1. Data Controller
The controller of personal data processed in connection with the use of the Readyroom application is POLCERN SP. Z O.O., with its registered office in Kraków, ul. Malczewskiego 47A, 30-207 Kraków, Poland, REGON: 120222029, NIP: 677-226-63-27 (hereinafter: the "Controller").
For matters related to the processing of personal data, you can contact us in writing at the Controller's registered office address or by phone at the number provided in the page footer.
2. Scope of processed data
The Controller processes the following categories of data:
- phone number or email address — for user authentication,
- first and last name (optional) — for identification within the organization,
- organization data and assigned role — for the provision of the service,
- message content and operation history — for the application's functionality,
- device technical data and logs — to ensure security.
3. Purposes and legal bases for processing
- Service provision — Article 6(1)(b) GDPR (performance of a contract).
- Security and proper functioning — Article 6(1)(f) GDPR (legitimate interest of the Controller).
- Compliance with legal obligations (e.g. tax, accounting) — Article 6(1)(c) GDPR.
4. Data recipients
Data may be transferred to entities processing data on behalf of the Controller, in particular:
- infrastructure and hosting providers,
- providers of push notification and SMS services,
- entities handling authentication and sign-in.
The Controller ensures that these entities process data only on the basis of data processing agreements and only to the extent necessary to provide the services.
5. Retention period
Data is stored for the period necessary to provide the service and for the period required by law. After account deletion, data is deleted or anonymized, except for information whose retention is necessary to fulfill the Controller's legal obligations.
6. User rights
In connection with the processing of personal data, you have the right to:
- access your data,
- rectification, erasure, or restriction of processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent (if processing is based on it),
- lodge a complaint with the President of the Personal Data Protection Office.
7. Cookies
The Controller's website may use cookies only for technical purposes necessary for the proper operation of the site. You can change your cookie settings in your browser at any time.
8. Policy changes
The Controller reserves the right to update this policy. The current version is always available at this address.