{"id":649,"date":"2025-09-08T17:17:15","date_gmt":"2025-09-08T17:17:15","guid":{"rendered":"https:\/\/eterna-link.com\/privacy-policy\/"},"modified":"2025-09-14T20:37:39","modified_gmt":"2025-09-14T20:37:39","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/eterna-link.com\/en\/privacy-policy\/","title":{"rendered":"PRIVACY POLICY"},"content":{"rendered":"\n

PRIVACY POLICY<\/h1>\n\n

\u00a7 1. GENERAL PROVISIONS <\/h2>\n\n
    \n
  1. The administrator of the personal data of users of the website located at www.eterna-link.com<\/a> isD&M 2k25<\/strong>with its registered office at: \u015awi\u0119ty Marcin 29\/8, 61-806 Pozna\u0144, Poland, VAT ID (NIP): 7831922728, REGON: 540913952 (hereinafter referred to as the \u201cAdministrator\u201d).<\/li>\n\n\n\n
  2. Contact with the Administrator is possible:By email: info@eterna-link.com<\/a><\/strong>By phone: +49 15201494800<\/strong> (Monday\u2013Friday, 11:00 AM \u2013 5:00 PM)In writing, at the registered office address<\/li>\n\n\n\n
  3. The purpose of this Policy is to define the actions taken regarding personal data collected through the Administrator\u2019s website and the associated application used for managing QR profiles, as well as in the course of entering into and performing agreements.<\/li>\n\n\n\n
  4. If necessary, the provisions of this Policy may be amended. Any changes will be communicated to users by publishing the updated Policy on the website. In the case of significant changes, users will also be notified via email. <\/li>\n<\/ol>\n\n

    \u00a7 2. LEGAL BASES FOR PROCESSING, PURPOSES, AND STORAGE OF PERSONAL DATA <\/h2>\n\n

    <\/p>\n\n

      \n
    1. Users’ personal data are processed in accordance with the General Data Protection Regulation (GDPR), the Personal Data Protection Act, and the Act on the Provision of Electronic Services.<\/li>\n<\/ol>\n\n

      DETAILED DATA PROCESSING TABLE: <\/p>\n\n

      Purpose of processing<\/th>Legal basis<\/th>Retention period<\/th>Scope of data<\/th><\/tr><\/thead>
      “Performance of the contract for the sale of QR plaques”<\/strong><\/td>Art. 6(1)(b) GDPR (performance of a contract) <\/td>\u2022 For the term of the contract\u2022 Two years after the last transaction\u2022 Until the expiry of the claim limitation period<\/td>\u2022 Full name\u2022 Email address\u2022 Phone number\u2022 Delivery address\u2022 Company details (if applicable)<\/td><\/tr>
      Registration and management of the user account<\/strong><\/td>Art. 6(1)(b) GDPR (performance of a contract) <\/td>\u2022 Until the account is deleted by the user\u2022 Two years after the last activity\u2022 Without time limitation (the profile may be preserved for posterity)<\/td>\u2022 Full name\u2022 Email address\u2022 Password (encrypted)\u2022 Profile data provided by the user <\/td><\/tr>
      Management of the QR profile and content <\/strong><\/td>Art. 6(1)(b) GDPR (performance of a contract) <\/td>\u2022 Until deleted by the user\u2022 Without time limitation (nature of the service) <\/td>\u2022 All content provided by the user\u2022 Photos, videos, texts\u2022 Information in the time capsule, timeline, family tree <\/td><\/tr>
      Payment processing<\/strong><\/td>Art. 6(1)(b) GDPR (performance of a contract) <\/td>\u2022 5 years (accounting requirements)\u2022 Until the expiry of the claim limitation period<\/td>\u2022 Transaction data\u2022 Payment information\u2022 Order history<\/td><\/tr>
      Keeping accounting records<\/strong><\/td>Art. 6(1)(c) GDPR (legal obligation) <\/td>\u2022 5 years (in accordance with the Accounting Act)<\/td>\u2022 Full name\u2022 Address\u2022 Tax identification number (if provided)\u2022 Invoice details<\/td><\/tr>
      Customer service and technical support<\/strong><\/td>Art. 6(1)(b) GDPR (performance of a contract) <\/td>\u2022 Two years from the last correspondence<\/td>\u2022 Contact details\u2022 Correspondence content\u2022 History of technical issues<\/td><\/tr>
      Generation of biography using AI<\/strong><\/td>Art. 6(1)(a) GDPR (user consent) <\/td>\u2022 Until consent is withdrawn\u2022 Until deleted by the user<\/td>\u2022 Data entered by the user in the stepper form\u2022 Generated biographical content<\/td><\/tr>
      Analysis of statistics and service improvement<\/strong><\/td>Art. 6(1)(f) GDPR (legitimate interest) <\/td>\u2022 26 months (Google Analytics)\u2022 Without limitation (Matomo \u2013 own server)<\/td>\u2022 IP address (anonymized)\u2022 Technical device data\u2022 Browsing information<\/td><\/tr>
      Recording of telephone conversations<\/strong><\/td>Art. 6(1)(f) GDPR (legitimate interest) <\/td>\u2022 Two years from the recording<\/td>\u2022 Call recordings\u2022 Caller identification data<\/td><\/tr>
      System security and fraud detection<\/strong><\/td>Art. 6(1)(f) GDPR (legitimate interest) <\/td>\u2022 Three years<\/td>\u2022 System logs\u2022 IP address\u2022 Access time<\/td><\/tr><\/tbody><\/table><\/figure>\n\n

      \u00a7 3. PROFILING <\/h2>\n\n

      The controller does not use<\/strong> profiling within the meaning of Article 22 GDPR. We do not make automated decisions that could affect users\u2019 rights. <\/p>\n\n

      \u00a7 4. DATA DISCLOSURE <\/h2>\n\n

      Personal data may be transferred to the following recipients:<\/h3>\n\n
        \n
      1. Payment service providers:<\/strong>Krajowy Integrator P\u0142atno\u015bci S.A.<\/strong> (Tpay) \u2013 electronic payment processingPayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A.<\/strong> \u2013 PayPal payment processing<\/li>\n<\/ol>\n\n
        \n\n

        Technical service providers:<\/strong><\/p>\n\n