Privacy policy
This policy contains the information required by Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) in connection with the giveme.cloud website and contacting the company.
Controller
The controller of personal data is GIVEME CLOUD spółka z ograniczoną odpowiedzialnością, ul. Cybernetyki 9, 02-677 Warszawa, Polska, entered in the Register of Entrepreneurs of the National Court Register (KRS) under no. 0000543543 (the "Controller").
For matters concerning personal data you can contact the Controller by email at info@giveme.cloud or by post at the registered office address.
Purposes, legal bases and retention periods
| Purpose of processing | Categories of data | Legal basis | Retention period |
|---|---|---|---|
| Website security and abuse prevention (web server logs) | IP address, browser identifier (User-Agent), requested page address (without query parameters), date and time of the request, response code | Art. 6(1)(f) GDPR – the Controller's legitimate interest in keeping the website secure and available | 30 days from when the request was recorded |
| Email correspondence | email address, name and any other data provided in the message | Art. 6(1)(f) GDPR – legitimate interest in replying and corresponding; Art. 6(1)(b) GDPR – steps taken at the person's request before entering into a contract | for the duration of the correspondence, then until the limitation period for any claims arising from it expires |
| Handling notices of illegal content and network abuse | notifier's data (name, email address), content of the notice, data of the persons the notice concerns | Art. 6(1)(c) GDPR in connection with Regulation (EU) 2022/2065 (Digital Services Act); Art. 6(1)(f) GDPR – legitimate interest in counteracting network abuse | until handling of the notice is complete and the decision has been communicated; we then delete the data unless it is needed to establish, exercise or defend a specific legal claim – in that case, the retention period in the legal-claims row applies |
| Contact with representatives of clients and business partners | name, position, business email address and phone number, name of employer or principal | Art. 6(1)(f) GDPR – legitimate interest in concluding and performing a contract with the client or partner and staying in contact with them | for the duration of the cooperation with the client or partner, then until the limitation period for claims expires |
| Establishing, exercising or defending legal claims | data from the categories above, to the extent necessary | Art. 6(1)(f) GDPR – legitimate interest in protecting the Controller's rights | until the limitation period for claims expires and, if proceedings are brought, until they are finally concluded |
Data obtained from other sources (Art. 14 GDPR)
If you represent one of our clients or business partners, we may have received your data from that organisation (your employer or principal) in connection with concluding or performing a contract. We process only the contact data listed in the table above.
We receive data about persons identified in notices from the notifiers. This may include identification and contact details, network identifiers and information about the reported incident.
Recipients
Data may be disclosed only to the extent necessary to:
- entities supporting the Controller in maintaining its IT infrastructure – the website runs on the Controller's own infrastructure;
- the email service provider: Google (Google Workspace) (see "Transfers outside the EEA");
- legal advisers and accounting service providers bound by confidentiality;
- public authorities, where disclosure is required by law and a lawful request is made.
Transfers outside the EEA
We handle email correspondence using Google (Google Workspace). As a result, data contained in emails may be transferred to Google group companies, including Google LLC in the United States, and to other entities processing data on Google's behalf outside the European Economic Area. Under Google's terms, transfers to US entities covered by the EU–US Data Privacy Framework rely on the European Commission's adequacy decision (Commission Implementing Decision (EU) 2023/1795, Art. 45 GDPR). Standard contractual clauses (Art. 46(2)(c) GDPR) apply to transfers covered by those clauses under Google's terms. Information about the applicable transfer basis and a copy of the safeguards can be obtained at info@giveme.cloud.
Apart from this, the Controller does not transfer data to countries outside the European Economic Area.
Profiling and automated decisions
The Controller does not profile individuals and does not take decisions about them based solely on automated processing, including profiling (Art. 22 GDPR).
Your rights
You have the right to:
- access your data and obtain a copy (Art. 15 GDPR);
- rectification (Art. 16 GDPR);
- erasure (Art. 17 GDPR);
- restriction of processing (Art. 18 GDPR);
- portability of data processed by automated means on the basis of a contract (Art. 20 GDPR);
- object, on grounds relating to your particular situation, to processing based on legitimate interest (Art. 21 GDPR).
To exercise these rights, write to info@giveme.cloud or send a letter to the Controller's registered office. We will reply without undue delay and in any event within one month of receiving the request; where necessary this period may be extended by two further months, in which case we will inform you (Art. 12(3) GDPR).
You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Moniuszki 1A, 00-014 Warszawa (uodo.gov.pl).
Whether providing data is required
Providing data in correspondence is voluntary. Contact details enable us to reply; missing information may limit our ability to investigate but does not prevent assessment of the information received. Exceptions concerning notifier details are explained on the Reporting content and abuse page. The server processes technical data needed for the connection and records selected data in logs for security purposes.
Cookies and similar technologies
The website uses no cookies, JavaScript, browser storage (localStorage, sessionStorage, IndexedDB), analytics or device identification techniques (fingerprinting). Page resources are downloaded only from our domain.
Your browser may keep website files in its cache, and the HSTS header instructs it to connect to the website only over HTTPS. We do not use these mechanisms to track users. Insofar as they are necessary for transmission or for delivering the requested service, Article 399(3) of the Polish Electronic Communications Law of 12 July 2024 applies; for this reason we do not ask for consent and do not display a cookie banner.
Changes to this policy
The current version of this policy is always available on this page. We announce material changes by publishing a new version with a new update date.
Last updated: