Chatliker - Privacy policy

Chatliker privacy policy

1. General provisions

The controller of personal data within the meaning of Article 4(4) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter GDPR) is APPLINEL Sp. z o.o. with its registered office in Warsaw at Al. Jana Pawła II 27, 00-867 Warsaw, NIP: 5272988749, REGON: 521203168, entered in the Register of Entrepreneurs of the National Court Register under KRS no.: 0000952285, registration court: District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register, share capital: PLN 5,000.00.
E-mail address of the Data Controller: info@chatliker.com.
The controller shall, in accordance with Article 32(1) of the GDPR, respect the principle of personal data protection and shall take appropriate technical and organisational measures to prevent accidental or unlawful destruction, loss, modification, unauthorised disclosure of or unauthorised access to personal data processed in connection with its activities.
The provision of personal data by the user is voluntary.
The extent of the data processed by the controller shall in any case remain adequate in relation to the purpose for which the data was collected.
The mobile app, with the user's consent, can access the following permissions on the mobile device, among others:
1. technical data,
2. device location data,
3. access to the camera,
4. access to the photo gallery,
5. display of notifications.

2. Purpose and grounds for processing personal data

The controller processes personal data for the following purposes:

the provision of electronic services through the Application, on the basis of the agreement concluded (Article 6(1)(b) GDPR);
the handling of the complaints process, on the basis of an obligation incumbent on the controller in connection with the applicable legislation (Article 6(1)(c) GDPR);
archiving of data for possible establishment, investigation or defence against claims, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR);
contacting users, in particular in response to queries addressed to the controller, which is a legitimate interest of the controller (Article 6(1)(f) of the GDPR);
sending you technical information on the functioning of the Application and the services you use, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR).

3. Recipients of data. Transfer of data to third countries

The recipients of the personal data processed by the controller may be subcontractors - entities whose services are used by the controller for data processing, e.g. hosting providers, Application maintainers.
Personal data in connection with the controller's use of analytics and tracking tools may be transferred to an entity based outside the European Economic Area, such as Google LLC. As an appropriate data protection measure, the controller has agreed to standard contractual clauses in accordance with Article 46 GDPR with the providers of these services. More information is available here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en.

4. Period of retention of personal data

The Data Controller shall store your personal data for the duration of your use of the Application, i.e. until uninstallation time on a mobile device).

5. Rights of the data subject

Every data subject has the right to:
1. access - to obtain confirmation from the controller as to whether or not his or her personal data are being processed. If data about a person is processed, he or she is entitled to access and obtain the following information: the purposes of the processing, the categories of personal data, information about the recipients or categories of recipients to whom the data have been or will be disclosed, the duration of data retention or the criteria for determining it, the data subject's right to request rectification, erasure or restriction of the processing of personal data and to object to such processing (Article 15 GDPR);
2. obtain a copy of the data - to obtain a copy of the data being processed, the first copy being free of charge and for subsequent copies the controller may charge a reasonable fee based on administrative costs (Article 15(3) GDPR);
3. rectify - to request the rectification of personal data concerning him/her which is inaccurate or the completion of incomplete data (Article 16 GDPR);
4. erasure - to request the erasure of her personal data where the controller no longer has a legal basis for the processing or the data are no longer necessary for the purposes of the processing (Article 17 GDPR);
5. restrict processing - request the restriction of processing of personal data (Article 18 GDPR) when:
  - the data subject questions the accuracy of the personal data, for a period allowing the controller to verify the accuracy of the data,
  - the processing is unlawful and the data subject objects to the erasure by requesting a restriction of use,
  - the controller no longer needs the data, but they are needed by the data subject to establish, assert or defend a claim,
  - the data subject has objected to the processing - until it is established whether the legitimate grounds on the part of the controller override the grounds of the data subject's objection;
6. data portability - to receive in a structured, commonly used, machine-readable format the personal data concerning him or her which he or she has provided to the controller, and to request that these data be sent to another controller where the data are processed on the basis of the data subject's consent or a contract with him or her and where the data are processed by automated means (Article 20 GDPR);
7. object - to object to the processing of his/her personal data for the legitimate purposes of the controller on grounds relating to his/her particular situation, including profiling. The controller shall then assess the existence of valid legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of claims. If, according to the assessment, the interests of the data subject outweigh the interests of the controller, the controller will be obliged to cease processing for these purposes (Article 21 GDPR).
In order to exercise the aforementioned rights, the data subject should contact, using the contact details provided, the controller and inform him/her of which right and to what extent he/she wishes to exercise it.
The data subject has the right to lodge a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection in Warsaw.

6. Automatic data processing. Profiling

The Controller may process your data, including data about the frequency of your use of the Application, the features you use and information about the nature and content of the entries you add to the Application.
The Controller processes the data referred to in paragraph 1 in order to improve the Application and also to target the user with content in line with the user's preferences.
The User who does not agree with the processing of his/her data in the manner set out in Paragraph 1 may object to the automatic processing which may, however, result in inability to use the Application.

7. Google Analytics

The Controller uses Google Analytics, an analytics service provided by Google Inc. based in the USA.
Google Analytics uses mechanisms to analyse your use of the Application. The information on the use of the Application is transmitted and stored on Google's server. At the request of the Controller, Google will use this information to analyse the use of the Application by users in order to prepare reports on activity on the Application and to provide other services related to the use of the Application.
Data will not be used to identify any individual.