What is GDPR?
GDPR (General Data Protection Regulation) is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. It is the fundamental legal act regulating the protection of personal data within the European Union.
Controller of personal data
The controller of your personal data is mauve-peak with its registered office at ul. Świadomości 42/5, 00-001 Warsaw, Poland.
Contact for data protection matters: [email protected]
Your rights under GDPR
In accordance with the GDPR, you have the following rights regarding your personal data:
Right of access (Art. 15 GDPR)
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and information regarding the purposes of the processing, the categories of data, the recipients, and the envisaged retention period.
Right to rectification (Art. 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
Right to erasure (Art. 17 GDPR)
You have the right to obtain without undue delay the erasure of personal data concerning you if the data are no longer necessary for the purposes for which they were collected, you have withdrawn your consent, or the data are unlawfully processed.
Right to restriction of processing (Art. 18 GDPR)
You have the right to obtain restriction of processing of your personal data in certain cases, e.g., if you contest the accuracy of the data or object to their erasure.
Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller.
Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, where the processing is based on a legitimate interest of the controller.
Right not to be subject to automated decision-making (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
How can you exercise your rights?
To exercise your rights, send a message to: [email protected]
In the message, indicate which right you wish to exercise and provide data that allows for your identification. We will respond to your request without undue delay, no later than one month after receipt.
Right to lodge a complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).
UODO contact details:
- Address: ul. Stawki 2, 00-193 Warsaw
- Website: uodo.gov.pl
Data security
We use appropriate technical and organizational measures to ensure the security of the processed personal data, including protection against unauthorized access, loss, destruction, or damage to the data.
Last updated: January 2024