Your personal data is processed in accordance with the regulations on personal data protection, including the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter “GDPR”).

The data controller of your personal data is Weboost Spółka z ograniczoną odpowiedzialnością, with its registered office in Gdańsk (80-309), Aleja Grunwaldzka 415, Poland, KRS number 0000574940, NIP 5833185345, REGON 36247570200000, email: [email protected].

The Administrator processes the User’s personal data for the purpose of concluding and performing a service agreement. The legal basis for processing this purpose is Article 6(1)(b) of the GDPR (data processing is necessary for the conclusion and performance of the agreement based on the accepted terms of service). The data is processed for the entire duration of these services, until the agreement for electronic services is terminated in accordance with the provisions of the accepted terms.

Additionally, the Administrator processes the User’s personal data for the following purposes:

1. 1. Communication with the User – Art. 6(1)(f) GDPR;
2. 2. Financial reporting, monitoring transactions to prevent fraud, money laundering, and terrorist financing, fulfilling tax obligations, and archiving data – Art. 6(1)(c) GDPR;
3. 3. Handling administrative processes, such as processing/settling payments, accounting, verification, fraud prevention, and other security, legal, and regulatory purposes – Art. 6(1)(c) GDPR;
4. 4. Testing, maintenance, configuration, and protection of the www.tipsly.com website – Art. 6(1)(f) GDPR;
5. 5. The legitimate interest of the Administrator in asserting or defending claims – Art. 6(1)(f) GDPR;
6. 6. Marketing of the Administrator’s products and services, as well as those of its partners, in accordance with the terms of service of www.tipsly.com, unless the User objects to the processing of their personal data for this purpose – Art. 6(1)(f) GDPR.

The User may object to the processing by sending a written notice to the Administrator’s address indicated in this clause or by contacting the Data Protection Officer via email at [email protected].

Some personal data (Art. 6(1)(f) GDPR) will be processed for the period necessary to pursue the legitimate interest of direct marketing, claims assertion, or defense against claims, but no longer than until the expiration of the limitation period for any related claims.

If personal data is processed solely based on consent for marketing communication (Art. 6(1)(a) and (f) GDPR), the data will be processed for as long as the consent remains valid, which can be withdrawn or limited at any time. To do so, the data subject should submit a statement of consent withdrawal to the Administrator’s address or via email at [email protected].

In connection with the processing of your personal data by the Administrator, you are entitled to:

• The right to request access to the content of your data;
• The right to rectify and correct your data;
• The right to delete your data (“right to be forgotten”);
• The right to restrict the processing of your data;
• The right to data portability;
• The right to object to the processing of your data;
• The right to lodge a complaint with a supervisory authority.