RGC PRIVACY POLICY
1. Who is the controller of your data?
The controller of your personal data is FUNDACJA ROZWOJU PRZEDSIĘBIORCZOŚCI „TWÓJ STARTUP”, with its registered office in Warsaw (registered address: ul. Żurawia 6/12, unit 766, 00-503 Warsaw).
This privacy policy applies to the services of the Foundation provided by its organised business unit RGC, contact details: telephone 730 182 733, email contact@richiegoincrazy.com, operated by Andrii Rychyk.
2. Why do we process your data?
A. In connection with services provided through richiegoincrazy.com, including the sale of ready-made beats, custom beat production, recording, mixing, mastering, sound design, and vocal cleaning, correction and alignment, for the purpose of entering into or performing a contract (Article 6(1)(b) of the GDPR). Your data will be retained until the contract has been performed.
B. For marketing and promotion of products offered by Fundacja Rozwoju Przedsiębiorczości „Twój StartUp”, based in Warsaw, which constitute our legitimate interests (Article 6(1)(f) GDPR). Your data will be processed until you object (if you do not send commercial communications, please remove this item).
C. To fulfil all legal obligations arising from our cooperation (Article 6(1)(c) GDPR), including statutory requirements to retain specified documents for periods laid down by law, for example:
The Accounting Act of 29 September 1994 (Journal of Laws 2017, item 1858);
The Tax Ordinance Act of 29 August 1997 (Journal of Laws 1997 No. 137, item 926);
The Act of 1 March 2018 on Counteracting Money Laundering and Terrorist Financing (Journal of Laws 2018, item 723).
D. For the possible establishment, pursuit or defence of claims, which constitutes our legitimate interest (Article 6(1)(f) GDPR). Data will be processed until the applicable limitation period for claims expires.
E. Where consent has been given, your data will be processed within the scope and for the purpose specified in that consent (Article 6(1)(a) GDPR). Data will be processed until consent is withdrawn.
3. What data do we process?
To conclude a contract, we require the information requested in the contract/order form (without it, we cannot conclude the contract or fulfil the order). We may also ask for optional information that does not affect conclusion of the contract (without it, for example, we may be unable to call your contact number).
During the contract, we obtain other personal data when providing services. We receive such data as a consequence of your use of our services.
4. With whom will the data be shared?
A. Public authorities, insofar as they do not receive data as part of a specific proceeding under the law, e.g. in connection with anti-money-laundering measures;
B. Entities processing your personal data on behalf of the Foundation under a data-processing agreement (processors), including Foundation beneficiaries, IT professionals, archiving companies and hosting companies;
C. Independent data controllers to whom data is disclosed (such as legal advisers and attorneys, courier or postal operators, and debt purchasers if you fail to pay our invoices on time);
D. Entities located outside the European Economic Area (EEA), but only when necessary and with an adequate level of protection ensured, primarily through:
a. Cooperation with entities in countries covered by an appropriate European Commission adequacy decision;
b. Application of standard contractual clauses adopted by the European Commission.
The controller always informs you, when collecting personal data, of any intended transfer outside the EEA.
5. Are the data subject to profiling?
We inform you that your data will not be profiled, i.e. subjected to automated analysis intended to predict your preferences or future behaviour (for example, marketing profiling involves determining which offer may interest you most based on your previous choices).
6. What rights do you have?
A. Right of access to personal data processed by us (Article 15 GDPR);
B. Right to rectification and correction of personal data (Article 16 GDPR);
C. Right to erasure of personal data from our systems (the “right to be forgotten”): if you believe we have no grounds to process your data, you may request its deletion (Article 17 GDPR);
D. Right to restriction of processing: you may request that we limit processing to storage or actions agreed with you if our data is inaccurate or unlawfully processed, if you need the data to establish, pursue or defend legal claims instead of erasure, or pending examination of your objection (Article 18 GDPR);
E. Right to data portability: you may receive the personal data we hold under a contract or consent in a structured, commonly used and machine-readable format (such as .csv), provided we hold it electronically. This right cannot be exercised for data held exclusively on paper. You may also request that we transmit the data directly to another entity (Article 20 GDPR);
F. Right to withdraw consent at any time for processing based on consent (Article 7(3) GDPR). Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent, email contact@richiegoincrazy.com.
G. Right to object: you may object to the processing of your personal data based on our legitimate interests (Article 21 GDPR). Once we consider your request, we will no longer process the relevant data on that basis unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms.
H. If you believe that processing of personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority, the President of the Polish Personal Data Protection Office.
7. Contact
If you need further information concerning personal data protection or wish to exercise your rights, contact us by email: rodo@twojstartup.pl