Privacy Policy

General information

This privacy policy (hereinafter referred to as the Privacy policy) contains information regarding the processing of the personal data of people visiting this website (hereinafter referred to as the Users). This website (hereinafter referred to as the Website) is provided by 2Simple Sp. z o.o. with its registered office in Piotrków Trybunalski (Poland), entered in the Register of Entrepreneurs of the National Court Register under number 0001054625, address ul. Henryka Sienkiewicza nr 13 lok. 13A, Piotrków Trybunalski 97-300, email address office@2simple.it (hereinafter referred to as the Company).

Principles

The Company respects the privacy of the Users. The Privacy policy's main role is to provide the Users with information on how data that can be used to identify or contact Users (hereinafter referred to as the Personal data) are processed in connection with visiting the Website.

The Privacy policy is part of the implementation in the Company of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 - General Data Protection Regulation (hereinafter referred to as GDPR).

The Personal data controller

The Company is the Personal data controller.

Type of processing of Personal data

Using the Website may involve the need to provide the Company with certain Personal data, for example Personal data left in the contact form provided on the Website. Personal data may include:

  • email address;
  • first and last name;
  • phone number;
  • company name;
  • other Personal data, also collected automatically (via cookies, third-party tools such as Google Analytics 4 and Contentsquare, and web server logs): IP addresses; browser type and version; device type and ID; operating system; details about the Website visit (dates, duration, visited subpages, diagnostic data, traffic sources and interactions with the content).

Providing Personal data is voluntary; however, it may be necessary for the proper use of the Website (the functionalities it offers).

Personal data processing purposes

The Company processes Personal data for the following purposes:

  • use of the Website (the functionalities it offers) - the legal basis in art. 6.1.b GDPR (the necessity to conclude and perform a contract) and in some cases art. 6.1.a GDPR (User's consent);
  • answering an enquiry sent through the contact form or by email and further correspondence - the legal basis in art. 6.1.b GDPR (steps taken at the User's request prior to entering into a contract) and art. 6.1.f GDPR (the Company's legitimate interest in answering messages sent to it);
  • marketing and PR of the Company, in particular its products and services - the legal basis in art. 6.1.f GDPR (legitimate interest of the Company) and in some cases art. 6.1.a GDPR (User's consent);
  • conducting statistical and analytical activities regarding the use of the Website and ensuring its security - the legal basis in art. 6.1.f GDPR (legitimate interest of the Company);
  • establishing, asserting and defending against claims, including claims related to the use of the Website - the legal basis in art. 6.1.f GDPR (legitimate interest of the Company);
  • performance of legal obligations (e.g. accounting or tax) - the legal basis in art. 6.1.c GDPR (the need to fulfil legal obligations incumbent on the Company).

Personal data may be processed using a profiling mechanism - to achieve the purposes for which it was collected. However, the Personal data processed in this way is not used by the Company for the purposes of automatic decision-making processes.

Protection of Personal data

The Company takes appropriate technical and organizational measures to protect Personal data against:

  • unauthorized or inappropriate access or use;
  • accidental destruction;
  • loss;
  • violation of integrity.

The Company has implemented the following safety standards:

  • access control;
  • backup policy;
  • monitoring;
  • review and maintenance procedures;
  • security incident management procedure;
  • encryption of data transmission (SSL).

Personal data may be entrusted for processing to third parties only if such entities guarantee compliance with the conditions or standards mentioned above - to ensure the security and confidentiality of Personal data. Each person employed by the Company with access to Personal data has the appropriate authorization and is bound by the proper confidentiality provisions.

Period of Personal data processing

The Company makes appropriate efforts to ensure that the processing of Personal data lasts only as long as necessary to achieve the purposes for which the Personal data was collected. Personal data collected in connection with the use of the Website will be processed:

  • for the duration of such use;
  • in the case of data sent through the contact form - for as long as needed to handle the enquiry and the correspondence, and then until the statute of limitations for any claims;
  • in the case of data collected via cookies - for the period consistent with the duration of the individual files or until the User withdraws consent;
  • after the above - to the extent required by law (e.g. for tax purposes) or until the statute of limitations for claims, and to the extent required by the legitimate interest of the Company or the consent expressed by the User.

Personal data recipients

The Company may make Personal data available to entities that provide specific services to the Company, such as:

  • IT tools providers (including Google Ireland Ltd.);
  • the provider of a tool analysing how the Website is used (Contentsquare SAS, France - e.g. heatmaps and session recordings with form input masked), only after the User consents to analytical cookies;
  • the email delivery provider for the contact form (Resend, Inc., United States - under the standard contractual clauses and the Data Privacy Framework);
  • infrastructure providers (including OVH SAS - the Website's server and hosting in the European Union);
  • legal and accounting services providers.

Personal data may be transferred outside the European Economic Area when the Company uses services provided by entities based or operating outside the EEA. If such a transfer takes place to a country not covered by the European Commission's adequacy decision, the Company will ensure an adequate level of protection, in particular through standard contractual clauses issued by the European Commission or other mechanisms provided by law (e.g. the Data Privacy Framework). The Company may be obliged - due to applicable law - to share Personal data with public authorities.

Rights of the subjects of Personal data

The Company enables Users to exercise their rights, in particular those set out in Articles 15-21 of the GDPR, which include:

  • right of access to the Personal data;
  • right to rectification of the Personal data;
  • right to erasure of the Personal data (the "right to be forgotten");
  • right to restriction of processing of the Personal data;
  • right to Personal data portability;
  • right to object to the processing of the Personal data;
  • right to withdraw consent to Personal data processing;
  • right to file a complaint with the relevant supervisory authority, which in Poland is the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw).

Contact

The Company provides a dedicated email address for any matter related to privacy, in particular Personal data: privacy@2simple.it. This does not exclude the possibility of contacting the Company using the address details provided above.

See also: Cookies Policy and Temporary files.