Data controller The data controller of your personal data is Objectivity Sp. z o.o. with its registered office in Wrocław 54-429 at ul. Strzegomska 142a.

Data Protection Officer (DPO) In cases related to data processing, our may contact our data protection officer at: [email protected]

Purposes and duration of processing and legal basis: Your data is processed to handle your request or inquiry. After the correspondence is finished, your data might be processed to pursue or defend against any claims for the limitation period applica- ble to them. The legal basis of processing is Article 6(1) (f) GDPR – our legitimate interest which is handling requests and inquiries and pursuing or defending against claims.

Recipients of personal data: Recipients of personal data are: individuals formally authorized to process personal data (engaged by the Controller) and entities which process personal data on our behalf on the basis of appropriate data processing agreements which are our IT service providers.

Transfers of data to third countries: We do our best to limit personal data transfer outside of the European Economic Area (EEA). In particular, we limit storage locations to locations within the EEA only. Your personal data might be transferred outside of the EEA only as an exception. In such situations the transfer is secured by certification of our providers in the Privacy Shield programme (https://iapp.org/resources/article/eu-u-s-privacy- shield-full-text/) or might also be secured with standard contractual clauses accepted by the European Commission (https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=celex%3A32010D0087).

Your entitlements: You have the right to access, rectify, obtain a copy of, erase, and restrict the processing of your personal data and the right to data portability, as well as the right to object to processing – in accordance with the provisions of the General Data Protection Regulation (GDPR).

Complaint with a supervisory authority: You have the right to lodge a complaint with the data pro- tection supervisory authority if you believe that the processing of your personal data infringes the provisions of GDPR.

Obligation to provide data: Providing personal data is voluntary but not providing personal data may make it more difficult or impossible to handle your request or inquiry. For example, if you decide not to provide your email address, we will not be able to write back to you.