TIME.TO PRIVACY POLICY

Version 3 of May 20, 2021.

1. General principles of the privacy policy adopted by us

1. TimeTo sp. z o. o. attaches particular importance to the confidentiality and security of personal data of the users of the Timoroloan.com website and of other ADO websites (hereafter: the website). In this regard, we in particular from the principles arising from the following laws and regulations, enacted on their basis: we are

1. inspired by Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of individuals in this regard. which concerns the processing of personal data and the free movement of such data and the repeal of Directive 95/46 / EC (hereafter: GDPR);
2. the law of 10 May 2018 on the protection of personal data (Official Journal of 2018, point 1000, hereafter: UODO);
3. the law of July 18, 2002 relating to the provision of electronic services (Official Journal of 2017, article 1219, hereinafter referred to as: UŚUD);
4. The law of July 16, 2004 - Law on telecommunications (Official Gazette n ° 171, article 1800, and its subsequent modifications, hereinafter referred to: tel.).

2. The administrator of the personal data of persons using the website is TimeTo Sp. Z oo based at ul. Dunikowskiego 10 in Gliwice, registered in the register of entrepreneurs kept by the district court of Gliwice, 10th commercial division of the register of the national court under number KRS: 0000673031.
3. The privacy policy specifies, among other things: the

1. scope and method of processing of personal data of users of the Site by us (hereinafter: Client)
2. the ability to access this data,
3. how to use this data,
4. the use of cookies policy on the website.

2. Mode of collection of user data

1. We want to match the services we provide to the user's situation in the best possible way and make it easier for them to contact us. To this end, we collect various data about you. However, we only collect and process data that you provide to us (except, in certain situations, data collected automatically using cookies and login data, as set out below).
2. In accordance with the accepted practice of most websites, we store HTTP requests directed to our servers. The explored resources are identified by URL addresses. The exact list of information stored in the web server log files is as follows:

1. public IP address of the computer from which the request originated (this can be directly from the user's computer);
2. client station name - identification performed by the http protocol, if possible;
3. arrival time of the request;
4. the first line of the http request;
5. http response code;
6. the number of bytes sent by the server;
7. URL of the page previously visited by the user (referrer link) - if the visit to the ADO site took place via a link (affiliation);
8. information about the user's browser;
9. information about errors that occurred during the execution of the http transaction.

3. The basis for the processing of the user's personal data is their consent to the processing of their personal data. Consent can only be expressed by the user voluntarily, by filling out the appropriate contact form, on the administrator's websites or in any other way, or with the possibility of sending a summary by email or by subscribing to the newsletter. The data provided in the form is processed for the purposes specified in the consent, or

1. consent to the processing of personal data for marketing purposes of the administrator, including customer profiling;
2. Consent to receive commercial information and offers from the Administrator;
3. Consent to share the Customer's e-mail address with the Administrator's business partners in order to receive commercial information from them on new offers, promotions, services;
4. Consent to receive the newsletter;
5. Consent to treatment n. Customer's phone number for direct marketing purposes.

4. The consent given by the user to the processing of his personal data is entirely voluntary, informed, explicit and confirmed by the user. The administrator uses the opt-in policy to obtain consents, which means that it is only by checking the box that the user consents to the indicated content.
5. Personal data is also processed on the basis of Art. 6 seconds 1 on. f GDPR for contact purposes unrelated to the provision of services by the administrator or on behalf of business partners, in order to answer questions, as well as for storage and statistical purposes, the director's legitimate interest
6. in with regard to the processing of personal data, the user has the right to:

1. request the administrator to access their personal data,
2. requests from the administrator to correct their personal data,
3. requests from the administrator to delete their personal data, personal data data
4. requested from the administrator to limit the processing of your personal data, the
5. right to withdraw your consent to the processing of personal data at any time, which however does not affect the processing of personal data between the consent and its revocation, the
6. transfer of your personal data,
7. by filing a complaint with the supervisor body - the President of the Office for the protection of personal data, ul. Stawki 2, 00-193 Warszawa ..
8. In case of processing of personal data in accordance with art. 6 seconds 1 on. f GDPR, you have the right to object to the processing of personal data.

7. To exercise the above rights, send an e-mail to brakzgody@timeto.do, containing the following data: e-mail address or telephone number and the content of the request, for example l 'cancellation or modification of data - in this case, indicate a new e-mail address, for which you intend to provide the newsletter service.

3. Profiling

1. As part of the provision of services, we make decisions in an automated way based on the data we have about you, including the data you provided in the form and stored in the web server log files. On the basis of this information, we assign you a personal profile relating to the possibility of offering you services provided by our partners. These decisions are made automatically based on the scoring model we have developed. The decisions taken automatically affect the selection of products offered.
2. Profiling refers to the processing of personal data consisting in the use of your personal data to evaluate some of its characteristics, in particular to analyze your economic situation, your preferences, your interests and your location. We profile you for the needs of our activity, that is to say the evaluation of your solvency, to offer you insurance if you are a driver and to choose a leasing offer that corresponds to your preferences.
3. Automated decision-making for the purposes of direct marketing of Administrator's services as well as the services and products of Administrator's business partners is necessary for the proper performance of Administrator's activities. The above automated decisions for marketing purposes are only made on the basis of your consent.
4. If you do not agree with our assessment of the above, you can report the above in the form referred to in point 2.6 above.

4. The scope of the data collected about the user through the site and the methods of their use

1. The scope of the data processing depends on the scope of the consent given by the user, however, as intended, in order to fully provide the service, the ' The user must give full consent.
2. In case of consent to the processing of personal data, the user must provide the data that allow his identification and contact with him, or at least name, first name, e-mail address and telephone number. By completing the contact form, the administrator does not request any other personal data.
3. For some products and services, it may be necessary to provide more detailed personal data. In this case, the purposes of the processing will be indicated during the User's telephone conversation with the Administrator's consultant, or at the same time as the appropriate form for recording the associated personal data by the User.
4. The administrator informs the user that he uses the following technologies to track the actions taken by the user on the website:

1. Facebook, Twitter, Google+, LinkedIn, Pinterest, go.pl - to manage advertisements on the website aforementioned. administrator and conduct marketing, remarketing and retargeting activities.

5. The Administrator collects the data provided by the User in order to present the User with an offer of financial products (in particular credits and loans, products intended for debt restructuring, insurance and investment products). Consequently, the Customer's personal data may be used in particular for the following purposes:

1. verification of the identity of the User, also by telephone;
2. present the offer of a specific product or service of the ADO business partner;
3. establish contact with the User directly via the ADO business partner;
4. exercise the rights of the interested parties;
5. marketing activities, including by electronic communication, including analysis of user behavior and needs, market analysis;
6. sending newsletters or SMS, or sending information, subject to specific consent;
7. creation of user database;
8. improve our offer and the content of our website;
9. for other purposes indicated in this privacy policy.

6. The administrator may, under the terms of art. 28 GDPR, to entrust their processing to third parties without the separate consent of the user.
7. You acknowledge that your personal data may also be transferred to authorized state authorities as part of their procedures, at their request and after fulfilling the conditions confirming the need to obtain such data from the Administrator.

5. Rules governing the use of cookies

1. Use of the Site by the user may involve back-up and storage on the user's computer (or any other device allowing access to the Site, for example cookies. Cookies are digital text files that allow the use of various functions of the websites, for example they collect information about the use of the website, allow you to remember the user's session state or allow you to adapt and optimize the content displayed according to your preferences. The
2. Site uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the user's end device until '' when logging out, exiting the website or deactivating the software (browser). Persistent cookies are stored on the user's end device for the duration specified in the parameters of the cookie file or until they are cleared by the user.
3. Cookies are sent and can be saved on the user's computer in order to allow access for the following purposes:

1. adapting the content of the Site to the user's individual preferences and needs (profiling, see above);
2. statistics, concerning the activity on the pages of the Site (for example, information on the geographical location of users, the frequency of use of our services, reports on interests and demographic data), in order to better understand how users use the Site and improve their content, eg. Google Analytics, Brand24.pl;
3. behavioral, contextual and remarketing advertising, such as Google AdWords, Google AdSense, advertising through affiliate marketing technology;
4. Saving or using cookies does not change the configuration of the user's computer or the software installed on that computer.
5. The user has the option of specifying the conditions for storing or accessing cookies by configuring the software installed on the telecommunications terminal he uses.
6. Most web browsers allow cookies to be saved on the user's device by default. The user can at any time block the possibility of saving cookies or consent to their storage on his computer by modifying the settings of the web browser, the advertising settings, the advertising settings of the mobile application and any other available method. .
7. Cookie management instructions are available on http://wszystkoociasteczkach.pl/ in Polish or on http://www.allaboutcookies.org/manage-cookies/ in English. However, disabling cookies may make it difficult to use the Site, in particular by limiting or disabling certain features of the Site, it is therefore recommended to consent to the use of cookies by the browser.
8. At the same time, we would like to inform you that if the user's browser accepts cookies, the user consents to the use of these cookies in accordance with the provisions of Polish law, in particular art. 173 of Prof. Tel. In particular, the content of cookies may be transferred to advertisers and partners who collaborate with PDC as part of the services offered on the pages of the Site or announced through it.
9. The user can at any time delete the cookies installed by using the appropriate option in the browser he uses. When you browse the Site in private browsing mode of the browser, all cookies installed when visiting the Site are deleted by default after closing the browser. Details can be found at the browser software vendor or in the "Help" section of the browser menu.
10. Cookies are also placed on the website user's phone and may also be used by advertisers and partners who work with the website manager.

6. Personal data protection measures

1. User information is processed by the administrator with adequate measures. Polish law, in particular those indicated in the introduction to this notice. These measures are primarily aimed at protecting users' personal data against unauthorized access. In particular, only authorized persons (employees and collaborators of TimeTo) have access to the personal data of users, who are required to keep this data secret.
2. The administrator keeps the personal data until the consent to the processing of personal data is revoked or for the time necessary to achieve the purpose for which the consent was obtained, in particular for the duration of the service or the contract. and for the period during which it is possible to make complaints related to the activity of the Company, in any case, at the latest within 3 years from the date of acquisition of your personal data .
3. In addition, the data may be kept for the purposes of preventing abuse and fraud, for statistical and archiving purposes for a period of 10 years from the date of termination of the contract or the event which determines its termination. need.
4. At the same time, in order to ensure accountability, the administrator retains the data for the period during which the administrator is required to keep the data or documents containing them to document compliance with legal requirements, including the control of their compliance by the public authorities.
5. Your personal data will not be transferred outside the European Economic Area.
6. Personal data may also be made available to entities providing IT, legal, auditing, accounting, accounting, postal and courier services to the extent necessary to ensure the proper provision of services and to state authorities. as part of their procedures under applicable law, as well as the entity to which we are required to provide them under applicable law.

7. Changes

1. PolicyThe extension or modification of the scope or content of our services, as well as changes in legal regulations, may require the introduction of changes in the privacy policy. In this case, we will notify you of the changes in the "Privacy Policy" tab. With the modification of the version of the privacy policy, the date appears indicating the date of its implementation and the signature designating the given version of the privacy policy. Any changes will not affect your fundamental right to exercise control over the data we process.

8. Contact with the site administrator

1. We make every effort to allow users to send comments, suggestions, suggestions and reservations regarding our data processing policy. A customer service representative is responsible for contacting you. All questions regarding the content of this policy should be sent to the email address: kontakt@timeto.do.
2. In accordance with the provisions of art. 13 seconds 1 on. b of the GDPR, the Administrator indicates that he has appointed the Data Protection Officer, from whom interested Users can contact the Administrator in writing or by e-mail at the following e-mail address: iod@timeto.do.