The privacy policy that is at the Website
www.iliveunderwater.com

Fulfilling our obligation as the Administrator of personal data, we have prepared this Privacy Policy for you. We want to provide information about who we are, what personal data we collect, for what purposes we do it and how we use it. We also indicate your rights in connection with the processing of personal data by our company.

WHO IS THE ADMINISTRATOR OF PERSONAL DATA?

We would like to kindly inform you that the administrator of your personal data is Go Consulting I Sp. z o.o. Sp.k. with headquarters in Poznań, at ul. Wojskowa 6 / A16, 60-792 Poznań, registered under the number KRS 0000770201, NIP 6692551847, REGON 382491909, hereinafter "Personal Data Administrator".

Contact regarding protection of personal data is possible at office address or e-mail: gdpr@iliveunderwater.com .

The administrator has not appointed the Personal Data Protection Inspector.

WHAT ARE THE PURPOSES AND BASIS FOR THE PROCESSING OF PERSONAL DATA?

We process personal data in accordance with the scope of our activity for various purposes, but always in accordance with the law. Most often we receive personal data directly from you. Below, you will find the purposes of personal data processing along with the legal grounds.

Below you can find the specific purposes of processing personal data along with the legal grounds:

A. In order to take action at your request before concluding a contract for the provision of services in accordance with the scope of our activity, we process the following personal data:

First and last name, company name, company headquarters, correspondence address, e-mail address, website address, fanpage address, telephone number, information contained in public registers including numbers assigned by state authorities, bank account number, IP number and others information that has been included in the documentation we have received from you;

the legal basis for such data processing is:

  • art. 6 (1)(a) GDPR, your consent to the processing of personal data in one or more numbers of specific goals;

  • art. 6 (1)(b) GDPR, which allows the processing of personal data if they are necessary to perform the contract or take steps to conclude a contract;

  • art. 6 (1)(f) GDPR - legitimate interest of the data controller.

B. in order to conclude and perform the contract, i.e. to provide services / presentation of the brand of a diving center or travel agency, we process the following personal data:

First and last name, company name, company headquarters, correspondence address, e-mail address, website address, fanpage address, telephone number, information contained in public registers along with numbers assigned by state authorities, bank account number, IP number and others information that has been included in the documentation we have received from you or has been entered into a business client profile;

the legal basis for such data processing is art. 6 (1)(b) GDPR, which allows us to process personal data if they are necessary for the performance of the contract or for taking steps to conclude a contract between us.

C. in order to fulfill our legal obligations, e.g. issuing a VAT invoice and making tax settlements, we process the following personal data:

First and last name, company name, residence, company headquarters, correspondence address, e-mail address, information contained in public registers, including numbers assigned by state authorities, bank account number.

the legal basis for such data processing is art. 6 (1)(c) GDPR, which enables the processing of personal data, if such processing is necessary for the Administrator to fulfill the obligations resulting from the law.

D.  in order to provide information about activities related to the implementation of contract, we process the following personal data:

First and last name, address, company name, company headquarters, correspondence address, planned work address, email address, telephone number, NIP, REGON, information contained in public registers, bank account number, IP number and other information that are included in the documentation that we have received from you or we have prepared it ourselves;

the legal basis for such data processing is art. 6 (1)(b) GDPR, which allows us to process personal data if they are necessary for the performance of the contract.

E. in order to establish, protect and pursue claims, we process the following personal data:

First and last name, residence address, company name, company seat, correspondence address, address of the work performed, e-mail address, telephone number, NIP, REGON, information contained in public registers, bank account number, IP number;

the legal basis for such data processing is art. 6 (1)(f) GDPR, which allows you to process personal data if in this way the Administrator carries out its legitimate interest (in this case, the Administrator's interest is to have personal data that will allow to determine, assert or defend against claims, including customers, contractors and third parties.

F. in order to archive and evidence, we process the following personal data:

First and last name, address, company name, company headquarters, correspondence address, work address, e-mail address, telephone number, information contained in public registers along with numbers issued by state authorities, bank account number, IP number and other information that has been included in the documentation we have received from you;

the legal basis for such data processing is:

  • Art. 6 (1)(f) GDPR, which allows the processing of personal data, if in this way the Administrator implements his legitimate interest (in this case, the Administrator's interest is to have personal data that will prove certain facts related to the performance of the contract;

  • art. 6 (1)(c) GDPR, which allows the processing of personal data, if such processing is necessary for the Administrator to fulfill the obligations arising from the law.

G. website administration, we may process such personal data as:

IP address, date and time, statistical data, information about the web browser, information about the operating system and others provided by Google Analitics or HotJar;

the legal basis for such data processing is art. 6 (1)(f) GDPR, which allows the processing of personal data, if in this way the Administrator pursues its legitimate interest. In this case, the Administrator's interest is to be able to administer the website. More information can be found in our Cookie Policy.

H. Direct marketing, we process the following data

First and last name, company name, e-mail address, telephone number, correspondence address, website address, fanpage address, data contained in public registers;

the legal basis for such data processing is:

  • art. 6 (1)(a) GDPR, which allows the processing of personal data on the basis of a voluntarily granted consent;

  • art. 6 (1)(f) GDPR, which allows the processing of personal data, if in this way the Administrator pursues its legitimate interest.

HOW TO IMPLEMENT THE RIGHT TO WITHDRAW CONSENT?

1. If the processing of personal data is based on your consent, you can withdraw this consent at any time - at your discretion. If the data processing takes place on a different legal basis, we may have to process the data longer. In this case, we will inform you about it, citing the legal basis and the processing time.

2. If you would like to withdraw your consent to the processing of personal data, you can send a letter directly to the Personal Data Administrator or send an email.

3. If the processing of personal data was based on consent, its withdrawal does not make the processing of personal data up to that point illegal.

REQUIREMENT TO PROVIDE PERSONAL DATA

1. Providing any personal data is voluntary and depends on your decision. However, when concluding a contract with us for the provision of our services, providing certain personal data is necessary.

2. To receive a commercial offer, it is necessary to provide an e-mail address and telephone number - without this, we are not able to meet your expectations and maintain the highest quality of service, which we care about very much.

DO WE CONDUCT AUTOMATED DECISION MAKING AND PROFILING?

Personal data may be processed in an automated manner in the form of profiling. As part of our activities, we use cookies and other marketing plugins from trusted suppliers in such a way that we observe and analyze moves on our websites, as well as take remarketing activities.

WHO CAN WE TRANSFER YOUR PERSONAL DATA TO?

1. We may transfer your data to our employees and associates who must have access to the data in order to be able to perform our obligations or activities.

2. Like most entrepreneurs, we also use the help of other entities in our activities, which often involves the necessity to provide personal data. In connection with the above, if necessary, we transfer your personal data to the following recipients:

  1. entities providing marketing services for us, organization of training courses and events;

  2. entities operating our IT and tele information systems;

  3. entities conducting payment activity (banks, payment institutions);

  4. entities conducting postal and courier activities;

  5. research agencies / institutes acting on our behalf;

  6. entities purchasing receivables;

  7. entities providing us with advisory, consulting, audit services or legal, tax, accounting, HR and training assistance.

3. In addition, it may happen that, for example, on the basis of an appropriate law or a decision of a competent authority, we will also have to transfer your personal data to other entities, such as the Tax Office, etc. It is extremely difficult for us to predict who may submit a request for personal data. Nevertheless, we ensure that each case of a request for disclosure of personal data is analyzed very carefully so as not to provide information to an unauthorized person.

DO WE TRANSFER PERSONAL DATA TO THIRD COUNTRIES?

We kindly inform you that your personal data is not transferred outside the European Economic Area.

HOW LONG CAN WE STORE PERSONAL DATA?

1. In accordance with applicable law, we process your personal data for the time needed to achieve the set goal. After this period, personal data will be irretrievably deleted or destroyed.

2. Regarding the individual periods of personal data processing, we kindly inform you that we process personal data for the period of:

  1. up to 10 years - in relation to personal data processed for the purpose of establishing, investigating or defending claims, but not longer than it results from applicable law;

  2. the duration of the contract, but also after its termination, but not longer than for a period of 5 years - in relation to personal data processed in order to conclude and perform the contract; in relation to personal data related to the fulfillment of obligations under tax law, e.g. storage of invoices, bills;

  3. 1 year - in relation to personal data that were collected in connection with the offer, and at the same time the contract was not concluded immediately;

  4. until the consent is withdrawn, an objection is effectively raised or the purpose of processing is achieved - in relation to personal data processed on the basis of consent; in relation to personal data processed on the basis of the Controller's legitimate interest or for marketing purposes.

3. We count the periods in years from the end of the year in which we started processing personal data in order to improve the process of deleting or destroying personal data. Separate counting of the deadline for each event would entail significant organizational and technical difficulties, as well as a significant financial outlay, therefore setting a single date for the deletion or destruction of personal data allows us to manage this process more efficiently.

4. Right to be forgotten? Of course, if you exercise your right to be forgotten, such situations will be considered individually.

WHAT RIGHTS DO YOU HAVE?

1. We kindly inform you that you have the right to:

  • access your personal data - that is to obtain information about the purpose and method of processing your personal data and a copy of them.

  • rectify the data - that is to correct data when it is incorrect, has changed or has become obsolete.

  • partial or complete deletion of data ("Right to be forgotten") - that is the deletion of data that is processed without legitimate legal grounds.

  • limit processing - that is a limit data processing only to their storage.

  • transfer data - that is to obtain your personal data that has been provided to us or to indicate another administrator to whom we should provide it (if it is technically possible).

  • object to personal data, the provision of which is voluntary - i.e. for direct marketing purposes.

  • withdraw the consent - you can withdraw any consent you have given at any time. Please remember that we will no longer process the data for the purpose indicated by you, but we have the right to process your data until you withdraw your consent.

2. We respect your rights under the provisions on the protection of personal data and we strive to facilitate their implementation as much as possible.

3. We point out that these rights are not absolute, therefore we may legally refuse to comply with them in certain situations. However, we refuse to accept the request only after careful analysis and only if the refusal to accept the request is necessary.

4. Regarding the right to object, we explain that you have the right to object to the processing of your personal data at any time, based on the legitimate interest of the Data Administrator in relation to your particular situation. However, please be informed that in accordance with the provisions, we may refuse to take into account the objection if we prove that:

  1. there are legitimate grounds for processing that override your interests, rights and freedoms or;

  2. there are grounds for establishing, investigating or defending claims.

5. In addition, you can object to the processing of your personal data for marketing purposes at any time. In such case, after receiving the objection, we will stop the processing for this purpose.

RIGHT TO LODGE A COMPLAINT TO THE PERSONAL DATA PROTECTION OFFICE

If, in your opinion, your personal data is processed contrary to applicable law, you can file a complaint to:

President of the Personal Data Protection Office

Personal Data Protection Office

ul. Stawki 2, 00-193 Warszawa

FINAL PROVISIONS:

1. Matters not covered by this Privacy Policy, the provisions on the protection of personal data shall apply:

a) Regulation on the Protection of Personal Data (Regulation of the European Parliament and of the Council (EU) of 27 April 2016 2016/679)

b) Act of 10 May 2018 on the protection of personal data

c) The Act of July 18, 2002. on the provision of electronic services

d) Act of July 16, 2004 - Telecommunications law

2. This Privacy Policy is valid from 01/08/2020.

This is a translation provided for your convenience only. In the event of discrepancies in the interpretation of this translation and the original Polish language version, the original will prevail.