PRIVACY POLICY

I. Basic information

  1. The data controller of the User's personal data processed for the purpose of using the Platform, the Service or in connection with conducting online meetings is Powerp sp. z o.o., address: ul. FRANCISZKA KLIMCZAKA 1, 02-797 Warsaw, Poland, company no: 0001089185; tax ID: 9512590038.
  2. In connection with the User's use of the Platform or Service, the Administrator processes (i) personal data to the extent necessary to provide services and (ii) information about the User's activity on the Platform.
  3. Personal data processed by the Administrator in connection with the User's use of the Platform or Service or in connection with conducting online meetings may include IP address, e-mail address or other identifiers and information collected using cookies and other tools.
  4. In the event that the Administrator processes personal data of the personnel of an entity with which the Administrator has concluded an agreement, in order to ensure contact with this personnel, the content of Powerp's transparency obligation towards members of this personnel is available at: https://powerp.ai/legal/transparency_notice
  5. Definitions:
    1. Administrator - the entity indicated in paragraph 1 above;
    2. Platform - the website operated by the Administrator at https://www.powerp.ai together with subpages;
    3. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;
    4. Service - a service provided on the basis of Powerp's software;
    5. User - a natural person visiting the Platform or using the Platform, using the Service or invited to use the service.

II. Purposes of data processing

  1. In connection with the provision of the Platform by the Administrator, personal data are processed by the Administrator:
    1. for providing the Platform - the legal basis for processing is the necessity of processing to perform the contract (Article 6, paragraph 1, letter "b" of the GDPR) or, if the contract has been concluded between the Administrator and the entity on whose behalf the User acts, the legal basis for processing is the legitimate interest pursued by the Administrator consisting in the performance of the above mentioned contract by the Administrator (Article 6, paragraph 1, letter "f" of the GDPR);
    2. for analytical purposes - the legal basis for processing is the User's consent to the use of optional cookies (Article 6, paragraph 1, letter "a" of the GDPR);
    3. for advertising purposes - the legal basis for processing is the User's consent to the use of optional cookies (Article 6, paragraph 1, letter "a" of the GDPR);
    4. for the purpose of communication and resolving the matters to which the correspondence addressed to Administrator by the User relates, including via the contact form - the legal basis for processing is the legitimate interest of the Administrator (Article 6, paragraph 1, letter "f" of the GDPR) consisting in conducting correspondence with the User.
  2. In connection with the provision of the Service by the Administrator, personal data are processed by the Administrator solely for the purpose of providing the Service - the legal basis for processing is the necessity of processing to perform the contract (Article 6, paragraph 1, letter "b" of the GDPR) or, if the contract has been concluded between the Administrator and the entity on whose behalf the User acts, the legal basis for processing is the legitimate legal interest pursued by the Administrator consisting in the performance of the aforementioned contract by the Administrator (Article 6, paragraph 1, letter "f" of the GDPR).
  3. In connection with conducting online meetings, personal data are processed solely for the purpose of their organization - the legal basis for processing is the legitimate interest of the Administrator (Article 6 paragraph 1 letter "f" of the GDPR) consisting in the will to conduct an online meeting with the User, bypassing the need for physical presence in one place.

III. Voluntary provision of data

  1. In connection with the provision of the Platform by the Administrator, providing the data referred to in section II.1 point 1 is a contractual obligation. Failure to provide the data will prevent Administrator from providing the Platform.
  2. In connection with the provision of the Platform by the Administrator, providing the data referred to in section II.1 points 2-4 is voluntary. Failure to provide the data referred to in section II.1 point 2 will prevent the Platform from being tailored to the User's needs; Failure to provide the data referred to in section II.1 point 3 will prevent the User from displaying advertisements tailored to the User. Failure to provide the data referred to in section II.1 point 4 will prevent the User from responding to correspondence.
  3. In connection with the provision of the Service by the Administrator, providing the data is a contractual obligation. Failure to provide the data will prevent Administrator from performing the Service.
  4. In connection with conducting online meetings, providing personal data by the User is voluntary, but necessary to conduct the meeting.

IV. Types of cookies

  1. Cookies used on the Platform are divided into the following categories:


    TYPE DESCRIPTION
    Necessary cookies Necessary cookies are installed to ensure the User has access to the Platform and its basic functions, so they do not require the User's consent. Without them, the Administrator would not be able to provide services on the Platform.
    Optional cookies 1) Analytical - allow checking the number of visits and traffic sources on the Platform. They help identify which pages are more or less popular and understand how users navigate the site, which helps the Administrator improve Platform performance.
    2) Advertising - used to deliver ads tailored to the User's interests and preferences. Based on these cookies and activity on other sites, a profile of the User's interests is built.
  2. Cookies on the Platform are stored as follows:


    TYPE DESCRIPTION
    Session cookies Some cookies are temporary and stored until logout, leaving the page, or closing the web browser. These help analyze web traffic, identify and solve technical problems, and make navigating the Platform easier.
    Persistent cookies “Persistent” cookies are stored for a defined period specified in their parameters or until deleted by the User. They help the Administrator remember the User's settings and preferences to make future visits more convenient and content more personalized.
  3. When using the Platform, the User may receive cookies from third parties cooperating with the Administrator, including analytical service providers and advertising partners.
  4. The Platform uses services and tools from third parties cooperating with the Administrator, in particular in the scope related to the provision of services available via the website and with analytics, advertising or measurement of advertising campaign results. The Administrator uses:
    1. Google Ads - a service provided by Google Ireland Limited (Ireland) that allows our services to be presented within Google's search engine and on websites that are part of Google's advertising network. A user entering certain search terms may be shown advertising correlated to the search term entered. As part of Google Ads, the Administrator has the ability to analyse the advertisements published on Google's websites, which allows the Administrator's offer to be better tailored. After clicking on a banner ad published by Google, cookies are stored on the User's device. More information on the Google Ads tool is available at: https://support.google.com/adspolicy/answer/54818?hl=en-GB
    2. Google Analytics - a service provided by Google Ireland Limited (Ireland) to analyse the Platform's traffic and browsing activities. The service is used in particular for statistical purposes to see how often individual pages are visited. The Administrator also uses this data to optimise and develop the Platform. More information on the Google Analytics tool is available at: https://marketingplatform.google.com/about/analytics/terms/us/
    3. Google reCAPTCHA - a service provided by Google Ireland Limited (Ireland) to recognise artificial traffic on websites and to protect against, among other things, activities undertaken by web bots;
    4. Google Tag Manager - a service provided by Google Ireland Limited (Ireland) for the purposes of Google Analytics and the integration of additional marketing services. The exclusive use of Google Tag Manager does not involve the collection of personal data. This tool enables the operation of tags (tagging), which can collect data under certain circumstances. Google Tag Manager does not use this data. If saving option has been deactivated at domain or cookie level, this will apply to all tracking tags implemented via Google Tag Manager. More information on the Google Tag Manager tool is available at: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
  5. The Administrator may use external payment systems. The Administrator does not store any personal data or financial information in connection with the use of such systems, including payment card numbers. All this information is transferred by the User directly to the external provider.

V. Changing cookie settings

  1. The Platform uses an application that allows for managing consent to make it easier for the User to manage their preferences regarding cookies and other tools.
  2. The User may use the application referred to in section 1 to change their cookie settings, including:
    1. express and withdraw consent to the use of optional cookies;
    2. change previously selected settings.
  3. The User may check in the web browser which cookies are installed on the device and delete them individually or all at once.
    1. Apple Safari browser: Preferences > Privacy > Cookies and website data (select one of the options).
    2. Google Chrome browser: Settings > Advanced > Privacy and security > Content settings > Cookies > All cookies and website data (select one of the options).
    3. Mozilla Firefox browser: Tools > Options > Privacy and security > History > Delete individual cookies.

VI. User's rights

  1. The User has the right to request from the Administrator access to personal data, its rectification, deletion or restriction of processing, the right to object to processing, as well as the right to transfer data.
  2. In the event that the legal basis for the processing of personal data is consent, the User has the right to submit a declaration of withdrawal of any expressed consent at any time by contacting the Administrator by e-mail. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
  3. The User has the right to lodge a complaint with the President of the Personal Data Protection Office.

VII. Duration of the processing

  1. In the case of cookies, personal data will be processed in accordance with the storage period of the given cookie file (see section IV.2 of this Privacy Policy).
  2. In the case of the Service and in connection with the provision of the Platform, personal data will be processed for the period in which the aforementioned services are provided and after their provision has completed, but only if it is permitted or required under applicable law, e.g. processing for statistical, billing or claim purposes.
  3. In cases other than those indicated in sections 1-2 above, personal data will be processed for the period necessary to establish, pursue or defend claims.

VIII. Data recipients and processing outside the EEA

  1. In connection with the use of the Platform, Service or conducting online meetings, the User's personal data will be disclosed to external entities, including in particular those providing IT services and IT tools for Powerp, including Google Ireland Ltd.
  2. The Administrator may transfer personal data outside the EEA. The Administrator transfers personal data outside the EEA only when it is necessary to ensure an adequate level of protection, primarily through:
    1. cooperation with entities processing personal data in countries for which an appropriate decision of the European Commission has been issued regarding the provision of an adequate level of personal data protection;
    2. use of standard contractual clauses issued by the European Commission.

The indicated safeguards are made available at the Administrator's registered office.

IX. Changes to Privacy Policy

  1. Any questions regarding data protection, including personal data, should be directed to the following e-mail address: privacy@powerp.ai
  2. This Privacy Policy is verified on an ongoing basis and, if necessary, updated unilaterally by the Administrator, without the need to conclude an amendment.
  3. The current version of this Privacy Policy is effective from 29.07.2025.