IdoSell, IdoBooking and IAI websites Privacy Policy

I. General information

1. The controller of personal data is IAI Joint Stock Company with the main office at Aleja Piastów 30 (71-064) Szczecin, +48 91 443 66 00, fax +48 91 443 66 01, office@iai-sa.com, hereinafter: „IAI”.
2. IAI offers IdoSell dedicated to online stores and wholesalers as well as IdoBooking, which is dedicated to facilities wishing to run accommodation booking and term rentals of various items (e.g. cars or boats). Both systems are hereinafter referred to as IdoSell. To manage the content published on the site, improve the contact and understand the needs of our current and potential clients visiting our websites, access to some information requires prior registration and logging. During the registration of the User's account or through business contacts, when we received your personal data in a direct and conscious manner (e.g. handing us a business card, sending e-mail with a question, expressing oral consent), we save the provided data in our contact database, hereinafter referred to as CRM. This Privacy Policy governs the collection of information during business contacts and access to the company website.
3. Acceptance of this Privacy Policy at the time of creating an account on the IdoSell websites constitutes a contract for entrusting and processing of personal data. This policy applies to personal data of users registered in the CRM system (hereinafter referred to as Users). IAI recognizes that consent to data processing is for an indefinite period.
4. Processing of personal data provided by the User when registering and logging in to IdoSell, referred to in Chapter II, paragraph 1 below, is based on the consent expressed on the basis of Article 6, paragraph 1, letter a and f of the 2016/679 Regulation of the European Parliament and of the EU Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as repealing Directive 95/46/WE (general data protection regulation), hereinafter: "GDPR", for the purposes and in lawfully justified business handled by IAI, referred to in Chapter II.

II. The purpose of data collection

1. By logging in to the IdoSell websites, the User gains access to all materials, including technical specifications, documentation, demo systems, screen shots and films normally unavailable to non-logged users. Data about the User's activity is collected and used for re-contact by e-mail, by tickets or by phone. These contacts are held by Marketing Automation systems (sending advice about the content that the User was interested in) or newsletters with updates that have occurred in the system since logging in to the scope of products that the User was interested in.
2. Personal data of IdoSell Users is processed by IAI in order to improve their services, present the best offer possible, and conclude online transactions. Personal data of IdoSell Users is processed by IAI in order to accelerate making online transactions. This range also includes:
   1. creating anonymized and aggregated reports and analyzes aimed at increasing the usability of the services provided;
   2. analysis of preferences regarding the scope of services that the User is interested in, in order to provide the best possible business support and while using IdoSell over time;
   3. presenting Users with optional offers of using IdoSell;
   4. promotion and sales of IdoSell systems and additional services, including educational ones, i.e. webinars or training sessions;
   5. checking if Users will infringe intellectual property of IAI in the future.
3. IAI processes User's personal data in the form of profiling in the field of User service and marketing. The Operator does not take automated decisions concerning the User on the basis of profiling referred to in Article 22, paragraphs 1 and 4 of the GDPR.

III. The way of collecting data

1. In order to ensure the smooth operation of CRM IdoSell, after using the system by the User, IdoSell uses the so called "cookies" to identify the User better.
2. The User may independently change the settings for "cookies" at any time, including blocking them completely, specifying the conditions for their storage and access through "cookies" files to the User's device. Changes to these settings can be made using the web browser settings. However, such a change may cause the incorrect operation of IdoSell including being unable to have an access to materials available only for logged Users.. These settings can be changed in order to block the automatic handling of "cookies" in the settings of the web browser or inform about collecting them on the User's device every time. Detailed information about the possibilities and ways of handling "cookies" are available in the software (web browser) settings.
3. IAI may use single, invisible pixels embedded in the website to recognize the returning person and collect information about the User's new preferences.
4. Cookies and pixels are widely used on the Internet and are completely safe for the User. The User is not in any way threatened with infecting the device with a virus or installing unwanted or malicious software.
5. Users' personal data is stored in a database in which technical and organizational measures ensuring the protection of processed data comply with the requirements set out in the applicable law.

IV. Final provisions

1. Data concerning the User, including personal data, will be stored for a period not longer than necessary in connection with the use of CRM IdoSell by the User or performing the service (e.g. handling complaints) – in any case for the period not longer than the one required by separate provisions. In the scope of the User's use of the ticketing system, personal data contained in the tickets will be stored indefinitely by IAI, due to the inability to intervene in the message content by IAI, as well as the need to provide a secure and safe way to contact Users. This is for the IAI to pursue a legally legitimate interest and is the legal basis for the processing of personal data in the ticketing system (Article 6, paragraph 1, letter f of the GDPR). Personal data of persons logging in to IdoSell websites will also be kept by IAI indefinitely due to the need to establish, investigate or defend claims related to the IAI intellectual property protection. This is for the IAI to pursue a legitimate interest and is the legal basis for the processing of personal data (Article 6, paragraph 1, letter f of the GDPR).
2. The User has the right to request the access to their personal data, rectification, deletion or limitation of processing, as well as the right to object to the processing (also for marketing purposes, including profiling) and has the right to transfer data.
3. The User has the right to withdraw consent at any time without affecting the legality of the processing, which was made on the basis of consent before its withdrawal.
4. The User has the right to lodge a complaint to the supervisory body, which is the President of the Office for Personal Data Protection.
5. Providing personal data by the User is a contractual requirement and is voluntary, but necessary to use IdoSell websites. Failure to provide personal data results in the inability to use IdoSell websites.
6. IAI undertakes to comply with the confidentiality related to the User's data and not to disclose such data to unauthorized persons and to securely protect this information from access by any unauthorized person. IAI may not use this data for purposes other than those specified in Chapter II.
7. IAI has the right to use User's information only in an aggregated manner that does not allow the User to be identified, for the purposes of reports.
8. The Service Provider, on the basis of a written contract, entrusts the processing of all personal data provided by the User and other data referred to in this document, to an external company for the proper performance of activities related to hosting, administration, maintenance and management of the Website, to which the User agrees. The transfer of the User's data for the purpose of performing the entrustment agreement referred to above shall take place at the moment of providing such data by the User to the Service Provider. More current information on the protection of personal data, including information about obligations required by the GDPR, can be found in the privacy and security policy of IAI in the "Information compliant with the GDPR" tab at: /en/corp/privacy/policy/
9. In case of any questions, doubts or comments made by the User, IAI kindly asks for contact at the email address sales@idosell.com.