Privacy policy

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation) - hereinafter the "GDPR" - we inform you that:

This is an English translation provided for convenience. The Polish version of this policy is authoritative.

Data controller. The controller of personal data processed in connection with the POSEIDON360 Service or Services is RCEPAY Spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw, ul. Adama Branickiego 15, 02-972 Warsaw, entered into the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number: 0000799102; REGON: 384104377; NIP (tax ID): 7010940027, share capital PLN 5,000.00 (hereinafter the "controller" or "RCEPAY"). You may contact the controller by post at the address indicated above or by e-mail at: kontakt@poseidon360.pl.

1. Purposes of processing

RCEPAY processes personal data for the purpose of:

confirming an offer and obtaining additional data required to draw up a contract - on the basis of consent (Article 6(1)(a) GDPR);
providing information about the controller's offers or promotions of products and services, i.e. to pursue the controller's legitimate interest in the form of marketing of RCEPAY products and services (Article 6(1)(f) GDPR);
concluding and performing a contract relating to the provision of the POSEIDON360 service (Article 6(1)(b) GDPR);
issuing accounting documents (Article 6(1)(b) GDPR).

2. Recipients of the data

In connection with contracts concluded by RCEPAY, achieving the above processing purposes will involve RCEPAY transferring personal data to other entities, in compliance with the requirements arising from data protection legislation, including on the basis of data-processing agreements. RCEPAY transfers personal data to the following recipients providing services to RCEPAY:

RCEPAY agents intermediating in presenting offers regarding the products and services offered by RCEPAY;
IT CARD CENTRUM USŁUG PŁATNICZYCH S.A., intermediating in the collection of data for the purposes of confirming an offer and drawing up a contract. After receiving the personal data, IT CARD CENTRUM USŁUG PŁATNICZYCH S.A. will contact (by phone or e-mail) the person authorised for contact indicated in the form, in order to confirm the offer and obtain the additional data needed to draw up the contract. The additional data requested by this company will include, among others, data concerning the Client's business (including the tax ID (NIP), bank account number, data on location points), as well as data of persons representing the Client (e.g. identity document data) and persons authorised for contact. If the offer is not confirmed, the additional data described above will not be collected;
entities providing the controller with services other than those listed above, including delivery services (e.g. courier companies) and those providing IT support to RCEPAY and its subcontractors.

RCEPAY will also transfer personal data to other entities where such transfer is required in connection with the conclusion of a contract (e.g. a bank acting as the acquirer for payments made at a POS terminal). In addition, RCEPAY will transfer personal data to entities to which it is obliged to make it available under the law.

3. Voluntary provision of data

Providing the data is voluntary. Failure to provide the data will make it impossible to achieve the processing purposes indicated above, including confirming an offer and obtaining the data necessary to conclude a contract with the Client, as well as sending marketing information.

4. Retention period

Personal data will be stored for a period of 2 (two) years, unless the obligation to store it for a different period arises from applicable law.

5. Your rights

We inform you of your right to request from the controller access to your personal data, its rectification, erasure or restriction of processing, as well as data portability. In connection with the processing of personal data, you also have the right to lodge a complaint with the supervisory authority, which in the territory of the Republic of Poland is the President of the Personal Data Protection Office. Where personal data is processed on the basis of consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal. Where data is processed for purposes arising from the controller's legitimate interests, you have the right to object to the processing.

6. Cookies

The website www.poseidon360.pl automatically processes information contained in cookie files. RCEPAY informs that cookies are IT data stored on the end device of the website user. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.

Cookies are used in order to:

adapt the content of the websites to the user's preferences and optimise the use of the websites; in particular, these files make it possible to recognise the website user's device and display the website appropriately, tailored to their individual needs;
create statistics that help understand how users use the websites, which makes it possible to improve their structure, performance and the content addressed to the user;
maintain the user's session on the site.

The website www.poseidon360.pl uses the following types of cookies:

"necessary" cookies, enabling the use of services available within the services provided via www.poseidon360.pl, e.g. authentication cookies used for services requiring authentication; cookies used to ensure security and detect abuse;
"performance" or "statistical" cookies, allowing the collection of information on how the websites are used;
"marketing" cookies, enabling users to be provided with advertising content better tailored to their preferences.