Privacy Policy

1. General Information

1.1. This Privacy Policy sets out the rules for the processing of personal data by the data controller – DeskBot sp. z o.o., with its registered office in Warsaw, al. Jana Pawła II 27, 00-867 Warsaw, Poland (hereinafter “DeskBot,” “we,” or “our”).

1.2. DeskBot is committed to protecting the privacy of users (hereinafter “Users,” “You,” “Your”) and processing their personal data in accordance with applicable laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

2. What Data We Collect

2.1. DeskBot may collect the following types of personal data depending on the type of interaction with our service:

• Identification Data: first name, last name, email address, phone number.
• Contact Data: delivery address.
• Technical Data: IP address, browser type, time zone settings, browser plug-in types and versions, operating system, and platform.
• Location Data: geolocation data, if you consent to it.
• Transactional Data: details regarding payments and orders placed through our service.
• Usage Data: information about how you use our website, products, and services.
• Marketing and Communication Data: your preferences for receiving marketing materials from us and your communication preferences.

3. Purposes of Data Processing

3.1. Your personal data may be processed for the following purposes:

• Service Provision: to provide the services offered by DeskBot. Legal basis: Article 6(1)(b) GDPR (necessity for the performance of a contract).

• Customer Service: to respond to inquiries and resolve issues. Legal basis: Article 6(1)(b) GDPR (necessity for the performance of a contract).

• Marketing: to send information about our products, services, special offers, promotions, and events. Legal basis: Article 6(1)(a) GDPR (consent).

• Analysis and Research: to improve our services and website functionality. Legal basis: Article 6(1)(f) GDPR (legitimate interests of the data controller).

• Security: to ensure the security of our services and prevent fraud. Legal basis: Article 6(1)(f) GDPR (legitimate interests of the data controller).

• Legal Compliance: to fulfill legal obligations. Legal basis: Article 6(1)(c) GDPR (compliance with a legal obligation).

4. Data Sharing

4.1. DeskBot may share your personal data with the following categories of recipients:

• Service Providers: subcontractors and business partners who provide services on our behalf (e.g., courier companies, IT service providers, accounting firms, advisory services, etc.). Legal basis: Article 28 GDPR (data processing agreement).

• Public Authorities: if we are required to disclose data by law or court order. Legal basis: Article 6(1)(c) GDPR (compliance with a legal obligation).

• Other Entities: with your explicit consent. Legal basis: Article 6(1)(a) GDPR (consent).

4.2. DeskBot may process your personal data both within and outside the European Economic Area (EEA). In the case of transferring personal data outside the EEA, we ensure that they are protected at a level compliant with GDPR regulations, for example, by using standard contractual clauses adopted by the European Commission.

5. User Rights

5.1. According to applicable laws, you have the following rights regarding the processing of your personal data:

• Right of Access: the right to obtain confirmation as to whether we process your personal data and the right to access those data (Article 15 GDPR).

• Right to Rectification: the right to request the rectification of your personal data that is incorrect or incomplete (Article 16 GDPR).

• Right to Erasure: the right to request the deletion of your personal data in certain circumstances (Article 17 GDPR).

• Right to Restrict Processing: the right to request the restriction of the processing of your personal data in certain circumstances (Article 18 GDPR).

• Right to Data Portability: the right to receive your personal data in a structured, commonly used format and the right to request the transfer of those data to another data controller (Article 20 GDPR).

• Right to Object: the right to object to the processing of your personal data in certain circumstances (Article 21 GDPR).

• Right to Withdraw Consent: the right to withdraw consent for the processing of personal data at any time (Article 7(3) GDPR).

6. Data Retention Period

6.1. Your personal data will be stored for the period necessary to achieve the purposes for which they were collected, in accordance with applicable laws. After this period, the data will be deleted or anonymized.

7. Data Protection Measures

7.1. DeskBot employs appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or damage. These measures include, among others, data encryption, access control to data, and regular security audits.

8. Cookie Policy

8.1. DeskBot uses cookies to improve website functionality and provide better services. Cookies are small text files stored on your device during visits to our website.

8.2. We may use the following types of cookies:

• Necessary Cookies: essential for the proper functioning of our website.
• Analytical Cookies: allow us to analyze how users use our website, helping us to improve it.
• Functional Cookies: enable remembering your preferences and settings.
• Advertising Cookies: used to display ads tailored to your interests.

8.3. You can manage your cookie preferences through your browser settings.

9. Contact

9.1. If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: DeskBot sp. z o.o. al. Jana Pawła II 27, 00-867 Warsaw, Poland Email: privacy@deskbot.tech

10. Privacy Policy Updates

10.1. DeskBot reserves the right to make changes to this Privacy Policy. We will inform you of any changes on our website. We recommend regularly checking this Privacy Policy to stay informed of any changes.