Kluazula Contact

1. administrator and contact information

The administrator of the personal data is “MAGNICITY WARSAW” Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, 59 Złota Street (Skylight Office Building / 14th floor), 00-120 Warsaw, registered in the register of entrepreneurs, kept by the District Court for the Capital City of Warsaw in Warsaw, XII Economic Department of the National Court Register, under the KRS number 0001043051, NIP 5252961210, REGON 525637863, with the share capital of PLN 5,000.00.

2. contact the administrator

The administrator can be contacted by postal mail at the registered office address indicated above or by email at info@highlinewarsaw.com

3. purposes and legal basis for processing

Your personal data will be processed for the following purposes, based on the following legal grounds:

• for the purpose of correspondence, including responding to messages via email – on the basis of Article 6(1)(f) RODO (the processing is necessary for the purposes arising from the legitimate interest pursued by the Administrator, which is to maintain contact with persons interested in the Administrator’s business, timely conduct of all communications in connection with the business, taking care of the quality of cooperation with customers and contractors and other interested parties),
• for the purpose of providing commercial information regarding the administrator’s activities on the basis of the administrator’s legitimate interest, i.e. Article 6(1)(f) of the RODO, which is to undertake marketing activities with respect to persons who have consented to the transmission of commercial information by the administrator to the indicated communication channel (telephone or e-mail address) or have contacted the administrator in order to obtain commercial information;
• for the purpose of analyzing your interest in the administrator’s offerings and tailoring marketing content to those interests – based on Article 6(1)(f) of the RODO (the administrator’s legitimate interest in conducting marketing activities tailored to the recipients’ preferences);
• archiving of documentation and communications, including correspondence produced by the Administrator in the course of its business activities, due to its legitimate interest, which is the necessity to document evidence of its activities, among other things, in accordance with applicable regulations, and the use of archived material for the purpose of investigating, establishing or defending against claims (based on Article 6(1)(f) RODO).

4 Sources and categories of personal data

Personal data was obtained directly from the sender of the correspondence or was provided by the sender of the correspondence in its content or by your employer/principal/employer. In some situations there is acquisition of data from public sources (public records, website, etc.). The scope of the processed data generally includes: name, position or function, e-mail address, telephone number, company name and contact details, and the content of the correspondence that is being conducted.

5 Data recipients

The Administrator has the right to transfer your personal data to other recipients if necessary to achieve the purpose of processing, i.e..: entities that provide IT support services to the Administrator, including IT system support and maintenance, data hosting and cloud services, our authorized employees and associates, postal operators and couriers, law firms, auditors, banks, insurers, entities responsible for archiving or destroying data, group companies for internal administrative purposes (based on Article 6(1)(f) of the RODO)

6 Processing outside the EEA

Your personal data may be transferred to a third country (i.e., a country outside the European Economic Area). Such transfer of your personal data may take place on the basis of standard safeguard clauses (based on Article 46(2)(c) and (d) of the RODO) or on the basis of another mechanism that is lawful and legalizes such transfer and will provide adequate guarantees for the protection of personal data in accordance with the applicable legal provisions in this regard. The transfer to the United States is based on the decision of the European Commission dated 10/07/2023, finding an adequate level of personal data protection provided under the EU-US data protection framework (Article 45 RODO).

7. data retention period

Personal data will be processed for the duration of the correspondence. After this time, personal data will be processed for marketing purposes, if the Administrator has a legitimate interest in doing so, and for the period specified by the statute of limitations for claims, unless an effective objection to such processing is raised beforehand. In the case of the conclusion or performance of a contract, the Administrator will process personal data for the duration of the contract, after which time they will be processed for 5 years from the end of the year in which the tax or accounting obligation arose, unless a longer period is provided for by law or by the statute of limitations for claims.

8 Rights of data subjects

You have the right to request from the Administrator access to personal data concerning you, rectification, erasure, restriction of processing and data portability. You have the right to object to the processing of personal data for the purpose of pursuing the legitimate interests of the Controller – including, in particular, to the processing of data for marketing purposes or for the purpose of so-called ordinary profiling. If you object to processing for marketing purposes, your data will not be processed for that purpose. In the case of other legitimate interests, the right to object will not be exercised if there are valid legitimate grounds for processing that override your interests, rights and freedoms.

9. right to withdraw consent

If the processing of your personal data is carried out in connection with your consent (e.g. consent to send commercial information to your e-mail address or telephone number), you have the right to withdraw it at any time – without affecting the legality of the processing carried out before its withdrawal.

10. right to file a complaint with the authority

You have the right to complain about the actions of the Administrator to the competent supervisory authority, in particular in the country of your habitual residence, your place of work or the place where the alleged violation was committed. In Poland, the supervisory authority is the President of the Office for Personal Data Protection, Stanisława Moniuszki 1A, 00-014 Warsaw.

11. voluntariness of providing data

Your provision of personal data in the framework of the correspondence is voluntary, but failure to provide data prevents you from contacting the Administrator via the online form or e-mail.

12. profiling

We do not make decisions for you solely on the basis of automated data processing – i.e., decisions that would be completely performed by a computer, without human intervention, and that could have a significant effect (e.g., automatic rejection of an offer). However, we may analyze general information about how you interact with our company – e.g., what content was sent or which services you were interested in. This allows us to send more tailored offers – for example, some people may receive information about specific products, while others may receive information about something completely different. However, these are not activities that affect your rights, obligations or situation in a material way.