- Data Controller
Tomasz Michalski
Wajdeloty 19/2
80-437 Gdańsk
Poland
VAT EU – PL4990625616
+48 882 435 930
contact@northern-space.com - Contact Person Responsible for the Register
Tomasz Michalski
Wajdeloty 19/2
80-437 Gdańsk
Poland
+48 882 435 930
contact@northern-space.com - Purpose of the Register
Collected personal data is used for identifying the customer and managing access rights, processing orders from
registered users, and maintaining and developing the customer relationship. - Basis for Collecting and Processing Data
Customer data is collected and processed with the customer’s consent or to fulfil a contract made with the customer. - Data Stored in the Register
Company name, VAT EU number, email address, phone number. - Data Retention Period
Personal data is retained as long as necessary to fulfil the contract with the customer or to improve customer service. - Regular Data Sources
Data is collected: directly from the individual, from registers maintained by authorities within legal limits, and through
the Google Analytics tool. - Regular Disclosure of Data and Transfers Outside the EU or EEA
We use the Squarespace system for electronic direct marketing and customer communication. Data provided by the
user is transferred to Squarespace. Squarespace is a US-based company, which means personal data is transferred
outside the EU. However, the data is protected according to data protection laws, and Squarespace is certified under
the EU–US Privacy Shield framework. More information is available on the Squarespace website (https://
www.squarespace.com). No other transfers outside the EU or EEA occur. - Use of Cookies
Our website uses cookies. A cookie is a small text file sent to and stored on the user’s computer, enabling the website
administrator to identify frequent visitors, simplify login, and compile combined data on visitors. This feedback helps
us improve our website. Cookies do not harm users’ computers or files. They help us provide information and services
tailored to individual customer needs. If a visitor does not want us to receive the above information via cookies, most
browsers allow disabling cookies in the settings. However, cookies may be necessary for the proper functioning of
some pages and services we provide. - Register Security
Data is transferred through an SSL-secured connection. Electronic data is protected by a firewall, usernames, and
passwords. Only personnel who need the data for their duties have access. - Automated Decision-Making
No automated individual decisions (as defined in Article 22 of the EU GDPR) are made. - Rights of the Data Subject
The data subject has the right to check what information has been stored about them. A written, signed request must
be sent to the person responsible for the register. The inspection is free once per year. The data subject has the right to
request correction or deletion of incorrect or outdated information, or transfer of their data to another system. They
also have the right to restrict or object to processing according to Articles 18 and 21 of the GDPR. The data subject may
withdraw previously given consent or file a complaint with the supervisory authority. They also have the right to
prohibit the use of their data for direct marketing purposes.
%
