Privacy Policy of jCharge Sp. z o.o.

Information on Personal Data Processing

1. What does this policy describe?

This privacy policy (“Policy”) provides information about the processing of personal data by jCharge Sp. z o.o., headquartered in Kielce.

• It specifies the types of personal data we collect;
• Explains how and why we collect and use your personal data;
• Clarifies when and why we share personal data with other entities; and
• Outlines your rights and choices regarding your personal data.

We want to ensure clarity on whether this Policy covers the processing of your personal data. This Policy applies if:

• You are a Website User, i.e., you use the website https://jcharge.eu/pl, including contacting us via the contact form or chat (“Website”);
• You are a User of the Urbhub.app, Rybka Box or InCity.io application (“Mobile Application”);
• You are a Customer, i.e., you purchase our products, use our seedia.city panel, or our contact form;
• You are a Customer Representative, i.e., you represent a Customer;
• You are a Contractor, i.e., you supply us with products or services or use our services;
• You are a Contractor Representative, i.e., you represent a Contractor;
• You are a Marketing Recipient, i.e., we direct our marketing activities to you;
• You are a Job or Collaboration Candidate, i.e., you contact us because you are interested in collaborating with us.

Your personal data is processed in accordance with the EU General Data Protection Regulation (2016/679) (“GDPR”) and other applicable personal data protection laws that complement and/or implement GDPR.

2. Who is the controller of your personal data?

The controller of your data is:

jCharge sp. z o.o.
ul. Olszewskiego 6 22, 25-663 Kielce, Poland, Tax ID: 5170407246
(„we”)

For matters related to personal data processing, you can contact us at the above address.

3. What information and sources do we collect?

If you are a Website or Mobile Application User, we collect information during your use of the Website or Application, including details provided in the contact form, such as name, surname, email address, phone number, IP address, login, location, and, in some cases, your profile picture from social media, as well as information contained in cookies.

If you are a Customer or Customer Representative, we collect information during order placement, execution, and account registration (including the seedia.city panel) and conversations with us. This may include your name, surname, email address, phone number, order details, bank account number, and correspondence address

If you are a Contractor or Contractor Representative, we collect information from documents you provide, conversations, emails, and meetings. This may include your name, surname, company name, business address, PESEL, NIP, REGON, and bank account number. Data may also come from publicly available sources or be provided by the entity you represent.

If you are a Marketing Recipient, we collect information you provide, such as your email address during correspondence or account registration.

If you are a Job or Collaboration Candidate, we collect information in your CV, other submitted documents, or shared during conversations, emails, or meetings. This includes your name, surname, contact details, education, and professional experience.

4. For what purposes and on what basis do we process your data?

For Website or Mobile Application Users::

• To fulfill our legitimate interests (Article 6(1)(f) GDPR), such as managing the Website or Application and handling complaints;
• For marketing purposes based on your consent (Article 6(1)(a) GDPR).

For Customers or Contractors::

• To enter into and perform a contract (Article 6(1)(b) GDPR);
• To comply with legal obligations (Article 6(1)(c) GDPR), e.g., financial documentation retention;
• To fulfill our legitimate interests (Article 6(1)(f) GDPR), such as maintaining business relationships, ongoing communication, marketing activities, and claims management.

For Customer or Contractor Representatives:

• To fulfill our legitimate interests (Article 6(1)(f) GDPR) related to the contract with the entity you represent, maintaining business relationships, ongoing communication, marketing activities, and claims management;
• To comply with legal obligations (Article 6(1)(c) GDPR), e.g., financial documentation retention.

For Marketing Recipients::

• To fulfill our legitimate interests (Article 6(1)(f) GDPR), such as direct marketing if you are also a Customer, Contractor, or their Representative;
• For marketing activities based on your consent (Article 6(1)(a) GDPR).

For Job or Collaboration Candidates::

• Based on your consent (Article 6(1)(a) GDPR) for recruitment and future recruitment processes (if you provide additional consent);
• To fulfill employer obligations (Article 6(1)(c) GDPR);
• To fulfill our legitimate interests (Article 6(1)(f) GDPR) in administering recruitment processes and claims management.

5. To whom do we disclose your data?

When necessary for the purposes of data processing, we may share your data with:

• Entities authorized under legal provisions;
• Entities processing data on our behalf, such as IT service providers, telecommunication tools providers, advisors, or accountants.

In all cases, we ensure only the minimum necessary information is shared.

6. How long do we retain your data?

For Website or Mobile Application Users: As long as necessary for Website or Application administration.

For Customers, Contractors, or their Representatives: During the contract duration and as required by legal or business needs (e.g., financial documentation for 5 years or claim-related periods of 3 years).

For Marketing Recipients: Until the data is no longer useful for the intended purpose or consent is withdrawn.

For Job or Collaboration Candidates: Until the recruitment process ends or consent for future recruitment is withdrawn.

7. What are your rights?

You may:

• Withdraw your consent at any time (processing before withdrawal remains lawful);
• Request access to and a copy of your data;
• Exercise your right to data portability;
• Request correction of inaccurate or incomplete data;
• Object to data processing based on legitimate interests;
• Request data deletion if permitted by law;
• Request restriction of data processing.

To exercise these rights, contact us by post. If you believe data processing violates GDPR, you may lodge a complaint with the President of the Personal Data Protection Office.

8. Is providing data mandatory, and where do we get it if not directly from you?

Providing your data is voluntary but may be necessary to achieve processing purposes, such as contact or contract execution. If you are a Representative of a Contractor or Customer and do not provide data directly, it comes from the entity you represent or public sources (e.g., websites).