Privacy Policy – ​​Startup Community Poznań

1. Data Controller

The controller of your personal data is Startup Community Poznań.

For all matters concerning personal data protection and the exercise of your rights, you can contact us:

• - at the e-mail address provided: aleks.lemanska@gmail.com.
• - by mail: ul. Mostowa 11, 60-854 Poznań, with the note "Personal Data."

2. Scope of data processed and its source.

In connection with the purposes indicated in this Policy, we process, in particular, the following categories of personal data:

• - identification data: first name, last name,
• - contact data: email address, telephone number, and possibly company name and position,
• - data regarding participation in events (e.g., meetups, webinars): registration information, attendance, date and form of participation, and any responses to post-event surveys,
• - correspondence data: content of messages sent, date and time of contact, notes related to conversations and meetings,
• - billing data: data required to issue accounting documents (e.g., company name, Tax Identification Number, address).

We generally collect data directly from you, in particular through:

• - registration forms for events (e.g., meetups),
• - contact form on the website,
• - newsletter subscriptions,
• - email or telephone correspondence.

If, in a specific case, we collect your data from a source other than you, we will inform you in accordance with Art. 66 § 1 of the GDPR. 14 GDPR, indicating in particular the source of the data and the categories of data being processed.

3. Purposes, legal basis, and periods of data processing

The Controller processes personal data for the following purposes:

After the periods indicated above, the data will be deleted or anonymized in a way that prevents the identification of the data subject.

4. Data Recipients

Your data may only be transferred to entities that help us achieve the purposes described above, such as:

• - hosting and IT service providers,
• - mailing system providers (e.g., MailerLite, Mailchimp, etc.),
• - webinar platform providers (e.g., Zoom),
• - accounting firms,
• - legal or tax advisors,
• - entities authorized by law (e.g., administrative authorities, courts).

Entities processing data on our behalf guarantee the application of appropriate data security measures and process data only on our documented instructions, based on personal data processing agreements concluded with us.

The Controller does not transfer data outside the European Economic Area (EEA), unless the service provider (e.g., certain mailing or webinar tool providers) is based outside the EEA or uses infrastructure located outside the EEA. In such a case:

• - the data is transferred using appropriate safeguards referred to in Art. 46 GDPR, in particular standard contractual clauses adopted by the European Commission, possibly with additional security measures, or
• - is transferred to a third country for which the European Commission has issued a decision establishing an adequate level of data protection.

You have the right to obtain information about the safeguards applied to data transfers to third countries.

5. Rights of the data subject

You have the right to:

• - access your data and receive a copy of it,
• - rectify (amend) your data,
• - erase your data ("right to be forgotten"),
• - restrict data processing,
• - transfer your data to another controller,
• - object to data processing based on Article 6(1)(f) GDPR,
• - withdraw consent (if it was the basis for processing) at any time – withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal,
• - lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing violates the provisions of the GDPR. You can submit requests to exercise your rights:
• ● by email: to the email address indicated in point 1;
• ● in writing: to our registered office address indicated in point 1, with the note "Personal Data."

We will respond to your request without undue delay, no later than one month from its receipt. If necessary, this period may be extended by another two months due to the complex nature of the request or the number of requests. In such a case, we will inform you of the extension and the reasons for it.

To exercise your rights, we may ask you to provide additional information necessary to confirm your identity if we have reasonable doubts as to your identity.

As a rule, the exercise of your rights is free of charge. If your requests are manifestly unfounded or excessive – in particular due to their repetitive nature – we may charge a reasonable fee or refuse to act on the request, of which you will be informed.

6. Voluntary provision of data

Providing data is voluntary, but necessary to achieve the indicated purposes – such as participating in an event, receiving a newsletter, or receiving a response to an inquiry.

6. Automated decisions and profiling

Your data is not processed in an automated manner and is not profiled.