Privacy Policy
Privacy Policy
This Privacy Policy tells you what to expect us to do with your personal information when you make contact with us or use one of our services.
We’ll tell you:
- why we are able to process your information;
- what purpose we are processing it for;
- whether you have to provide it to us;
- how long we store it for;
- whether there are other recipients of your personal information;
- whether we intend to transfer it to another country; and
- whether we do automated decision-making or profiling.
The first part of the notice is information we need to tell everybody. The second, the third and the fourth part of the notice is information we need to tell specific group of users depending on purpose we collect your data.
Part I General information
Controller’s contact details
Catch the Tornado Dots limited liability company is the controller for the personal information we process, unless otherwise stated. There are many ways you can contact us, including by email and post. More details can be seen here.
Our postal address:
Catch the Tornado Dots sp. z o.o.
ul. Schweitzera 5/26
30-681 Kraków
Our register number is 0000951617, NIP: 6793232316
If you have any requests, questions, comments, or concerns regarding our Privacy Policy or practices, please contact us by email: hello@productdots.com
How do we get information?
Most of the personal information we process is provided to us directly by you for one of the following reasons:
You browse our website.
You have made an enquiry to us or you have made an information request.
You subscribe to our newsletter.
You visit our accounts on social networks - LinkedIn, Facebook and Twitter and you contact us using these sites.
Your data protection rights?
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
Your right of access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process forms is in our legitimate interests.
Your right to data portability
This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Your rights to complain
We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at hello@productdots.com and we’ll respond.
If you remain dissatisfied, you can make a complaint about the way we process your personal information to the supervisory authority which is President of the Personal Data Protection Office (Warsaw, Poland).
Sharing your information
We use data processors who are third parties who provide elements of services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Our important IT services provider is Google. We use Facebook, Linkedin and Microsoft as well (more information about it you can read below). Due to the use of mentioned services, your data may be transferred to the United States of America (USA) in connection with their storage on American servers. Service providers have included information on standard data protection clauses (SSC) in the terms of their services which guarantee properly safety level.
In some circumstances we are legally obliged to share information. For example, under a court order. In any scenario, we’ll satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.
You can find more information about our providers below in Part I.
Links to other websites
Where we provide links to websites of other organisations, this Privacy Policy does not cover how that organisation processes personal information. We encourage you to read the Privacy Policies on the other websites you visit.
Changes to this Privacy Policy
We keep our Privacy Policy under regular review to make sure it is up to date and accurate.
January 2023
We have run our website and prepared this version of our Privacy Policy.
Purpose and lawful basis for processing
The lawful basis we rely on to process personal data for the above purposes is article 6(1)(f) of the GDPR which allows us to process personal data based on our legal legitimate interests.
Visitors to our website
Analytics
When you visit our website, we use a third-party service, Google Analytics to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
If we do collect personal data through our website, we’ll be upfront about this. We’ll make it clear when we collect personal information and we’ll explain what we intend to do with it.
If you are interested in details related to data processing as part of Google Analytics, we encourage you to read the explanations prepared by Google here.
Facebook Pixel
We use marketing tools provided by Facebook Ireland Limited. As part of these tools, we direct you to advertisements on Facebook.
In order to send you personalized ads in terms of your behaviour on our website, we have implemented Facebook Pixel as part of our website, which automatically collects information about your use of our website in terms of pages viewed.
The information collected as part of Facebook's Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken on our site. However, we inform you that Facebook may combine this information with other information collected about you as part of your use of Facebook and use it for its own purposes, including marketing. Such Facebook activities are no longer dependent on us, and you can search for information about them directly in Facebook's privacy policy.
Microsoft Clarity
We use the Microsoft Clarity tool to analyse user behaviour on the website for user experience (UX) analysis, provided by Microsoft with its registered office at 1 Microsoft Way, Redmond, WA 98052, United States. We carry out activities in this area based on our legitimate interest, consisting in creating statistics and analysing them in order to optimize our websites. Microsoft Clarity collects information related to the user's activity on the website and in particular records each website user and creates video recordings of his/her movement on the website and generates heat maps. As part of the Microsoft Clarity tool, we do not collect information that allows us to identify individual users.
If you are interested in details related to data processing as part of Microsoft Clarity, we encourage you to read the explanations prepared by Microsoft here.
Linkedin Insight Tag
We also use the LinkedIn Insight Tag tool provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It saves a cookie file on your device, which allows it to collect data, in particular the IP address, device and browser properties, as well as activity on the website (e.g. page views). However, the data is encrypted, anonymized within seven days, and anonymized data is deleted within 90 days.
LinkedIn does not provide us with any personal information related to the use of the "LinkedIn Insight Tag" tool or any related tools. It presents only anonymized reports about the website's target group and the effectiveness of advertisements. We may also perform retargeting using the LinkedIn Insight Tag. This allows us to display targeted advertising on sites other than ours without identifying you as a user of our site.
If you are interested in details related to data processing as part of Linkedin Insight Tag, we encourage you to read the explanations prepared by Linkedin here.
Cookies
We use a cookies tool on our website to gain consent for the optional cookies we use.
Cookies that are necessary for functionality, security and accessibility are set and are not deleted by the tool.
You can read more about how we use cookies, and how to change your cookies preferences, in our Cookies policy.
Purpose and lawful basis for processing
The purpose for implementing the above is to maintain and monitor the performance of our website and to constantly look to improve the site and the services it offers to our users. The lawful basis we rely on to process your personal data is either Article 6(1)(a) of the GDPR, for example when we require your consent for the optional cookies we use (marketing, analytics purposes), or Article 6(1)(f) which allows us to process personal data when it’s necessary for our legitimate interests (necessary cookies). For example, in order to maintain the integrity of our IT systems and the continuity of our business.
What are your rights?
As we are processing your personal data for our legitimate interests as stated above, you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it. As we are processing your personal data based on your consent, you can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Your rights are particularly indicated in Part I of this Privacy Policy.
Other important information
Providing personal data is voluntary, but necessary to achieve the individual purposes of their processing.
Your data may be processed outside the European Economic Area - Google or Microsoft may process your data on a server in the United States. In these cases, Google processes your personal data outside the European Economic Area, but this is done on the basis of the so-called standard contractual clauses, provisions of the contract concluded between us and Google and also Microsoft, which guarantee an adequate degree of secure processing of your personal data. Moreover, the identifiers and the level of anonymization used make it impossible to identify you.
Part II Data processing via communication channels
Below we present the principles of personal data processing that apply when you send us an e-mail with a question or request for an offer or information about the service; by contacting us via the data available on our website and when you contact us using the contact form available on our website.
Purpose and lawful basis for processing
When you contact us to make an enquiry or ask us question, we collect information, including your personal data, so that we can respond to it.
The lawful basis we rely on to process your personal data is article 6(1)(a) of the GDPR, which is your consent.
What we need and why we need it?
If you contact us via email, contact form on our website or post, we’ll need a return address for response and your contact data (name, e-mail, post address).
What we do with it?
We’ll keep a record of our response. We use the information supplied to us to deal with the enquiry and any subsequent issues that may arise, and to check on the level of service we provide.
How long we keep it?
We will process your data until your consent is withdrawn, and in the remaining scope we will process it until the limitation period for claims and in the period resulting from legal regulations determining the storage time of accounting documents.
The nature of providing the data
Providing your data is voluntary.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the processing of your data, will be our trusted subcontractors - IT service providers in the field of data hosting and business mail services, and in the event of concluding a contract and placing an order by you, they will also be entities whose activities are ancillary to our activities, including in particular entities providing accounting, legal, auditing and consulting services.
Other relevant information
Your data will not be processed outside the European Economic Area.
What are your rights?
You have the right to withdraw your consent at any time and your other rights are indicated in Part I of this Privacy Policy.
Part III Subscribing to our e-newsletter
Below we present to you the principles of personal data processing that apply when you decide to subscribe to our newsletter.
Purpose and lawful basis for processing
Our purpose for collecting the information is so we can provide you with a service and let you know about upcoming events and news.
The lawful basis we rely on for processing your personal data is your consent under article 6(1)(a) of the GDPR.
What we need?
Your email address.
Why we need it?
We use your email address to send you our E-newsletter.
What we do with it?
We only use your details to provide the service.
How long we keep it?
Unless you withdraw your consent. In the event of withdrawal of consent, the relevant data will be deleted immediately.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the processing of your data, will be our trusted subcontractors - IT service providers in the field of data hosting and business mail services. In order to send our newsletter, we will use the _______ tool of _____________.
Other relevant information
Your data will not be processed outside the European Economic Area.
What are your rights?
Your rights are indicated in Part I of this Privacy Policy.
Part IV Data processing as part of our marketing activities
Below we present the principles of personal data processing that apply when you use and communicate with us using our profiles on Facebook, LinkedIn and Twitter social networking sites (referred to as "fan pages"). We publish on our fan pages on a regular basis and share the content, offers and recommendations of our products and services.
For what purpose is your data processed?
We process your data only in connection with maintaining our profiles in social media, including to inform you about our activity and to promote various types of events, services and products, as well as to communicate with you via functionalities available in social media.
Remember that social network controllers record your activity using cookies and other similar technologies every time you interact with our fan pages and other websites on Facebook, LinkedIn and Twitter. Fan page controllers have access to general statistics about your (as a fan page visitor) interests and demographic data (such as age, gender, region). As part of the use of social networking sites, the scope and purposes of data processing in social networking sites have been defined by the controllers of these sites.
On what legal basis do we process your data?
The legal basis for the processing of your personal data is:
• our legitimate interest (Article 6(1)(f) of the GDPR) consisting in promoting our own brand and building and maintaining a community associated with the brand;
• Your consent to the creation of data for website statistics on Facebook, LinkedIn or Twitter (Article 6(1)(a) of the GDPR).
How long do we process your data?
We will process your personal data for as long as it is necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations, unless you withdraw your consent to the processing of your data earlier.
Facebook, Twitter and LinkedIn process your data when using our fanpages for their own purposes, not covered by this Privacy Policy. We have no influence on the activities of these websites related to the aforementioned data processing. In this regard, we refer to the privacy policies of individual social networking sites:
Facebook Data Policy.
Twitter Data Policy.
LinkedIn Data Policy.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be able to participate in the processing of your data, will be our trusted subcontractors - IT service providers in the field of data hosting and business mail services; Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland administering Facebook social network, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland administering the LinkedIn social network; Twitter International Company, Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland administering Twitter social network and LIVECHAT Sp. z o. o. with its registered office in Zwycięska 47 53-033 Wrocław NIP: 899-244-71-96 administering the livechat.com website - collecting data from our fanpages.
The nature of providing the data
When you connect with our fan pages - your personal data - including IP address, other identifiers and other information are collected via cookies or other similar technologies.
As part of using our fan pages, the scope and purposes of data processing on social networking sites are determined by the controllers of these sites.
What rights do you have?
Your rights are indicated in Part I of this Privacy Policy.
Cookies policy
What are cookies and other similar technologies?
A cookie is a text file saved by a web server on your computer or mobile device. Its content can only be downloaded and read by the server that created the file. Cookies are unique to your browser or mobile application you are using. The content of a cookie often consists of identifiers, website names and sequences of numbers and letters.
Essential cookies
What are essential cookies and can I reject them?
These cookies are necessary for the website to function and cannot be disabled without affecting your use of this website. These cookies are usually only placed in response to specific actions taken by the user on the website. We use these cookies because we believe it is in our legitimate interest and also our users to allow this website to function properly.
Why do we use essential cookies?
We usually use these files to perform a specific function of the website, e.g. remembering the user's acceptance of the content of the Privacy Policy.
What data is collected and used by essential cookies?
Essential cookies do not collect or use personal information.
How long do we keep this data?
Strictly essential cookies are usually session cookies which only store data for the duration of the user's visit on the website, but if the cookie supports remembering your acceptance of the Privacy Policy, the data is retained longer to remember you during subsequent visits.
Analytical cookies
What are analytics cookies and can I reject them?
Also known as "performance cookies", "measurement cookies" or "statistical cookies", these cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how users navigate the site.
We use cookies to understand how users interact with our site, for example to see if users are leaving certain pages or experiencing problems on them. We use cookies because we have a legitimate interest in monitoring website activity and its performance. You can reject these cookies by changing your cookie settings.
Why do we use analytical cookies?
We use analytical cookies to enable measurement and analysis. These cookies allow us to obtain, among others, the following information:
- what websites users visit before getting on our website, for example whether users came directly to our website;
- which pages on our website are the most and least popular, how much time users spend on each page and on each part of the page, what links and buttons they click;
- what device users use to visit our website, e.g. information about the brand and model, which browser and operating system users use.
What data is collected and used by analytical cookies?
Cookies usually only store a coded identifier. We are unable to identify you. However, this ID is a link to Google's analytics servers, allowing Google to create a profile of how the user uses the site. Browser data is also processed as a result of reading the cookie file, including technical data of the device used to access the website and its location.
We do not collect any personal information through statistical cookies. We generally only receive aggregated data about users of our website. However, Google processes your personal data in order to provide us with these aggregated statistics. In addition, since other websites also use Google Analytics, Google not only has a profile of how you use our website, but also how you use the many other websites which also use Google Analytics. Google may also associate cookie information with your account information if you are logged into your Google Account while browsing to create an even more detailed profile about you. To find out more about how Google processes your personal data, please refer to the Google Privacy Policy.
How long do we keep this data?
The period of storage of analytical files, depending on the country and the purpose of the cookie, may be up to 24 months. For example, some cookies are only stored on your device when you visit the website. Some cookies store information for 24 hours to remember you as a unique visitor to the site on that day. Others can be stored for up to 24 months.
Advertising cookies
These cookies are placed by our advertising partners. They are used to build a profile of your interests, to show you relevant adverts on other sites, and to enable you to like and share our content on social media. They do not directly store personal data, but work based on the ability to uniquely identify the browser and device that the user uses to browse the Internet. In addition, other companies that place these cookies may associate users’ personal information with the pages users view if they are logged into their services while browsing.
Cookies used on our website
The text below shows what cookies we use and why:
Cookie, Name, Purpose (essential/analytical/marketing/preferential), Retention period.
How can I change cookie settings?
You can find out more about how to manage cookies in different browsers, here:
If you do not want Google Analytics cookies to be installed on your device, please visit: http://tools.google.com/dlpage/gaoptout
