1. This information includes concise, understandable summaries of the Privacy Policy related to the Data Controller, the purpose and method of personal data transfer, and your rights regarding this transfer, in the form required for GDPR information disclosure. Details regarding legal and arbitration proceedings, including the available court issued by a physician, are included.
2. Who is the data controller?
   The Personal Data Controller (hereinafter the Controller) is the company CicheX Transfer, Mariusz Morzy operating at: Ul. Armii Krajowej 19/39, 83-330 Żukowo, with the assigned tax identification number (NIP): NIP: 957-077-04-90, providing electronic services via the Website.
3. How can you access the controller's data?
   You can contact the controller using one of the following options

• Postal address – Cichex Transfery, Mariusz Morzy, ul. Armii Krajowej 19/39, 83-330 Żukowo,
• Adres poczty elektronicznej – cichygda@gmail.com
• Phone connection – +48 506-324-870
• Formularz kontaktowy – dostępny pod adresem: cichygda@gmail.com

4. Does the Controller protect the Data Protection Officer?
Based on Article 37 GDPR, the Controller does not appoint a Data Protection Officer.

5. For matters concerning data processing, including personal data, please contact the Controller directly.

6. Where do we obtain personal data and what are their sources?
Data is sourced from: the individuals to whom the data relates
in relation to regulations concerning the use of social media portals, with the informed protection of these individuals, from these social media portals
7. What is the scope of personal data processed by us?
The services process personal data relating to the individuals concerned
(e.g., name and surname, login, email address, phone number, IP address, etc.)

A detailed scope of user data is available in the Privacy Policy.

8. What are the purposes of our data processing?

Personal data provided by the user is processed for one of the following purposes:

• Provision of electronic services:
  Services for registering and maintaining a user account in the service and related transfers
  services protecting/attacking entries on the Website without the need to register
  in communication between the Controller and the user regarding the service and data protection related to
  legally linked interests of the Controller.
• What are the legal bases for data processing?
  The Website resources and user data are processed based on:
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
  Art. 6(1)(a)
  the data subject has given consent to the processing of their personal data for one or more specific purposes
  Art. 6(1)(b)
  processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract
  Art. 6(1)(c)
  processing is necessary for compliance with a legal obligation to which the controller is subject
  Art. 6(1)(f)
  processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
  Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000)
  Act of 16 July 2004 Telecommunications Law (Journal of Laws 2004 No. 171, item 1800)
  Act of 4 February 1994 on copyright and related rights (Journal of Laws 1994 No. 24, item 83)
  What is the legally justified interest pursued by the Controller?
  For the purpose of establishing, pursuing, or defending against claims – the legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) consisting of protecting our rights, including but not limited to:
  For assessing the risk of potential clients
  For evaluating planned marketing campaigns
  For conducting direct marketing

9. For how long do we process personal data?
As a rule, the specified personal data is stored only for the duration of the service provided within the service operated by the Administrator. It is deleted or anonymized within 30 days from the termination of the service (e.g., deletion of a registered user account, unsubscribing from the Newsletter, etc.)

In exceptional situations, to protect the legally justified interest pursued by the Administrator, this period may be extended. In such a case, the Administrator will store the specified data, from the time of the User's request for deletion, for no longer than 3 years in the event of a violation or suspected violation of the service regulations by the person to whom the data relates.

10. Who is the recipient of the data, including personal data?
As a rule, the only recipient of the data is the Administrator.

However, data processing may be entrusted to other entities providing services to the Administrator for the purpose of maintaining the Service's operation.

Such entities may include, among others:
Hosting companies providing hosting or related services for the Administrator
Service and IT support companies performing maintenance or responsible for maintaining IT infrastructure
Companies intermediating online payments for goods or services offered within the Service (in case of purchase transactions in the Service)
11. Will your personal data be transferred outside the European Union?
Personal data will not be transferred outside the European Union unless published as a result of the User's individual action (e.g., posting a comment or entry), making the data accessible to anyone visiting the service.

12. Will personal data be the basis for automated decision-making?
Personal data will not be used for automated decision-making (profiling).

13. What rights do you have regarding the processing of personal data?
Right of access to personal data
Users have the right to access their personal data, exercised through the user panel available after logging in and tools enabling account access in case of a forgotten password.

•             Right to rectify personal data
  Users have the right to request the Administrator to immediately rectify personal data that is incorrect and/or complete incomplete personal data, exercised through the user panel available after logging in and tools enabling account access in case of a forgotten password.
•             Right to delete personal data
  Users have the right to request the Administrator to immediately delete personal data, exercised through the user panel available after logging in and tools enabling account access in case of a forgotten password.
• In the case of user accounts, data deletion means anonymizing data that allows User identification.
• In the case of the Newsletter service, the User can independently delete their personal data using the link included in every sent email.
• Right to restrict the processing of personal data
  Users have the right to restrict the processing of personal data in cases indicated in Art. 18 GDPR, including contesting the accuracy of personal data, exercised through the user panel available after logging in and tools enabling account access in case of a forgotten password.
• Right to data portability
  Users have the right to receive from the Administrator personal data concerning them in a structured, machine-readable format, transmitted by the user, accessible through the user panel available after logging in and tools enabling account access in case of a forgotten password.
• Right to object to the processing of personal data
  Users have the right to object to the processing of personal data based on Art. 21 GDPR, addressed to the Administrator.
• Right to lodge a complaint
  Users have the right to lodge a complaint with the supervisory authority responsible for personal data protection.