§ 1. General information

1. This document (hereinafter referred to as the "Policy") sets out the principles of Privacy Policy and "Cookies" on the ar-range.app website (hereinafter referred to as the "Web Service") available at https://ar-range.app.
2. The Administrator of the Web Service is BIG BANDA Spółka z ograniczoną odpowiedzialnością (limited liability company under Polish law) with its registered office in Poznań (60-255) at ul. Józefa Chociszewskiego 21/4, entered in the register of entrepreneurs kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań VIII Economic Department of the National Court Register under number 0000794853, holding NIP number 7792507533, REGON number 383883787 (hereinafter referred to as the "Administrator").
3. Words used with a capital letter shall have the meaning given to them in this Policy.
4. Personal data collected by the Administrator shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1; hereinafter referred to as "GDPR").
5. The Administrator shall make a special effort to protect the privacy and information provided to it and concerning the Web Service. The Administrator shall exercise due diligence in selecting and applying appropriate technical measures, including those of a programmatic and organizational nature, to ensure the protection of the processed data, in particular securing the data against their access to unauthorized persons, disclosure, loss and destruction, unauthorized modification, as well as against their processing in violation of applicable laws.

§ 2. Personal data

1. The administrator of your personal data is: BIG BANDA Spółka z ograniczoną odpowiedzialnością (limited liability company under Polish law) with its registered office in Poznań (60-255) at ul. Józefa Chociszewskiego 21/4, entered in the register of entrepreneurs kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań VIII Economic Department of the National Court Register under number 0000794853, holding NIP number 7792507533, REGON number 383883787.
2. You can contact the Administrator Regarding your personal data by:
   1. e-mail: privacy@ar-range.app,
   2. post.

3. The Administrator processes your personal data for the following purposes and scope:
   1. to take action prior to entering into a contract at your request expressed through the registration form, in which you have provided us with your personal data for the purpose of entering into a contract for the provision of electronic services and for the purpose of performing the contract for the provision of electronic services and additional contracts related to it (e.g. additional technical support); in this case we process your personal data provided in the registration form,
   2. if you give a consent, in order for the Administrator to use, on its own behalf or on behalf of others, current and future telecommunications terminal equipment and automatic calling systems for direct marketing purposes (and in particular to send you newsletters and other interesting content); in this case, we process your personal data provided in the consent form,
   3. in order to allow you to browse the Web Service, we process personal data regarding your activity on the Web Service, i.e. data regarding your device session, operating system, browser, location and unique ID, IP address,
   4. in order to provide statistics on the use of the various functionalities available on the Web Service, to facilitate the use of the Web Service and to ensure the IT security of the Web Service, we process personal data regarding your activity on the Web Service, i.e. your location, IP address, device ID, data regarding your browser and operating system,
   5. for the purpose of handling complaints, claims and requests, and responding to customer inquiries, we process the personal data you provide in complaints, claims and requests, or to respond to inquiries in any other form.
4. The Administrator processes the following categories of relevant personal data:
   1. contact data,
   2. data about your activity on the Web Service,
   3. data on complaints, claims and requests.
5. The provision of the required personal data by you is voluntary but is a condition for the provision of services by the Administrator through the Web Service and the possibility for you to use the Web Service.

6. Personal data will be processed for the period necessary to provide services to you, in particular to enter into a contract, as well as for the period in which your claims against the Administrator may arise, but no longer than for 6 years counting from the end of the calendar year in which the Administrator stopped providing services to you.

7. Personal data will be erased in the following cases:
   1. when you request their erasure or withdraw the consent you have given,
   2. upon learning that the stored data is outdated or inaccurate,
   3. in other cases, described in the Terms of service create.ar-range.app.

8. We store the data of persons browsing the Web Service for a period corresponding to the life cycle of cookies stored on your devices or until you delete them on your device.

9. We may transfer your personal data to the following categories of recipients:
   1. state authorities, e.g. the Prosecutor's Office, the Police, the President of the Personal Data Protection Office (Prezes UODO), if they request us to do so,
   2. providers of services we use to run the Web Service (in particular, payment operators, companies providing IT services to us, companies providing accounting services to us, companies providing legal assistance to us).

10. Under the GDPR, you have the right to:
    1. request access to your personal data,
    2. request rectification of your personal data,
    3. request the erasure of your personal data,
    4. request the restriction of the processing of your personal data,
    5. object to the processing of your personal data,
    6. request the portability of personal data.

11. The Administrator shall, without undue delay - and in any case within one month of receipt of the request - provide you with information on the actions taken in connection with your request. If necessary, the one-month period may be extended for another two months due to the complexity of the request or the number of requests.

12. In any case, the Administrator shall inform you of such extension within one month of receipt of the request, stating the reasons for the delay.

13. You have the right to obtain information from the Administrator as to whether your personal data is being processed.
14. If the Administrator processes your personal data, you have the right to:
    1. access to your personal data,
    2. obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of such data, the intended period of storage of your data or the criteria for determining this period, your rights under the GDPR and your right to lodge a complaint with a supervisory authority, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union,
    3. obtain a copy of your personal data.

15. If your personal data is inaccurate, you have the right to request that the Administrator promptly rectify your personal data.

16. You also have the right to request the Administrator to complete your personal data.
17. You have the right to request the Administrator to erase your personal data when:
    1. your personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
    2. you have withdrawn specific consent, to the extent that your personal data was processed based on your consent,
    3. your personal data was processed unlawfully,
    4. you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of your personal data is related to direct marketing,
    5. you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Administrator or a third party.

18. Despite your request for erasure of your personal data, the Administrator may continue to process your data for the purpose of establishing, asserting or defending claims of which you will be informed.

19. You have the right to request restriction of the processing of your personal data when:
    1. you question the accuracy of your personal data - the Administrator will restrict the processing of your personal data for a period of time that allows you to verify the accuracy of the data,
    2. when the processing of your data is unlawful, and instead of deleting your personal data you request the processing of your personal data to be restricted,
    3. your personal data is no longer needed for the purposes of processing, but it is needed to establish, assert or defend your claims,
    4. when you have objected to the processing of your personal data - until it is determined whether the legitimate interests on the part of the Administrator override the grounds stated in your objection.

20. You have the right at any time to object to the processing of your personal data, including profiling, in connection with:
    1. processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by the Administrator or a third party,
    2. processing for direct marketing purposes.

21. You have the right to receive your personal data from the Administrator in a structured, commonly used machine-readable format and send it to another administrator.

22. You may withdraw the consent you have given for the processing of your personal data at any time.
23. Withdrawal of consent to process your personal data shall not affect the lawfulness of processing carried out based on your consent before its withdrawal.
24. Your personal data will not be subject to automated decision-making and profiling as referred to in Article 22 (1) and (4) of the GDPR.

25. As a rule, your personal data will not be transferred to a third country or international organization within the meaning of the GDPR. However, due to the use of Google's services and the MailChimp system (if you agree to receive newsletters), your data may be transferred to the United States of America in connection with its storage on American servers. The transfer of data is carried out on the basis of appropriate safeguards, i.e. the signing of so-called standard contractual clauses with these entities, which, in accordance with the Commission Decision of February 5, 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council, ensure an adequate level of protection for the transferred data.

26. If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged violation was committed.

27. In Poland, the supervisory authority under the GDPR is the President of the Personal Data Protection Office (Prezes UODO).
28. In order to execute your rights, you may submit your request by letter to the Administrator's address or by email to: privacy@ar-range.app.
    

§ 3. Cookies and other tools

1. As part of the Web Service, the Administrator uses cookies. As part of the newsletter, the Administrator also uses the MailChimp system.
2. Cookies are IT data, in particular text files, which are stored on the final device of a website User and are intended for the use of the website. Cookies usually contain the name of the website from which they come, the time they are stored on the end device and a unique number.

3. The Administrator is the entity placing cookies on the Web Service User's terminal equipment and accessing them.
4. Cookies are used in particular for the following purposes:
   1. creation of statistics that help to understand how users use the website, which allows improving its structure and content,
   2. determining the user's profile in order to display materials matched to the user.

5. The website uses two main types of cookies: "session" (session cookies) and "persistent" (persistent cookies). "Session" cookies are temporary files that are stored on the user's terminal device until the user logs out, leaves the website or shuts down the software (web browser). "Persistent" cookies are stored on the user's end device for the time specified in the parameters of the cookies or until they are deleted by the user.

6. Web browsing software (web browser) usually allows the storage of cookies on the user's terminal device by default. Users of the site can change their settings in this regard. The web browser makes it possible to delete cookies. It is also possible to automatically block cookies. For details, please refer to the help or documentation of your web browser.

7. Restrictions on the use of cookies may affect certain functionalities available on the website.

8. We use external cookies from entities with which we cooperate, such as Google or Facebook. Since the operation of some cookies from external partners may be different than presented in this Policy, please refer to the information on these cookies available on the websites of our partners:
   1. Google: https://www.google.pl/intl/pl/policies/technologies/cookies/,
   2. Facebook: http://www.facebook.com/help/cookies. 

9. MailChimp is a marketing automation platform that allows to create, send and analyze marketing campaigns, including serving newsletters. Detailed rules on the use of the system and processing of personal data and other information are available at https://mailchimp.com/legal/.

We change this Policy from time to time. However, we would like to emphasize that your rights under this Policy will not be restricted without your express consent.

‍