Privacy Policy

Information on the processing of personal data by TUATARA Sp. z o.o.

Confidentiality and personal data protection is extremely important for Tuatara Sp. z o. o. (hereinafter reffered to as Tuatara, Company) and we want every person whose data we process to know that we use appropriate data protection measures. Therefore, in connection with the implementation of Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Data Protection Directive) The Company, among others.

  • appointed the Data Protection Officer, who supervises compliance with the provisions on the protection of personal data - in accordance with Article 37 GDPR,
  • implemented documentation regarding the protection of personal data, i.e. Data Protection Policy, including IT system management procedures - pursuant to Article 24(1) and (2) GDPR,
  • applied data protection measures referred to in Article 5(1)f GDPR.

The purpose of implementing the above means is to ensure adequate protection of personal data processed by Tuatara as a data controller and data processor regarding Customers, Contractors, Employees, Associates and other persons conducting correspondence with the Company.

Personal data is processed in connection with (click on the purpose of processing to read the detailed information clause):

The collected personal data is stored only within the European Economic Area ("EEA"). If it turns out that personal data must be transferred outside the EEA, Standard contractual clauses and the Privacy Shield will be used as required as safeguards for countries where the European Commission has not found an adequate level of data protection.

Tuatara processes personal data only for the period specified in the law or as long as it is necessary to achieve the purpose of processing.

Any data subject has the right to:

  • access personal data and receive a copy of the personal data being processed;
  • rectify incorrect data;
  • request for data deletion (right to be forgotten) in cases referred to in Article 17 GDPR;
  • request for restriction of data processing in cases referred to in Article 18 GDPR;
  • object to data processing in cases referred to in Article 21 GDPR;
  • transfer the data provided, processed in an automated manner.

A person who believes that his/her personal data is being processed unlawfully may lodge a complaint with the supervisory body:

personal Data Protection Office

ul. Stawki 2
00-193 Warsaw

Should you need any additional information related to the protection of personal data or would like to exercise your rights.
Please contact with:

Data Protection Officer

Piotr Janiszewski