Privacy policy

Privacy Policy

The following Privacy Policy defines the rules for storing and accessing data on the Users’ Devices using the Service for the purpose of providing electronic services by the Administrator, as well as the rules for collecting and processing Users’ personal data provided by them personally and voluntarily through the tools available in the Service.

This Privacy Policy is an integral part of the Terms of Service, which sets out the rules, rights, and obligations of Users using the Service.

§1 Definitions

      • Service – the “SALESOPSCRM.COM” website operating at https://salesopscrm.com

      • External Service – websites of partners, service providers, or clients cooperating with the Administrator

      • Service / Data Administrator – the administrator of the Service and of the Data (hereinafter referred to as the “Administrator”) is the company “RRUP LTD” operating at: ul. Św. Andrzeja Boboli 24, 15-649 Białystok, Poland, with tax identification number (NIP): 5423451043, KRS number: 0000978166, providing electronic services through the Service

      • User – a natural person for whom the Administrator provides electronic services via the Service

      • Device – an electronic device with software through which the User accesses the Service

      • Cookies – text data collected in the form of files placed on the User’s Device

      • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

      • Personal Data – means information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person

      • Processing – means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

      • Restriction of processing – means the marking of stored personal data with the aim of limiting their processing in the future

      • Profiling – means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements

      • Consent – the data subject’s consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them

      • Personal data breach – means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored or otherwise processed

      • Pseudonymization – means the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person

      • Anonymization – anonymization of data is an irreversible process of performing operations on data that destroys or overwrites “personal data,” making it impossible to identify or associate a given record with a specific user or natural person

§2 Data Protection Officer

Based on Article 37 of the GDPR, the Administrator has not appointed a Data Protection Officer.

In matters concerning data processing, including personal data, Users should contact the Administrator directly.

§3 Types of Cookies

  • Internal Cookies – files placed and read from the User’s Device by the Website’s IT system.

  • External Cookies – files placed and read from the User’s Device by the IT systems of external Services. Scripts from external Services that may place Cookies on User’s Devices have been intentionally placed on the Website through scripts and services provided and installed on the Website.

  • Session Cookies – files placed and read from the User’s Device by the Website during a single session of a given Device. After the session ends, the files are deleted from the User’s Device.

  • Persistent Cookies – files placed and read from the User’s Device by the Website until they are manually deleted. These files are not deleted automatically after the Device session ends, unless the User’s Device is configured to delete Cookies after the Device session ends.

§4 Data storage security

    • Mechanisms for storing and reading Cookies – The mechanisms for storing, reading, and exchanging data between Cookies saved on the User’s Device and the Service are implemented through built-in browser functions. They do not allow retrieval of other data from the User’s Device or data from other websites visited by the User, including personal or confidential information. Transferring viruses, trojans, or other malware to the User’s Device through this mechanism is virtually impossible.

    • Internal Cookies – The Cookies used by the Administrator are safe for Users’ Devices and do not contain scripts, content, or information that could threaten the security of personal data or the security of the Device used by the User.

    • External Cookies – The Administrator takes all reasonable measures to verify and select service partners with regard to User safety. The Administrator cooperates only with well-known and trusted global partners. However, the Administrator does not have full control over the contents of Cookies originating from external partners. To the extent permitted by law, the Administrator is not responsible for the security of those Cookies, their contents, or their use in accordance with licensing terms by scripts installed in the Service that originate from External Services. A list of such partners is included later in this Privacy Policy.

    • Cookie Management

    • User-side risks – The Administrator applies all possible technical measures to ensure the security of data stored in Cookies. However, it should be noted that the security of such data depends on both parties, including the User’s actions. The Administrator is not responsible for the interception of this data, impersonation of the User’s session, or its deletion as a result of the User’s intentional or unintentional actions, viruses, trojans, or other spyware that may have infected or currently infect the User’s Device. To mitigate these risks, Users should follow recommended best practices for safe internet use.

    • Storage of personal data – The Administrator ensures that all reasonable efforts are made to keep personal data voluntarily provided by Users safe, with access restricted and used only for the intended purposes and processing objectives. The Administrator also ensures appropriate physical and organizational security measures are in place to protect the data from loss.

§5 Purposes of Cookie Usage

  • To streamline and facilitate access to the Service
  • To personalize the Service for Users
  • Marketing and remarketing in external services
  • Compiling statistics (e.g., users, visit counts, device types, internet connections, etc.)
  • Delivering multimedia services
  • Providing social networking features

§6 Purposes of Personal Data Processing

Personal data voluntarily provided by Users is processed for one of the following purposes:

  • Provision of electronic services:
    • Services enabling the sharing of content from the Service on social networks or other websites
  • Communication between the Administrator and Users regarding matters related to the Service and data protection
  • Safeguarding the Administrator’s legitimate interests

Data about Users collected automatically and anonymously is processed for one of the following purposes:

  • Generating statistics
  • Remarketing
  • Safeguarding the Administrator’s legitimate interests

§7 External Service Cookies

The Administrator uses JavaScript scripts and web components from partners that may place their own cookies on the User’s Device. Remember that you can control which cookies are allowed for each website via your browser settings. Below is a list of partners or services implemented in the Service that may place cookies:

Services provided by third parties are beyond the Administrator’s control. These entities may change their terms of service, privacy policies, data processing purposes, or cookie usage practices at any time.

§8 Types of Collected Data

The Service collects data about Users. Some of the data is collected automatically and anonymously, while other data consists of personal information voluntarily provided by Users when signing up for specific services offered by the Service.

Anonymous data collected automatically:

  • IP address
  • Browser type
  • Screen resolution
  • Approximate location
  • Visited subpages of the service
  • Time spent on specific subpages
  • Operating system type
  • Previous subpage address
  • Referring page address
  • Browser language
  • Internet connection speed
  • Internet service provider

Data collected during registration:

  • Email address
  • IP address (collected automatically)

Data collected during Newsletter subscription:

  • First name / last name / nickname
  • Email address
  • IP address (collected automatically)

Some data (without identifying information) may be stored in cookies. Some data (without identifying information) may be transferred to a statistics service provider.

§9 Access to Personal Data by Third Parties

As a rule, the only recipient of personal data provided by Users is the Administrator. Data collected as part of the provided services is not transferred or sold to third parties.

Access to data (typically under a Data Processing Agreement) may be granted to entities responsible for maintaining infrastructure and services necessary for operating the Service, such as:

  • Hosting providers offering hosting or related services to the Administrator

Data Processing Entrustment – Hosting, VPS, or Dedicated Server Services

To operate the Service, the Administrator uses services provided by an external hosting, VPS, or dedicated server provider – OVH sp. z o.o.. All data collected and processed within the Service is stored and processed on the provider’s infrastructure located in Poland. Data access may occur in the course of maintenance activities performed by the provider’s personnel. Access to such data is regulated by an agreement between the Administrator and the Service Provider.

§10 Method of Personal Data Processing

Personal data voluntarily provided by Users:

  • Personal data will not be transferred outside the European Union, unless it is published as a result of individual User actions (e.g., posting a comment or an entry), making the data accessible to any visitor of the Service.
  • Personal data will not be used for automated decision-making (profiling).
  • Personal data will not be sold to third parties.

Anonymous data (non-personal data) collected automatically:

  • Anonymous data will be transferred outside the European Union.
  • Anonymous data will not be used for automated decision-making (profiling).
  • Anonymous data will not be sold to third parties.

§11 Legal Basis for Personal Data Processing

The Service collects and processes User data based on:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR):
    • Art. 6(1)(a)
      the data subject has given consent to the processing of their personal data for one or more specific purposes
    • Art. 6(1)(b)
      processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract
    • Art. 6(1)(f)
      processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
  • The Personal Data Protection Act of 10 May 2018 (Journal of Laws 2018, item 1000)
  • The Telecommunications Law Act of 16 July 2004 (Journal of Laws 2004, No. 171, item 1800)
  • The Act on Copyright and Related Rights of 4 February 1994 (Journal of Laws 1994, No. 24, item 83)

§12 Duration of Personal Data Processing

Personal data voluntarily provided by Users:

As a rule, the indicated personal data is stored only for the duration of the provision of services within the Service by the Administrator. It is deleted or anonymized within 30 days after the end of service provision (e.g., deletion of a registered user account, unsubscribing from the Newsletter, etc.).

An exception is a situation requiring the retention of such data to safeguard the legally justified purposes of further processing by the Administrator. In such cases, the Administrator may retain the specified data, from the time the User requests its deletion, for no longer than 3 years in the event of a breach or suspected breach of the Service’s terms and conditions by the User.

Anonymous data (non-personal data) collected automatically:

Anonymous statistical data, which does not constitute personal data, is retained by the Administrator indefinitely for the purpose of service statistics.

§13 Users’ Rights Related to Personal Data Processing

The Service collects and processes User data based on the following rights:

  • Right of access to personal data
    Users have the right to access their personal data, exercised upon request submitted to the Administrator.

  • Right to rectification of personal data
    Users have the right to request that the Administrator promptly correct any inaccurate personal data and/or complete any incomplete personal data, exercised upon request submitted to the Administrator.

  • Right to erasure of personal data
    Users have the right to request that the Administrator promptly delete their personal data, exercised upon request submitted to the Administrator.
    For user accounts, data deletion consists of anonymizing information that could identify the User.
    The Administrator reserves the right to delay deletion to protect its legitimate interests (e.g., in cases where the User has violated the Terms of Service or the data was obtained through correspondence).
    For the Newsletter service, Users may delete their personal data independently via a link included in every email message.

  • Right to restriction of personal data processing
    Users have the right to restrict processing of their personal data in the cases described in Article 18 of the GDPR, e.g., when contesting the accuracy of data, exercised upon request submitted to the Administrator.

  • Right to data portability
    Users have the right to receive from the Administrator their personal data in a structured, commonly used, machine-readable format, exercised upon request submitted to the Administrator.

  • Right to object to personal data processing
    Users have the right to object to the processing of their personal data in the cases specified in Article 21 of the GDPR, exercised upon request submitted to the Administrator.

  • Right to lodge a complaint
    Users have the right to lodge a complaint with the supervisory authority responsible for data protection.

§14 Contacting the Administrator

Z Administratorem można skontaktować się w jeden z poniższych sposobów

  • You can contact the Administrator through one of the following methods:

    • Postal address: RRUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. ŚW. ANDRZEJA BOBOLI 24, 15-649 BIAŁYSTOK

    • Email address: [email protected]

    • Phone number: +48 574 422 173

    • Contact form: available at /contact

§15 Service Requirements

  • Limiting the ability to store and access Cookies on the User’s Device may cause some functions of the Service to malfunction.

    The Administrator is not responsible for any features of the Service that do not work correctly due to the User restricting the ability to store and read Cookie files in any way.

§16 External Links

The Service—particularly in articles, posts, entries, or User comments—may contain links to external websites not affiliated with the Service Owner. These links and the sites or files they lead to may be unsafe for your Device or pose a threat to the security of your data. The Administrator is not responsible for any content outside the Service.

§17 Changes to the Privacy Policy

  • The Administrator reserves the right to modify this Privacy Policy at any time without notifying Users regarding the use and processing of anonymous data or the use of Cookie files.

  • The Administrator also reserves the right to modify this Privacy Policy in relation to the processing of Personal Data. In such cases, Users with an account or subscribed to the newsletter will be notified by email within 7 days of the policy changes. Continued use of the Service will be deemed as acceptance of the amended Privacy Policy. If a User does not agree to the changes, they are obligated to delete their account or unsubscribe from the Newsletter.

  • All changes to the Privacy Policy will be published on this subpage of the Service.

  • The changes take effect upon their publication.