The User's Personal Data Controller is HOME-BASED STUDIO Sp. z o.o. z with it's registered Office in Demblin, at Demblin 21, 33-270 Wietrzychowice, entered in the business register of the National Court Register kept by the District Court of Kraków-Śródmieście in Kraków XII Commercial Division of the National Court Register, under KRS no. 0000934869, NIP (Tax Identification Number): 9930684931, REGON: 52053590000000, share capital: 10000 PLN, according to the information corresponding to the current copy of Register of Entrepreneurs contained in the Central Information of National Court Register, represented by the members of the Management Board: Maja Seweryn and Piotr Hanusiak.

Providing the data is voluntary, however a denial to provide some information, in principle selected on the Administrator's Website as obligatory, will result in failure to provide a relevant service and to achieve a specific goal or to take specific actions.

Provision of data, which aren't obligatory, as well as provision of excess of data by the User, which doesn't have to be processed by the Administrator is based on the decision of the User and in that case processing of data is based on the condition stated in the article 6 paragraph 1 point (a) GDPR (consent). The Users give their consent to process these data and to anonymise the data, which the Administrator doesn't require and doesn't want to process, however they were provided to the Administrator by the User.

User's personal data on the Administrator's Website can be processed for following purposes and based on following legal basis:

1. performance of a service or performance of a concluded contract, sending an offer (for instance commercial) at the request of the User — on the basis of article 6 paragraph 1 point (b) GDPR (necessity for concluding and/or performing a contract or in order to take steps at the request);

2. issue of invoice, bill and fulfillment of other obligations resulting from the provisions of tax law in case of placing an order of products and services — on the basis of article 6 paragraph 1 point (c) GDPR (legal obligation);

3. granting a discount or informing about promotions and interesting offers of the Administrator or entities recommended by the Administrator — on the basis of article 6 paragraph 1 point (a) GDPR (consent);

4. storage of unpaid orders — on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator);

5. investigating complaints or claims related to the contract — on the basis of article 6 paragraph 1 point (b) GDPR (necessity for concluding and/or performing a contract) and on the basis of article 6 paragraph 1 point (c) GDPR (legal obligation);

6. asserting, exercising or defending against legal claims — on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator);

7. establishing telephone contact in matters related to service provision — on the basis of article 6 paragraph 1 point (b) GDPR (necessity for concluding and/or performing a contract);

8. establishing telephone contact in order to present an offer or in matters of direct marketing – on the basis of article 6 paragraph 1 point (a) GDPR (consent) and on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator); if you are already our User;

9. creating records related to GDPR and other regulations — on the basis of article 6 paragraph 1 point (c) GDPR (legal obligation) and on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator);

10. archival and evidential purposes, for purposes of safeguarding the informations that may serve to demonstrate factor of legal significance — on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator);

11. analytical purposes, consisting in, inter alia, analyzing data collected automatically during usage of the Website, involving Cookies, for instance Google Analytics cookies — on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator);

12. usage of Cookies on the Website and it's subpages — on the basis of article 6 paragraph 1 point (a) GDPR (consent);

13. management of the Website and the Administrator's websites on other platforms — on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator);

14. survey of satisfaction from the provided services — on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator),

15. for internal, administrative purposes of the Administrator related to management of contact with User, which is a legitimate interest of Personal Data Controller on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator),

16. for purposes of matching the content displayed on the Administrator's websites for individual needs and constant quality development of the provided services – on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator),

17. for purposes of direct marketing directed to the User of own products or services or third party's recommended products – on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator),

18. for purposes of service of the fanpage Home-based Studio | Facebook and group Home-based Studio - Grupa testerów on Facebook and engaging with the Users – on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator).

19. for purposes of service of Home-based Studio - itch.io under the name Home-based Studio on itch.io and engaging with the Users – on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator).

20. for the purposes of service of Home-based.Studio (@HBStudio_PL) / Twitter under the name Home-based Studio on Twitter and engaging with the users – on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator).

21. for the purpose of service YouTube channel under the name Home-based Studio at the URL Home-based Studio - YouTube and engaging with the Users – on the basis of article 6 paragraph 1 point (f) GDPR (legitimate interest of the Administrator).

Provision of data, which aren't obligatory, as well as provision of excess of data by the User, which doesn't have to be processed by the Administrator is based on the decision of the User and in that case processing of data is based on the condition stated in the article 6 paragraph 1 point (a) GDPR (consent). The Users give their consent to process these data and to anonymise the data, which the Administrator doesn't require and doesn't want to process, however they were provided to the Administrator by the User.

Only the data provided by the User are collected and processed (except for – in some cases – the data collected automatically via Cookies). While you are visiting the Website, the data concerning the visit are collected automatically, for instance the User's IP, domain name, browser type, operating system type. Data collected automatically can be used for: analysis of the User's behavior on the Website, collecting the User's demographic data or personalisation of the Website's content for the purpose of its development. However, these data are processed only for the purpose of the Website's management, ensuring efficient handling of hosting service or directing marketing content and are not associated with the data of specific Users. You can read more about Cookies in the further part of this Policy.

The data can also be collected for the purpose of filling the forms, which appear on the Website, which is mentioned in the further part of the privacy policy.

The Administrator does not collect children's data. Users should be at least 16 years old, in order to independently give their consent to processing personal data for the purpose of providing information society service, for instance for marketing purposes, or they should get their legal guardian's (for instance their parent) consent for this purpose.

In the event that the Users are not at least 16 years old, they should not use the Website or the Home-based Studio – Web games and playable ads (home-based.studio) service.

The administrator is entitled to make reasonable efforts in order to verify if the User meets the age requirement mentioned above, or if the holders of parental responsibility or persons who have custody of the User, who is below 16 years old, gave their consent or approval.

The User shall be entitled at any time to the rights set out in the articles 15-21 GDPR, which are:

1. right to access their data,

2. right to transfer their data,

3. right to rectify their data,

4. right to erasure their data, if there is no basis of their processing,

5. right to restriction of processing, i fit was done incorrectly or unlawful,

6. right to object if the processing of their data was based on the legitimate interest of the Administrator,

7. right to lodge a complaint with supervisory authority – Chairman of Poland's Personal Data Protection Officer or his counterpart in any other EU country ( under provisions specified in Act on Personal Data Protection), in case the Users would consider that processing their data is against the currently effective regulations in the scope of data protection.

8. right to be forgotten, if the further data processing is no longer provided by the currently effective regulations.

The Administrator notes that the rights mentioned above are not absolute and are not granted with regard to all User's data processing activities. It applies to, for instance, the right to data portability. This right can not adversely affect the freedoms or rights of others, such as, for instance, copyrights, professional secrecy. In order to learn about the restrictions concerning the Users rights, I refer to GDPR.

Nevertheless, the User is entitled to lodge a complaint with supervisory authority at any time.

In order to exercise their rights, the Users can contact the Administrator via e-mail address: contact@home-based.studio pointing out the scope of their requests. The answer will be given within 30 days from obtaining the request and its justification, unless it will be justified to extend the deadline in accordance with GDPR.

If the Users gave their consent for specific action, such consent can be withdrawn at any time, which will result in removal of this email address from the Administrator's mailing list and a cessation of indicated actions (in case based on consent). The withdrawal of consent shall not affect the processing of data that was carried out prior to such withdrawal.

In some cases, the data will not be entirely erased and will be stored for the purpose of defending against possible claims for the time specified in Polish Civil Code or, for instance, for the purpose of fulfilling the Administrator's legal obligations.

Each time, the Administrator will refer to the User's request, justifying adequately the further actions arising from the legal obligations.

The User's data can be transferred outside the European Union – to the Third Countries.

In connection with the fact that the Administrator uses various third party service providers, for instance Facebook and subsidiaries, Google, itch.io, etc. the User's data can be transferred to the United States of America (USA) in connection with their storage on american servers (in whole or in part). Google and Facebook apply compliance mechanisms provided for in the GDPR (for instance certificates) or standard contractual clauses with regard to their services. The data shall be transferred only to the recipients , who guarantee the highest security and safety of data, for instance through:

1. cooperation with the entities processing personal data in the countries for which a relevant decision of European Commission was issued,

2. implementation of standard contractual clauses issued by European Commission (for instance, as in the case of Google),

3. implementation of binding corporate rules approved by the competent supervisory authority,

or these, for whom the Users gave their consent to transfer data to.

Detailed information can be found in the privacy policy of each provider of these services available on their websites. For instance:

Google LLC: https://policies.google.com/privacy?hl=pl

Facebook Ireland Ltd.: https://www.facebook.com/privacy/explanation

Itch.io: itch.io Privacy Policy – itch.io

Twitter: Privacy Policy (twitter.com)

Currently, the services offered by Google and Facebook are provided by the entities located in the European Union. However, you should read the privacy policy of these providers each time to get the current information in scope of personal data protection.

The User's data will be stored by the Administrator for the time of performing particular services / achieving objectives and:

1. for the duration of performance of the service and cooperation, and also for the period of limitation of claims in accordance with the law – with regard to the data provided by counterparties, the clients or the Users,

2. for the duration of holding the conversations and negotiations preceding the conclusion of the agreement or the performance of the service – with regard to the data provided in the request for quotation,

3. for the period required by law, including tax law — with regard to the personal data related to the compliance with the obligations resulting from the provisions of applicable law,

4. until an objection is effectively raised pursuant to article 21 GDPR — with regard to the personal data processed on the basis of the Administrator's legitimate interest, including the direct marketing purposes,

5. until the consent is withdrawn or the objective of the processing is achieved, or the business objective is achieved — with regard to the personal data processed on the basis of consent. After the withdrawal of consent, the data can be processed for defense against possible claims for the period of limitation of these claims or for the period (shorter) specified to User,

6. until the data's obsolescence or loss of usefulness — with regard to the personal data processed mainly for the analytical and statistical purposes, as well as for the purposes of using Cookies and management of the Administrator's Websites.

Links to other websites can appear on the Website. They will open in a new browser window or in the same window. The Administrator is not responsible for content delivered by these websites. The Users are required to familiarise themselves with these websites' privacy policies and regulations.

The Administrator is the Personal Data Controller of the User's personal data on the fanpage under the name Home-based Studio | Facebook and the group under the name Home-based Studio - Grupa testerów on Facebook on Facebook service (hereinafter referred to as Fanpage).

The User's data provided on Fanpage shall be processed for the purposes of management and governance of the Fanpage, communication with the User, engaging, directing the marketing content to the User and creating the Fanpage's community.

The basis of their processing is the User's consent and the Administrator's legitimate interest consisting in engaging with the Users and Fan Page's followers. The User voluntarily decides to like/follow the Fanpage.

The rules on the Fanpage are fixed by the Administrator, however the rules on being on the Facebook social network arise from Facebook's regulations.

The User can unfollow the Fanpage at any time. However, the Administrator shall not display to the User any content originating from the Administrator and related to the Fanpage then.

The Administrator sees personal data of the Users, such as, for instance, name, surname, general information provided by them as public on their profiles. The remaining personal data are processed by the Facebook social network on the rules contained in their regulations.

The User's personal data will be processed for the time of running / existence of the Fanpage on the basis of the consent expressed through clicking the „like” button / following the Fanpage or through engaging, for instance by leaving a comment, sending a message and on the basis of the Administrator legitimate interest, which is the marketing of own products or services or the defence against claims.

The User's personal data can be provided to other data recipients, such as Facebook portal, cooperating commercial agencies or other subcontractors managing the Administrator's Fanpage, IT service, virtual assistant, if it will come to a contact outside the Facebook portal.

The remaining User's rights are described in this privacy policy.

The User's data can be transferred to third countries in accordance with Facebook regulations.

These data can also be profiled, which helps to personalise the commercial offer directed to the User better. However, they will not be processed automatically within the meaning of GDPR (having the negative impact on the User's rights and freedoms).

The Administrator is the Personal Data Controller of the User's personal data on the site under the name Home-based.Studio (@HBStudio_PL) / Twitter on Twitter service (hereinafter referred to as Site).

The User's data provided on Site shall be processed for the purposes of management and governance of the Site, communication with the User, engaging, directing the marketing content to the User and creating the Site's community.

The basis of their processing is the User's consent and the Administrator's legitimate interest consisting in engaging with the Users and Site's followers. The User voluntarily decides to like/follow the Site.

The rules on the Fanpage are fixed by the Administrator, however the rules on being on Twitter social network arise from Twitter's regulations.

The User can unfollow the Site at any time. However, the Administrator shall not display to the User any content originating from the Administrator and related to the Site then.

The Administrator sees personal data of the Users, such as, for instance, name, surname, general information provided by them as public on their profiles. The remaining personal data are processed by the Twitter social network on the rules contained in their regulations.

The User's personal data will be processed for the time of running / existence of the Site on the basis of the consent expressed through clicking the „like” button / following the Site or through engaging, for instance by leaving a comment, sending a message and on the basis of the Administrator legitimate interest, which is the marketing of own products or services or the defence against claims.

The User's personal data can be provided to other data recipients, such as Twitter portal, cooperating commercial agencies or other subcontractors managing the Administrator's Fanpage, IT service, virtual assistant, if it will come to a contact outside the Twitter portal.

The remaining User's rights are described in this privacy policy.

The User's data can be transferred to third countries in accordance to the Twitter regulations.

These data can also be profiled, which helps to personalise the commercial offer directed to the User better. However, they will not be processed automatically within the meaning of GDPR (having a negative impact on the User's rights and freedoms).

The User's personal data are being stored and secured with due diligence, in accordance with the Administrator's internal procedures implemented. The Administrator processes information about the User using appropriate technological and organisational measures in accordance with the requirements of the legislation, in particular the rules relating to the protection of personal data. These measures are intended to, primarily, secure the User's personal data against unauthorised access.

In particular, access to the User's personal data is granted only to the authorised persons, who are obligated to keep these data in confidence, or to the entities to whom the processing of the data was entrusted to under a separate data entrustment agreement.

The Users should simultaneously maintain diligence in securing their personal data transferred within the Internet network, in particular they should: not disclose their login credentials to the third parties, use antivirus protection and update software.

The Administrator informs that he uses the services of the third parties. The entities to whom the Administrator entrusts the processing of personal data (such as, for instance,courier companies, intermediaries for electronic payment, companies offering accounting services, companies enabling the sending of newsletters) guarantee the application of appropriate personal data security and safety measures required by the legislation, in particular by GDPR.

The administrator informs the User that the processing of personal data is entrusted, inter alia, to the following entities:

1. Kancelaria LICENCJA®, Kupa street 3/9, 31-057 Kraków – for the purpose of issue of accountancy documents,

2. The Hosting Platform Made For You – Go Online With Hostinger – for the purpose of domain and mail server service,

3. other contractors or subcontractors engaged in technical and administrative service or to provide legal assistance for the Administrator and his clients, for instance, accounting, information technology, graphic, copywriting assistance, or to debt collection agencies, lawyers etc.

4. Offices, for instance Tax Office – for the purpose of performing legal and tax obligations related to settlement and accounting.

The Personal Data Controller hereby informs, that the Data Protection Officer (DPO) was not appointed and the Personal Data Controller is entirely in charge of carrying out the obligations related to the personal data processing.

The Users acknowledge that their personal data can be transferred to the authorised state authorities in connection with their proceedings, upon their request and after fulfilling the conditions confirming the necessity of obtaining such data from the Administrator.

The User's personal data shall not be used for automated decision-making, affecting the rights and obligations or freedoms of the User within the meaning of GDPR.

The User's data can be profiled within the website and tracking technologies, which helps to better personalise the company's offer directed by the Administrator to the User (maliny through so-called behavioral advertising). However, it should not affect the User's legal position, in particular the terms of contracts concluded by the Users or terms of contracts which they intend to conclude. It can only help to better match the content and commercials to the User's interests. The information used is anonymous and is not combined with the personal data provided by the User, for instance, during the purchase. They result from the statistical data, for instance gender, age, interests, approximate location, behaviours on the Website.

Each User has the right to object against profiling, if it would adversely affect the User's rights and obligations.

Click here, if you would like to know more about the behavioural advertising: https://www.youronlinechoices.com/pl/o-reklamie-behawioralnej