Privacy Policy

This Privacy Policy is not a fully universal document and requires adjustment depending on the tools and solutions used by the Controller, as well as the purposes of processing.

I. General provisions

1. This Privacy Policy sets out the manner of collecting, processing and storing the personal data necessary to provide services by electronic means through the website at the domain huracantrading.com (hereinafter: the Service).
2. The controller of Users' personal data is DSZ IT SPOLKA Z OGRANICZONA ODPOWIEDZIALNOSCIA, 81-006 Gdynia, ul. Morska 230 III (hereinafter: the Controller).
3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: the GDPR).
4. The data collected by the Controller will be:
   • processed lawfully,
   • processed for clearly defined purposes and not subjected to further processing incompatible with those purposes,
   • substantively correct and adequate in relation to the purposes for which they are processed,
   • stored no longer than is necessary to achieve the purpose of processing.

II. Purpose and legal grounds for processing data

1. The Controller processes personal data necessary to provide and develop the services offered through the Service and its individual functionalities.
2. Personal data will be processed for the following purposes:
   1. registration of an account, verification of the User's identity, and performance of the contract for the provision of services by electronic means in accordance with the Act of 18 July 2002 on the provision of services by electronic means (ustawa o swiadczeniu uslug droga elektroniczna), in particular by enabling the use of the User's account - on the basis of acceptance of these Terms (Article 6(1)(b) GDPR);
   2. communication with the User in order to provide necessary information and to build a positive and reliable relationship with them, which constitutes a legitimate interest of the Controller (Article 6(1)(f) GDPR);
   3. promotion by the Controller of its own products and/or services and those of its Partners by sending marketing information (newsletter) by electronic means, provided the User has consented to receiving such notifications by email (Article 6(1)(a) GDPR);
   4. providing access to information about news from the industry directly related to the Controller's activity, provided the User has consented to receiving such notifications by email (Article 6(1)(a) GDPR),
   5. for analytical and statistical purposes on the basis of the Controller's legitimate interest in verifying Users' activity and preferences in order to optimise the services, products and functionalities of the Service (Article 6(1)(f) GDPR);
   6. the potential establishment, pursuit or defence of claims on the basis of the Controller's legitimate interest in protecting its rights (Article 6(1)(f) GDPR).
3. In each of the cases listed above (paragraph 2), providing the data is voluntary but necessary to conclude the contract or use other functionalities of the Service.

III. Period of processing personal data

1. Personal data will be processed for the period during which the person remains an active User of the Service (holds a User account), and after that time for the period necessary to comply with legal provisions, to pursue or defend against any claims, but no longer than 3 years counted from the date of termination of the contract for the provision of services by electronic means.
2. Data processed on the basis of consent will be processed until the consent given is withdrawn, with the reservation that withdrawing this consent does not affect the lawfulness of the processing carried out before the withdrawal.

IV. Information about processing

1. Depending on the purpose of processing, personal data may be disclosed to:
   1. entities affiliated with the Controller
   2. entities cooperating with the Controller,
   3. subcontractors, in particular entities supplying and operating selected IT systems and solutions,
   4. entities handling online payments,
   5. entities providing courier and postal services,
   6. law firms.
2. Personal data processed by the Controller will not be transferred outside the European Economic Area or to international organisations.

V. Rights of the data subjects

1. The User of the Service has the right to:
   • access the content of their personal data
   • rectify the data
   • erase the data
   • restrict the processing of the data
   • data portability
   • object to processing carried out on the basis of the controller's legitimate interest
   • withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of that consent before its withdrawal
2. The User has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych) where they consider that the processing infringes their rights and freedoms.
3. In the data processing, no automated decision-making, including profiling, takes place.

VI. Final provisions

1. The Controller reserves the right to introduce changes to this Privacy Policy, while ensuring that the Users' rights arising from this document will not be limited.
2. The User will be informed of any changes to the Privacy Policy through a notice available on the Service.