Privacy Policy

    1. Preliminary information

    In accordance with the company’s business profile, taking into account the assurance of the highest standards of data processing security, Magic City sp. z o.o. wishes to inform that this privacy policy meets the requirements of Regulation of the European Parliament and Council (UE) 2016/679 of 27.04.2016 regarding the protection of natural persons in connection with personal data processing and the free flow of data and norms included in national laws.

    The information introduced in the Policy will allow you to become familiarised with the rules of personal data processing when in contact with Magic City sp. z o.o. and use of the internet website https://incaplay-old.kitesoft.pl/.

    1. Dictionary of terms

    Administrator – Administrator of Personal Data, the entity deciding about the aims and measures of personal data processing. The Administrator is Magic City sp. z o.o. with headquarters on Aleje Jerozolimskie 179, 02-222 Warszawa.

    Personal Data – all information about an identified or identifiable natural person (“person whom the data concerns”); an identifiable natural person is a person who can be directly or indirectly identified.

    EEA – European Economic Area, a free trade zone and common market, encompassing EU member states and European Free Trade Association (EFTA) states, with the exception of Switzerland. This is an area in which the free flow of personal data occurs.

    Data Recipient – indicates a natural or legal person, organisational entity not possessing a legal identity, individual or other entity, to which data is divulged, irrespective of whether it is a “third party”.

    Third Countries – countries which are not EEA members.

    Cookie Files – small pieces of information, known as cookies, sent by a website we are visiting and which are recorded on an end device (computer, laptop, smartphone), which we use while browsing.

    President of the Office – President of the Personal Data Protection Office, a supervisory authority in the understanding of GDPR, which supervises the adherence to laws governing the protection of personal data in Poland.

    Profiling – represents any given automated form of personal data processing, which is based on the use of personal data allowing for the assessment of personal factors of a natural person, in particular an analysis or prognosis of aspects concerning the work effects of work of this natural person, their financial status, health, personal preferences, interests, trustworthiness, behaviour, location or movement of the person whose data is concerned- under the condition that such activity produces legal effects regarding this person or influences them in a similar way.

    SSL Protocol – is a network protocol used for secure online connections, accepted as the encoding standard on WWW websites. An SSL Certificate ensures the confidentiality of data transmission online.

    Processing – an operation or set of operations carried out on personal data or sets of personal data in an automated or non-automated manner, such as collection, recording, organising, structuring, storing, adapting or modifying, downloading, browsing, using, divulging by transmission, distribution or other forms of diffusion, tailoring or connecting, limiting, removing or destroying.

    Policy – privacy policy of Magic City sp. z o.o.

    GDPR – Regulation of the European Parliament and Council (UE) 2016/679 of 27 April 2016 concerning the protection of natural persons in connection with personal data processing and free flow of such data and repeal of directive 95/46/WE.

     

    1. Information on the Administrator

    The Administrator of your data is Magic City sp. z o.o., with headquarters in Warsaw on Aleje Jerozolimskie 179, 02-222 Warszawa.

    The Administrator may be contacted by e-mail: , or by telephone: 22 311 75 11.

    1. Legal basis for processing

    Purpose of Processing

    Legal Basis

    Data Recipients

    Duration of Processing

    To answer a message sent by e-mail

    Art. 6 par. 1 lit.f i.e. a legally viable interest of the Administrator based on finding and retaining a customer

    IT service providers; internet providers, hosting providers;
    Facebook Ireland

    Until objection is filed.

    Marketing activities and organisation of prize competitions

    Art. 6 par. 1 lit.f i.e. a legally viable interest of the Administrator based on finding and retaining a customer

    IT service providers; internet providers, hosting providers;
    Facebook Ireland

    Until objection is filed.

    Endeavour to enter into contract

    art. 6 par. 1 lit.b
    GDPR
    The necessary activity to sign a contract with clients, service providers or job candidates

    IT service providers; internet providers, hosting providers;
    Legal firms and legal advisors;

    The duration of a contract, its termination and until the deadline for complaints has passed.

    Recruitment

    art. 6 par. 1 lit. A and b GDPR tj. Within the scope indicated in the regulations of labour law, legal basis is the necessity to take action before signing a contract (art. 6 par. 1 lit. B GDPR), whereas in the scope exceeding labour law regulations, legal basis for personal data processing is acceptance (art. 6 par. 1 lit. a GDPR) given by sending application documents

    IT service providers; internet providers, hosting providers;

    Until the recruitment process is over

    Acceptance and consideration of request

    art. 6 par. 1 lit. C tj.
    responsibility stemming from GDPR on informing the person whose data is concerned of action taken on request

    IT service providers; internet providers, hosting providers
    Legal firms and legal advisers

    until complaint has expired

    Statistics

    art. 6 par. 1 lit. F tj. the Administrators legally sound interest based on collecting and using statistics to improve the scope and quality of offered services.

    IT service providers; internet providers, hosting providers

    Providers of statistics research tools

    Until objection is lodged.

    1. Rights of persons who the data concerns

    Every person, whose data is processed has rights based on GDPR.

    The right to access ones personal data.

    Every person has the right to access confirmation from the Administrator on whether data concerning them is being processed, and if so, has the right to access the data and other information.
    The first copy of data being processed shall be passed on to that person free of charge. For any further copies, which the person whom the data concerns, we may request a reasonably priced fee stemming from administrative costs. If you, request a copy via e-mail and if you do not state otherwise, the information will be given in electronic form.

    The right to rectification

    You have the right to request that we immediately rectify your personal data if it is incorrect. You also have the right to request that incomplete personal data be completed, including by providing an additional statement.

    The right to remove data

    You have the right to demand the immediate removal of your data from us, and we, without delay, must remove it, under the condition that one of the following circumstances occurs:

    • Your personal data is no longer necessary for purposes, for which it was collected or processed differently;
    • You withdrew your consent, on which processing is based and there are no other legal grounds for further processing;
    • You lodged an objection to processing and there is no overriding legal basis to process the data;
    • Your personal data was processed unlawfully;
    • Your personal data must be removed in order to fulfil legal responsibilities foreseen by EU law or the law of a member state, which the Administrator is subject to;
    • Your personal data was collected in connection to the offer of services of an information society.
      In accordance with GDPR, your data, despite lodging a demand and adherence to the above, may not be removed if its processing is necessary:
    • to use ones right to freedom of speech and information;
    • to fulfil legal responsibilities foreseen by EU law or the law of a member state, which the Administrator is subject to, or to realise a task in public interest or in a frame of public authority given to the Administrator;
    • for the sake of public interest in the scope of public health;
    • for archival purposes in public interest, for scientific or historic research or statistics purposes, unless it is probable that the right to remove data will prevent or impede the realisation of the purposes of such processing;
    • To determine, pursue or protect claims.

    The right to limit processing

    You have the right to demand of the Administrator to limit processing in the following instances:

    • You question the accuracy of the personal data- for a time allowing the Administrator to check the accuracy of that data;
    • The processing is illegal, and you, object to the removal of data, instead demanding the limiting of their use;
    • The administrator no longer needs that personal data for processing, but it is required by you, to determine, pursue or protect claims;
    • You lodge an objection to processing- until it has beed stated that the legal basis of the Administrator overrides the basis of a person’s objection, whom the data concerns.

    The right to lodge an objection

    You have the right to lodge an objection at any given moment- for reasons of special circumstances- to processing based on the legal basis of the Administrator’s interest or to realise activity in public interest or in a frame of public authority; in this profiling on the basis of these regulations.
    In the event of an objection, we are no longer permitted to process personal data, unless we can demonstrate compelling grounds for the processing which override the interests, rights and freedom of the data subject or to determine, pursue or protect claims.

    The right to transmit data

    You have the right to receive your personal data that you provided us with in a structured, commonly used and machine-readable format, and you have the right to transmit such personal data to another administrator without hindrance from us if:

    • Processing is based on consent or contract and
    • Processing is carried out in an automated way.

    he possibility of exercising your right to transfer data and transferring it by the Administrator directly to another administrator will be realised if technically possible.

    Pursuant to GDPR, the realisation of your rights may not adversely affect the rights and freedoms of others.

    The right to withdraw consent

    If your data is processed based on consent, you have the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

    If you withdraw your consent, we have the right to continue processing your data if necessary:

    • to exercise the right to freedom of expression and information;
    • for compliance with a legal obligation requiring processing under EU or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
    • for reasons of public interest in the field of public health;
    • for archiving purposes in public interest, for scientific or historical research purposes or for statistical purposes, insofar as the right to removal is likely to render impossible or seriously impair the achievement of the purposes of such processing;
    • to establish, pursue or defend claims.

    The right to lodge a complaint

    You have the right to lodge a complaint with the President of the Personal Data Protection Office. As indicated by the President of the Personal Data Protection Office, since the President of the Office is the body controlling the correct application of the provisions on the protection of personal data by the administrator, the person filing the complaint should first contact the administrator in order to exercise his or her rights.

    Direct link to the website of the Personal Data Protection Office to submit a complaint;

    https://uodo.gov.pl/pl/p/skargi

    1. Security of using the website

    We would like to inform you that Magic City sp. z o. o. applies adequate technical and organisational measures to ensure the maximum level of protection for people using the company’s website and providing their personal data via the contact form.

    In order to guarantee the highest level of security when using the website, it is secured with an SSL code.

    The website may contain appropriate links to other websites (websites) or other media (radio, television, press, spatial advertising, etc.). Due to the above, the Administrator is not responsible for the privacy policies that will apply on these websites or in such media. The Administrator is not responsible for the availability of any services or goods made available via websites or other media to which links may be found on website.

    The Administrator is also not liable for any damage resulting or likely to result from the use of such websites or media.

    1. Cookies

    By using the website https://incaplay.pl/ you accept cookies that enable the website of Magic City sp. z o.o. to be operated. The cookies we use are part of the Google Analytics solution. Data obtained by the indicated service are processed to the country of the product supplier, i.e. the United States, while meeting all European Union requirements for processing to third countries. To obtain detailed information about the solution used, please click on the link below:

    https://support.google.com/analytics/answer/6004245

    We use cookies for the following purposes:

    – maintenance and correct operation of website services

    – keeping statistics of users visiting the website

    Additionally, we would like to inform you that it is possible to manually configure cookies in individual browsers. Cookies can be restricted or blocked completely. Below are instructions for configuration in each browser.

    Internet Explore

    Microsoft Edge

    Mozilla Firefox

    Chrome

    Opera

    Safari

    1. Final Provisions

    Using the website https://incaplay.pl/ and providing your personal data in the forms is completely voluntary. In some cases, providing data may be necessary to achieve a specific purpose.

    Magic City sp. z o. o. reserves the right to change the Policy at any time due to the scope of services offered and to adapt the amended law. In each case, if possible, we will try to inform you about the update of the Policy before its introduction.

    Privacy Policy last updated on 01/07/2019.