Privacy Policy

Confidentiality and personal data protection is extremely important for Tuatara Sp. z o. o. (hereinafter reffered to as TUATARA, Company) and we want every person whose data we process to know that we use appropriate data protection measures. Therefore, in connection with the implementation of Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Data Protection Directive) The Company, among others.

• appointed the Data Protection Officer, who supervises compliance with the provisions on the protection of personal data - in accordance with Article 37 GDPR,
• implemented documentation regarding the protection of personal data, i.e. Data Protection Policy, including IT system management procedures - pursuant to Article 24(1) and (2) GDPR,
• applied data protection measures referred to in Article 5(1)f GDPR.

The purpose of implementing the above means is to ensure adequate protection of personal data processed by TUATARA as a data controller and data processor regarding Customers, Contractors, Employees, Associates and other persons conducting correspondence with the Company.

Personal data is processed in connection with (click on the purpose of processing to read the detailed information clause):

• recruitment processes;
• conclusion, implementation and monitoring of the performance of contracts with clients/contractors;
• direct marketing of own products and services;
• conducting correspondence;
• running profiles in social media.

The collected personal data is stored only within the European Economic Area ("EEA"). If it turns out that personal data must be transferred outside the EEA, Standard contractual clauses and the Privacy Shield will be used as required as safeguards for countries where the European Commission has not found an adequate level of data protection.

Tuatara processes personal data only for the period specified in the law or as long as it is necessary to achieve the purpose of processing.

Any data subject has the right to:

• access personal data and receive a copy of the personal data being processed;
• rectify incorrect data;
• request for data deletion (right to be forgotten) in cases referred to in Article 17 GDPR;
• request for restriction of data processing in cases referred to in Article 18 GDPR;
• object to data processing in cases referred to in Article 21 GDPR;
• transfer the data provided, processed in an automated manner.

A person who believes that his/her personal data is being processed unlawfully may lodge a complaint with the supervisory body:

Personal Data Protection Office

ul. Stawki 2
00-193 Warsaw

Should you need any additional information related to the protection of personal data or would like to exercise your rights.
Please contact with:

Data Protection Officer

Piotr Janiszewski
E: iod@tuatara.pl

TUATARA information obligation

The Data Controller of your personal data is Tuatara Sp. z o.o., located in Warsaw (02-222), at Aleje Jerozolimskie 181 B (hereinafter TUATARA).

For what purpose and on what basis do we process your data?

Your data will be processed for sending you marketing offers from TUATARA.

The basis for processing your personal data for marketing purposes by TUATARA is based on Art. 6(1)(f) of the GDPR, i.e., the legally justified interest in directing marketing content to you.

Where did we get your data from?

Your data has been collected from publicly available sources on the Internet, e.g., social media platforms.

Who will your data be shared with?

TUATARA will share your personal data with other recipients entrusted with processing personal data on behalf of and for TUATARA. Entities entrusted with processing your personal data belong especially to the category of infrastructure solution providers and may process your personal data in a third country. These entities may also use further entities to process your data in a third country. Recipients to whom TUATARA has entrusted the processing of personal data also include: its subcontractors, suppliers, and external entities cooperating with TUATARA.

Your data may be transferred to third countries and international organizations if the entities based in these countries have implemented appropriate safeguards for processed personal data, i.e., when the European Commission has issued a decision stating an adequate level of protection for such a country or when the data is transferred based on other mechanisms ensuring an equivalent level of protection, in particular Standard Contractual Clauses or Binding Corporate Rules.

TUATARA will not share your personal data with other recipients beyond those entrusted with processing personal data on behalf of and for TUATARA, unless obliged to do so by legal provisions, or if the transfer results from the relationship between you and TUATARA.

How long will we process your data?

Your personal data will be processed for a period of 3 years, no later than until you object at: iod@tuatara.pl

What rights do you have?

You have the right to:

1. Access your personal data and receive a copy of the personal data being processed;

2. Correct your incorrect data;

3. Request data deletion (the right to be forgotten) in cases provided for in Art. 17 of the GDPR;

4. Request restriction of data processing in cases indicated in Art. 18 of the GDPR;

5. Object to data processing in cases indicated in Art. 21 of the GDPR;

6. Transfer provided data, processed automatically.

If you believe that your personal data is being processed unlawfully, you can file a complaint with the supervisory authority (UODO, ul. Stawki 2, 00-193 Warsaw).

Additional Information

1. If you need additional information related to personal data protection or want to exercise your rights, please contact:

   Data Protection Officer: Piotr Janiszewski

   Email: iod@tuatara.pl

Contact

Tuatara Sp. z o.o., located in Warsaw (02-222), at Aleje Jerozolimskie 181 B