§ 1 PERSONAL DATA
- Personal data provided by You shall be processed by TrackTime24 (i.e. inEwi sp. z o.o. with its registered office in Bielsko-Biała, 10 Szarotki Street), which is the Personal Data Controller within the meaning of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and legal acts in the scope of personal data protection created on its basis (hereinafter referred to as GDPR). You may contact us in particular via e-mail at the following e-mail address: firstname.lastname@example.org.
- The scope of the processed personal data shall be determined by the scope of data completed by You and sent to us by means of relevant form. Processing Your personal data may pertain to Your first and last name, e-mail address, username, computer IP address, cell phone number, address data, company data, geolocation of the Employee at the place of work and image of the Employee.
- Your personal data of will be processed for the period of 5 years and will be deleted upon the lapse of the said period, unless their processing results from another legal basis.
- Your personal data shall be processed for the following purposes: creating the Account, providing services by electronic means, provision of data transfer agreements (within the frames of which the Service Provider transfers to us Employees' personal data for processing), examining filed complaints and other actions as specified in the Terms of Service, promotional and commercial actions of TrackTime24, settling disputes and collecting fees for individual service of the Users, evaluating interest in our services, and in the case of having the Users’ express consent–for the purpose of informing the Users on services and updates, undertaking further actions to the benefit of the Users in accordance with information provided upon obtaining the data, linking information related to the User with information obtained from other entities and using them for the purpose of improving and customizing the Services, preventing potentially prohibited or illegal actions and enforcing the Agreement.
- Providing the personal data by You shall be voluntary, but the lack of consent to process personal data marked as obligatory shall prevent performance of the services and agreements by TrackTime24.
- The legal basis for processing Your personal data in the case referred to in clause 1.3 shall be the statutory authorization to process data which are essential to act in accordance with the law, as well as the statutory authorization to process data which are necessary to perform an agreement if a person to whom the data refer is a party to such agreement, or if it is essential for undertaking certain actions prior to conclusion of an agreement upon request of the person to whom the data refer, and a voluntary consent of the User.
- Your personal data are transferred only for the purpose of performing agreements for provision of services by electronic means by TrackTime24 to a hosting company and a company providing accounting services to TrackTime24. Personal data collected by TrackTime24 may also be disclosed to: competent state bodies upon their request on the basis of relevant provisions of law, or other persons and entities–in the cases prescribed in the provisions of law.
- Your personal Data may be transferred for processing to (recipients of personal data): TrackTime 24’s accounting firm, the provider of hosting for the Website, the company providing technical support for the Website, the payment provider, the company providing the CRM system. The personal data collected by TrackTime24 may also be disclosed to: competent state authorities upon their request on the basis of relevant provisions of law or other persons and entities—in the cases prescribed in the provisions of law. The entity processing your ’ personal data on the basis of the Transfer Agreement will process yours’ personal data from the effective date of GDPR through another entity only upon prior consent of TrackTime24.
- You shall have the right to control processing the data which pertain to You and which are included in databases, in particular the right to: (a) access Your personal data, complement and correct them by reporting such request to TrackTime24, (b) request temporary or permanent suspension of their processing or their removal if they are incomplete, invalid, inaccurate, or if they have been collected in violation of the law, or they have become unnecessary to realize the purpose for which they had been collected, (c) object processing Your personal data–in the cases prescribed in the legal provisions–and the right to request their deletion if they become unnecessary to realize the purpose for which they have been collected, a request to remove the collected personal data referring to the User shall comprise removal of personal data from both the system belonging to TrackTime24 and from bases of the entities which have co-operated with TrackTime24; further, the User shall have the right to restrict the processing of the personal data, the right to portability of the personal data collected by TrackTime24 and referring to him/her, in this to receive them in a structured form, to file a complaint to the supervising body if the User finds that his/her data are processed in violation of the law, and to lodge legal remedies before a court against the supervising body and the entity committing the violations.
- If TrackTime24 is advised that You use the service provided by electronic means in a manner violating the Terms of Service or applicable provisions of law (unauthorized use), then TrackTime24 may process Your personal data in the scope required for establishing Your liability. We may also disclose Your data for the purposes related to the law, protection and security. For instance, we may disclose information for the purpose of ensuring compliance with legal provisions, in response to lawful applications and legal processes, in order to protect the rights and property of TrackTime24, our agents, clients and other entities (which shall include implementation of our agreements, policies and terms of service), or in an emergency (which shall include protection of our employees and agents, our clients or any other persons).
§ 2 OTHER DATA
- The Website may store http enquiries, therefore the files containing web server logs may store certain data, including the IP address of the computer sending the enquiry, the name of User’s station–identification through http protocol, if possible, date and system time of registration on the Website and receipt of the enquiry, number of bytes sent by the server, the URL address of the site visited by the User before if the User has entered the Website through a link, information concerning User’s browser, information concerning errors which occurred while executing the http transaction. Web server logs may be collected for the purposes of proper administration of the Website. Only persons authorized to administer the IT system shall have access to the data. Files containing web server logs may be analyzed for the purposes of preparing statistics concerning traffic on the Website and occurring errors. Summary of such details shall not identify Users.
- The Application may store http enquiries, therefore the files containing web server logs may store certain data, including the IP address sending the enquiry, the name of User’s station–identification through http protocol, if possible, date and system time of registration and receipt of the enquiry, information concerning errors which occurred while executing the http transaction. Web server logs may be collected for the purpose of proper administration of the Application. Only persons authorized to administer the IT system shall have access to the data. Files containing web server logs may be analyzed for the purposes of preparing statistics concerning traffic in the Application and occurring errors. Summary of such details shall not identify a User.
- Transfer of personal data to third countries will proceed in accordance with GDPR.
§ 3 INFORMATION SECURITY
- Your personal data are stored and secured in accordance with the rules as prescribed by the applicable legal provisions. TrackTime24 shall apply technological and organizational, as required in Articles 25, 30, 32–34, 35–39 GDPR means in order to secure processing the personal data which are adequate to the threats and category of data to be secured, in particular, through technical and organizational means it shall secure data against being published to unauthorized persons, taken over by an unauthorized person, processed in violation of the law and changed, lost, damaged or destroyed. Users’ personal data shall be collected and stored on a secured server, moreover, the data shall be secured by TrackTime24’s internal procedures related to processing personal data and information security policy. We use the secure socket layer (SSL) technology, which is designed to encrypt the transmission of information exchanged between Your browser and our site.
- In order to log in to the Account, it shall be necessary to provide a relevant login and password. In order to ensure an appropriate level of security, the password for the Account shall exist only in an encrypted form.
- At the same time TrackTime24 states that using the Internet and services provided by electronic means poses a threat of malware breaking into User’s teleinformatic system and device, as well as of any other unauthorized access to User’s data, including personal details, by third parties. In order to minimize such threats, the User shall use appropriate technical security means, e.g. using updated antivirus programs or programs securing identification of the User in the Internet. In order to obtain detailed and professional information related to the security in the Internet, TrackTime24 recommends taking advice from entities specializing in such IT services.
- We use services of third-party payment processors. We encourage our partners processing payments to disclose their own privacy protection practices and to respect the privacy of other Users. TrackTime24 may not, however, guarantee You privacy protection or personal data security and therefore You should assess the rules of privacy protection and security of partners with whom the transactions are concluded already before concluding particular transaction and meeting the decision on providing information about Yourself.
- Transaction data, including personal data, can be transferred to PayLane Sp. z o.o. located in Gdańsk at Arkońska 6/A3, zip code: 80-387, company number: 0000227278, in order to process payments.
§ 4 COOKIES
- TrackTime24 shall store and gain access to session and statistical cookies of a device, in the case of other Cookies the User shall express his/her consent to store or gain access to Cookies by means of appropriate settings of the browser installed on User’s device. The Users may individually change the Cookies settings at any time, stating the conditions of their storage, through the Internet browser settings or configuration of the service. The Users may also individually delete Cookies stored on their device at any time in accordance with the instructions of the browser producer. The User may consent to use the Third-Party Cookies of third parties by individually changing the Third-Party Cookies settings at any time, stating the conditions of their storage, by means of the Internet browser settings or configuration of the service.
- It is not possible to identify You on the basis of Cookie files.
- Cookie files generated directly by the Website may not be read by other websites.
- The Website uses Cookie files and data derived from them for the following purposes: (a) preserving User’s session, (b) adjusting the content of pages to User’s preferences, (c) ensuring security of data used within the frames of the Website, (d) preparing statistics (anonymous) for optimizing functionality of the Website, (e) linking functions of the website with other external services used by the User (e.g. social), (f) chat, (g) displaying advertising information according to User’s preferences and limiting the number of impressions.
- The Website shall use two basic types of Cookie files: session cookies, which are deleted upon closing User’s session; and permanent cookies, which are stored on his/her device for a longer time.
- You may remove Cookie files stored on Your device at any time in accordance with the instructions of the browser producer.
- Remember - You may enable the storing of Third-Party Cookies on your device at any time in line with the instructions of the browser producer. Failure to enable the Third-Party Cookies shall not cause lack of availability of the Website, in its entirety or in part, for you.
§ 5 PERSONAL DATA OF PERSONS BELOW THE AGE OF 13
- TrackTime24 shall not process personal data of persons below the age of 13. If within the territory of a relevant EU member state consent to the processing of data of a person below the age of 16 is required, then, taking into account available technology, TrackTime24 shall undertake actions required in Article 8 of GDPR.