Information regarding GDPR

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), below we present detailed information regarding the processing of personal data.

Personal data controller

The controller of your personal data is bold-soar with its registered office in Warsaw, ul. Marszałkowska 84/92, 00-514 Warsaw, Poland.

Contact with the controller: [email protected]

Purpose and legal basis of processing

Your personal data is processed for the following purposes:

• Performance of a contract – based on Article 6(1)(b) of the GDPR, for the purpose of providing advisory and consulting services
• Direct marketing – based on Article 6(1)(f) of the GDPR, as a legitimate interest of the controller
• Handling inquiries – based on Article 6(1)(f) of the GDPR, as a legitimate interest of the controller
• Fulfillment of legal obligations – based on Article 6(1)(c) of the GDPR, in the scope of tax and accounting regulations
• Electronic marketing – based on Article 6(1)(a) of the GDPR, after obtaining your consent

Data recipients

Your personal data may be transferred to the following categories of recipients:

• IT and hosting service providers
• Entities providing accounting and legal services
• State authorities, to the extent required by law

All entities to whom we transfer data process it only at our instruction and are obliged to maintain confidentiality.

Data retention period

Your personal data will be stored:

• For the duration of the contract and for the time necessary to pursue claims
• For the period required by law, in particular tax regulations (5 years)
• Until consent is withdrawn, if processing is based on consent
• Until an effective objection is raised, if processing is based on a legitimate interest

Your rights

In connection with the processing of personal data, you have the following rights:

Right of access to data

You have the right to obtain from us confirmation whether we process your personal data, and if so, to obtain access to it and information regarding the purposes of processing, data categories, and recipients.

Right to rectification

You have the right to demand the immediate rectification of inaccurate personal data or the completion of incomplete data.

Right to erasure (right to be forgotten)

You have the right to request the erasure of data if it is no longer necessary for the purposes for which it was collected, or if you have withdrawn your consent and there is no other legal basis for processing.

Right to restriction of processing

You have the right to demand the restriction of processing in case of questioning the accuracy of the data or objecting to processing.

Right to data portability

You have the right to receive your data in a structured, commonly used format and to transmit this data to another controller.

Right to object

You have the right to object at any time to the processing of your personal data if the processing is based on a legitimate interest.

Right to withdraw consent

If processing is based on consent, you have the right to withdraw consent at any time, which does not affect the lawfulness of processing carried out before its withdrawal.

Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office, if you believe that the processing of your data violates GDPR regulations.

Source of data

We obtain personal data directly from you through:

• Contact forms on the website
• Email correspondence
• Direct meetings and conversations

Automated decision-making and profiling

We do not make automated decisions regarding you, including decisions based on profiling, which produce legal effects or similarly significantly affect your situation.

Obligation to provide data

The provision of personal data is voluntary, but necessary for the performance of a contract or to respond to an inquiry. Failure to provide data will prevent us from providing services or responding.

How to exercise your rights?

To exercise your rights, send a message to: [email protected]

We will respond to your request without undue delay, but no later than within one month of receiving it. If necessary, this period may be extended by another two months due to the complex nature of the request or the number of requests – we will inform you about this within one month of receiving the request.