1. General Provisions

  1. This Privacy Policy defines the rules for processing and protecting personal data provided by Users in connection with their use of the website available at iqfm.pl (hereinafter: the “Service”).
  2. The controller of personal data collected via the Service is IQFM Sp. z o.o. with its registered office in Warsaw (02-724), ul. Wołodyjowskiego 46, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register, under KRS number 0000211059, NIP 525-230-40-09 (hereinafter: the “Controller”).
  3. To protect the security of the data entrusted to us, we have developed internal procedures and recommendations designed to prevent data from being disclosed to unauthorised persons. We monitor their implementation and regularly verify their compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (GDPR).
  4. Personal data is processed to the extent and for the purposes necessary to enter into, define the terms of, amend or terminate an agreement and to properly provide the services offered by the Controller.

2. Purposes and Legal Bases for Data Processing

The Controller processes Users’ personal data for the following purposes:

  1. Handling enquiries or contact - when an enquiry is submitted via the contact form, by e-mail or by telephone (legal basis: Article 6(1)(b) GDPR - taking steps at the request of the data subject prior to entering into a contract, or Article 6(1)(f) GDPR - the Controller’s legitimate interest in handling correspondence).
  2. Performance of field marketing services and business cooperation - for the purpose of performing agreements between clients or partners and IQFM (legal basis: Article 6(1)(b) GDPR).
  3. Traditional Marketing (TM) - sending commercial information and offers and conducting marketing activities by traditional means, such as post, or - where separate, voluntary consent has been given - by telephone or SMS/MMS (legal basis: Article 6(1)(a) GDPR - consent, and Article 172 of the Polish Telecommunications Act regarding the use of telecommunications terminal equipment).
  4. Digital Marketing (DM) - sending personalised commercial information, newsletters and offers electronically, for example by e-mail, and conducting advertising activities tailored to the User’s profile in digital channels, including retargeting and behavioural advertising (legal basis: Article 6(1)(a) GDPR - consent, and Article 10 of the Polish Act on the Provision of Services by Electronic Means).
  5. Traffic analysis and Service statistics (cookies) - to improve website performance, optimise content and analyse user behaviour (legal basis: Article 6(1)(a) GDPR - the User’s consent expressed through the cookie banner).

3. Recipients of Personal Data

  1. Users’ personal data may be transferred to entities cooperating with the Controller under data-processing agreements, such as hosting providers, IT service providers, mailing-system providers and analytics or marketing-tool providers, solely to the extent necessary to achieve the purposes specified in this Policy.
  2. The Controller does not sell or disclose Users’ personal data to third parties for commercial purposes without their explicit consent.

4. Rights of Data Subjects

Under the GDPR, every data subject has the right to:

  1. access their data and receive a copy of it;
  2. have their data rectified or corrected;
  3. have their data erased (the “right to be forgotten”) in the circumstances provided for by law;
  4. restrict the processing of their data;
  5. object to the processing of their data, including processing for direct-marketing purposes;
  6. data portability;
  7. withdraw consent at any time, including consent to Traditional Marketing, Digital Marketing or cookies, without affecting the lawfulness of processing based on consent before its withdrawal;
  8. lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (UODO) - if they believe that the processing of their data infringes the GDPR.

5. Contacting the Controller

For matters concerning personal-data protection and the exercise of your rights, including withdrawal of consent to traditional or digital marketing, you may contact the Controller using the following details:

  • E-mail: piotr.witkowski@iqfm.pl
  • Phone: +48 511 880 319
  • Correspondence address: IQFM Sp. z o.o., ul. Wołodyjowskiego 46, 02-724 Warszawa, Poland