NFORMATION ON PERSONAL DATA PROCESSING
1. Personal Data Administrator
1.1. Data submitted via the portal SlotMarket.pl is administered by Sport Evolution Group sp. z o.o., with its registered office in Warszawa, postal code 01-964, at Jana Kochanowskiego 12/23 (correspondence address Janki, ul. Falencka 1B, 05-090 Raszyn) entered into the register of businesses under the KRS number 0000779253, the registration of which is maintained by the District Court for the city of Warsaw, 13th Commercial Division of the National Court Register, tax number (NIP) 1231431002, statistical identification number (REGON) 382960037.
1.2. From 25 May 2018 on, the contact with the Administrator in matters of personal data protection will be possible via the address: daneosobowe@sportevolution.pl.
2. Purpose and legal basis for data processing
2.1. From 25 May 2018 on, the legal basis for the processing of personal data by the Data Administrator will be the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: "GDPR"), as well as other applicable law.
2.2. Legal grounds for data processing:
a) Article 6 para. 1 (b) and (c) GDPR in order to perform the contract or carry out actions aimed at the conclusion thereof taken at the request of the data subject and to fulfill the legal obligation of the Data Administrator.
b) Article 6 para. 1 (f) GDPR in order to pursue legitimate interests pursued by the Data Administrator or by a third party that processes data being authorized by the Data Administrator.
c) Article 6 para. 1 (a) GDPR for direct marketing of products and services of entities cooperating with the Data Administrator,
2.3. Direct marketing, referred to in point 2.2. may be implemented by the Data Administrator using electronic communication means, telecommunications terminal equipment and automatic calling devices (after obtaining the appropriate consent).
3. Legitimate interests pursued by the administrator or by a third party that processes data being authorized by the Data Administrator
3.1. The Data Administrator or a third party processes personal data based on the following legitimate interests:
3.1.1. Ensuring the security of the Portal and the information contained therein;
3.1.2. Direct marketing of one’s own products and services;
3.1.3. Transfer of personal data between the Data Administrator and related entities for internal administrative purposes;
3.1.4. Prevention of fraud (e.g. multiple entries for an event or service, submitting false or untrue statements, misleading the Data Administrator, unauthorized use of the account);
3.1.5. Securing the Data Administrator's claims;
4. Data recipients
4.1. The collected personal data will be available to the Administrator's contractors who will take steps to conclude or will conclude an agreement with the User via the Portal, for hosting service providers (related to the operation of the Portal), for tool and service providers dealing with user support (payments, additional services), for service providers supporting marketing activities and operations of the Data Administrator, as well as other recipients, provided that the necessity to provide data results from legal provisions.
5. Transfer of personal data to a third country or international organization
5.1. User data may be transferred to recipients in countries outside the European Union in the following cases:
5.1.1. If it is necessary to perform the contract or take steps related to its conclusion;
5.1.2. As part of technical solutions applied by the Administrator (cloud computing, electronic mail, hosting);
5.1.3. In the event of consent by the User.
6. Duration of personal data storage
6.1. Personal data provided to the Administrator will be stored for the following duration:
6.1.1.Personal data processed for the purpose of concluding or performing a contract and fulfilling the Administrator's legal obligations will be stored for the duration of the contract, and after its expiry for the period related to the warranty to which Users are entitled and the possible right to secure or claim amounts due by the Administrator from the User, and also to fulfill the Administrator's legal obligations (e.g. tax settlements).
6.1.2. Personal data processed for the purposes of marketing of the Administrator's own products and services in accordance with the legitimate interests pursued by the Administrator or a third party will be processed until an objection is lodged by the data subject.
6.1.3. Personal data processed on the basis of a separate consent will be processed until its revocation.
7. Profiling
7.1. In order to conduct marketing activities, the Administrator uses Users’ preferences and interests to tailor marketing communication to Users' needs, i.e. offering products or services consistent with the information provided by Users.
7.2. Preferences and interests are assessed based on:
7.2.1. Data provided by the User while creating an account and in forms;
7.2.2. Products and services purchased by the User on the Portal;
7.2.3. Information on the User's activities on the Portal collected automatically;
7.3. After obtaining the relevant consent, the effect of profiling may be that the User is provided with a personalized offer from the Administrator's contractor.
7.4. In exceptional cases, the effect of Profiling may be that persons with the same characteristics receive different offers, but in no case will Profiling limit the Administrator's offer to the User.
8. User Rights
8.1. The User has the right to request the Administrator to access his personal data, rectify it, delete it or limit processing; furthermore, the User has the right to object to the processing (applies to personal data referred to in point 2.2 (b)), as well as the right to transfer data (e.g. transferring data to another data administrator).
8.2. If the Administrator does not take action in connection with the request of the data subject, he shall immediately - at the latest within one month of receipt of the request - inform the data subject of the reasons for not taking action and of the possibility to submit a complaint to the supervisory body (the President of Personal Data Protection Office) as well as to use legal protection measures before a court.
8.3. In the event of consent to the processing of personal data referred to in point 2.2 (c), the User has the right to withdraw such consent at any time subject to the proviso that such withdrawal will not affect the lawfulness of the processing that had been carried out on the basis of consent before its withdrawal.
8.4. Without prejudice to other administrative or legal remedies before a court, any data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his habitual residence, place of work or place of alleged infringement, if he thinks that the processing of personal data concerning him violates the provisions on the protection of personal data.
8.5. Without prejudice to available administrative or extrajudicial remedies, including the right to lodge a complaint with a supervisory authority in accordance with point 8.4, every data subject has the right to an effective judicial remedy if he finds that the processing of personal data concerning him violates the provisions on the protection of personal data.
9. User's obligations
9.1. A condition for using the functionality of the Portal and concluding an agreement with the Administrator is to provide the minimum required range of data indicated in the registration form.
9.2. At the time of providing data to the Administrator, the User declares that the data provided by him is consistent with his state of knowledge, regardless of whether this data is required or voluntary.
