Information Clause

General Information

The information presented in this document is a fulfillment of the information obligation in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "Regulation" or "GDPR").

Purpose and Scope

This document applies to natural persons who are Newsletter subscribers and fulfills the information obligation indicated in Articles 13 and 14 of the GDPR.

This Information Clause provides detailed information about the processing of personal data of individuals who subscribe to the CMS Conf newsletter.

Information on Controller

Detailed information about the data controller can be found in our Privacy Policy.

Information on Data Protection Officer

For matters related to data protection, you can contact the data protection team. Detailed information about the data controller and data protection team can be found in our Privacy Policy.

You can contact the data protection team by sending an email to: hello@cmsconf.com or by sending correspondence to our registered office address: Openweb s.c., Data Protection Team, Starowiejska 16 lok. 2, 81-356 Gdynia, Poland.

Information About the Purposes, Legal Basis and Period of Personal Data Processing

Categories of Personal Data Processed

We process the following categories of personal data for newsletter subscribers:

• Email address (required)
• First name (optional)
• Subscription date and time
• Subscription preferences (types of content you wish to receive)
• Email activity data (open rates, click rates, if available through the newsletter service provider)
• Unsubscribe date (if applicable)

Third-Party Newsletter Service Provider

We use an independent third-party service provider to manage and deliver our newsletter. This service provider processes your personal data on our behalf as a data processor in accordance with our instructions and a data processing agreement.

The newsletter service provider may process your personal data for the following purposes:

• Storing your email address and subscription preferences
• Sending newsletter emails to you
• Managing subscription and unsubscribe requests
• Providing analytics and statistics about email delivery, opens, and clicks
• Ensuring compliance with anti-spam regulations

The newsletter service provider is bound by a data processing agreement and is required to:

• Process your data only in accordance with our instructions
• Implement appropriate technical and organizational measures to protect your data
• Not use your data for their own purposes
• Comply with applicable data protection laws, including GDPR

If you would like to know the name of the specific newsletter service provider we use, please contact us at hello@cmsconf.com.

Information on Personal Data Recipients

Your personal data may be shared with the following categories of recipients:

• Newsletter service provider: The third-party company that manages and delivers our newsletter on our behalf
• IT service providers: Companies providing technical infrastructure and support services
• Legal and regulatory authorities: When required by law or to protect our rights

Personal data may be shared with trusted cooperating entities, only for the purposes of fulfilling the purposes of processing, providing services or exercising the rights of data subjects.

Personal data may be made available to data recipients authorized by law, only to the extent and for the purpose of exercising their right under the law.

Information About Transfer of Personal Data Outside the European Economic Area

The newsletter service provider or other service providers we use may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place to protect your personal data, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as provided for in GDPR

If you would like more information about the specific safeguards applied to transfers of your personal data, please contact us.

Information About Exercised Rights of Data Subjects

We provide all possible and available technical and organizational measures so that data subjects can exercise their rights without obstacles. Therefore, we ask you to send all notifications and requests regarding the exercise of rights to the Data Protection Team.

In justified cases, due to the proper identification of the person, we may ask you to provide additional information or deliver necessary documents confirming your identity.

Under GDPR, you have the following rights:

• Right of access - You can request information about what personal data we process about you
• Right to rectification - You can request correction of inaccurate or incomplete data
• Right to erasure - You can request deletion of your data (this will result in unsubscribing from the newsletter)
• Right to restriction of processing - You can request restriction of data processing
• Right to data portability - You can request transfer of your data in a structured format
• Right to object - You can object to processing based on legitimate interests
• Right to withdraw consent - You can withdraw your consent at any time (this will result in unsubscribing from the newsletter)
• Right to lodge a complaint - You can lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych - UODO), ul. Stawki 2, 00-193 Warsaw, Poland, email: kancelaria@uodo.gov.pl, website: https://uodo.gov.pl

We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by an additional two months, and we will inform you of any such extension.

Right to Object to Direct Marketing

When personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

You can exercise this right by clicking the unsubscribe link in any newsletter email, sending an email to hello@cmsconf.com with the subject "Unsubscribe", or by contacting us through our website.

Right to Freely Express or Withdraw Consent for Data Processing

Every data subject has the general right to freely express or withdraw consent for the processing of personal data. In cases where personal data is processed on the basis of granted consent, we will provide the possibility to withdraw it at any time.

You can withdraw your consent to receive the newsletter at any time by:

• Clicking the unsubscribe link in any newsletter email
• Sending an email to hello@cmsconf.com with the subject "Unsubscribe"
• Contacting us through our website

Withdrawal of consent will have immediate effect from the moment of this action and will not affect the lawfulness of processing based on consent before its withdrawal. The withdrawal of consent does not affect the processing of data that took place before its withdrawal.

Withdrawal of consent does not entail any negative consequences, except that it will prevent you from receiving future newsletter communications.

Obligation to Provide Personal Data

Provision of personal data (specifically, your email address) is required in order to:

• Properly identify you as a newsletter subscriber
• Deliver newsletter emails to you
• Fulfill the indicated purposes of processing

Failure to provide your email address will prevent you from subscribing to the newsletter. Providing your first name is optional and allows us to personalize newsletter communications.

Automated Decision-Making and Profiling

With respect to data subjects, in connection with the fulfillment of the indicated purposes of processing, no automated decisions will be made that may affect the individual situation of the data subject.

Profiling may be used to deliver relevant content in communications conducted via electronic means of communication. This may include tailoring newsletter content based on your preferences or interaction history. You have the right to object to such processing at any time.

Restrictions Related to Exercise of Personal Data Subject Rights

The rights indicated above and the manner in which they are exercised may be subject to restrictions in justified cases. This will be the case if the restriction is due to:

• The obligations indicated in the law, to which we are obliged
• Direct result of the legal basis for data processing
• Protection of the rights and freedoms of other individuals
• Legal claims or proceedings

In such a case, we will provide appropriate information with the reasons for our decision and explain the possibility of lodging a complaint with the supervisory authority.

Rules for Changing and Updating the Document

According to our needs and applicable privacy principles, we may change, supplement and adapt this Information Clause at any time.

We will inform you of any changes by posting appropriate information on our website or by sending an email notification to your registered email address.

Contact

If you have any questions about this Information Clause or the processing of your personal data in connection with your newsletter subscription, please contact us. Detailed contact information can be found in our Privacy Policy.

For data protection matters, you can also contact the data protection team. Detailed information about the data protection team can be found in our Privacy Policy.