PRIVACY POLICY
The operator of Omnibus24.net website respects the privacy of all users who visit the company’s website and puts its best foot forward to ensure their personal data are protected. Our Privacy Policy was formed to explain how we protect personal and financial data of our investors. We use our investors’ personal data only as described in this Privacy Policy and we neither make them available nor sell them to any third party.
To open an account at our website you need to fill in a form with your personal data. We make the best effort to ensure our investors’ data are safe. Our principle is not to disclose our investors’ data without their consent to any third party unless required by law. By giving us inaccurate or incomplete data, you put yourself at risk of a compromised service quality or lack of access to our website.
Definitions
Administrator – the data administrator pursuant to Regulation (EU) 2016/679 of 27 April 2016 is OTCS Spółka Akcyjna seated in Warsaw (00-105), ul. Twarda 18, entered into the register of entrepreneurs by the Warsaw Regional Court in Warsaw, XII Commercial Division of the National Court Register under KRS no. 0000671691, REGON: 367000783, NIP: 367000783, share capital PLN 100,000.00.
Personal data – users’ personal data are stored to allow them to use the website.
Personal data – stand for all information about the identified or identifiable natural person (data subject); an identifiable natural person is a person who can be identified directly or indirectly, particularly based on an identifier such as full name, identification number, location data, internet identifier or one or more specific factors determining the physical, physiological, genetic, psychic, economic, cultural or social identity of the natural person.
Processing - stands for an operation or a set of operations performed on personal data or sets of personal data in an automated or nonautomated manner, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, adjustment or combination, restriction, erasure or destruction.
Recipient – stands for a natural person or a legal person, a public authority, unit or another entity to whom the personal data are disclosed regardless of whether it is a third party or not. Public authorities that can receive personal data as part of specific proceedings pursuant to the EU law or the law of an EU Member State are not, however, considered to be recipients; processing of such data by public authorities must be consistent with data protection regulations applicable in processing.
Third party – stands for a natural person or a legal person, a public authority, a unit or an entity other than a person who is the data subject, the administrator, the processing entity or persons who can process personal data under the authority of the administrator or the processing entity.
Processing entity – stands for a natural or legal person, a public authority, a unit or another entity who processes personal data on behalf of the administrator.
Operator – OTCS Spółka Akcyjna with its registered seat in Warsaw (00-105) at Twarda 18 Street, entered into the register of entrepreneurs by the Warsaw Regional Court in Warsaw, XII Commercial Division of the National Court Register under KRS no. 0000671691, REGON: 367000783, NIP: 367000783, share capital PLN 100,000.00 paid in full.
Website – the website found at https:\\omnibus24.net including sub-sites (also referred to as the “Web page”)
Services – services related to purchasing and selling of virtual Currencies by means of mediating Users’ encounter with offers available on the market of the Transaction Website covering Virtual Currencies and other services that allow one to act on and use the Website.
User – a verified entity who uses the Website.
What regulations serve as the basis for the actual or possible processing of your personal data?
The personal data protection regulations (hereinafter referred to as GDPR) were determined among others under the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Personal Data Protection Act of 10 May 2018 and special laws (lex specialis) also in the state order.
Who is the personal data Administrator?
Pursuant to Articles 12 and 13 GDPR, that is, the right to be informed, we inform that personal data are administered by OTCS Spółka Akcyjna company with its registered seat in Warsaw (00-105) at Twarda 18 Street, entered into the register of entrepreneurs by the Warsaw Regional Court in Warsaw, XII Commercial Division of the National Court Register under KRS no. 0000671691, REGON: 367000783, NIP: 367000783.
What are the purposes of actual or possible processing of your personal data?
We inform that the provided personal data are or can be processed for the following purposes:
- • Sending marketing information by electronic mail or via telephone regarding own products and own services. The legal basis for the processing of personal data is the data subject’s consent (Article 6 Section 1 a) GDPR) or processing essential for purposes arising from legally justified interests executed by the administrator (Article 6 Section 1 f) GDPR). A legally justified purpose is considered a contract or a business relation binding for both parties,
- • for contact purposes, that is, providing a reply or feedback to your inquiry in matters related with our products or services. The legal basis for the personal data processing is the data subject’s consent (Article 6 Section 1 a) GDPR) or a justified interest executed by the data Administrator (Article 6 Section 1 f) GDPR). In such case, providing answer to your inquiry is considered a legally justified purpose,
- • for purposes related to the preparation of an offer. The legal basis for personal data processing is the data subject’s consent (Article 6 Section 1 a) GDPR) or it is an action aiming at establishing a contract between the parties (Article 6 Section 1 b) GDPR),
- • for purposes related to the conclusion and execution of contractual provisions and for purposes related to the conclusion and execution of contractual provisions and pursuing claims as a result of the execution of contractual provisions, where processing is essential for the conclusion and execution of the contract to which the data subject is a party or to take action on the request of the data subject prior to the contract conclusion (Article 6 Section 1 Item c) GDPR) and a legally justified interest of the data Administrator (Article 6 Section 1 Item c) GDPR), where a legally justified interest is considered to be activities taken to pursue claims as a result of the execution of the provisions of the concluded contract (e.g. collection proceedings),
- • for purposes related to the execution of provisions covered in the Terms & Conditions of the provision of services by electronic means (https://omnibus24.net/info/page/regulamin/) – the legal basis for the personal data processing is the contract (Article 6 Section 1 Item b) GDPR).
Disclosure, transmission and making available of the personal data
We would like to inform that your personal data are or can be:
- • disclosed (forwarded) to personal data recipients – the term “recipient” stands for a natural or a legal person, a public authority, a unit or a different entity to whom personal data are disclosed regardless of whether it is a third party – the disclosure takes place only under the currently binding provisions of law,
- • disclosed (forwarded) to a third party – the term “third party” stands for a natural or a legal person, a public authority, a unit or an entity different than the data subject, the administrator, the processing entity or individuals who can process personal data under the authority of the administrator or the data processing entity. Personal data may be or are entrusted for processing under Article 28 GDPR (the Administrator entrusted personal data processing – the processing entity, also referred to as the processor). The data administrator undertakes cooperation only with entities who satisfy requirements specified under GDPR and who implemented proper technical and organisational means to ensure safety of the entrusted personal data,
- • personal data can be disclosed to state authorities under the binding provisions of law.
Forwarding your personal data to a Third State (meaning outside the EEA)
We would like to inform that personal data are not forwarded to any third state. In the case that the personal data are forwarded outside the European Economic Area, such an act may take place solely as specified under Article 46, Article 47 or Article 49 of GDPR.
How long according with the time principle will your personal data be processed?
We would like to inform that:
- • in the case where marketing information on own products and own services is sent by electronic mail or provided by phone – for an indefinite time until the consent given is cancelled or an objection against processing of personal details for marketing purposes is submitted. We inform you of the right to cancel your consent at any time with no effect on compliance with the right to the processing made under the consent prior to its withdrawal,
- • for contact purposes, that is, providing answers, feedback to your inquiries on matters related with our products or services – for a time necessary for providing exhausting information, up to 6 years,
- • for purposes related to the preparation of the offer – for a time necessary for preparing and presenting you our offer and for a time specified in currently binding providing of law, up to 6 years,
- • for purposes related to the conclusion and execution of contractual provisions – for the duration of the contract and for the time specified in currently binding provisions of law,
- • for purposes related to the execution of the Terms & Conditions – for the duration of the Terms & Conditions and for a time specified in currently binding provisions of law.
What are the data subject’s rights?
We would like to inform you about the right to demand from the Administrator access to personal data of the data subject, to amend them, delete them or to restrict processing of these data or the right to object to the processing of these data and also the right to data transfer.
Who is the supervisory authority?
We would like to inform you about the right to file a complaint to the supervisory authority, that is, the President of the Personal Data Protection Office with its seat at Stawki 2 Street in Warsaw, www.uodo.gov.pl
In what circumstances is provision of the data obligatory and when is it voluntary?
We would like to inform you that provision of personal data is:
- • in the case where marketing information on own products and own services is sent by electronic mail or via phone – voluntary. A failure to provide personal data may result in a loss of possibility to send commercial information, including marketing information, that pertain to own products and own services by electronic mail or via phone,
- • for contact purposes, that is, providing answer or feedback to your inquiries in matters related to our products or services – voluntary. A failure to provide personal data shall result in our inability to answer your inquiries,
- • for purposes related to the preparation of the offer – voluntary. A failure to provide personal details shall result in our inability to prepare and send an offer,
- • for purposes related to the conclusion and execution of contractual provisions – it is required by the contract. A failure to provide personal details shall result in our inability to prepare and execute provisions specified in the contract,
- • for purposes related to the acceptance and execution of the Terms & Conditions – it is required by the contract. A failure to provide personal details shall result in our inability to prepare and execute provisions specified in the Terms & Conditions.
Information on automated processing including profiling
We would like to inform that by entering the personal data Administrator’s website you are not subjected to automated consent including profiling as specified under Article 22 GDPR.
Cookie policy
We would like to inform that the website uses cookie files. Cookie files constitute IT data, particularly small text files that are stored on the end User’s device and are intended for the use of the Website. Cookie files usually contain the name of the website, the storage duration of cookie files in the end device and a unique number. The Operator is the entity who places cookie files in the end User’s device and who gains access to the said files. Cookie files are used for the following purposes:
- a) creating statistics that facilitate understanding how the Website Users use web pages, which allows their structure and content to be improved;
- b) maintaining the session of the Website User (after logging in), owing to which the User does not have to re-enter his/her login and password on each sub-page of the Website;
- c) specifying the User’s profile for the purpose of displaying to him/her a personalised content in advertising networks.
The web browsing software (the browser) usually allows cookie files to be stored on the User’s end device by default. The Website Users can change these settings. The browser allows the User to delete cookie files. It is also possible to automatically block cookie files. Detailed information on this subject can be found in the help menu or in the browser documentation. Restricted use of cookie files may affect some functionalities available on the Website. Cookie files can be also used by advertisers and partners cooperating with the Operator. Some information on Users’ behaviour are logged in the server layer. These data are used solely for website administering purposes and for ensuring the most effective hosting services possible. The browsed content is identified by means of URL addresses. Other stored content may include: date of inquiry, time of response, name of the Customer’s station – identification executed by means of HTTP, HTTPS, information on errors that occurred curing HTTP, HTTPS transactions, URL address of the website previously visited by the user (link) – in cases where the Website was accessed via a link the information on the user’s browser and IP address. The above data are not linked to specific individuals. The Operator does not link such data with the User’s Personal Data and does not use them for identifying the user (unless necessary for proper functioning of the Website) but solely for the purpose of administering the server.
What is the data source?
Personal data are provided directly by the data subject. In cases where personal data are provided indirectly by the data subject an information on the source of the personal data is specified.
What scope of personal data is processed?
The data Administrator processes regular personal data in a scope necessary for the execution of the above-specified targets. In cases where personal data are sent for marking purposes, the processed information may include, e.g. full name, phone number and/or e-mail address, mailing address. As part of the rendered Services, the Operator may require the User to provide the following personal data: full name, address, ID number and series, PESEL (Polish citizen identification) number, a completed AML form. Pursuant to the minimisation principle, we only process the scope of personal data necessary for the execution of the processing target or as specified under the currently binding provisions of law.
How do we secure personal data?
We would like to inform that in order to ensure privacy and protect personal data, the data Administrator implemented proper technical and organisation measures to ensure that personal data are safely processed.
Contact regarding personal data protection
In matters related to personal data protection please contact us via the contact form available at https://omnibus24.net/gb/info/contact/ or by regular mail at the data Administrator’s address
OTCS Spółka Akcyjna, ul. Twarda 18, Warszawa (00-105).
