top of page

Privacy Policy

GENERAL TERMS

The privacy policy is a set of rules regarding the processing of personal data collected by the Administrator, including the basis, purposes and period of processing personal data and the rights of data subjects, as well as information on the use of Cookies and similar technologies and analytical tools.

PERSONAL DATA CONTROLLER

CHALLENGE BOX GROUP Sp. z o. o. with headquarters in Rzeszów

address:
ul. Przemysłowa 6,
35-105 Rzeszow

contact us:
e-mail address: info@challengebox.eu ,
phone: +48 786 140 833

 

We take special care to protect your personal data, so please take a moment to familiarize yourself with how we process the data you entrusted to us!

 

We ensure that any personal data we collect:

  1. we process in accordance with the law;

  2. we collect for specified purposes;

  3. we store it no longer than necessary to achieve the purpose of processing

  4. are safe with us and protected against unauthorized access, loss or theft.

PURPOSE AND BASIS OF DATA PROCESSING

The processing of personal data always requires the existence of at least one of the legal bases indicated in the GDPR. The specific bases for the processing of personal data and the source of the data are in the table below.

HOW LONG DO WE STORE DATA?

  • for the period of performance of the contract (sale or organisation of an event) and for 5 years after the end of the calendar year in which the performance of the contract was completed – in relation to data collected on the basis of Article 6 paragraph 1 letter b) of the GDPR;

  • for the period required by tax law – in relation to personal data related to the fulfillment of tax obligations;

  • until the consent is withdrawn or the purpose of processing is achieved – in relation to personal data processed on the basis of consent;

  • until an objection is effectively raised – in relation to personal data processed on the basis of the legitimate interest of the administrator or for marketing purposes;

  • until they become outdated or no longer useful - in relation to personal data processed mainly for analytical and statistical purposes, the use of cookies and the administration of the Administrator's websites.

RECIPIENTS OF PERSONAL DATA

For the proper functioning of the Website, we use the services of external entities (such as software providers, IT services, e-mail and hosting providers, and software providers for managing the company and providing technical support). We provide such recipients with data only when it is necessary to achieve a given purpose of personal data processing and only to the extent necessary to achieve it.

RIGHTS OF THE PERSON WHOSE PERSONAL DATA WE PROCESS

In accordance with the GDPR, each User has the following rights, depending on the purposes for which and on what basis they have entrusted us with their data:

  1. the right to request access to data (Article 15 of the GDPR),

  2. the right to rectify data (Article 16 of the GDPR),

  3. the right to request the deletion of data ("right to be forgotten") (Article 17 of the GDPR),

  4. the right to restrict processing (Article 18 of the GDPR),

  5. the right to object (Article 21 of the GDPR).

 

 

In relation to services provided on social media, you can also exercise your rights directly towards:

  • Facebook [MP1] (Meta Platforms Ireland Ltd.)

  • Instagram (Meta Platforms Ireland Ltd.)

 

You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the law.

[MP1] Here are the linked policies – And they must be on the website as well

SECURITY

Our website has security measures in place to protect your personal data against loss, misuse and alteration.

We have also implemented the following policies:

  1. Only authorized employees or associates have access to personal data,

  2. we require our partners to ensure appropriately high standards of protection of entrusted personal data, to sign appropriate entrustment agreements and to have the right to control the compliance of their activities with these standards,

  3. we use a high level of security, including cryptographic protection for the transmission of personal data (SSL protocol),

  4. Due to the public nature of the Internet, the use of services provided electronically may involve risks, regardless of our exercise of due diligence - remember this!

PRIVACY POLICY CHANGE

The privacy policy may change from time to time. The most current version of the policy will govern our use of information and will always be available here: https://www.challengebox.eu/privacy-policy

bottom of page