Privacy Policy
How Clout sp. z o.o. processes the personal data of clout.pl users, and the rights available to you.
This English translation is provided for convenience. The Polish version is the legally binding text.
Introduction
This policy sets out the rules for the processing of personal data of Users of the clout.pl website, operated by Clout sp. z o.o. with its registered office in Cieszyn, as well as of the Clout fanpage on Facebook and Instagram.
Personal data is processed by the Controller in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”), and the Act on the Provision of Electronic Services (ustawa o świadczeniu usług drogą elektroniczną).
Who is the Controller of the data?
The controller of the personal data processed in connection with the use of the website www.clout.pl is: Clout spółka z ograniczoną odpowiedzialnością, Rynek 6, 43-400 Cieszyn, entered into the National Court Register (Krajowy Rejestr Sądowy) under KRS number: 0000822011, NIP: 5482728925, REGON: 385300554.
All questions and requests relating to the protection of personal data should be directed in writing to the Controller's correspondence address or to the e-mail address: get@clout.pl.
What data is processed?
In connection with the use of the website, the following data is processed:
- data voluntarily provided by the User — in the content of the contact form,
- data recorded automatically, contained in cookie files — you can read more about the rules of processing data collected automatically in the Cookie Policy section.
On what basis is the data processed?
Data provided by the User in the contact form is processed:
- for the purpose of providing services by electronic means with respect to making available to Users the content collected on the website — in this case the legal basis for processing is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR);
- for the purpose of identifying the sender and handling their inquiry submitted via the form made available — the legal basis for processing is the necessity of processing for the performance of a contract for the provision of the service (Article 6(1)(b) GDPR); with respect to data provided on an optional basis, the legal basis for processing is consent (Article 6(1)(a) GDPR);
- for the purpose of establishing and pursuing claims or defending against claims — the legal basis for processing is the Controller's legitimate interest (Article 6(1)(f) GDPR), consisting of the protection of its rights;
- pursuant to Article 6(1)(a) GDPR — for the purpose of marketing the Controller's products/services;
- for the purpose of conducting marketing communications. Such activities are undertaken by the Controller only where the User has given consent thereto, which may be withdrawn at any time. Personal data is processed for the purpose of sending the requested commercial information — the legal basis for processing is the Controller's legitimate interest (Article 6(1)(f) GDPR) in connection with the consent given;
- for analytical and statistical purposes — the legal basis for processing is the Controller's legitimate interest (Article 6(1)(f) GDPR), consisting of conducting analyses of Users' activity in the Service in order to improve the functionalities applied.
The Controller may use analytical tools such as Google Analytics or Meta Pixel, which collect data on the manner in which Users use the service. This data is used exclusively for statistical and marketing purposes and does not allow the direct identification of a natural person without additional data.
To whom is the data made available?
In connection with the Controller's use of an external provider of e-mail and website hosting services, the entities processing data related to the use of the website will be the hosting service providers.
Where the link to the Fanpage placed on the website on social media platforms is used, the owners of those platforms will be joint controllers of the User's data related to the use of the platforms.
Who may be a recipient of the data?
Recipients of the data may be the Controller's trusted technology and marketing partners, in particular entities providing hosting services, e-mail handling, marketing, analytical services (e.g. Google), or providing CRM systems. The Controller ensures that data is transferred in accordance with applicable regulations and with the application of appropriate safeguards.
How long is the data stored?
Data is stored until the limitation period for the User's potential claims relating to the question submitted to the Controller and the answer given has expired. With respect to data provided on the basis of consent — the data is stored until the consent to its processing is withdrawn.
What rights does the User have?
By providing data, the User has the right to access the data and receive a copy thereof, the right to rectification (correction) of the data, the right to request erasure, restriction of processing, or to object to the processing of data, the right to data portability, and the right to withdraw consent to processing to the extent that the data is processed on the basis of consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
To exercise the rights available, please contact the Controller in writing at the correspondence address or by sending a message to the e-mail address: get@clout.pl.
Is the processing subject to supervision by a supervisory authority?
If it is considered that the processing of data infringes the provisions of the law, in addition to the possibility of contacting the Controller, the User has the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
Profiling of data
The Controller's decisions regarding the processing of data are not made in an automated manner. Users' data is not profiled.









