Privacy policy of ethicalc.com

1. Controller

The controller of personal data is ETHICALC spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Gdańsk, ul. ks. Leona Miszewskiego 18/2C, 80-239 Gdańsk, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0001241947, tax identification number (NIP) 9571202612, statistical number (REGON) 544803812. For matters concerning personal data, write to kontakt@ethicalc.com. We have not appointed a data protection officer, as the law does not require one for the processing we carry out.

The systems we operate for clients and under other addresses (including orkan.pro, rozlicz.org, consensusengine.pro, ethi-lex.pl, faktolap.pl, esap.pro and magicbucket.pro) have their own privacy policies, available at those addresses. The ESG rating on ver.degree and esgall.com is produced by VERDEGREE sp. z o.o. as a separate controller.

2. The ethicalc.com website

The site stores no cookies or other data on the user's device, uses no analytics or marketing tools, does not profile users and displays no consent banner, because there is nothing to consent to. Scripts and fonts are hosted on our own server; the site connects to no third-party servers.

The site is hosted on Amazon Web Services infrastructure in a region within the European Union. The server keeps logs: IP address, date and time, the resource requested, the referring page and the browser type. The logs are used solely for the security and proper functioning of the site (legal basis: Art. 6(1)(f) GDPR) and are deleted after 90 days at the latest.

Links lead to our own services and to external services (including ESMA and Credly), which have their own privacy rules.

3. Contact form and correspondence

The form on the Contact page sends your message to our server on Amazon Web Services infrastructure in a region within the European Union. We store it in a database and forward it by email to kontakt@ethicalc.com. With the message we store only what you entered in the form, the date it was sent and the language version of the page; we do not store your IP address or browser type. The database entry is deleted automatically after three years.

We process messages sent to addresses in the ethicalc.com domain in order to reply, prepare the proposal you ask for and handle the matter. We process the email address, name, company name and job title, if you provide them, and the content of the message. Legal basis: Art. 6(1)(b) GDPR where the message precedes the conclusion of a contract; otherwise Art. 6(1)(f) GDPR, our legitimate interest in responding to correspondence. We keep correspondence for as long as the matter is being handled and then for up to three years from the last message in case of claims; longer if a contract is concluded, in which case in accordance with accounting and tax law. Our email is handled by Google Workspace as a processor.

4. Recipients of data

• Amazon Web Services: hosting of the site and handling of the contact form in a region within the European Union; data processing agreement.
• Google Workspace: email and office tools; data processing agreement.
• Providers of accounting and legal services to us, to the extent necessary for their tasks.
• Public authorities, where disclosure is required by law.

5. Transfers of data outside the European Economic Area

The site, its logs and the contact form messages are hosted in the European Union. Our email provider may process data outside the EEA, in particular in the United States; the legal basis is the European Commission's adequacy decision for the EU–US Data Privacy Framework and the standard contractual clauses.

6. Your rights

Everyone has the right to access their data and obtain a copy, to rectification, erasure and restriction of processing, to object to processing based on Art. 6(1)(f) GDPR, and to the portability of data processed on the basis of a contract. Send requests to kontakt@ethicalc.com. We reply within one month. Everyone has the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

7. Changes

We publish changes to this policy on this page with the version date. The current version is always available at this address.