAMcoi collects various information about its customers and guests when it is provided to STREAMcoi or when the users use services of STREAMcoi or when STREAMcoi collects such information from another source. Collected data can be assigned to the following categories:

   Identification data	First name and surname, user name. In the case of contact through social media – also the user name in these media.
   Contact data	First name and surname, user name. In the case of contact through social media – also the user name in these media.
   Data related to image	Image of a person who has concluded a contract with STREAMcoi (lease of advertising space).
   Financial data	Bank account number.
   Technical data	Internet protocol address (IP), browser type and version, settings and location of the time zone, types and versions of browser plug-ins, operating system and platform, other technologies applied in devices employed by the user in order to access this website.
   User data	Information about the manner of use of the website or services (tracking of behaviour).
   Tracking data	Information that is collected about the user by STREAMcoi or other entities using cookies and similar tracking technologies, such as web beacons, pixels and mobile device identifiers.

2. STREAMcoi collects, shares and uses Aggregated data (statistical or demographic data), which, nonetheless, do not constitute personal data. If these data are merged by STREAMcoi with data allowing for the user identification, aggregated data are treated by STREAMcoi as personal data.
3. STREAMcoi does not collect sensitive data (data of special category), including data revealing one’s racial or ethnic origin, religious beliefs, data concerning sexual life and orientation, political views, information about health and diseases as well as biometric and genetic data.
4. If the user decides not to share some data with STREAMcoi, it may result in the inability to perform serviced provided by STREAMcoi. In the event when the consent is required by the law, it is always voluntary. However, when processing data, STREAMcoi does not rely only on the user’s consent, but also on other bases for data processing.

5. MANNER OF DATA COLLECTION

1. STREAMcoi uses various methods of personal data collection, that is:

   Direct interactions	The user provides data directly to STREAMcoi. The provision is performed upon registration (conclusion of a contract), contact by mail or by phone and contact through social media, or upon performance of the contract (lease of advertising space). In this manner, we collect Identification data, Contact data, Data related to image and Financial data.
   Automated activities	Data are collected automatically during interactions with STREAMcoi (also through the website) by cookies and analytic tools. In this manner, we collect Technical data, User data and Tracking data. We may also collect Aggregated data. In automated activities, we only use Google Analytics and Hotjar.
   From third parties	Data are provided by entities which are external in relation to STREAMcoi (including entities providing tracking services, statistical services, etc. as well as entities providing solutions related to logging-in, e.g. Google Sign-In), if these entities have a legal basis for such provision. This basis usually consists in the user’s consent. In this manner, we collect Technical data, User data and Tracking data. We may also obtain Financial data (payments operators) and, upon authentication, Identification data and Contact data (social portals, streaming portals). Necessary personal data may be obtained by STREAMcoi also through API placed in portals of business partners of STREAMcoi and entities providing services for STREAMcoi.

6. MANNER OF USE OF DATA

1. The manner of use of data by STREAMcoi is contingent upon the purpose for which these data have been provided or obtained:

   If we perform a contract which has already been concluded or if we want to conclude a contract.	For example, if the user logs in to lease advertising space.
   If it is justified by the interests of STREAMcoi or by the interests of third parties, and the interests of the user do not override them.	For example, if we have a reasonable suspicion of fraud; if STREAMcoi wants to inform the user about new services.
   If STREAMcoi must perform a legal obligation imposed on it.	For example, for the purpose of tax settlement.

   However, as a rule, STREAMcoi uses data for the purpose of:
   a. performance of services provided by electronic means, and in the case of users with whom a contract has been concluded – also for the purpose of performance of that contract; b. performance of other services; c. handling of inquiries, requests and orders; d. marketing activities (marketing of own products); e. analysis and improvement of the functioning of websites and services provided by STREAMcoi; f. development, repair or tests of various functionalities;

7. LEGAL BASIS FOR DATA COLLECTION. RETENTION

1. STREAMcoi may process personal data on the following legal bases:

   Performance of a contract or action prior to its conclusion	Article 6(1)(b) of the GDPR. Data are retained for a period that is necessary for the contract to be performed, terminated or otherwise dissolved.	Identification data, Contact data, Data related to image and Financial data
   Direct marketing	Article 6(1)(f) of the GDPR. Data are stored for the period of existence of a legitimate interest pursued by STREAMcoi, however, no longer than for the period of limitation of claims in relation to the data subject on account of the business activity conducted by STREAMcoi . The limitation period is defined by the law, in particular, by the provisions of the Civil Code (the basic limitation period for claims related to conducting business activity is three years, and in the case of a sales contract – two years). STREAMcoi cannot process data for the purpose of direct marketing if the data subject effectively objects to it.	Contact data
   Keeping accounts	Article 6(1)(c) of the GDPR in conjunction with Article 74 paragraph 2 of the Accounting Act. Data are stored for a period required by the legal provisions obliging STREAMcoi to maintain accounts (five years calculated from the beginning of the year following the financial year concerned by the data).	Identification data, Contact data and Financial data, NIP [Tax No.]
   Responding to an inquiry	Article 6(1)(f) of the GDPR. Data are stored for the period of existence of a legitimate interest pursued by STREAMcoi, however, no longer than for a period necessary to respond to inquiries sent.	Identification data, Contact data
   Determining, pursuing or defending against claims	Article 6(1)(f) of the GDPR. Data are stored for the period of existence of a legitimate interest pursued by STREAMcoi, however, no longer than for the period of limitation of claims in relation to the data subject. The limitation period is defined by the law, in particular, by the provisions of the Civil Code (the basic limitation period for claims related to conducting business activity is three years, and in the case of a sales contract – two years).	Identification data, Contact data and Financial data, NIP [Tax No.]
   Ensuring security, data protection and protection against fraud	Article 6(1)(f) of the GDPR. Data are stored for the period of existence of a legitimate interest pursued by STREAMcoi, however, no longer than for the period of limitation of claims in relation to the data subject. The limitation period is defined by the law, in particular, by the provisions of the Civil Code (the basic limitation period for claims related to conducting business activity is three years, and in the case of a sales contract – two years).	Identification data, Contact data, Data related to image and Financial data

8. THE RIGHTS OF DATA SUBJECTS

1. The data subject (the user) has the following rights:

   The right of access, rectification, limitation, erasure or portability	The data subject has the right to request the following from STREAMcoi: access to their personal data, their rectification, erasure (“the right to be forgotten”) or limitation of their processing, the right to object to their processing and the right to data portability. The detailed conditions of exercising the aforementioned rights are indicated in Article 15-21 of the GDPR.
   The right to withdraw the consent at any time	The person whose data are processed by STREAMcoi based on the consent given (pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR) has the right to withdraw the consent at any time without affecting the legitimacy of the processing performed based on the consent prior to its withdrawal.
   The right to lodge a complaint with the supervisory body	The person whose data are processed by STREAMcoi has the right to lodge a complaint with the supervisory body in the manner and mode defined in the provisions of the GDPR and the Polish law, in particular, the Act on Personal Data Protection. The President of Personal Data Protection Office is the supervisory body in Poland.
   The right to object	At any time, the data subject has the right to object – for reasons related to their specific situation – to the processing pertaining to their personal data based on Article 6(1)(e) (public interest or tasks) or (f) (legitimate interest), including profiling based on these provisions. In such an event, STREAMcoi will no longer be able to process such personal data, unless it proves the existence of important, legitimate grounds for the processing, overriding the interests, rights and freedoms of the data subject, or any grounds for determining, pursuing or defending claims.
   The right to object to direct marketing	If personal data are processed for the purpose of direct marketing, the data subject has the right to object, at any time, to the processing pertaining to their personal data for the purposes of such marketing, within the scope in which the processing is related to such direct marketing.

2. The exercise of rights of the data subject is performed by contacting STREAMcoi using the contact details indicated in the introduction to the policy.

9. PROFILING

1. STREAMcoi does not perform profiling.

10. DATA PROVISION

1. As a rule, data collected by STREAMcoi are not shared with third parties. However, STREAMcoi may:
   a. share data of persons who have concluded a contract with STREAMcoi (lease of advertising space) with advertisers at the stage of their deciding about cooperation with STREAMcoi, as well as information about the implemented campaigns;
   b. share data of persons who have used the services of STREAMcoi with entities supporting STREAMcoi in the provision of services, such as payment processors or providers of analytic tools (e.g. Google Analitycs);
   c. provide data to law enforcement authorities, supervisory bodies, entities performing public tasks or other entities, if the obligation to provide data results from the legal provisions.
   The provision of data must always be performed based on the legal provision or the relevant contract (outsourcing of personal data processing).

2. Data may be shared outside the European Economic Area, whereby STREAMcoi ensures that adequate security measures are provided. In particular, STREAMcoi concludes the relevant contracts (standard contractual clauses) in order to secure personal data being transmitted, and provides data to those countries for which the European Commission has issued a decision acknowledging the appropriate level of protection.

11. COOKIES AND ANALYTICS

1. Cookies consist in small text information in the form of text files which are sent by the server and saved on the side of the person visiting websites (e.g. on the hard disk of a computer or laptop or on the smartphone memory card – depending on the device employed by the user).
2. As a standard, most web browsers available in the market accept saving cookies by default. Everyone is able to define the conditions of using cookies by means of settings of their web browser. This means that the possibility of saving cookies may be e.g. partially limited (e.g. in time) or totally disabled – however, in the latter case, it may affect some functionalities of websites.

3. STREAMcoi uses the following cookies:
   a. Google Analytics
   b. Hotjar
   These files are necessary for traffic analysis and are not essential for the proper functioning of websites of STREAMcoi. STREAMcoi offers an easy way to disable these files.

4. Google Analytics - STREAMcoi uses the services of Google Analytics and its functions provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). These services support STREAMcoi in analysing and enhancing its websites and the services provided through them. Along with advertising functions, Google Analytics employs cookies to analyse the manner of use of websites. The data received are processed in an aggregate and anonymous manner (which means that they prevent identification of a given person. However, these data may be merged with other data. Then, they constitute personal data for STREAMcoi ). Everyone may block the transfer of data from electronic devices to Google Analytics by downloading and installing a free browser plug-in available here. More information about the Google Analytics tool is available here.
5. Hotjar - STREAMcoi uses the services of Hotjar provided by Hotjar Ltd (address of the registered office: St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta), which monitors and records behaviour on websites. This tool records data pertaining to such behaviour as: navigation, page scrolling, cursor movement. Information about the location, operating system, browser or cookies are also collected. The data received are processed in an aggregate and anonymous manner (which means that they prevent identification of a given person. However, these data may be merged with other data. Then, they constitute personal data for STREAMcoi ). Everyone may disable the activity measured by Hotjar using the functionality available here. More information about the Hotjar tool is available here.