Privacy Policy

Information We Collect

PxP Shape will collect and process the following personal information about you:

• Expressly stated data: The data expressly stated by the customer, such as Name, Surname, phone number, and e-mail addresses;
• Automatically collected data: automatically collected data such as IP address, type of browser and the operating system.

‍

Legal Bases For Processing

Processing of personal data of the customer (and if applicable of any other natural person associated with the customer) is based on:

• Article 6 point a) of the GDPR – when you give us your consent to process your data by using contact form and sending us your question or when you give us your express given consent;
• Article 6 point f) of the GDPR – considering legitimate interest which consist of Performing the Controller’s obligations and asserting or defending against claims that may be directed against the Controller, preventing or detecting fraud,
• Article 6.1 point a) (consent) of Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation);

‍

How We Use Your Information

PxP Shape will use the information that we collect about you for the following purposes:

• Marketing/Promotional
• Targeted advertising – only if you grant us your consent
• Administration info
• Assert or defend against claims, secure the Service

If the basis for the processing of Personal Data is consent, it may be withdrawn at any time, using the above mentioned Administrator’s Contact Information. However, please note that the processing of Personal Data until consent is withdrawn is lawful. Change of the above purposes or additional purposes may be added by the Controller upon your consent or in compliance with appropriate regulations of the GDPR.

‍

How We Share Your Information

Generally Controller will not share your personal information to any third party, except in limited circumstances as described below, and only with our contractors:

• Ad service
• Marketing agencies
• Analytics
• Hosting
• Legal and accounting advisors
• Appropriate state authorities

PxP Shape requires such third party to use the personal information we shared with them only for the purposes for which it was shared and not to retain it for longer than is required for fulfilling the said purpose. If it is required, the Controller shall entrust personal data will be shared on the basis of the processing entrustment agreement.

‍

Retention Of Your Information

PxP Shape will retain your personal information with us for as long as we need it to fulfill the purposes for which it was collected as detailed in this Privacy Policy but not longer than 3 years from the date of recipient of your personal data. In some cases we may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law.

‍

Your Rights

Pursuant to the GDPR, you have the following rights related to the Controller’s processing the personal data:

• a) The right to access and update data
• b) Under the terms of the GDPR, you have also the rights to:some text
  • Request deletion of the personal data – however, the Controller may refuse to delete those data for which it has a basis for processing (e.g. fulfillment of a legal obligation or to assert or defend against claims that may be made against us);
  • Demand restriction of data processing;
  • Object to the processing of personal data if the basis for processing is the legitimate interest of the Controller or the performance of tasks in the public interest;
  • Withdrawal of consent, if the data are processed on the basis of the consent;
  • Transfer of data, if the basis for processing is a contract or the consent;

To exercise these rights, you can write to us at dataprotection@pxpshape.com. We will respond to your request in accordance with applicable law.The Controller shall endeavor to fulfill the requests made by the Customer as soon as possible. In any case, you will receive a message no later than 30 days from the date of receipt of the request by the Controller. Within this period, the Controller will respond to you or inform you of the extension of the deadline and explain the reasons.

‍

Cookies Etc.

To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy.

‍

Security

The security of your information is important to us and we will use reasonable security measures adequate with the risk of the loss, misuse or unauthorized alteration of your information, considering scope and the type of the personal data we process via the Service. However, given the risks related with transfer of the data via internet connection, we cannot guarantee absolute security and consequently and you have to be aware of that using the Service.

‍

The Right To Complain To The Supervisory Authority

You have right to lodge a complaint with the supervisory body if your believe that your personal data is being processed by the Controller unlawfully.

‍

Data Protection Officer

If you have any queries or concerns about the processing of your information that is available with us, you may email our DPO at PxP Shape Sp. z o.o., Kapelanka 12, 30-347 Krakow, Poland, email: dataprotection@pxpshape.com. We will address your concerns in accordance with applicable law.

‍

Procedures & Policies

Here you have the list of our procedures and policies:

• Device and Password Policy
• Personal Data Processing Policy
• Physical Protection of Premises
• Policy for the exercise of data subjects' rights
• Policy of retention and deletion rules for personal data
• Data Protection Policy
• Risk Assessment Matrix for Data Breaches