Policy on the processing of personal data in connection with the use of
the website
(Privacy Policy)
1.
Administrator
Nexi Group, respects the privacy of individuals and values the trust
placed in it by visitors to the www.nexiexplorers.com website (the "Website")
and its sub-sites. The companies listed below, process personal data of users
of the Website in accordance with the provisions of Regulation (EU) 2016/679 of
the European Parliament and of the Council of 27 April 2016 on the protection
of individuals with regard to the processing of personal data and on the free
movement of such data and repealing Directive 95/46/EC ("RODO")
This document describes the rules for the processing of personal data
related
related to the use of the Website through which the "NEXI Explorers"
gamification is conducted for persons employed by the following Nexi Group
companies
1.
Hungary, Nexi Hungary Zrt., Alíz utca 3,
1117 Budapest, Hungary, lucia.supekova@nexigroup.com
2.
Czech Republic, Nexi Czech Republic, s.r.o. V Celnici 1031/4, Nové
Město (Praha 1) 110 00 Praha, Czech Republic, lucia.supekova@nexigroup.com
3.
Slovenia, Nexi Slovenia Ltd. Letališka cesta
29A, 1000 Ljubljana, Slovenia, marko.marijanovic@nexigroup.com
4.
Serbia, Nexi RS d.o.o., Bulevar Zorana
Djindjica 144v, 11070 Belgrade, Serbia, lucia.supekova@nexigroup.com
5.
Croatia, Nexi Croatia Ltd., Slavonska avenija
1A, Zagreb, Croatia, marko.marijanovic@nexigroup.com
6.
Italy, Nexi Payments S.p.A., Corso Sempione n. 55, 20149 Milano, ITDPC@nexigroup.com
7.
Slovakia, Nexi Central Europe a.s.,
Röntgenova 1, PO Box 79 - 851 01 Bratislava, Slovakia, lucia.supekova@nexigroup.com
8.
Greece, NEXI Greece processing Services
Single Member Societe Anonyme, 23rd Km Athens - Lamia National Road 14565 Agios
Stefanos, Dionysos, Greece, mingsan.hu@nexigroup.com
9.
Greece, Nexi Payments Greece s.a.,
Charilaou Trikoupi 15, 10679, Athens, Greece, mingsan.hu@nexigroup.com
10.
Croatia, SIA Croatia d.o.o., Slavonska 1A, Zagreb, Croatia, ucia.supekova@nexigroup.com
11.
Poland, PayPro S.A, ul.
Pastelowa 8, 60-198 Poznań, Poland aleksander.markiewicz@lexdigital.pl
12.
Poland, Billbird S.A., ul.
Wielicka 28B, 30-552 Kraków, Poland, joanna.hajnus@pep.pl
13.
Poland, Centrum Rozliczeń Elektronicznych Polskie ePłatności S.A., al. Rejtana 20B, 35-310 Rzeszów, Poland,
joanna.hajnus@pep.pl
14.
Poland, Polskie ePłatności Sp. z o.o., al. Rejtana 20B, 35-310
Rzeszów, Poland, joanna.hajnus@pep.pl
(hereinafter: Contest).
The above companies are the administrators of the personal data of the
Website users.
The purpose of this Policy is to inform you and explain to you in a
transparent manner:
·
How and why the Administrator collects,
processes and stores your personal data in connection with your use of the
Website,
·
What the role of the User Data Controller
is, and
·
What are your rights and the
Administrator's obligations in connection with the processing of personal data.
2.
Processing purposes
The Administrator processes the data of
Website users in order to provide the functionality of the Website and for
analytical purposes.
3.
Legal basis for processing
We process personal data of Website users on the basis of our legitimate
interest that we have in ensuring the proper functioning of the Website. Where
we collect data via analytical cookies, the legal basis for processing is your
consent, which you give in the cookie settings panel.
4.
Cookies and other similar technologies
On our Website we use cookies and other similar technologies through
which the collection and processing of information regarding the use of our
Website takes place. Cookies and similar technologies are generally not used to
collect information about a specific, identifiable person. In some cases,
however, the information they obtain may constitute personal data. For more
information on the detailed rules under which we use cookies and similar
technologies, please see "Cookie Policy".
5.
Recipients of your data
In pursuit of the aforementioned purposes, the Administrator may
disclose your personal data to third-party processors if it is needed to
perform certain activities (e.g., services) for the Administrator. External
data processors include:
- provider of IT, cloud and
database services to the Administrator;
- Albedo Marketing Sp. z o.o.
agency, to which the Administrator commissioned the organization of the
Contest.
We disclose data to other entities only when it is necessary to operate
the Website and conduct the Contest.
Whenever we disclose data to others, we do so within the framework of
applicable regulations. If our service providers process data on our behalf,
they must provide guarantees to implement technical and organizational
solutions that will protect personal data and meet the requirements of the
General Data Protection Regulation (GDPR).
6.
Making automated decisions, including profiling
Personal data of Website users will not be used by the Administrator for
automated decision-making, including profiling.
7.
Voluntariness of providing data and
consequences of refusing to provide it
The user is under no obligation to provide the Administrator with
his/her personal data - it is entirely voluntary. However, please note that in
some circumstances, refusal to provide personal data may affect the way you
browse the Website and prevent you from using some of its features.
8.
Data retention period
The Administrator will keep your personal data until you object to the
processing of your data or you request the restriction of processing or
deletion of your personal data. We process data processed on the basis of the
user's consent until it is withdrawn.
9.
User rights
You have the right to access your personal data processed by the
Administrator.
If a user believes that his/her data in the Administrator's possession
is incorrect or incomplete, he/she may also request its rectification. The
Administrator will promptly correct the relevant data.
The user also has the right:
·
Request the deletion of their personal
data;
·
Request restrictions on the processing of
your personal data.
The Administrator will honor such request, revocation or objection in
accordance with relevant data protection laws.
In addition, the user has the right to data portability, i.e. to receive
the personal data previously provided by the user in a structured, commonly
used machine-readable format and the right to send this data to another
controller, without hindrance from the Administrator and subject to the user's
own confidentiality obligations.
To exercise the above rights, please send an email to contact@nexiexplorers.com .
The user also always has the right to file a complaint with the
President of the Office for Personal Data Protection. In exercising this right,
the user should provide a full description of the situation that occurred and
indicate what action he or she considers to have violated his or her rights or
freedoms. The complaint should be submitted directly to the President of the Personal
Data Protection Authority appropriate for the country of employment.
10.
Right to object to the processing of
personal data
In addition to the rights described above, you also have the right to
object to the processing of your data when, due to your particular situation,
you do not want us to process your personal data for a specific purpose based
on our legitimate interests.
If you object, we will no longer process your data for the objectionable
purpose. In some situations, however, we may have valid legitimate grounds for
processing your data, which will take precedence over your interests, rights
and freedoms. In some situations, the processing of your data may also be
necessary to establish, assert or defend claims. In such cases, we will not be
able to accommodate your objection.
To exercise your right to object, please send an email to: contact@nexiexplorers.com.
11.
Contacting the Administrator
If a user has questions or concerns about the Administrator's processing
of his/her personal data, please contact us at 3 Góralska St., 60-623 Poznań,
or by e-mail at contact@nexiepxlorers.com. The
Administrator will analyze the user's question or complaint and respond as soon
as possible.
12.
Transfers of data outside the EEA
In operating the Website, the Administrator uses tools provided by
entities that are located outside the European Economic Area, and some of the
service providers may store data outside the aforementioned territory. If there
could be transfers of information outside the European Economic Area, this will
only be done within the framework of the procedures required by data protection
regulations, thus:
(a) to such countries for which the European Commission has issued a
decision stating that an adequate degree of protection is provided there
(including where the provision of such a degree of protection requires
additional conditions, as in the case of the US), or
(b) in the absence of the aforementioned decision - after providing
adequate safeguards, and provided that enforceable rights of data subjects and
effective remedies are in place, e.g. on the basis of the conclusion of
standard data protection clauses adopted by the European Commission with the
entity to which the data are to be transferred.