Privacy policy - FIXTAG The ultimate NFC-based system to track, optimise and control.

1. WHO PROCESSES YOUR DATA?

The administrator of your personal data is COMMHAVEN CHV limited liability company limited partnership (Sp. z o.o. Sp.k.), with its registered office in Poznań, at 28 Czerwca 1956 r. Street 406 (61-441 Poznań), registered in the Register of Entrepreneurs kept by the District Court Poznań - Nowe Miasto i Wilda in Poznań, VIII Economic Department of the National Court Register under the number KRS: 0000774877, with Tax Identification Number (NIP): 7781439615, and National Business Registry Number (REGON): 300381369 ("We" or "Us").

Contact:

You can contact us by mail at the address: COMMHAVEN CHV limited liability company limited partnership (Sp. z o.o. Sp.k.)
with its registered office in Poznań
28 Czerwca 1956 r. Street 406
61-441 Poznań or by email by sending a message to the email address: dpo@fixtag.eu.

Data Protection Officer:

To ensure that your data is always processed in a transparent and lawful manner, we have appointed a Data Protection Officer. You can contact the Data Protection Officer by sending a message to the email address: dpo@fixtag.eu.

2. WHAT DATA DO WE COLLECT?

As part of the Website, we may ask you to provide us with data, including personal data.
The data we collect may include, in relevant cases, the following:
- Unique user identifier
- Data regarding your activity on the website, including click analytics
- Device identifier
- Browser type, domain, and communication language, operating system, and associated settings
- Country
- Time zone
- Visited websites
- Cookies
- IP addresses.

Through the Website, other data may also be collected, including personal data, in connection with the use of the contact form available on the Website, as described in the further part of the Privacy Policy.
Additionally, we collect, use, and share aggregated data, such as statistical or demographic data. For example, we may aggregate data on the usage of our Website to calculate the percentage of users accessing a specific Website feature. However, if we combine aggregated data with your personal data, it may directly or indirectly identify you.
We do not collect any special categories of personal data (including data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health-related data, data concerning sexual orientation or sexual life). We also do not collect any information regarding criminal convictions and offenses.
Our Website is not intended for use by children, and we do not knowingly collect data relating to children.
Providing your data is voluntary, but failure to provide it may result in the inability to use certain services of our Website.

2.1 SERVER LOGS

Each time you use the Website, a request is sent to our server. Individual requests are recorded in server logs and stored there. The data contained in the logs includes your IP address, the time of the request, the time of the response, information about the browser and operating system of the user. These data are not associated with specific individuals using our Website and are not used for any user identification purposes; they are used solely for server administration purposes.

2.2 COOKIES

Our Website collects data contained in cookies. Cookies are small text files sent by the Website and stored on your end device, containing certain information related to your use of the Website.
Cookies are used, among other things, to enable you to visit our Website, ensure its proper functioning, and allow you to use all its features, as well as to protect our Website against abuse and spam.
Subject to the consents you have given us, we may use cookies to analyze traffic on our Website.
In connection with the use of statistical tools from Google on the Website, consent to statistical cookies is synonymous with consenting to the transfer of data to the United States, which is not subject to a European Commission decision determining an adequate level of protection in accordance with European data protection legislation.
More detailed information about the individual tools used on our Website is provided in the further part of the Privacy Policy.
Our Website may contain links to other websites or applications, including websites or applications of our business partners. Please note that other entities' websites may also use cookies. We have no control over third-party websites and are not responsible for the cookies they collect or have access to. When clicking on a link or application, please be aware that each of them has its own cookie policy. Therefore, before using other websites or applications, please review their privacy policies.

2.2.1 TYPES OF COOKIES

Depending on the duration of storage on the end device, the cookies used by us can be divided into:
Session cookies: stored on the user's device and remain there until the end of the browser session. The stored information is then permanently deleted from the device's memory.
Persistent cookies: stored on the user's end device for a specified period in the cookie parameters or until they are deleted by the user.
We use the following types of cookies:
- Essential cookies contribute to the usability of the website by enabling basic functions such as website navigation. The website cannot function properly without these cookies.
- Preference cookies allow the website to remember information that changes the appearance or behavior of the website, such as the preferred language or region the user is in.
- Statistical cookies help website owners understand how users interact with websites.

2.2.2 MANAGING COOKIES IN THE BROWSER

In many cases, web browsing software allows cookies to be stored on the user's device by default, giving the user the ability to manage and/or delete cookies according to their preferences.
The link to the cookie management tool used on the Website can be found in the icon at the bottom of our Website.
To delete cookies stored on your computer, follow the instructions provided by the manufacturer of your browser on their cookie management help page.

3. PURPOSES FOR WHICH WE COLLECT YOUR PERSONAL DATA AND LEGAL BASIS

In the course of operating the Website, we process your data, in relevant cases, for the following purposes:

1. Analyzing your activity (including profiling) on the Website – based on your consent [Art. 6(1)(a) of the GDPR], taking into account the consents given for the use of specific types of cookies.
2. Creating general statistics regarding user usage of the Website, including collecting general demographic information (e.g., the region from which the connection is made) – based on our legitimate interest [Art. 6(1)(f) of the GDPR], taking into account the consents given for the use of specific types of cookies.
3. Allowing users of the Website to manage consent to the installation of cookies and, in relevant cases, related processing of personal data – based on our legitimate interest [Art. 6(1)(f) of the GDPR].
4. In the case of using the contact form, we process your personal data, such as name, surname, company name, email address, and message content, for the purpose of:

a. Responding to your inquiry sent through the contact form, based on our legitimate interest [Art. 6(1)(f) of the GDPR].
b. Establishing or maintaining business relationships between us and you or the entities you represent or are a part of, based on our legitimate interest [Art. 6(1)(f) of the GDPR].
c. Continuing and properly performing contractual relationships between us and you or the entities you represent or are a part of, based on our legitimate interest [Art. 6(1)(f) of the GDPR].
d. Maintaining continuous contact regarding the submitted inquiry, using personal data such as an email address, based on our legitimate interest [Art. 6(1)(f) of the GDPR]. Using personal data such as a phone number, which is not obligatory in the contact
e. form, for the purpose of improving communication related to the submitted inquiry and its handling, based on your consent [Art. 6(1)(a) of the GDPR].

5. Carrying out technical operations and solving technical problems related to the administration of the Website – based on our legitimate interest [Art. 6(1)(f) of the GDPR].
6. Storing data to ensure accountability (including demonstrating compliance with legal obligations) – based on our legitimate interest [Art. 6(1)(f) of the GDPR].
7. When processing your data is required by law, we process the data in connection with our legal obligation [Art. 6(1)(c) of the GDPR].
8. Establishing, protecting, and exercising legal claims – based on our legitimate interest [Art. 6(1)(f) of the GDPR].
9. Storing data for archival or statistical purposes – based on our legitimate interest [Art. 6(1)(f) of the GDPR].
10. Ensuring the security and integrity of services provided electronically, including fraud prevention, combating spam, and ensuring traffic security on the Website – based on our legitimate interest [Art. 6(1)(f) of the GDPR].

4. TOOLS WE USE

To optimize the use of information contained, among others, in cookies, we use analytical tools.
These tools also allow us to process collected information to support our research and development work.
In accordance with the consents you have given us, your personal data (collected, among others, through cookies) may be processed in an automated manner, including profiling.

4.1 COOKIE MANAGEMENT PLATFORM - COOKIEBOT

To lawfully enable users of our Website to give consent to the installation of the relevant cookies and, where appropriate, related processing and personal data sharing, we use the Cookiebot CMP platform.
User consent is registered and documented by recording an anonymous IP address, user browser client, website URL, date and time of consent, and a unique encrypted key. After 12 months, the consent is automatically removed from the log.
The legal basis for this processing is our legitimate interest related to the accountability principle arising from the provisions of the GDPR.

4.2 GOOGLE ANALYTICS

Through Google Analytics analytics tools, we process data related to your activity on our Website, including internet identifiers, to monitor your choices using statistical cookies. We only undertake these actions within the limits of the consents you have given for the use of specific types of cookies. You can check/change your consent settings at any time in the tool for managing consent to the installation of cookies, which can be found in the icon in the footer of our Website. To delete cookies already stored on your computer, follow the instructions provided by the manufacturer of your browser on their cookie management help page.
Google Analytics allows us to generate detailed statistics on how users use our Website. This tool collects data about visits to the Website (e.g., visit duration, time, visited subpages on our Website, search data) and device data (e.g., device ID, MAC address, IP address, operating system, device settings, particularly language, screen resolution, browser type), as well as data in the form of internet identifiers, including cookie identifiers. Through the tools provided by Google, your IP address is anonymized.
According to the terms of service of Google Analytics, Google states that it will not associate the IP address of the person whose data is being processed with any other data held by Google.
To opt-out of Google Analytics cookies, you can also download and install the Google Analytics Opt-out Browser Add-on.
More information about Google's data collection practices is available at the following link: https://policies.google.com/technologies/partner-sites
As we use tools provided by Google, your personal data may be transferred outside of the European Economic Area, including to the United States. The United States is not subject to a European Commission decision determining an adequate level of protection in accordance with European data protection laws. The transfer of data to the United States involves the risk of potential access to the transferred data by U.S. public authorities under programs enabling access to personal data transferred from theEuropean Union to the United States for national security purposes, which may entail limitations on the protection of personal data. These limitations are not implemented in a manner that meets the requirements substantially equivalent to those required by EU law. In this case, the legal basis for transferring personal data to third countries is your consent given when entering our Website. You can withdraw your consent at any time in the tool for managing consent to the installation of cookies, which can be found in the icon in the footer of our Website.
‍
When transferring personal data acquired in connection with measurements outside the European Economic Area, Google uses standard contractual clauses (SCCs). The data processing principles for Google's advertising services, in cases where Google is the data processor, include both appropriate SCCs prepared by the European Commission (legitimizing data transfers in accordance with the GDPR) and UK SCCs (legitimizing data transfers in accordance with the GDPR provisions adopted in UK law), as required by the relevant data transfer processes.

4.3 WEBSITE SERVERS - TRANSFER OF DATA OUTSIDE THE EEA

Due to our use of Webflow servers, your personal data may be transferred to the United States. The United States is not subject to a European Commission decision determining an adequate level of protection in accordance with European data protection laws. The transfer of data to the United States involves the risk of potential access to the transferred data by U.S. public authorities under programs enabling access to personal data transferred from the European Union to the United States for national security purposes, which may entail limitations on the protection of personal data. These limitations are not implemented in a manner that meets the requirements substantially equivalent to those required by EU law. These regulations do not grant individuals whose data is being transferred rights that could be enforced against U.S. authorities in court. The legal basis for transferring personal data to the United States in this case is the standard contractual clauses approved by the European Commission regarding the transfer of personal data outside the EEA, a copy of which is available at the following link: https://webflow.com/legal/dpa.

5. TECHNICAL MEASURES

We make every effort to secure and protect your data from actions by third parties. We implement all necessary server, connection, and Website security measures. In particular, the communication between your computer and our server when we collect your personal data is encrypted using SSL (Secure Socket Layer) protocol. Additionally, our databases are protected from third-party access. When using subcontractors' services, we carefully verify their reliability and the security measures they employ to protect the data of our Website users.

6. RECIPIENTS OF YOUR DATA

In appropriate cases, we may disclose data to:

Persons authorized by us, our employees, and collaborators who need access to the data to perform their duties.
Data processors who process data on our behalf, such as companies handling our IT systems or providing us with IT tools and server space, companies providing advisory and marketing services to us, and providers of the analytical tools we use, to the extent that they process data on our behalf.
Public authorities if required by law.

7. RETENTION PERIOD FOR YOUR DATA

In the case of responding to your inquiry, your personal data will be processed by us until the response to your question is provided. After responding to your question, we may retain your data, but only for a period corresponding to the statute of limitations for claims that may be raised against us or that may be available to us against you.
Personal data processed based on your consent may be processed by us until you withdraw your consent or until the processing of your personal data is no longer necessary to achieve the purpose for which the data is processed or when the purpose of processing has been achieved and completed.
Data processed based on our legitimate interest will be processed by us until you raise any objections or until the processing of your personal data is no longer necessary to achieve the purpose for which the data is processed or when the purpose of processing has been achieved and completed.
Detailed information on the duration of individual cookies has been provided in the tool used on the Website, which allows you to manage your preferences and consents regarding the use of cookies (link available in the icon in the footer of our Website).

8. YOUR RIGHTS

In connection with the processing of your personal data, within the limits specified by law and where applicable, you have the following rights:

Access to the content of your data, rectification, erasure, or restriction of processing of your data, as well as the right to data portability.
In situations where we process your data based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal.
The right to object at any time to the processing of personal data based on our legitimate interest for reasons related to your particular situation. In such a case, we will no longer process your personal data for that purpose, unless we demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or grounds for establishing, pursuing, or defending claims.
The right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of your personal data violates the provisions of the GDPR. In Poland, the supervisory authority is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

You can exercise some of the above rights independently:

Consent to the installation of cookies in connection with the processing of personal data for the purposes specified by the function of such cookies can be withdrawn in the tool for managing consent to the installation of cookies, which can be found in the icon in the footer of our Website.

You can exercise your remaining rights by sending an email to: dpo@fixtag.eu.
We will make every effort to promptly process your request and provide you with a response to questions regarding the processing of your personal data. We will respond no later than 30 days from the date of receiving your request. If, in certain cases, this deadline is extended due to the complex nature of the request or the number of requests received, we will inform you of the extension and the reasons for it.
‍
In case of reasonable doubt as to the identity of the person making the request to us, we may request additional information necessary to confirm the identity of the requesting person. Providing such data is not mandatory, but the failure to provide it will result in the refusal to fulfill the request. We keep information about the received requests to demonstrate compliance with the accountability principle referred to in the GDPR and to establish, pursue, or defend claims.

9. CHANGES TO OUR PRIVACY POLICY

Our goal is to provide the highest level of protection for your data. The development of technology and our offerings may result in changes to the Privacy Policy.

10. QUESTIONS AND OBJECTIONS

Questions and objections regarding this Privacy Policy may be sent by email to: dpo@fixtag.eu.