GDPR Information Clause

This notice summarises the key rules for the processing of personal data on the Kraken Group website, including technical data related to the use of external content. More extensive information can be found in the document Privacy Policy.

1. Who is the data controller?

The controller of personal data is KRAKEN GROUP Spółka z ograniczoną odpowiedzialnością z siedzibą w Poznaniu, ul. Szamarzewskiego 21/2, 60-514 Poznań, KRS: 0001115291, NIP: 7812072890, REGON: 529113832.

2. How can the Controller be contacted?

• e-mail: info@krakengroup.eu
• phone: +48 790 350 450
• form: Contact

3. What data do we process?

The scope of data depends on how the Website is used. We may process:

• data entered in the Contact Form, in particular full name, e-mail address, company name, inquiry subject, selected model, and message content,
• technical data such as IP address, browser data, device data, server logs, information about visited subpages, language settings, and data related to the use of embedded content.

4. Where does the data come from?

• directly from the data subject when they complete a form or contact the Controller,
• automatically from the device and software used to access the Website, including technical cookies necessary for selected functions,
• indirectly from external service providers, solely to the technical extent connected with the use of embedded content.

5. For what purposes and on what legal bases do we process data?

• replying to inquiries and taking steps prior to entering into a contract: Article 6(1)(b) GDPR,
• handling correspondence, ensuring Website security, and defending against claims: Article 6(1)(f) GDPR,
• complying with legal obligations: Article 6(1)(c) GDPR,
• carrying out actions based on voluntary consent: Article 6(1)(a) GDPR, if such consent is granted separately.

6. Is providing data mandatory?

Providing data is voluntary, but for required data it may be necessary to send a Contact Form or obtain a response.

7. To whom may we disclose data?

Data may be entrusted to providers of hosting, IT infrastructure, software, technical support, and other processors acting on behalf of the Controller. Data may also be disclosed to entities authorized under applicable law.

8. Is data transferred outside the EEA?

As a rule, data is processed within the European Economic Area. When external services are used, such as embedded content or maps, technical data may be transferred outside the EEA in accordance with the rules of the relevant provider and mechanisms permitted by the GDPR.

9. How long do we retain data?

Data is retained for the period necessary to fulfil the purpose for which it was collected and afterwards for the period needed to demonstrate the lawfulness of the Controller's actions, defend against claims, or comply with legal obligations.

10. What rights does the data subject have?

The data subject has the right to access data, rectify data, erase data, restrict processing, data portability, object to processing, withdraw consent, and lodge a complaint with the President of the Personal Data Protection Office.

11. Is profiling used?

Personal data is not used to make decisions producing legal effects solely by automated means. The Controller does not carry out profiling based on data collected through the Website unless the data subject is informed separately in the future.

12. Information about external technologies

If the User uses embedded content or external services available on the Website, providers such as Google or YouTube may independently use their own tracking technologies, cookies, or technical identifiers in accordance with their own policies. This may involve the processing of technical data and possible transfers outside the EEA according to the rules adopted by the relevant provider.