Privacy Policy

Who is the Administrator of my personal data?

The Administrator of your personal data is:

ICEA S.A., based in Poznań

Szyperska Street 14, Poznań 61-754

TIN (NIP): 7811993323

registered by the District Court Poznań – New Town and Wilda in Poznań, VIII Economic Department under the NCR number: 0000986203

with a share capital of PLN 1 857 048,00 (hereinafter referred to as the: Administrator).

Contact details of the Personal Data Administrator:

ICEA S.A.

Address: Szyperska Street 14, Poznań 61-754

E-mail: [email protected]

The Administrator is responsible for using personal data safely and in accordance with applicable laws.

In accordance with Article 14 Paragraphs 1-2 and 5, Point b) of the GDPR, ICEA S.A., being the service provider of corpspotlight.com, hereby informs that:

For any matters related to the processing of your personal data by the Administrator, you can contact:

by e-mail: [email protected]

or in person at the headquarters of ICEA S.A. at 14 Szyperska Street,

61-754 Poznań.

The Administrator has not appointed a Data Protection Officer or its representative.

What is the source of my data – where are they obtained from?

The Administrator obtained the above-mentioned personal data from publicly available sources, such as:

The National Court Register,
The National Business Registry Number (REGON), maintained by the Central Statistical Office,
The Court and Economic Monitor,
The Central Register and Information on Economic Activity (CEIDG), maintained by the Ministry of Entrepreneurship and Technology,
Registers and records maintained by state authorities,
Publicly available Internet search engines,
Publicly available business directories (such, for instance, “Yellow Pages”),
Publicly available Internet services.

We obtain your data for various purposes, as well as process it within various scopes and on various legal basis provided for in GDPR. The time of personal data processing also varies. In order to provide you with the most transparent information, we have grouped this information by referring to the purpose of processing your personal data and presenting it below. The Administrator does not use personal data for automated decision-making, including profiling.

Purposes of personal data processing

The service is informational in nature. The purpose of data processing on the service is to share information originating from the National Court Register, National Business Registry Number (REGON), maintained by the Central Statistical Office, Court and Economic Monitor,, CEIDG (Central Register and Information on Economic Activity), registers and records maintained by state authorities, data contained in publicly available Internet search engines, data contained in publicly available business directories (such as, for instance, “Yellow Pages”), and data contained in publicly available Internet services that are information about economic entities, including:

information about people performing specific functions in the above-mentioned entities,
addresses of economic entities’ headquarters,
TIN, National Business Registry, and National Court Register number of the entity.

Legal basis for the processing of personal data

Personal data is processed on the website corpspotlight.com based on Article 6 (1)(f) of the GDPR, which is on the basis of the legitimate interests of the Administrator, which involve the right to re-use public sector information, in accordance with Article 5 point 1 of the Act of August 11, 2021, on open data and re-use of public sector information (Journal of Laws, item 1641, as amended).

Scope of Personal Data Processing

The Administrator processes personal data to the extent necessary to achieve the purposes described above. The scope of the processed personal data includes:

names and surnames of people holding positions in entities disclosed in the National Court Register and the Court and Economic Monitor,
information about the function performed in entities disclosed in the National Court Register and the Court and Economic Monitor,
the address of the entity’s registered office, disclosed in the National Court Register and the Court and Economic Monitor, TIN, National Business Registry Number and National Court Register Number of the entity (if applicable), disclosed in the National Court Register and the Court and Economic Monitor,
names, surnames, or company names of individuals conducting economic activities, subject to entry in the Central Register and Information on Economic Activity (CEIDG),
data of entities subject to entry in the National Business Registry Number (REGON), maintained by the Central Statistical Office,
data of economic entities disclosed in registers and records maintained by state authorities,
data of economic entities disclosed within publicly available Internet search engines,
data of economic entities disclosed within publicly available business directories (such as “Yellow Pages”),
data of economic entities included in publicly available Internet services.

Personal Data Processing Period

Personal data is processed on the website:

for the entire period of the legally justified interest of the Administrator and/or,
until an objection to their processing for this purpose is filed.

Recipients of Personal Data

The recipients of the above-mentioned personal data are the users of the service corpspotlight.com .

Remarketing

To display personalized ads to users, the Administrator uses:

a) Google Ads remarketing function, including Google Sponsored Promotions and other Google formats, so ads relating to the Administrator’s activities are displayed on the Google ad network based on user behavior on the page – visiting specific subpages. Google uses cookies to display ads based on user visits to our site. To opt out of consent to display personalized Google Ads, please follow the detailed instructions described in the Cookie Policy.

b) Facebook Ads retargeting function, which, based on cookies collected by Facebook on the page, displays ads to users who have visited our page or are similar to such a group of people. Facebook analyzes information shared by users on the portal, data from Facebook accounts, and activity on websites and applications outside of Facebook to create similar audience groups. To opt out of the consent to display personalized Facebook ads, please follow the detailed instructions described in the Cookie Policy.

c) we also tailor ads based on demographic criteria and location in all the above-mentioned advertising systems.

Google Analytics

For analytical purposes, the Administrator uses the Google Analytics tool, which collects information about user behavior on our website through cookies. The user can delete their data associated with cookies – see the Cookies Policy for details.

We store data about users and events on our site on Google Analytics servers for 50 months.

Are my data transferred outside the European Union?

It may potentially occur that we will transfer your personal data outside the European Union, particularly in connection with the use of IT tools whose providers are located outside the European Union.

What rights do I have?

The Administrator, in relation to the processing of your personal data, ensures the realization of your rights. You can exercise your rights by submitting a request to the e-mail address [email protected].

Right to withdraw consent

You have the right to withdraw the consent you have given for the processing of personal data. The withdrawal of consent takes effect from the moment of its withdrawal. Withdrawing consent does not affect the processing performed by us legally before its withdrawal. The withdrawal of consent does not entail any negative consequences for you. However, it may prevent you from using some of our services.

Legal basis: Article 7 (3) of the GDPR

Right to object to the use of data

You have the right, at any time, to object to using your personal data if we process your data based on our legitimate legal interest, e.g., in connection with handling complaints, applications, and answers to questions. If your objection proves to be legitimate, and we have no other legal basis for processing your personal data, we will delete the data against which you have objected.

Legal basis: Article 21 of the GDPR

Right to erasure of data (also known as “the right to be forgotten”)

You have the right to request the erasure of all or some of your personal data. A request to erase all personal data will be treated as a request to delete your Account.

You have the right to request the erasure of personal data if:

you have withdrawn specific consent to the extent that personal data was processed based on your consent,
your personal data is no longer necessary for the purposes for which they were collected or for which they were processed,
you have objected to the use of your data for the purposes of usage statistics and satisfaction research, and the objection has been recognized as legitimate,
Your personal data is processed in violation of the law.

Despite a request for personal data erasure, we may retain certain personal data to the extent necessary for the establishment, exercise, or defense of legal claims. This particularly applies to personal data, including: name, surname, personal identification number (PESEL), and residential address, which data we retain for the purposes of dealing with complaints and claims related to the use of our services.

Legal basis: Article 17 of the GDPR

The right to restrict data processing

You have the right to request the restriction of processing of your personal data. If you make such a request, we will prevent you from using certain features or services until your request is processed, especially if the use of these features or services involves processing data covered by the request.

You have the right to request the restriction of the use of your personal data under the following circumstances:

when you question the accuracy of your personal data – in this case, we will restrict their use for the time necessary for us to check the accuracy of your data, but no longer than for 7 days,
when the processing of your data is against the law, and instead of deleting the data, you request the restriction of their use,
when your personal data are no longer necessary for the purposes for which we collected or used them, but they are needed by you to establish, exercise or defend legal claims,
when you have objected to the use of your data – then the restriction occurs for the time needed to consider whether – due to your particular situation – the protection of your interests, rights, and freedoms outweighs the interests that we pursue by processing your personal data.

Legal basis: Article 18 of the GDPR

Right to access data

You have the right to obtain confirmation from us as to whether or not we are processing your personal data, and if this is the case, you have the right to:

access your personal data,
obtain information about the purposes of the processing, categories of personal data being processed, the recipients or categories of recipients of this data, the planned period of storage of your data or criteria for determining this period, the rights you have under the GDPR, and the right to lodge a complaint with a supervisory authority, about the source of this data, about automated decision-making, including profiling, and about safeguards applied in connection with the transfer of this data outside the European Union,
obtain a copy of your personal data.

Legal basis: Article 15 of the GDPR

Right to rectification

You have the right to request the rectification of your personal data (if they are incorrect) or the completion of the personal data provided by you (if they are incomplete).

Legal basis: Article 16 of the GDPR

Right to data portability

You have the right to receive the personal data that you have provided to us and then transmit them to another personal data Administrator of your choice, e.g., to another similar service provider. You also have the right to request that personal data be transferred directly by us to another Administrator as long as it is technically feasible.

Legal basis: Article 20 of the GDPR

When do we fulfill your request?

If you approach us with a request to exercise the rights mentioned above, we will fulfill that request or decline it promptly, but no later than within a month of its receipt. However, if – due to the complex nature of the request or the number of requests – we cannot fulfill your request within a month, we will do so within the next two months, notifying you in advance of the intended extension of the deadline.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the supervisory authority regarding the processing of personal data by the data Administrator. The complaint can be submitted to the President of the Office for Personal Data Protection (Office of the President of the Office for Personal Data Protection, Stawki Street 2, 00-193 Warsaw).