Privacy Policy

This Privacy Policy describes how we process information about you, including personal data and cookies.

1. General Information

1. This Policy applies to the Web-based Service, operating under the URL: https://www.codebit.me
2. The Operator and Controller of the Web-based Service is: ESD licenses Sp. z o.o., Marszałkowska 58/15, 00-545 Warszawa, Poland.
3. Contact e-mail address of the Operator: [email protected]
4. The Operator is the Controller with regard to the data you provide on a voluntary basis on the Web-based Service.
5. The Web-based Service uses personal data for the following purposes:
   • Processing requests via the form
6. The Web-based Service performs the functions of obtaining information about Users and their behaviour in the following way:
   • By means of data entered in the forms on a voluntary basis, which is entered into the systems of the Operator.
   • By storing cookie files (so-called ‘cookies’) on the terminal equipment.

2. Selected Methods of Data Protection Used by the Operator

1. The login and personal data entry spaces are protected in the transmission layer (SSL certificate). This ensures that the personal and login data entered on the website is encrypted on the User’s computer and can only be read on the target server.
2. The User passwords are stored in the hashed form. The hash function operates in a one-way fashion – it is not possible to reverse its operation, which is now the modern standard for storing the User passwords.
3. The Operator shall periodically change its administrative passwords.
4. For the purpose of data protection, the Operator shall make backup copies on a regular basis.
5. A substantial element of data protection is the updating of all software used by the Operator to process personal data on a regular basis, which means in particular regular updates of software components.

3. Hosting

1. The Web-based Service is hosted (technically maintained) on the servers of the Operator: a third-party company.

4. Your rights and Additional Information on How Your Data Shall Be Used

1. 1. In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary for the performance of a contract concluded with you or for the fulfilment of obligations incumbent on the Controller. This applies to such groups of recipients as:
      • persons authorised by us, employees and collaborators who need to have an access to personal data in order to perform their duties,
      • hosting company,
      • companies handling the mailings,
      • companies handling SMSes,
      • companies with which the Controller cooperates within the scope of its own marketing,
      • couriers,
      • insurers,
      • law offices and debt collectors,
      • banks,
      • payment operators,
      • public authority.
   2. Your personal data processed by the Controller for no longer than is necessary for the performance of the related activities defined by separate provisions (e.g. on keeping accounts). With regard to marketing data, data shall not be processed for longer than 3 years.
   3. You have the following rights:
      • of access by the data subject,
      • to rectification,
      • to erasure,
      • to restriction of processing,
      • to data portability

   the exercise of which you may request from the Controller.

   1. You have the right to object within the scope of the processing indicated in the point 3.3 c) to the processing of personal data for the purposes of the legitimate interests pursued by the Controller, including profiling, whereby the right to object shall not be exercisable where there are valid legitimate grounds for the processing which override your interests, rights and freedoms, in particular the establishment, exercise or defence of claims.
   2. You may lodge a complaint against the actions of the Controller with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa, Poland.
   3. The provision of personal data is voluntary, but necessary for the operation of the Service.
   4. Automated decision-making, including profiling, may be undertaken in relation to you for the purpose of providing services under the contract and for the purpose of direct marketing by the Controller.
   5. Personal data is not transferred to third countries within the meaning of data protection legislation. This means that we do not transfer it outside the European Union.