Personal Data Processing
If you are in the European Union (EU) and thus or otherwise EU data protection laws (in particular, the General Data Protection Regulation 2016/679; “GDPR”) apply to the processing of your personal data, this section will provide key information on the processing of your personal data.
Please be informed that Growbots Inc. (“we”) is a controller of your contact information that we gathered from publicly available, online sources. We may also become the controller of personal data you may further submit during our mutual B2B communication with respect to our cooperation and services that you or us may provide.
Therefore, in compliance with our duties under the GDPR we hereby notify you that:
Our offices are at: Growbots Inc., 1015 Fillmore St. PMB 18339, San Francisco, CA 9411. You can also contact us at: email@example.com.
The purpose of processing your personal data is primarily to establish and continue mutual communication, ask and inform on business occasions and discuss cooperation opportunities that may involve presenting our product and its customization. As we continue our communication we may be presented or present you an offer and discuss entering into an agreement. Therefore, the abovementioned legitimate commercial interest constitutes the legal basis for our initial and early communication and when we exchange further information and personal data as may be needed to enter into a contract, the legal basis for processing is the performance or taking steps leading to the execution of the underlying contract. Same legitimate interests apply when we may process your data to protect our Growbots rights, property and safety or enforce our legal claims or address yours.
For those reasons, the categories of personal data we may process concern such contact data as name, surname, job title, e-mail, company. We will not share or sell these information but your data of limited scope may be disclosed and hence transferred to our team, agents, subsidiary – Growbots sp. z o.o. with registered office in Warsaw, Poland, and trusted third-party recipients (i.e. Google LLC, Salesforce)– to the extent reasonably necessary to fulfill the purpose of data processing such as third-party e-mail platforms, web analytics and statistics suppliers. Those third parties use the information we share only to support our communication.
Since we have offices in the United States and so may do the third-party recipients presented above, please be informed that we entrust your data solely with partners known for high data protection standards, including, as regards the United States, organizations that have been certified under the Privacy Shield Framework and those that we have secured data protection standards and legal grounds for instructing our partners to process your personal data by prior conclusion of a data processing agreements which adhers to the so-called standard contractual clauses adhering to the Commission Decision (EU) 2010/87 of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council, as amended by Commission Implementing Decision (EU) 2016/2297 of 16 December 2016.
We process your data mostly to pursue our legitimate interests or to prepare a contract we may have with you. In certain cases provision of your personal data may be required to enter into or perform a contract and, if obligatory, you will always be informed which data must be supplied. If the legal ground for data processing would be your consent, you will have the right to withdraw your consent at any time. We are also obliged to inform you that we may process your data when we believe we have a legal obligation to do so – in particular when we need to respond to an enforceable authorities’ request or court order.
We will store your personal information only for so long as the purpose of their processing dictates – which is case-specific; for instance, until the end of our communication on particular case or until you have objected to processing your personal data. For security reasons or protection against any claims we may also retain your data in excess of what would otherwise be prompt where our legal obligations supersede your data deletion request. If so, we will inform you about such a circumstance.
We do not use automated decision-making during processing of your personal data but we may use so-called profiling to adjust our mutual communication.
You have the right to access, rectify or erase or have erased your personal data, restrict the processing and object to processing of your data at any time. You can exercise those rights by contacting us at: firstname.lastname@example.org – applicable laws may subject your rights to certain restrictions. Please be advised that it may take us up to 30 days to process your request.
Should you have any privacy related complaints or suggestions, please contact us at email@example.com or at our business address – where we’ll do our best to help; we will also work with the regulatory authorities, including local data protection authorities, to resolve any complaints regarding transfer or other processing of your data that we cannot resolve with you directly – particularly within respective national data protection supervisory authorities relevant for your country, where you also have the right to lodge a complaint under the GDPR.