Privacy Policy

Last updated: February 4, 2025

Information Obligation

We inform you that we process your personal data - detailed information can be found below.

Data Administrator

FILIP NOWACKI

ul. Janiny Porazińskiej 3/5, 81-593 Gdynia, Poland

NIP: 5842763652

Purposes and Legal Bases for Data Processing

We process your data for the following purposes:

Conclusion and execution of the contract for using the Garago service – such processing is necessary for the performance of the contract (Article 6(1)(b) GDPR).

Marketing of Garago products or services (excluding direct marketing) – processing for this purpose is based on the legitimate interest of Garago (Article 6(1)(f) GDPR), which is the ability to conduct marketing of its own products and services.

Direct marketing of Garago products or services – such processing is necessary for the legitimate interest of Garago (Article 6(1)(f) GDPR), which is to conduct direct communication with you for advertising and promoting Garago services.

Researching preferences regarding demand for Garago services (e.g., through SMS or email surveys) – this is necessary for the legitimate interest of Garago (Article 6(1)(f) GDPR), which is to determine the catalog of products and services interesting to customers and their satisfaction level with Garago services.

Creating summaries, analyses, statistics for internal needs of Garago, including reporting, service development planning, development work in the Garago application, creating statistical models – such processing is necessary for the legitimate interest of Garago (Article 6(1)(f) GDPR), which is analysis and development of operations.

Implementing new or developing solutions/features in Garago systems/applications – such processing is necessary for the legitimate interest of Garago (Article 6(1)(f) GDPR), which is to develop and ensure the security of Garago systems and applications.

Establishing, pursuing, or defending against claims related to the concluded contract or processing your personal data – processing in this regard is necessary for the legitimate interest of Garago (Article 6(1)(f) GDPR), which is to establish, pursue, or defend against potential claims.

Fulfilling legal obligations imposed on Garago by applicable laws – processing in this case is necessary to meet legal requirements applicable to Garago (Article 6(1)(c) GDPR).

Categories of Data Recipients

Your personal data may be disclosed to:

Entities authorized under applicable law (courts, state authorities).

Entities providing accounting, IT, marketing, communication, analytical, legal, and debt collection services to Garago.

Our subcontractors and other entities we cooperate with.

Data Transfer Outside the European Economic Area

Your data will not be transferred to entities located outside the European Economic Area.

Data Retention Period

We will process your data:

For concluding and executing a contract – until termination or expiration of the contract, and then until claims become time-barred.

For marketing products or services (excluding direct marketing) – until termination or expiration of the contract or until you object to processing for this purpose.

For direct marketing of Garago products or services – until termination or expiration of the contract or until you object to processing for this purpose.

For researching preferences regarding demand for services – until termination or expiration of the contract or until you object to processing for this purpose.

For establishing, pursuing, or defending against claims – until those claims become time-barred.

For fulfilling legal obligations – until expiration of data retention obligations arising from legal regulations.

For creating summaries, analyses, statistics for internal needs – during the term of the contract and then until claims arising from the contract become time-barred or until you object to processing for this purpose.

For implementing new or developing solutions/features in Garago systems/applications – until termination or expiration of the contract or until you object to processing for this purpose.

Your Rights

According to GDPR, you have:

The right to access your data and receive a copy thereof.

The right to rectify (correct or supplement) your data.

The right to delete data and restrict data processing.

The right to data portability.

The right to lodge a complaint with a supervisory authority (Personal Data Protection Office).

Right to Withdraw Consent

You can withdraw your consent to process personal data at any time – this applies only to data that Garago will process based on your consent. To do so, please send a message to [email protected].

Right to Object

You can express your objection at any time against processing your personal data by Garago conducted based on legitimate interests (Article 6(1)(f) GDPR) by sending us a message at [email protected].

Information on Requirement or Voluntariness of Providing Data and Consequences of Not Providing It

Providing your personal data is voluntary but necessary for concluding and executing a contract for using the Garago service and fulfilling other aforementioned purposes. In cases where Garago processes data based on consent – consent does not need to be expressed in order to use Garago services.