Using the website https://cryptive.eu signifies acceptance of the following Privacy Policy and Cookie Policy terms.
As a User, familiarize yourself with its provisions. The table of contents below will assist you in this. It informs you about how I take care of User data, how I process it, who I entrust it to, and many other important issues related to personal data.
§3 Personal Data and Principles of Processing
This Privacy Policy and Cookie Policy defines the principles of processing and protecting personal data provided by Users, as well as Cookies and other technologies appearing on the website https://cryptive.eu.
The administrator of the website and the personal data provided within its framework is Krzysztof Osiński conducting business under the name Cryptive Krzysztof Osiński, Tax Identification Number (NIP): 5252853667, National Business Registry Number (REGON): 388285358, in accordance with the document generated from the Central Register and Information on Economic Activity system.
I take care of the security of your personal data and your privacy as a User of the Website. I’m glad you visited my Website.
If you have any doubts regarding the provisions of this Privacy Policy and Cookie Policy, please contact the Administrator at the following e-mail address: connect@cryptive.eu.
The Administrator reserves the right to make changes to the privacy policy, and every User of the website is obliged to be familiar with the current privacy policy. Reasons for changes may include the development of internet technology, changes in the applicable law, or the development of the Website through, for example, the Administrator’s use of new tools. The date of publication of the current Privacy Policy is located at the bottom of the page.
Administrator – Krzysztof Osiński conducting business under the name Cryptive Krzysztof Osiński, Tax Identification Number (NIP): 5252853667, National Business Registry Number (REGON): 388285358.
User – any entity present on the website and using it.
Website – a website located at https://cryptive.eu/.
Form or Forms – places on the Website that allow the User to enter personal data for specified purposes, e.g., to contact the User.
GDPR – General Data Protection Regulation, meaning Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Personal Data Protection Act – Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000, as amended).
Act on the provision of electronic services – Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2020, item 344, as amended).
Telecommunications Law – Act of 16 July 2004 Telecommunications Law (Journal of Laws of 2021, item 576, as amended).
Who is the administrator of your personal data?
The administrator of the User’s personal data is Krzysztof Osiński conducting business under the name Cryptive Krzysztof Osiński, Tax Identification Number (NIP): 5252853667, National Business Registry Number (REGON): 388285358.
The Administrator co-administers with social media platform providers, such as LinkedIn, Facebook, etc., as specified in this document, in terms of data of individuals using social media and following the Administrator’s profile on a given social media platform, as well as interacting with the Administrator. The co-administration principles are indicated below for each social media platform where the Administrator has a profile.
Is providing data voluntary? What are the consequences of not providing it?
Providing data is voluntary, however, not providing certain information, generally indicated on the Administrator’s pages as mandatory, will result in the inability to perform a specific service, achieve a particular goal, or take specific actions.
When the User provides data that is not mandatory or an excess of data that the Administrator does not need to process, it is based on the User’s own decision, and in such cases, processing is carried out on the basis of the provision in Article 6(1)(a) of the GDPR (consent). The User consents to the processing of this data and to anonymizing data that the Administrator does not require or wish to process, yet the User has provided them to the Administrator.
For what purposes and on what legal grounds do we process your personal data provided while using the website?
The User’s personal data on the Administrator’s Website may be processed for the following purposes and on the following legal grounds:
The User’s provision of data that is not mandatory or an excess of data that the Administrator does not need to process is based on the User’s own decision. In such cases, the processing is carried out on the basis of the provision in Article 6(1)(a) of the GDPR (consent). The User gives consent to the processing of this data and to the anonymization of data that the Administrator does not require or wish to process, yet the User has provided them to the Administrator.
How are the data collected?
Only the data provided by the user are collected and processed, with exceptions in certain situations where data is automatically collected through cookies and login data, as described below.
During a visit to the website, data concerning the visit itself is automatically collected, such as the user’s IP address, domain name, browser type, operating system type, etc. (login data). Automatically collected data may be used for analyzing user behavior on the website, gathering demographic information about users, or personalizing the content of the site to improve it. However, these data are processed exclusively for website administration purposes, ensuring smooth hosting services, directing marketing content, and are not associated with individual user data. More about cookies can be found in the later part of this policy.
Data may also be collected for the purpose of filling out forms located on the Website, as described in the later part of the privacy policy.
What are the user’s rights?
The user has at any time the rights outlined in Articles 15-21 of the GDPR, namely:
The Administrator notes that these rights are not absolute and do not apply to all activities related to the processing of the User’s personal data. This includes, for example, the right to obtain a copy of the data. This right cannot adversely affect the rights and freedoms of other individuals, such as copyright or professional secrecy. For limitations on User rights, please refer to the GDPR.
However, the User always has the right to lodge a complaint with the supervisory authority.
To exercise their rights, the User may contact the Administrator via email at: connect@cryptive.eu or by mail to the address of the Administrator’s place of business, if provided in this privacy policy, specifying the scope of their requests. A response will be provided no later than 30 days from the date of receipt of the request and its justification, unless an extension of this period is justified in accordance with the GDPR.
Can the user withdraw their consent?
If the User has given consent for a specific action, such consent can be withdrawn at any time. This will result in the removal of their email address from the Administrator’s mailing list and the cessation of the specified actions (in the case of subscription based on consent). The withdrawal of consent does not affect the processing of data that was carried out based on the consent before it was withdrawn.
In some cases, data may not be completely deleted and will be retained for the purpose of defense against potential claims for a period consistent with the provisions of the Civil Code or, for example, to fulfill legal obligations imposed on the Administrator.
Each time, the Administrator will address the User’s request, providing appropriate justification for further actions in accordance with legal obligations.
Do we transfer user data to third countries?
User data may be transferred outside the European Union – to third countries.
Due to the fact that the Administrator uses external providers of various services, e.g., Meta Platforms Ireland Limited (Facebook and its subsidiaries), hereinafter referred to as Meta or Facebook, Google, Microsoft, etc., User data may be transferred to the United States of America (USA) in connection with their storage on U.S. servers (in whole or in part). Google and Facebook employ compliance mechanisms provided for by the GDPR (such as certificates) or standard contractual clauses with regard to their services. They will only be transferred to recipients who guarantee the highest level of data protection and security, including through:
or to the transfer of personal data to which the User has given consent.
Detailed information is available in the privacy policy of each of these service providers, accessible on their respective websites. For example:
Currently, services offered by Google Ireland Limited and Meta Platforms Ireland Limited are primarily provided by entities located in the European Union. However, it is advisable to review the privacy policies of these providers each time in order to obtain the most up-to-date information regarding the protection of personal data.
How long do we retain user data?
The User’s data will be stored by the Administrator for the duration of providing individual services/achieving the goals specified in the table above, as well as:
The data retention periods specified in years are calculated at the end of each year in which the data processing commenced. This is aimed at streamlining the data processing and management process.
Detailed data processing periods concerning individual processing activities are available in the Administrator’s register of processing activities.
Links Redirecting to Other Pages
On the Website, there may be links redirecting to other websites. They will open in a new browser window or in the same window. The Administrator is not responsible for the content provided by these pages. The User is obliged to familiarize themselves with the privacy policy or terms of use of these websites.
Activity on Social Media – LinkedIn
The Administrator manages User data on the profile page under the name “Cryptive” available at the URL: https://www.linkedin.com/company/cryptive-eu on the LinkedIn platform (hereinafter referred to as the Profile).
The User’s personal data provided on the Profile will be processed for the purpose of administering and managing the Profile, communicating with the User, engaging in interactions, directing marketing content to the User, and creating a community around the Profile.
The legal basis for processing is the User’s consent and the legitimate interest of the administrator in interacting with Users and Followers of the Profile. The User voluntarily chooses to like/follow the Profile.
The rules governing the Profile are set by the Administrator, however, the rules for using the LinkedIn social media platform are determined by LinkedIn’s terms and policies.
At any time, the User may stop following the Profile. However, the Administrator will not display any content related to the Profile to the User after this action.
The Administrator can view the User’s personal data, such as their first name, last name, or general information that the User publicly shares on their profiles. The processing of other personal data is carried out by the LinkedIn social media platform under its own terms and policies.
The User’s personal data will be processed for the duration of the existence of the Profile, based on the consent expressed by liking/clicking “Follow” on the Profile or engaging in interactions such as leaving a comment or sending a message, as well as for the purpose of the Administrator’s legitimate interests, such as marketing their own products or services, or defending against claims.
The User’s personal data may be disclosed to other recipients, such as LinkedIn collaborating advertising agencies or other subcontractors supporting the Administrator’s Profile, IT service providers, virtual assistants, in case of contact outside the LinkedIn platform.
Other rights of the User are described in this Privacy Policy.
The User’s data may be transferred to third countries in accordance with LinkedIn’s terms and policies.
This data may also be profiled to better personalize the advertising offer directed to the User. However, they will not be processed in an automated manner within the meaning of the GDPR (with a negative impact on the rights and freedoms of the User).
Activity on Social Media – Facebook
The Administrator manages User data on the fan page under the name “Cryptive” available at the URL: https://www.facebook.com/cryptive.eu on the Facebook platform (hereinafter referred to as the Fanpage).
The User’s personal data provided on the Fanpage will be processed for the purpose of administering and managing the Fanpage, communicating with the User, engaging in interactions, directing marketing content to the User, and creating a community around the Fanpage.
The legal basis for processing is the User’s consent and the legitimate interest of the administrator in interacting with Users and Followers of the Fanpage. The User voluntarily chooses to like/follow the Fanpage.
The rules governing the Fanpage are set by the Administrator, however, the rules for using the Facebook social media platform are determined by Facebook’s terms and policies.
At any time, the User may stop following the Fanpage. However, the Administrator will not display any content related to the Fanpage to the User after this action.
The Administrator can view the User’s personal data, such as their first name, last name, or general information that the User publicly shares on their profiles. The processing of other personal data is carried out by the Facebook social media platform under its own terms and policies.
The User’s personal data will be processed for the duration of the existence of the Fanpage, based on the consent expressed by liking/clicking “Follow” on the Fanpage or engaging in interactions such as leaving a comment or sending a message, as well as for the purpose of the Administrator’s legitimate interests, such as marketing their own products or services, or defending against claims.
The User’s personal data may be disclosed to other recipients, such as Facebook, collaborating advertising agencies, or other subcontractors supporting the Administrator’s Fanpage, IT service providers, virtual assistants, in case of contact outside the Facebook platform.
Other rights of the User are described in this Privacy Policy.
The User’s data may be transferred to third countries in accordance with Facebook’s terms and policies.
This data may also be profiled to better personalize the advertising offer directed to the User. However, they will not be processed in an automated manner within the meaning of the GDPR (with a negative impact on the rights and freedoms of the User).
Data Security
The User’s personal data is stored and protected with due diligence, in accordance with the internal procedures implemented by the Administrator. The Administrator processes information about the User using appropriate technical and organizational measures that meet the requirements of the applicable law, in particular the regulations on the protection of personal data. These measures are primarily aimed at securing the personal data of Users against unauthorized access.
In particular, only authorized persons who are obliged to keep this data confidential or entities entrusted with the processing of personal data based on a separate data processing agreement have access to the personal data of Users.
At the same time, the User should exercise due diligence in securing their personal data transmitted over the Internet, in particular, not disclosing their login information to third parties, using antivirus protection, and keeping their software up to date.
Who can be recipients of personal data?
The Administrator informs that they use the services of external entities. Entities entrusted with the processing of personal data (such as courier companies, electronic payment intermediaries, accounting service providers, companies enabling newsletter distribution) ensure the implementation of appropriate measures for the protection and security of personal data required by legal regulations, in particular by the GDPR.
The Administrator informs the User that they entrust the processing of personal data, among others, to the following entities:
Personal data may also be disclosed to other recipients, including authorities such as the tax office, for the purpose of fulfilling legal and tax obligations related to settlements and accounting.
Entities processing personal data, like the Administrator, ensure the maintenance of European standards for personal data protection, including standards set by legal acts and decisions of the European Commission. They apply compliance mechanisms when transferring data outside the EEA, such as standard contractual clauses adopted by the European Commission in Decision 2021/915 of June 4, 2021, on standard contractual clauses between data controllers and processors pursuant to Article 28(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 29(7) of Regulation (EU) 2018/1725.
Have we appointed a Data Protection Officer?
The Personal Data Administrator hereby informs that they have not appointed a Data Protection Officer (DPO) and independently fulfills the obligations related to the processing of personal data.
The User is advised that their personal data may be disclosed to authorized state authorities in connection with proceedings conducted by them, upon their request, and after meeting the criteria confirming the necessity of obtaining this data from the Administrator.
Do we profile user data?
User’s personal data will not be used for automated decision-making that impacts the rights, obligations, or freedoms of the User within the meaning of the GDPR.
As part of the website and tracking technologies, User data may be profiled to better personalize the offers from the company directed to the User (mainly through behavioral advertising). However, this should not have any legal impact on the User’s situation, especially on the terms of agreements they have concluded or intend to conclude. It can only assist in better aligning content and targeted ads with the User’s interests. The information used is anonymous and is not associated with personal data provided by the User, for example, in the purchase process. They result from statistical data such as gender, age, interests, approximate location, and behavior on the Website.
Every User has the right to object to profiling if it would have a negative impact on the User’s rights and obligations.
The Administrator employs the following types of forms within the Website:
After our contact with you has ended, the data may be archived, which is a legitimate interest of the Administrator. The Administrator is unable to specify the exact archiving period, and consequently, the deletion of messages. However, the maximum period will not exceed the statutory limitation periods.
The Administrator may entrust the processing of personal data to third parties without the separate consent of the User (based on a data processing agreement). Data obtained from forms cannot be transferred to third parties.
If the User uses services from external providers such as Google, they should familiarize themselves with their privacy policy, available from these service providers on their websites.
To use the Administrator’s website, you need:
Upon your first visit to the Website, you must give consent to cookies or take other possible actions indicated in the message in order to continue using the Website’s content. Using the Website implies granting consent. If you do not wish to give such consent, please exit the Website. Additionally, you can always change your browser settings to disable or delete cookies. Necessary information can be found in the “help” section of your browser.
Last updated: October 23, 2023.