Privacy Policy
§1. General Provisions
https://www.stablewatch.io/ website (hereinafter: “Website”) is run by Stablewatch spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw at Poznańska Street 16/4, 00-680 Warsaw, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register (KRS) under number (KRS): 0001174918, Tax Identification Number (NIP): 7011261860, share capital in the amount of PLN 20 000, e-mail: contact@stablewatch.io, hereinafter referred to as “Controller”.
As part of the Website’s activities and providing the services by the Controller, including the newsletter provided in accordance with the Newsletter Terms and Conditions (hereinafter: “Newsletter”), the data of the Website users (hereinafter: “Users”), including personal data, may be collected, processed and used.
Moreover, information may be collected on the User’s IP address, the time of receipt of the inquiry and sending the answer and/or other information as required by the cookies used on the Website. This information is used for the purposes of administering the Website and creating statistics and analyses.
Controller makes every effort to secure Users’ personal data and ensures the protection of personal data that he processes. In particular, the Controller uses appropriate technical safeguards and organizational measures to ensure the protection of personal data being processed, appropriate to the threats and categories of data protected. In particular, the Controller protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of the provisions of law, as well as change, loss, damage or destruction.
Services provided by Controller are not intended for minors (people under age of 18). No minors may use the Controller’s services. If we learn we have collected or received personal information from a minor, we will delete that information.
§2. Personal Data
The controller of the personal data is Stablewatch spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw at Poznańska Street 16/4, 00-680 Warsaw, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register (KRS) under number (KRS): 0001174918, Tax Identification Number (NIP): 7011261860, share capital in the amount of PLN 20 000.
The processing of personal data takes place in accordance with the provisions of generally applicable law, in particular in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 (“GDPR”), and in accordance with this Privacy Policy.
As part of the activities of the Website, the Users personal data provided by them voluntarily (eg. as part of filling in the contact form or subscribing to the Newsletter), such as name, an e-mail address or collected as part of the statistics and analysis of Users’ behaviour are processed.
Users’ personal data may also relate to User’s geolocation, i.e. the place where User is located (this data can be collected using Bluetooth or Wi-Fi).
In connection with the Newsletter, the Controller also processes data on the User’s interaction with Newsletter messages, such as whether and when a message was opened, which links were clicked, the IP address, the approximate location derived from it, information on the device and e-mail client used, and information on how the User subscribed to the Newsletter. This data is collected by means of a small image file (tracking pixel) and tracked links included in Newsletter messages.
In connection with the form available on the Website through which projects may request the listing of their assets on the Website (hereinafter: “Asset Listing Form”), the Controller processes the name and e-mail address of the person submitting the request, as well as any other personal data that person decides to include in the free-text fields of the form. To protect the Asset Listing Form against abuse, the Controller also temporarily processes the IP address and e-mail address of the person submitting the request.
§3. Purpose and Duration of Processing the Data
The processing of Users’ personal data takes place for the purpose of:
response to inquiries or correspondence addressed to the Controller, which is the legitimate interest of the Controller (Article 6, section f, let. f of GDPR), as well as may be the action necessary in order to take steps at the request of the User prior to entering into a contract regarding services offered by the Controller (Art. 6, section 1 let. b of GDPR);
enabling Users to use the services provided on the Website, that is access and browse the content and functionalities provided on the Website (including DeFi Dashboard), which constitutes the performance of a contract for the provision of electronic services as referred to in the Terms of Service - pursuant to art. 6 section 1 let. b GDPR;
ensuring the proper performance of the functionalities of the Website (strictly necessary cookies), which is processing necessary for the performance of the contract (Art. 6, section 1, let. b of GDPR);
statistics and analysis of Users behaviour on website, which is the Controller’s legitimate interest (Art. 6, section 1, let. f of GDPR);
providing the Newsletter, that is sending the Newsletter to the e-mail address provided by the User, which constitutes the performance of a contract for the provision of electronic services as referred to in the Newsletter Terms and Conditions (Art. 6, section 1, let. b of GDPR);
direct marketing of the Controller’s products and services and of content of the Controller’s partners included in the Newsletter, which is the legitimate interest of the Controller (Art. 6, section 1, let. f of GDPR); the Controller sends such commercial information by e-mail only to Users who have given their prior consent, collected when subscribing to the Newsletter;
measuring the reach and effectiveness of the Newsletter, in particular open and click rates, which is the legitimate interest of the Controller (Art. 6, section 1, let. f of GDPR);
handling requests submitted through the Asset Listing Form, that is considering the request, contacting the person who submitted it regarding the listing and sending a confirmation of the request to the e-mail address provided, which is the legitimate interest of the Controller (Art. 6, section 1, let. f of GDPR);
protecting the Asset Listing Form against abuse by limiting the number of requests that can be sent from the same IP address or e-mail address, which is the legitimate interest of the Controller (Art. 6, section 1, let. f of GDPR).
Personal data processed for the purpose of:
response to inquiries or correspondence addressed to the Controller – are processed for a period of 3 years from the moment of sending the inquiry or correspondence;
personal data processed in order to enabling Users to use the services provided on the Website (performing the contract) are processed for the duration necessary to fulfill contractual obligations and for any additional period required by law for the protection of rights and claims.
ensuring the proper performance of the functionalities of the Website (strictly necessary cookies), that is performance of the contracts – are processed for the period of performance of the contracts and the period necessary to assert its own claims or defend against claims made against the Controller in connection with the performance of the contract;
keeping statistics and analysis of Users’ behaviour on the Website – for a period of 3 years from the date of collection;
providing the Newsletter, direct marketing and measuring the reach and effectiveness of the Newsletter – until the User unsubscribes from the Newsletter, objects to the processing of their personal data for direct marketing purposes or the Newsletter Service Agreement is otherwise terminated;
handling requests submitted through the Asset Listing Form – for a period of 3 years from the moment of submitting the request;
protecting the Asset Listing Form against abuse – for no longer than 24 hours.
§4. Transfer of Personal Data
Personal data may be facilitated to entities providing marketing, IT service providers, as well as entities participating in the process of performing an agreement between the data subject and the Controller, as well as entities from company group.
The Controller may use IT service providers (including newsletter, hosting, e-mail delivery and internal communication services) who are based outside of the European Economic Area. Therefore, the Customer’s data may be transferred there. The Controller uses only services of entities established in countries for which the European Commission has determined that they provide an adequate level of protection or entities that process personal data on the basis of the Standard Contractual Clauses adopted by the European Commission, referred to in Article 46 of the GDPR, concluded between the Controller and the entity, or process data on the basis of the Data Privacy Framework.
§5. User’s Rights
The User who is the data subject has the following rights:
the right to access personal data and the right to receive a copy – User may request from the Controller information whether his data are processed, and in the case of confirmation, the User may request the Controller to obtain access to them. The User may also request the Controller to provide a copy of his processed personal data. Provision of subsequent copies of data may require the User to pay a fee related to administrative costs;
the right to request the rectification of personal data – User can request the rectification on his incorrect personal data by the Controller, or can request the completion of incomplete personal data, having regard to the purposes of the processing;
the right to request the erasure of personal data – User may request the Controller to delete personal data related to him in a situation that at least one of the following cases occurs:
personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
personal data is processed contrary to the provisions of law;
personal data have been unlawfully processed;
User’s consent, which is the basis for data processing in accordance with art. 6 section 1 let. a GDPR, and at the same time there is no other legal basis for the processing of personal data;
User objects to the processing of personal data pursuant to art. 21 section 1 GDPR, and at the same time there are no valid legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing or defending claims; or if the User objects to the processing of personal data pursuant to art. 21 section 2 GDPR;
an obligation to delete personal data has been imposed on the Controller, resulting from the applicable European Union regulations;
the right to request restriction of the processing of personal data – the User may request the Controller to restrict processing of personal data related to him in a situation that at least one of the following cases occurs:
The User contests the accuracy of personal data – for a period enabling the Controller to check the correctness of this data;
the processing is unlawful, and the User opposes the erasure of the personal data and requests the restriction of their use instead;
Controller no longer needs the personal data for the purposes of the processing, but they are required by the User for the establishment, exercise or defence of legal claims;
User has objected to processing pursuant to art. 21 section 1 GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject;
the right to transfer personal data;
the right to object to the processing of personal data;
the right to lodge a complaint with a supervisory authority.
In order to exercise any of the abovementioned rights, User may file a request to Controller in writing via e-mail or post.
Where the User’s personal data is processed for direct marketing purposes, the User has the right to object at any time to such processing. Following the objection, the personal data will no longer be processed for direct marketing purposes.
The User may unsubscribe from the Newsletter and withdraw consent to receive commercial information by e-mail at any time, by clicking the unsubscribe link included in each Newsletter message or by contacting the Controller at contact@stablewatch.io. Withdrawal of consent does not affect the lawfulness of sending commercial information before its withdrawal.
Providing personal data is voluntary, but without providing it, it is impossible to contact the Controller, to subscribe to the Newsletter or to submit the Asset Listing Form; as well as the Controller might not be able to provide services to the User.
Controller ensures the protection of personal data that he processes. In particular, Controller uses appropriate technical safeguards and organizational measures to ensure the protection of personal data being processed, appropriate to the threats and categories of data protected. In particular, it protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of the provisions of law, as well as change, loss, damage or destruction.
Controller does not make decisions with regard to personal data which are based solely on automated processing, including profiling.