Data controller
Your personal data controller is 1xTeam sp. z o.o., ul. Postępu 14, 02-676 Warsaw, registered at the Warsaw District Court, National Court Register (KRS), 13th Economic Department, KRS no. 0000571058, with share capital of PLN 30,000.
If you have any questions about the processing of your data, contact us at hello@optfor.ai.
Purposes and legal bases
We process your personal data for the following purposes:
- providing website functionality and facilitating the use of our services — Art. 6(1)(b) and (f) GDPR;
- performing contracts with customers or contractors — Art. 6(1)(b) GDPR if you are a party, or Art. 6(1)(f) GDPR if you are their representative or employee;
- payment processing, billing, accounting and financial reporting, where applicable — Art. 6(1)(c) and (f) GDPR;
- fulfilling obligations imposed by law — Art. 6(1)(c) GDPR;
- pursuing the Controller’s legitimate interest in marketing its products and services — Art. 6(1)(f) GDPR;
- purposes specified in any consent you have given — Art. 6(1)(a) GDPR;
- establishing, exercising or defending legal claims, and statistical purposes connected with improving efficiency and service quality and adapting services to recipients — Art. 6(1)(f) GDPR.
Source and scope of data
As a rule, we process data you provide. If you did not provide it directly, its source is an entity that had your consent to disclose it to the Controller or another valid legal basis.
The data obtained is limited to what is necessary for the relevant marketing activity, typically your first name, surname, email address, telephone number and/or mailing address.
Transfers outside the EEA
Your data may be transferred outside the European Economic Area (EEA). In connection with support for ICT services and IT infrastructure, the Controller may commission specific IT activities from recognised subcontractors operating outside the EEA.
Recipients in countries covered by a European Commission adequacy decision ensure protection consistent with EEA standards. For other countries, the Controller enters into agreements based on the European Commission’s standard contractual clauses under Art. 46(2)(c) GDPR. You may request a copy and further information about the safeguards using the contact details above. The safeguards comply with Chapter V GDPR.
Recipients of data
Recipients of your personal data may include:
- website users;
- suppliers and subcontractors;
- banks and payment processing providers;
- companies carrying out marketing activities;
- companies providing services or IT solutions;
- companies archiving and shredding documents, where paper documents are connected with the purposes of processing;
- courier and postal service providers, where correspondence is connected with the purposes of processing.
Retention period
Your data will be stored until you withdraw consent or object, meaning that you indicate in any way that you no longer wish to remain in contact with us or receive information about our activities.
After withdrawal or objection, data may be retained to demonstrate the Controller’s compliance with legal obligations and, where appropriate, until the expiry of the relevant limitation period for claims, whichever is longer. If you enter into an agreement with the Controller, data will be processed for its duration and afterwards until the limitation periods for related claims expire.
Your rights
You have the rights to access, rectify, erase and restrict the processing of your data, to data portability, and to object to processing.
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority.
Providing personal data is voluntary but necessary for the purposes described above. As a rule, your data will not be subject to automated decision-making that produces legal or similarly significant effects. If such decisions are contemplated, you will receive the required information in advance.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. that uses cookies. Information about your use of the website is usually transferred to and stored on a Google server in the USA. Because IP anonymisation is active, Google first shortens your IP address in EU or EEA member states; only exceptionally is the full address sent to the USA and shortened there.
On the website operator’s behalf, Google uses this information to evaluate use, compile activity reports and provide related services. The IP address supplied to Google Analytics is not merged with other Google data. Processing is based on the operator’s legitimate interest in evaluating website use. Google Analytics may collect IP address, network location, visit date, operating system, browser type, visited pages, time spent, interactions and profile information.
You can prevent cookie storage in your browser settings, though some features may then be unavailable. You can also prevent Google from collecting and processing cookie-generated usage data, including your IP address, by installing the “Browser Add On to disable Google Analytics” or using the opt-out link on the website. The resulting opt-out cookie prevents future collection for this website and browser while it remains installed.
Server logs
Using the website sends queries to its server. Each query is recorded in server logs, including the user’s IP address, server date and time, and information about the browser and operating system.
Log data is not associated with specific people and is not used by the Controller to identify users. Logs are auxiliary website administration material and are disclosed only to persons authorised to administer the server.