Information Clause: CMS Panel Account

Full information (Article 13 GDPR)

1.1. Account data controller. The controller of personal data related to an Account in the CMS Panel is DOT DOT sp. z o.o., ul. Ludwika 17, 40-176 Katowice, Poland, owner of the Easy-Way.io brand. Contact for data protection matters: [email protected].

1.2. Data Protection Officer. EasyWay has appointed a Data Protection Officer, Tomasz Budzyński. Contact: [email protected].

1.3. Role regarding data published in the Panel. As regards map content, descriptions and data published in points and areas of interest (POI), the controller is the Client who granted you access to the CMS Panel. EasyWay then acts solely as a processor on the Client’s behalf.

1.4. Purposes and legal bases for processing. We process data in order to create and operate the Account, authenticate the user, ensure system security and ensure accountability of actions, on the basis of Article 6(1)(b) and Article 6(1)(f) GDPR.

1.5. Scope of data. We process the username, email address, authentication data, the assigned role and permissions, IP address, browser information and data related to activity in the CMS Panel.

1.6. Data recipients. Data may be entrusted to processors providing hosting, IT infrastructure, backup and content delivery services. The current List of Subprocessors is available at List of Subprocessors.

1.7. Data transfers outside the European Economic Area. As a rule, data is processed within the European Economic Area. If a data transfer takes place via Cloudflare services, it is carried out in accordance with the GDPR on the basis of the Data Privacy Framework (DPF) and Standard Contractual Clauses (SCC).

1.8. Data retention period. We keep data related to the Account for the duration of its activity. We keep security logs for a maximum of 12 months. After cooperation ends, data is deleted or returned in accordance with applicable law and the agreements concluded.

1.9. Your rights. You have the right to access your data and to its rectification, erasure, restriction of processing, portability, and the right to object in accordance with Articles 15–22 GDPR.

1.10. Right to lodge a complaint. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

1.11. Voluntary provision of data. Providing data is voluntary but necessary to create and operate the Account.

1.12. Automated decision-making. We do not use profiling or automated decision-making that produces legal effects in relation to users.

Precedence of a separate DPA

2.1. If the Client has concluded a separate Data Processing Agreement (DPA) with DOT DOT sp. z o.o., its provisions take precedence over the general rules described in this Information Clause as regards the data entrusted for processing.