Privacy policy of 360softwarehouse.com

§1 Who is the personal data Controller?

The data controller is 360 Software House sp. z o.o., with its registered office in Łódź (90-361), ul. Piotrkowska 262/264, lok. 204, KRS 0001054652. You can contact the Controller by writing to: biuro@360softwarehouse.com

§2 Why do we collect your data and how long do we keep it?

We may process your data for the following purposes:

1. Communicating with you, including answering questions sent through the contact form, e-mail, etc.;

The data will be processed on the basis of the Controller's legitimate interest in communicating with Website Users (Art. 6(1)(f) GDPR). Your data will be processed no longer than until you object or the business purpose ceases. Providing this data is voluntary, but necessary to communicate with you. The data may also be processed during archiving for internal purposes, based on the Controller's legitimate interest (Art. 6(1)(f) GDPR), until an objection is raised or the business purpose ceases.

2. Concluding and performing a contract (placing an order);

3. Establishing, defending and pursuing claims;

4. Fulfilling legal obligations of the Controller (including tax and archiving obligations);

Data necessary to conclude and perform a contract will be processed for the duration of the contract, including the period in which rights arising from the contract may be exercised, such as the right to make a warranty claim (Art. 6(1)(b) and (f) GDPR). Providing this data is voluntary, but necessary to conclude and perform the contract.

Additional data provided, among other things, to improve the performance of the contract will be processed no longer than until you object or the business purpose ceases, based on the legitimate interest of serving Clients (Art. 6(1)(f) GDPR).

After that time, the data will be processed for the limitation period of claims, based on the Controller's legitimate interest in defending against claims, as well as establishing and pursuing claims (Art. 6(1)(f) GDPR).

Where the data is necessary to fulfil legal obligations of the Controller (such as issuing and storing invoices), it will be processed for this purpose for no longer than 6 years (archiving obligations for accounting documents), unless the law requires a longer period (Art. 6(1)(c) GDPR).

The data may also be archived for internal and statistical purposes until you object or the business purpose ceases, based on the Controller's legitimate interest (Art. 6(1)(f) GDPR).

5. Providing marketing information (including sending a newsletter and information about services, products, promotions and free content using other tools, e.g. chatbot, phone);

The data will be processed on the basis of the Controller's legitimate interest in marketing the Controller's products and services (Art. 6(1)(f) GDPR). The data will be processed no longer than until you object or the business purpose ceases, whichever occurs first. Providing the data is voluntary, but necessary to receive marketing/commercial information.

In accordance with Art. 10 of the Act on Providing Services by Electronic Means, I need your consent to maintain commercial and telephone communication. You can withdraw it at any time by clicking the link in the footer of the e-mail or by writing to me at the address given above.

6. Administering and managing pages and groups on social media platforms (including Facebook (Meta), Instagram, LinkedIn), where data is processed on social media platforms, including communication and targeting of marketing content;

This data will be processed only if you decide to like the page / join the group / choose the “Follow” option, or otherwise leave your data on a platform managed by me, e.g. by posting an entry or a comment. The data will be processed for the period the page/group exists or until you object, which you can do by clicking “Like” or “Follow” again to undo it, deleting the comment/post, in any other way provided by the platform/page, or by contacting me. Please note that the rules relating to the page/fanpage/group are set by the Controller, while the rules of using the social network on which the page/fanpage/group is placed are set by the entity managing that network.

7. Analytical and statistical purposes;

Processing data for analytical and statistical purposes consists in particular of analysing data obtained automatically when using the website, including cookies. The data is processed on the basis of the Controller's legitimate interest in adjusting the content of the Website to User preferences and optimising use of the Website, and in creating statistics that help understand how Users use the Website, which allows its structure and content to be improved (Art. 6(1)(f) GDPR). The data may also be archived for internal and statistical purposes, based on the Controller's legitimate interest (Art. 6(1)(f) GDPR), until you object or the business purpose ceases.

8. Recovering abandoned carts;

If you do not finish placing an order, you will receive a reminder about the started but unfinalised order. The data will be processed on the basis of the Controller's legitimate interest in serving potential and actual Clients (Art. 6(1)(f) GDPR). This data will be processed for the time necessary to achieve business purposes or until an objection is raised.

9. Posting comments;

The data visible on our Website next to a posted comment is processed by us to administer and operate the Website, and also serves to communicate with you, based on the Controller's legitimate interest (Art. 6(1)(f)), for the time necessary to achieve business purposes or until an objection is raised.

10. Promotion and marketing;

If you provide us with your data, in particular in the form of an opinion about a product or service, including image data, it will be processed on the basis of the Controller's legitimate interest in marketing, for the purpose of improving the quality of services and products and promoting the Controller's services and products. This data will be processed for the period necessary to achieve business purposes or until an objection is raised. Providing the data is voluntary.

11. Collecting sensitive data;

Sensitive data is collected in order to perform the contract and ensure its proper execution - on the basis of your informed and voluntary consent (Art. 9(2)(a) GDPR) - until the business purpose ceases or the consent is withdrawn. Providing the data is voluntary, but necessary for the proper performance of the contract.

§3 Who can we share your data with?

We share your data with other entities only when it is necessary to achieve the processing purposes referred to in §2, and only to the extent necessary for that purpose. As a rule, we collect and process only the data you have provided yourself, with the exception of data collected automatically (cookies). You can find more about cookies in §7.

If necessary, your data may be shared with entities we cooperate with to achieve the above purposes, in particular a hosting company, an IT company / website management entity, an accounting and bookkeeping company, an invoicing software provider, a newsletter service provider, a cloud service provider, marketing service providers, administrative service providers, consulting service providers, subcontractors, lawyers, couriers or postal operators, a training platform, a social media platform, a customer service platform, an appointment booking platform, a platform for sharing products or providing services, and other entities that support the Controller in achieving the processing purposes.

As a rule, data will not be transferred outside the EEA, subject to the situations described below. In other cases, where data is transferred outside the EEA, this will be done on the basis of your consent, standard contractual clauses or other safeguards provided for in the GDPR, after fulfilling, among other things, the information obligation.

Services provided by Google or Facebook (META) are, as a rule, performed by entities with their registered office in the European Union. However, due to the global nature of these entities' operations, your data may be transferred to the USA in connection with its storage on American servers (in whole or in part). Regardless of this, Google and Facebook have implemented safeguards compliant with GDPR requirements to protect personal data by applying standard contractual clauses. More information on the rules of data processing by these providers can be found in the privacy policies of each of them.

§4 What rights do you have?

Under the GDPR, you have the right of access to your personal data, rectification of personal data, erasure of personal data, restriction of processing of personal data, objection to the processing of personal data, portability of personal data, and withdrawal of consent to data processing; withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Detailed information on these rights can be found in the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

If you believe that your personal data is being processed in violation of applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office. In such a case, however, I encourage you to contact me first to clarify your doubts.

§5 Is your data profiled?

The Controller analyses personal data in an automated manner, using tools provided by software providers (e.g. statistics, history), only to the extent that it produces no legal effects concerning you and does not significantly affect your situation, including your guaranteed rights and freedoms. The purpose of automated data processing is to learn about User preferences (more information about the analysis can be found in §7 Cookie policy).

§6 Legal provisions applicable to personal data

Matters not regulated here are subject to the relevant provisions of law, including European law (among others the GDPR).

§7 Cookie policy

The Website does not automatically collect any information, except for information contained in cookies. This data is collected in a way that makes it impossible to identify the User, so-called anonymous data.

Cookies are IT data, in particular text files, which are stored on the end device of the Website User and are intended for using the Website. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.

Cookies are used to adjust the content of the Website to User preferences and to optimise use of the Website, as well as to create statistics that help understand how Users use the Website, which allows its structure and content to be improved.

You can change the cookie settings yourself. In many cases, a web browser allows cookies to be stored on the User's end device by default. Detailed information on the options and methods of handling cookies is available in the settings of your software (web browser). Not consenting to cookies may limit the operation of some functionalities on the Website.

The Controller uses technologies that track the actions taken by the User within the Website:

- the Facebook (Meta) conversion pixel provided by Meta Platforms Ireland Limited - to manage advertising on Meta and to carry out remarketing activities; Facebook Pixel is a piece of code published on a website that makes it possible to reach a target group based on data of people who have used the website. Within the Facebook Pixel functionality it is therefore possible to display published ads on portals belonging to Meta only to portal users who have shown interest in the products or services or share common factors with such people. This data is processed on the basis of the Controller’s legitimate interest (Art. 6(1)(f) GDPR). Detailed information about the Facebook Pixel can be found on the Facebook (Meta) Privacy Policy page.

- Google tools, including Google Analytics provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. I use the data obtained through this tool to analyse Website statistics. Google Analytics uses its own cookies to analyse the actions and behaviour of Website Users. These files are used to store information, e.g. which page the User came from to the current website. They help improve the Website. This data is processed on the basis of the Controller’s legitimate interest (Art. 6(1)(f) GDPR). Detailed information about Google Analytics can be found here: how Google uses information from sites or apps that use its services.

§8 Social plugins

The Website uses plugins, widgets and other social tools provided by portals such as Facebook (Meta), Instagram, YouTube and LinkedIn. The rules for processing personal data are described directly on the websites of these Service Providers.

§9 Joint controllership

Data processed for the purposes of statistics collected within the Facebook (Meta) platform is jointly controlled by the Controller and Meta Platforms Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter the Joint Controller. Detailed rules on joint controllership of data, including information on the rights you have, are described on the Privacy Policy page.

Data processed within the LinkedIn platform is jointly controlled by the Controller and LinkedIn Ireland Unlimited Company, address: Legal Dept. (Privacy Policy and User Agreement), Wilton Place, Dublin 2, Ireland, hereinafter the Joint Controller. Detailed rules on joint controllership of data, including information on the rights you have, are described on the Privacy Policy page.

The Controller processes data on the basis of the Controller's legitimate interest in analysing User activity and preferences in order to improve the functionalities used and the services provided. In matters concerning personal data, you can contact both the Controller and the Joint Controller.