General information

We respect the right to privacy of people whose personal data we have, in particular by using appropriate technological and legislative solutions to prevent interference with the privacy of these people by unauthorized entities.This Policy contains information about what to expect when we contact you or you contact us or use one of our services.

By reading the following content you will learn, among others about that:

• Why do we process your personal data?
• What are we doing this for?
• Is the provision of data obligatory?
• How long do we keep the data?
• Are there other recipients of personal data?
• What are your rights?

Our activities related to the collection and processing of all data are aimed at guaranteeing you a sense of complete security and lawfulness of processing at a level appropriate to the personal data protection law in force in the European Union, including the Regulation of the European Parliament and of the Council 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC – the so called GDPR.

Personal Data Administrator

The entity deciding about the purposes and methods of using your data (i.e. their administrator in accordance with the provisions of the GDPR) is European Carbon Farmers Sp. z o.o.You can contact us in numerous ways, some of which include:

• E-mail: Info@EuropeanCarbonFarms.com
• Phone: +48-692-477-747

Security

We conscientiously approach the protection of your data and constantly develop our security systems and processes. The security measures we use include:

• Limited physical access to our buildings and user access to our systems – only for those who are authorized.
• Controls such as firewall, user verification, strong data encryption, and separation of roles, systems, and data.

What data do we process?

We collect or process data only to the extent necessary to achieve the purposes for which they were collected, resulting from the provisions of law. The scope of the data will vary depending on the purpose of the processing. Most of the personal data we process is provided to us directly for one of the following reasons:

• You are our Partner or your data has been provided to us by your employer or Partner.
• We have obtained it directly from you or from a third party authorized to provide us with your data.
• You have submitted a complaint or inquiry to us.
• You asked us for information.
• You took part in an event organized by us.
• You represent your organization.
• You are using one of our services.

Grounds for data processing

Whenever we process your personal data, we must have the so-called “Legal basis” for doing so. The legal bases result directly from the provisions of law (Article 6, Article 9 of the GDPR), below are the ones we most often rely on:

• Consent: you have indicated that you consent to the processing of your data for a specific purpose, e.g. to receive marketing messages.
• Legitimate interests: only if the processing is necessary for our business and it does not interfere with the right to respect your privacy, e.g. for direct marketing of our products or services.
• Contract performance: we need to process your personal data to be able to provide you with one of our products or services, you are a party to a contract with us.
• Legal claims: where data processing is necessary for the establishment, exercise or defence of legal claims.
• Legal obligation: when we are required by law to process your personal data, e.g. if you are our employee, we are obliged to process your data in accordance with the provisions of labour law.

How do we use the personal data we have?

We use the data only for the purpose for which it can be processed in accordance with the law. There are many ways and possibilities that personal information about you can be used depending on how you interact with us. For example, if you do not provide us with your data, we will not be able to contact you in this way.

Who can access your data?

Apart from European Carbon Farmers Sp. z o.o. access to data may have a number of entities. These may be service providers with whom we work and who help us deliver products and services that you expect from us or support us in our business. These entities process personal data on our behalf and must meet high security standards. We only share information that allows us to provide services or facilitate the provision of services to you.In some circumstances, we may also be legally required to share information about you – for example, under a court order, law or public authority decision. In any case, we make sure that we have a legal basis to share information about you and document our decisions.

Data transfer to the so-called third country

In the scope of the processing purposes described in this policy, we may transfer your personal data to our suppliers, partners or service providers based outside the European Economic Area (EEA).At the same time, taking care of the security of your data, we strictly adhere to the rules of their transfer resulting directly from the GDPR and we transfer data only where the degree of security is guaranteed in accordance with the decisions of the European Commission (e.g. to the USA only to entities on the so-called Privacy Shield list).

How long do we keep your data?

As a rule, we store your data only for the period necessary to achieve the purposes for which they are processed, strictly defined in this privacy policy, regulations or contracts, and in accordance with the law and relevant provisions. We never store personal data for longer than necessary. In most cases, the storage period ends six years after the end of cooperation with us.

Is there an obligation to provide data?

As a rule, providing personal data is completely voluntary, but it may turn out to be necessary for the implementation of specific services or your requests, e.g. in the field of contact, conclusion of a contract, implementation of your rights related to processing, etc. Providing data may also be necessary due to applicable law.

Your data processing rights

In accordance with the provisions of the law on the protection of personal data, you have specific rights depending on the basis for processing your data.

Right of access

You have the right to find out if and how we use or store your personal data – the so-called right of access. By exercising this right, you can also ask us for a copy of your data.

Right to rectification

You can question the accuracy of the data we process and ask for it to be corrected. This is known as the “right to rectification”. If your data is incomplete, you can also ask us to complete it, e.g. by adding new information.

The right to delete data

You can ask us to delete your information and in certain circumstances we must do so. This permission is also known as the so-called “The right to be forgotten”. This right is not absolute and applies, inter alia, to in the following circumstances, when:

• We no longer need your data.
• You initially consented to the processing, but now you have withdrawn it.
• You have objected to the use of your data.
• We have processed your data unlawfully.

We may deny you the right to “be forgotten” in the following circumstances:

• When we are legally required to store your data.
• Data storage is necessary for the establishment, exercise or defence of legal claims.

Right to restriction of processing

You have the right to limit the way we use your data, especially in case you are concerned about the accuracy of the data or the way it is used. If necessary, you can also request the deletion of certain information about you. This right is closely related to your rights to contest the accuracy of your data and to object to its use.

Right to object to processing

Under certain circumstances, you have the right to object to the processing (use) of your data. If your objection is justified, it must stop using your data for the purpose for which it was originally processed, unless we are able to provide reasons justifying the further use of your data despite the objections raised.You have an absolute right to object to the use of your data for direct marketing purposes. In this case, if you object, we will absolutely stop using your data for this purpose.

Right to data portability

You have the right to obtain your personal data in an accessible and readable manner on a computer. You also have the right to ask us to transfer your data to another entity – we will do it if the transfer is, as the GDPR says, “technically feasible”. This right only applies to information that you have provided to us, and the processing is carried out in electronic form.

The right to withdraw consent

If your data is processed on the basis of your consent, you can additionally use the right to withdraw it at any time – this withdrawal, however, does not affect the compliance of the processing before it is made.
The right to lodge a complaint with a supervisory authority

We work in accordance with high standards when it comes to the processing of your personal data.If you have any questions or concerns, please contact us and we will respond.If you remain dissatisfied with the content of the answer or the exercise of your right, you can submit a complaint to the President of the Office for Personal Data Protection.

Exercise of your rights

You can ask for the exercise of your rights in oral or written form. If you provide us with your request verbally, we recommend that you also submit it in writing or by email to provide a clear trace of correspondence. It will also provide us with clear evidence of your actions and allow us to respond to your expectations in the shortest possible time.We do not charge fees for the implementation of your rights and we try to provide information within no more than a month – if it turns out that we need more time, we will inform you about it.If you want to inquire about data processing, please contact us:

• E-mail: Info@EuropeanCarbonFarms.com
• Phone: +48-692-477-747

Cookies

Our websites may use cookies constituting IT data, in particular text files, which are stored on the end device. Cookies usually contain the name of the website they come from, the storage time on the end device and a unique number.

Use
Cookies may be used for the following purposes:

• Provision of website services.
• Facilitating the use of the website while browsing it.
• Later identification in case of reconnecting the service with the device on which they were saved.
• Creating statistics that help to understand how users use the website, which allows improving its structure and content.
• Adjusting the content of the website pages to specific preferences and optimizing the use of websites, tailored to individual needs.
• Exchange of information with Partners in order to mediate in the provision of their services using the website.

Types of cookies
As part of the websites, we may use the following types of cookies:

• “session” – which are stored on the user’s end device until they leave the website or turn off the web browser.
• “permanent” – stored on the User’s end device for a specified period of time in the parameters of cookies or until they are deleted by the user.
• “performance” – enabling the collection of information on the way the website pages are used.
• “functional” – allowing to remember the settings selected by the user and personalization of the User interface.
• “own” – posted by the website.
• “external” – coming from an external site than the website.

Managing browser settings

Software for browsing websites, i.e. a web browser, usually allows cookies to be stored on the end device by default. You can change the settings in this regard.The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of the web browser you use.