This website is owned Storly sp. z o.o. Registration number: 5214031414. Address: ul. Domaniewska 17/19 lok.133, 02-672 Warszawa.
Last updated: July 31, 2024
We respect your privacy, so we fully disclose to you how we process your personal data. Before providing us with personal data, please read this Privacy Policy carefully.
We have prepared this Privacy Policy to give you a comprehensive understanding of how we process your personal data. This Privacy Policy applies to the processing of personal data in interaction with us when you use our services via the Storly platform, communication with us by email and as otherwise described in this Privacy Policy.
Contents
- Who we are?
- How does personal data end up in our possession?
- What personal data do we process and for what purposes?
- How long do we keep your personal data?
- When and to whom may we share your personal data?
- How we process cookies?
- What rights do you have and how can you exercise them?
- Other details regarding the processing of personal data
1. Who we are?
Storly sp. z o.o., ul. Domaniewska 17/19 lok.133, 02-672 Warszawa, Poland (“Storly”, “we”, “us”, “our”) is a company that provides you with access to the Storly platform, available here (the “Platform”).
Except as otherwise noted in this Privacy Policy, we is a data controller (as that term is used under the EU General Data Protection Regulation (the “GDPR”), which means that we decide how and why the personal data you provide to us is processed.
If you have any questions or suggestions about data protection or want to reach out to our data protection officer, you can contact via e-mail: [email protected].
2. How does personal data end up in our possession?
We only process your personal data when we receive it in one of the following ways:
- when you provide us with personal data.
For example, in order to use the Platform, you must have an account. To register an account, you must provide us with a certain personal data that we process.
- when personal data is provided by third parties.
When you use online services, you may provide those services with your personal data. Our Platform allow you to transfer personal data from other online website or platform using APIs (for example Google API).
- automatic collection of personal data.
Our Platform is connected to tools that can automatically collect your personal data. If there is a legal basis, we may process those personal data collected by relevant tools.
3. What personal data do we process and for what purposes?
Given that personal data is used universally in the provision of the Platform, and in some cases with the involvement of third parties, there are many processes for processing personal data in the Platform. Among other things, the same personal data may be processed for different purposes. We have endeavoured to describe each process of processing your personal data in as much detail as possible.
We process your personal data on the following legal basis:
- for the performance of a contract (Terms of Use):
| Purposes of processing your personal data | Personal data | Retention period | |
| Customer | Contractor (personal data of representative of the Contractor) | ||
| Registration an account on the Platform | If you log in with Google API, we process the following personal data: – Google Data: first name, last name, profile picture (if any), e-mail address If you register without using a third-party service: e-mail address | one (1) year after the last login to the account | |
| Filling out and managing your account on the Platform | first name, last name, profile picture, e-mail address, phone number, country of residence, personal address, your order details | first name, last name, profile picture, e-mail address, phone number | one (1) year after the last login to the account |
| Replenish your account balance and make payments on the Platform | first name, last name, e-mail address, Payment data such as routing number, account number, issuing number | first name, last name, e-mail address | one (1) year after the last login to the account |
| Inform you about transactions made from your account on the Platform and other information that is related to providing you with services to use the Platform | name; e-mail address; data about the transaction | one (1) year after the last login to the account | |
- legitimate interest:
| Considering and replying to incoming issues | e-mail address other data that you provide in his/her issue and further correspondence | Your interest is in receiving response to the issue; Our interest is in ensuring good service | one (1) year after receipt of the request |
| Ensure the normal operation of the Platform, to monitor technical problems in the webwork of the Platform and fix them | IP, device name, OS name, device model, t ime zone of device, language of device, device ID | Your interest is in using our Platform free from any bugs; Our interest is in keep the Platform up and running | according to the cookie retention period as specified in section “How we process cookies? |
| Better understand the users of our Platform and learn about their preferences | IP, device name, OS name, device model, time zone of device, language of device, device ID, data about your usage of the Platform | Your interest is that our Platform are the best fit for your needs; Our interest is to understand our audience in order to attract new users to our Platform | according to the cookie retention period as specified in section “How we process cookies? |
- your consent:
| Providing you with marketing and information mailing | e-mail address | three (3) year after you give us consent |
4. How long do we keep your personal data?
To comply with the GDPR and protect your privacy, we will retain your personal data for as long as is necessary to comply with the purposes of processing. Notwithstanding the above, there are instances where we are required to keep your personal data for a longer period. Such cases include, but are not limited to, those under applicable law or regulatory requirements. For example, situations involving litigation, investigations or governmental requests. We will retain your personal data only for as long as necessary to comply with these legal obligations and will take appropriate measures to ensure its security and confidentiality during this period.
5. When and to whom may we share your personal data?
We strive to limit the instances in which we share your personal data with third parties. For example, we may only share your personal data in two situations:
- when such transfer is necessary due to legal processes
In particular, we transfer your personal data to the competent authorities in cases where we are required to provide it by law and/or in the event of a legal process. Among other things, we may also transfer your personal data to our legal successors in the event of a merger, acquisition, or other business transaction.
- when such transfer is necessary to fulfil the purposes of personal data processing
In some cases, the purpose of processing personal data cannot be achieved by Storly, in such cases we transfer your personal data to our partners. We take a responsible approach to choosing the partners to whom we share your personal data and transfer personal data only to those companies that guarantee proper protection of personal data from unauthorized access, disclosure or misuse. In addition, we conclude data processing agreements with each partner in order to legally consolidate their obligations to process personal data in accordance with applicable laws and regulations on personal data protection.
Please keep in mind that although we make every reasonable effort to carefully select partners, we cannot guarantee that their actions will always comply with personal data protection legislation. We recommend that you review the privacy policies of these third parties to understand how they handle your personal data.
We may involve the following third parties in the processing of personal data:
| a. Third parties that support marketing | |
| We may involve third parties to help us set up ads. These third parties collect the personal data about your interaction on the Platform, as well as on other services and websites in order to show you ads that will match your interests | Companies that we engage from time to time to provide advertising services |
| b. Third parties that collect and process data for analytical purposes | |
| Our main goal is to make our Platform the most convenient and useful for you. To do this, we constantly analyze which features are useful and convenient, and which require improvement. For these purposes, we involve third parties, they help us collect, accumulate and summarize the necessary personal data | Google Analytics is a web analytics service provided by Google, Inc. Privacy Help Center, Privacy Policy of Google Inc. |
| Hotjar is a product experience analysis platform that provides behavior analysis and feedback data to help us empathize and understand our users provided by Hotjar Ltd. Privacy Policy of Hotjar Ltd. | |
| c. Third parties that provide us with storage servers | |
| We take responsibility for the storage of your personal data and store your personal data only with trusted hosting providers. Please keep in mind that the servers where your personal data is stored are located in the European Union (Germany) | Hetzner is the broadly adopted cloud, offering over services from data centers provided by Hetzner Online GmbH. Privacy Policy of Hetzner Online GmbH. |
| d. Third parties that provide us payment services | |
| When making payments on the Platform, you may be required to provide Payment Data. When you make payments using third-party services, such processing is subject to the privacy policy of third-party payment systems | PayPal is service which allows users to pay in any way they prefer, including through credit cards, bank accounts provided by PayPal Inc. Privacy Policy of PayPal Inc. |
| Wise is an online money sending and receiving service. Privacy Policy of Wise | |
| Revolut is a global financial technology banking service provided by Revolut Ltd. Privacy Policy of Revolut Ltd. | |
6. How we process cookies?
Cookies are small files that we use to improve the quality of the Platform. They are stored on the browser of your computer or mobile device. We use cookies in order to facilitate the operation of the web browser, gain insight into user behavior and personalize interaction in the field of marketing and sales.
In total, a large number of cookies are allocated, but they are mainly divided into two groups: (a) necessary cookies and (b) additional cookies.
We use such types of cookies:
a. Necessary
These cookies do not gather any personal information and are usually set automatically by the website. They enable basic functions like page navigation, user authentication, and access to secure areas of the website. Disabling these cookies may adversely impact your ability to utilize basic services.
b. Analytical
Analytical cookies help us understand how users interact with our platform, for example, at what time the Platform is most often used, which pages users visit, the paths that users take on the Platform, and others. This data is also anonymous and is used for statistical purposes.
c. Functional
Functional cookies allow you to navigate our Platform and make full use of its features. Functional cookies process technical personal data and personal usage data.
d. Advertising
Advertising cookies are used to deliver tailored ads to Platform users based on their browsing habits and interests. They are specifically designed to gather information from you on your device to display advertisements to you based on relevant topics that interest you.
We process such cookies for the following purposes:
| Cookie | Description | Duration |
| [•] | [•] | [•] |
Below we have described how you can control your cookie settings:
a. Remove cookies from your device
In order to delete all cookies from your device, you need to follow these steps:
- go to the browser settings on the device;
- clear history, including advanced settings.
Please note that clearing your history in this way will result in the loss of your preferences on other sites, including your saved login preferences and passwords, as well as other personalized website settings.
b. Customize cookies settings on our Platform
You can configure your cookie processing preferences in the pop-up cookie banner when opening the Platform’s web page or in your browser settings.
c. Block cookies
Almost all browsers allow users to block the processing of cookies on all websites. However, a complete block will block, among other things, the processing of necessary cookies, which may lead to incorrect operation of the Platform and other websites.
To disable cookies, each browser has its own set of controls available. Please refer to your browser’s help menu for further instructions:
7. What rights do you have and how can you exercise them?
| Right of access | You have the right to obtain a copy of your personal data that we hold, and any additional information |
| How you can exercise this right? To exercise this right, please contact us at the e-mail indicated above. Our actions: we will provide you with a copy of the personal data we process (including those personal data that we have obtained from third parties or collected automatically when using the Platform) in the form in which you have requested the provision of this information. Please note that in some cases we may charge you a reasonable fee for providing this information. | |
| Right to rectification | You may request the correction of personal data that is no longer relevant and is inaccurate, but is processed by us |
| How to exercise this right? To rectify your personal data, follow these steps: log in to your account on the Platform open a personal profile on the Platform locate the information you wish to correct and edit it save the changes to update your data instantly OR to exercise this right, contact us at e-mail indicated above. What will we do to realize your right? We will correct your inaccurate or incomplete personal data without undue delay. | |
| Right to erasure | If certain conditions under the GDPR are met, you have the right to have your data erased (or, as we all know, the “right to be forgotten”) |
| How to exercise this right? To exercise this right, please follow these steps: log in to your account on the Platform open a personal profile on the Platform click “Delete Account” option OR to exercise this right, contact us at e-mail indicated above. What will we do to realize your right? If there is no other legal basis for processing your data, we will promptly delete it. | |
| Right to restrict processing | Under specific conditions, such as when the accuracy of your data is contested, when the processing is unlawful, when we no longer need the data, or when you have objected to the processing, you can request the restriction of processing your personal data |
| How to exercise this right? To exercise this right, please contact us at the e-mail indicated above. What will we do to realize your right? We will not process your data (except for storage) unless it is based on the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. | |
| Right to data portability | You have the right to request from us a copy of the personal data we process in a format that is structured, commonly used, and readable by machines if it is technically possible to do so. This right applies when we process your information with your consent or based on a contract. You may also request that we transfer this personal data to another controller. |
| How to exercise this right? To exercise this right, please contact us at the e-mail indicated above. What will we do to realize your right? To uphold your right, we will transfer your personal data to another data controller in a structured, commonly used and machine-readable format, provided that it is technically feasible. | |
| Right to object | If we process your personal data based on legitimate or public interests, you have the right to object to such processing if it conflicts with your specific situation |
| How to exercise this right? To exercise this right, please contact us at the e-mail indicated above. What will we do to realize your right? To ensure your right, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. | |
| Right to withdraw consent | If you have given explicit consent for the processing of your personal data, you have the right to withdraw your consent at any time |
| How to exercise this right? To exercise this right, please follow these steps: − if you wish to withdraw your consent to receive e-mail newsletters, you can do so by clicking on the unsubscribe button in the e-mail you receive OR − contact us at the e-mail indicated above. What will we do to realize your right? To uphold your right, if we do not have any other legal basis for processing your personal data, we will stop processing it once we receive your request to withdraw consent. | |
| Right to lodge a complaint | If you believe that our processing of your personal data violates applicable legislation, you have the right to lodge a complaint with a supervisory authority |
8. Other details regarding the processing of personal data
- Changes to this Privacy Policy
Please be aware that this Privacy Policy may be amended from time to time if our internal processes for processing personal data change or as required by law. We would therefore highly recommend that you check this page regularly to keep up to date with the changes we make. However, if we make major changes to our Privacy Policy and will need your explicit consent for further processing of your personal data, we will request your consent or your renewed consent (in case it was obtained previously).
- Keeping your personal data secure
We have appropriate security measures set in place to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to know it and in relation to our purposes to collect, store, use, and share your personal data listed above. Those processing your information will do so only in an authorized manner and are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
- Third-party links
Note that our privacy policy contains links to other websites that are beyond our control. By clicking on the link, you can get to a website that is administered by another person or company, so we strongly advise you to carefully read the privacy policy of each website that you visit. Please note that we are not responsible for the content, privacy policies, or actions of third-party websites or platforms.
- Children’s personal data
Our Platform as not intended for anyone under the age of 16 and we do not knowingly collect or process personal data from anyone under the age of 16. If you are under 16 years of age, please do not share your personal data with us. If you suspect that we possess any personal data about or from someone under the age of 16, please reach out to us through the contact information provided.
In the event that we become aware that the personal data provided relates to a person under the age of 16, we will delete it immediately.