PRIVACY POLICY

Contents and Purpose of the Privacy Policy

This Privacy Policy outlines the rules for the processing of personal data of users of the postana.ai website (hereinafter referred to as the “ELERNA Platform”), which are voluntarily provided by users in order to use the services offered by the Website Administrator. Our goal is to ensure a high standard of protection for the data you share with us through the Platform, in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”).

Please note that the Platform may include links to external websites or applications. We are not responsible for the safety of your data shared with such external services. We recommend that you read the privacy policies of any external services you visit.

This Privacy Policy is an integral part of the Platform’s Terms of Service, which define the rules, rights, and obligations of users using the Platform.

Data administrator

The data administrator is ELERNA GROUP Spółka z o.o., headquartered in Kraków (address: Chmieleniec 6/9, 30-348 Kraków, Poland, REGON: 528290584, NIP: 6762666516), registered in the Register of Entrepreneurs of the National Court Register under KRS number 0001098308. You may contact us by mail at the address above or via email at: postanasoftware@gmail.com. Providing a correspondence or email address is voluntary but necessary for us to respond to your inquiry.

Data Security

The security of your personal data is our highest priority. Therefore, in compliance with the GDPR, we have implemented and maintain appropriate organizational and technical safeguards tailored to identified risks. These safeguards are regularly reviewed and updated as needed. We have also implemented procedures to ensure that access to personal data is limited to authorized individuals only.

Purpose of Data Processing

The personal data you provide will be used for purposes defined in this Privacy Policy or in the Platform’s Terms of Service.

The Platform Administrator informs you that:

  1. Contact Form – When you use the contact form (e.g., email inquiries or communication via other channels, including social media), your personal data is processed to identify the sender and respond to the inquiry. Providing data is required; otherwise, we cannot process your request. Legal basis: performance of a service agreement (Art. 6(1)(b) GDPR).
  2. Account Registration Form – Personal data provided during registration is used to create your user account. This data is necessary; failure to provide it prevents account creation. Legal basis: performance of a service agreement (Art. 6(1)(b) GDPR).
  3. Email Correspondence – When you contact us by email (e.g., for assistance), the personal data you provide is used to communicate with you and resolve your issue. Legal basis: performance of a service agreement (Art. 6(1)(b) GDPR).
  4. Newsletter Subscription – Your personal data is used to send you marketing content. Legal basis: your consent (Art. 6(1)(a) GDPR).
  5. Phone Contact for Direct Marketing – Your data may be used based on your consent (Art. 6(1)(a) GDPR) or the legitimate interest of the Administrator (Art. 6(1)(f) GDPR).
  6. Other Legitimate Interests – Including data retention for archival and statistical purposes, ensuring legal accountability, and demonstrating compliance. Legal basis: legitimate interest of the Administrator (Art. 6(1)(f) GDPR).
  7. Additionally, in cases 1–6 above, your data may be processed by IT service providers used for operating the Platform (including Google and Amazon Web Service). If necessary, we may also process your data to establish or defend legal claims, based on our legitimate interest (Art. 6(1)(f) GDPR).

Third Parties with Access to Personal Data

Apart from the cases listed in this Privacy Policy, your personal data will not be shared with third parties unless required by law. Your data will not be transferred outside the European Union.

Types of Personal Data Processed

We may process the following categories of personal data:

  1. Personal details (e.g., name, surname, residential address),
  2. Contact details (e.g., phone number, email, mailing address),
  3. We may also process other types of personal data that do not fall into the categories above, provided they are relevant to the purposes outlined in this Policy.

Legal Basis for Data Processing:

Personal data is processed in accordance with the GDPR to perform services described in the Platform’s Terms of Service.

Data Retention Period Your personal data will be processed for the duration of the contract to ensure its performance (Art. 6(1)(b) GDPR) and as long as necessary to fulfill the purposes stemming from our legitimate interests (Art. 6(1)(f) GDPR). The retention period depends on: Legal regulations that may require specific retention periods;

Duration of the Administrator’s obligations related to the agreement:

The time needed to protect the Administrator’s interests and pursue or defend against claims (up to the statute of limitations). Other legitimate interests, such as archiving, statistical purposes, promotion, and marketing, justify data retention for up to 10 years.

Your Rights:

As a data subject, you have the following rights:

  1. Access – You may request confirmation whether your data is being processed and, if so, access to that data.
  2. Rectification – You may request correction of inaccurate data.
  3. Erasure / Restriction – You may request deletion or restriction of data processing where legally justified.
  4. Objection – You may object to processing when based on the Administrator’s legitimate interest.
  5. Data Portability – You have the right to receive your data in a structured, commonly used format.
  6. Lodging a Complaint – You may file a complaint with the President of the Personal Data Protection Office (UODO) if you believe your rights are being violated.
  7. Withdrawal of Consent – If processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of prior processing.

Profiling:

Your personal data will not be subject to profiling.

Requirement to Provide Data:

Where data processing is necessary for entering or performing a contract with the Administrator, providing personal data is mandatory. Without this data, the contract or service cannot be carried out.

Cookies:

The Platform may use technologies such as cookies, web storage, and others to optimize your user experience. These technologies may be used by the Administrator or its partners. Some are essential for the proper functioning of the Platform and do not require user consent.

Other technologies require user consent and are used for:

  1. Enhancing additional functionalities (e.g., streaming),
  2. Analyzing Platform usage,
  3. Direct marketing and displaying personalized ads,
  4. Providing social media features.

Consent may be given during Platform use and can be withdrawn or modified at any time.

The Platform may use the following technologies and tools:

  1. Google Analytics (with advertising features) – for analytics and remarketing,
  2. Meta Pixel and Tiktok Pixel– for ad management and remarketing
Cookie settings 🍪