Privacy Policy
Effective date: January 1, 2025
Navigate to the relevant section:
A.Definitions
A mobile application operating on portable, mobile devices with the iOS and Android operating systems, offered by the Service Provider free of charge.
Information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
European Economic Area which includes the countries of the European Union and Norway, Iceland, Liechtenstein.
SuppMatch Sp. z o.o., with its registered office in Warsaw (address: Aleja Armii Ludowej 26, 00-609 Warszawa), entered into the Register of Entrepreneurs of the National Court Register under KRS number 0000845451, NIP [Tax Identification Number]: 7010986130
An individual who is 13 years of age or older, using the Application. The User may use the Application after creating an Account.
This Privacy Policy
The space provided to the User within the Application under the Service Agreement, enabling the User to access and use the services offered by the Service Provider through the Application.
Terms and conditions available at: www.suppmatch.ai/terms-conditions
REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=celex%3A32016R0679
B.Who processes your personal data
The controller of your personal data is SuppMatch Sp. z o.o. headquartered in Warsaw Poland, Al. Armii Ludowej 26, 00-609 Warszawa, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, XII Commercial Division, under KRS number: 0000845451, REGON: 386261508, NIP: 7010986130.
C.Contact
Contact us if you would like more information about the processing of your personal data or to exercise your rights. You can do this by email: rodo@suppmatch.ai or by mail: SuppMatch Sp. z o.o. Al. Armii Ludowej 26, 00-609 Warszawa.
D.Purposes, legal bases for processing, and retention periods for personal data
1.1.1
Providing electronic services, including enabling the use of the App and ensuring its correct operation, as well as reconstructing events and actions taken by the User for accountability purposes
1.1.2
Implementation of the contract for the use of the SuppMatch App, the operation of which is based on data profiling in order to select the appropriate supplementation for the User.
1.1.3
Analysis of the User's actions within the App in connection with its use and purchasing decisions
1.2.1
Article 6(1)(b) and 6(1)(f) of the GDPR, i.e. our legitimate interest in implementing the principle of accountability in connection with the use of server logs in the App.
1.2.2
Article 6(1)(b)
1.2.3
Article 6(1)(f) of the GDPR, i.e. our legitimate interest in on adapting the App to market needs.
1.3.1
For the duration of the agreement and any applicable legal obligations
1.3.2
For the duration of the agreement and any applicable legal obligations
1.3.3
For the duration of the agreement and any applicable legal obligations
1.4.1
Voluntary but necessary to use the App
1.4.2
Voluntary but necessary to use the App
1.4.3
The provision of personal data is secondary, i.e., it results from the use of the App and the completion of purchases in the store where our Application plugin is available. If you do not use the App plugin, we will not process this data.
1.5.1
Hosting service providers (currently Amazon Web Services EMEA SARL) and IT service providers (currently 7bulls.com sp. z o.o.).
1.5.2
Hosting service providers (currently Amazon Web Services EMEA SARL) and IT service providers (currently 7bulls.com sp. z o.o.).
1.5.3
Hosting service providers (currently Amazon Web Services EMEA SARL) and IT service providers (currently 7bulls.com sp. z o.o.). The store where our App plugin is available.
Inquiry handling
Article 6(1)(f) of the GDPR, i.e. our legitimate interest in for handling inquiries and resolving reported issues.
Personal data will be stored for the time necessary to provide a response and resolve the reported issue.
Voluntary but may be necessary to respond to the inquiry or resolve the reported issue. Failure to provide data may result in no response being given.
Email service provider (currently Google Ireland Limited).
establishing, investigating or defending against claims
Article 6(1)(f) of the GDPR, i.e. our legitimate interest in providing legal protection
For the duration of the dispute and until the expiration of the 6-year limitation period for claims.
Providing personal data is secondary, i.e., it stems from other processing purposes.
External advisors
Newsletter management, involving the sending of marketing messages about products, services, and promotions.
Article 6(1)(f) of the GDPR, i.e. our legitimate interest in conducting marketing activities in connection with the consent given to receive commercial information.
Until the consent to receive the newsletter is withdrawn.
Voluntary, but necessary to receive the newsletter.
Entities supporting us in the field of promotion and marketing (currently Grafit sp. z o. o.)
Managing and maintaining social media platforms.
Article 6(1)(f) of the GDPR, i.e. our legitimate interest in providing information about activities, building a positive image and answering questions
For the time you observe profiles and interact with us, and the information you leave (e.g. comments, likes) will remain until you delete them yourself .
Voluntary, but necessary to observe our social profiles and to answer your question to us
Social media operators
Conclusion and performance of the contract
Article 6(1)(b) and 6(1)(f) of the GDPR i.e. our legitimate interest in performing the necessary activities related to the performance of the contract, including contacting designated persons
For the duration of the contract and then the period of limitation of claims under the law
Voluntary, but necessary to conclude the contract
Provider of e-mail and data hosting services (currently Google Ireland Limited)
E.User rights
In connection with the processing of your personal data, you have the right to:
- access to the data, i.e. to receive information about what personal data we have about you (including obtaining a copy of the data);
- rectification of data, i.e. to correct or complete the personal data you have provided to us;
- erasure of data, i.e. exercising the so-called right to be forgotten;
- restriction of data processing, i.e. to bring about a situation in which your personal data will only be stored and not otherwise processed;
- data portability, i.e. receiving your personal data and requesting that it be sent directly to another controller, if technically feasible;
- withdrawal of consent at any time, which will, however, not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
It may be that it is technically impossible to delete all of your data if the data is linked to your accounts on other services, especially social networks.
The exercise of certain rights may be limited due to legal regulations or legitimate interests of the SuppMatch.
F.Right to lodge a complaint regarding data processing
You have the right to file a complaint with the supervisory authority in charge of personal data protection about the processing of personal data. The competent authority is the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw). For more information, see here.
G.Right to object to the processing of personal data
You may object at any time - on grounds related to your particular situation - to the processing of your personal data based on so-called legitimate interests (Article 6(1)(f) RODO), including profiling under this provision.
If you raise such an objection, we will not be able to process your personal data unless the company demonstrates the existence of valid legitimate grounds for processing that override your interests, rights and freedoms, or grounds for establishing, asserting or defending claims.
H.Right to object to direct marketing
You may object at any time and free of charge to the processing of your personal data for direct marketing purposes (direct marketing is e.g. marketing newsletters), including profiling, to the extent that the processing is related to such marketing.
If you raise an objection to direct marketing, your personal data will no longer be processed for such purposes.
I.Cookies
SuppMatch uses cookies within the App. You can find information about cookies in the Cookie policy.
J.Server logs
Server logs are data that allow - in accordance with the principle of accountability - chronological reconstruction of events and actions taken by the User or the SuppMatch. The data contained in the server logs (e.g., IP address, date and time of visit, among others) are necessary to ensure processing in accordance with the principle of accountability and administration of the SuppMatch App.
K.Changes to the privacy policy
We are constantly developing our Application and adapting to the needs of Users and the law, so the rules for processing personal data may change. You will be informed of the changes.
Your Feedback is Most Important to Us
Build SuppMatch with us, test the solution and share your opinion