Disclaimer (privacy policy/GDPR)

Conditions for use KBTmusic site

Privacy policy

1. PRELIMINARY PROVISIONS

Who is your data administrator?

Your data is administered by KBT Poland Sp. z o.o. ul. Marii Konopnickiej 6 00-491 Warsaw, Poland.

2. How do we process your data?

Personal data are a kind of information that allows to identify you, ex: your name and surname, phone number, e-mail address. In case of legal entities it also includes names of members of the board, representing given entity, date of legal representatives, data of employees who are also the contact person.

The following privacy policy regards personal data and other information we gather, regardless of it being acquired through the website, the app, social media, phone, text, email, in traditional mail and other correspondence or other sources.

We commit to protect the data that we process. With great care, we choose mechanisms of security adequate to identified risks. Detailed information on the subject can be found here.

We are obligated to use personal data in accordance with current regulations - especially in accordance with the April 27th Regulation of the European Parliament and of the Council (EU) 2016/679 on protection of physical persons in reference to personal data processing and in reference to the free movement of such data, and directive 95/46/WE (GDPR)

At the same time, we inform that using services, is possible after reading this Privacy policy.

what kind of information do we gather and how do we use it,

how long do we store personal data,

what is the legal basis for personal data processing,

do we share the data with other entities,

what are your rights when it comes to your personal data.

What are the information we gather and how do we use it?

3. Personal data processing, what kind of data do we gather and how do we use it

 We gather personal data directly from you - it’s the information you provide use with while using services. Setting up an account requires providing (a) username (user’s e-mail), (b) password and (c) country of residence. We need that information to make it possible for you to use your account. Account password is encrypted and is confidential, that's why you should not share it with anyone.

Using paid services requires providing additional personal data which include, among others, your name and surname.

4. Personal data processing

 Personal data processing is used to identify you, identify the actual beneficiary as laid out by the regulations for countering money laundering and financing terrorism, to monitor your business relations with us, as well as to check the sources of assets. Based on acquired information we determine the aim and nature of your business relationships and perform other activities required by the regulations on money laundering and financing terrorism, we especially determine if your first payment to our bank account was performed with your bank account in an entity providing financial services, where information about the payment ordering party matches the information you have provided us.

We also process your personal data when you contact us, for example, through our Customer Service Department. It also pertains to data necessary to communicate with you, including providing you with answers to your questions and doubts. To do that, we use data provided by you in the your account. Personal data processing is limited to information necessary to provide support

Your personal data is used to:

• to perform obligations laid out in our contract with you,
• to provide specific services and their functionality,
• to provide status of performed services
• to provide support while providing service through Customer Service Department, as well as, to solve technical problems and other matters through the contact form,
• to contact you, including providing information about the changes made to our Rules and Policies,
• to respond to claims regarding provided services,
• to conduct court proceedings and other proceedings in case claims arise,
• to settle services.

5. Types of gathered data:

The Company gathers the following data:

(A) Identification information:

1) place of registration of the user

2) information regarding the document confirming identity of the user;

6. PERSONAL DATA PROCESSING

The Company processes gathered data for the following purposes:

(A) to execute a contract, including providing services, to adjust services to its user’s needs, for internal and external analyses and research to improve the Platform and/or services; to provide security of services, including to detect fraud and abuse on the Platform and/or services and to counter them, according to art. 6 sec 1a of General Data Protection Regulation of 2018 (GDPR). Data is processed until expiration of contract, and sometimes, in cases where it’s allowed or required by law, data can be processed after the contract’s expiry, for example for the purpose of global statistics processing, regulation of claims and commitments.

(B) For statistical analysis, such as identification of unique users, to determine number and time of visits, to determine the beginning and end of session, to ensure functionality of the Platform; in regard to marketing, including analysis and profiling, products and services of the Company, in accordance with art. 6 sec. 1f of General Data Protection Regulations of 2018 (GDPR). The Company processes data until an explicit objection to the processing is raised by the owner of the personal data. 3.2 Processing of personal data is conducted in accordance with art. 6 sec. 1a of General Data Protection Regulation of 2018 (GDPR) and only in the time the consent to process personal data is valid.

Newsletter

Personal Data Processing takes place also when you order the service of Newsletter. The legal basis for personal data processing in this case is this policy and consent that it contains:

I hereby consent to processing of my personal data (e-mail address) provided in the process of registration. The consent is given by accepting privacy policy and providing us with your e-mail address.

• Providing your personal data and consenting to processing is voluntary.
• At any time you can opt out of the Newsletter and withdraw your consent to process personal data.

Contests and promotions

If you want to take part in contests organised by us, please provide information necessary for conducting given action, communication and possible notification about your winning and bookkeeping.

Cookie files

We gather information such as technical data of the device with which you gain access, including information on internet connection, IP address and other technical details provided by your browser. We process information on when and how you use our services, those are, among others, measurement data, movement data, transaction history and their type, data regarding your activity. We gather information through cookie files and similar technologies.

How long do we store personal data?

Any data gathered by us are stored on our servers or servers of entities cooperating with us. We use appropriate technical and organizational protection to ensure security of personal data, protecting from illicit data processing, accidental loss, damage or destruction of data. Entities cooperating with us are also obliged to manage data according to our safety and privacy protection requirements. We process personal date within a time necessary goals laid out in this Privacy policy.

7. INFORMATION DISCLOUSURE

The Administrator has the right to cooperate with external companies in terms of development and

enhancement of the Platform and /or services. Such companies gather statistical information about the use of the Platform and are authorised to use personal data only in the manner necessary to provided the Administrator with appropriate services. We commit to signing a non-disclosure agreement every time we use external companies.

The Company has the right to divulge publicly general information about its Platform’s users only if it’s impossible to determine the owner of such information.

The Company can divulge information to comply with regulations of law, conduction court proceedings or proceedings conducted by state authorities, regardless of country of residence of the user or other socially material instances.

8. RIGHTS AND OBLIGATIONS OF USERS

Due to personal data processing based on consent to process personal data the user has following rights:

1) the right to access to data, its correction and deletions (in situations not forbidden

by law);

2) the right to receive a copy of stored data;

3) the right to limited personal data processing or refusal of consent to

process personal data;

4) the right to file a complaint to personal data protection authority;

5) the right to cancel previous consent to personal data processing (without

effect on data processing that was done before the cancellation of consent);

6) the right to object to personal data processing for specific purposes;

7) other rights arising from the General Data Protection Regulation of 2018 (GDPR)

(RODO) (General Data Protection Regulation 2018 (GDPR)).