Back to Home

Privacy Policy

PRIVACY POLICY

This website ("Website") is owned by Greenrivers Jakub Duszka with registration data indicated below (hereinafter "Administrator").

The privacy policy defines the rules for obtaining, processing and sharing personal data used to provide services electronically by the Administrator.

Using the Website is equivalent to the User becoming familiar with the content of this document and expressing consent to the provisions contained therein.

IDENTIFICATION OF THE RESPONSIBLE ENTITY

The entity responsible for the implementation of tasks indicated by the Privacy Policy and the personal data controller is Greenrivers Jakub Duszka with registered office at Kasprzaka 29/438, 01-234 Warsaw, Poland, VAT ID: 6762586177, REGON: 387186281, entered in the Central Register and Information on Economic Activity.

DEFINITIONS

  1. Administrator – Greenrivers Jakub Duszka with registered office at Kasprzaka 29/438, 01-234 Warsaw, Poland, VAT ID: 6762586177, REGON: 387186281, entered in the Central Register and Information on Economic Activity.
  2. Personal data – all information about an identified or identifiable natural person through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including device IP, location data, internet identifier and information collected through cookies and other similar technology.
  3. Policy – this Privacy Policy.
  4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
  5. Website – website operated by the Administrator at https://greenrivers.dev
  6. User – a natural person, legal person or organizational unit without legal personality, having at least limited legal capacity, visiting the Website or using one or more services or functionalities described in the Policy.

DATA PROCESSING IN CONNECTION WITH USING THE WEBSITE

In connection with the User's use of the Website, the Administrator obtains, stores and processes data to the extent necessary to provide individual services offered. The Administrator also obtains information about the User's activity on the Website.

User activity in connection with using the Website, including their personal data, is recorded in system logs. The collected data is also processed for technical purposes, including to ensure the security and proper functioning of IT systems.

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

Personal data of Website Users is processed by the Administrator:

  1. For the purpose of providing services electronically, providing access to content, contact form and consent form for receiving commercial information, in accordance with Art. 6(1)(b) GDPR - necessity of processing to perform the contract;
  2. For the purpose of handling inquiries and orders, in accordance with Art. 6(1)(b) GDPR - necessity of processing to perform the contract;
  3. For the purpose of handling complaints, in accordance with Art. 6(1)(b) GDPR - necessity of processing to perform the contract;
  4. For analytical, statistical and optimization purposes by analyzing user activity and preferences to improve functionalities, in accordance with Art. 6(1)(f) GDPR - legitimate interest of the Administrator;
  5. For the purpose of establishing and pursuing possible claims or defending against them, in accordance with Art. 6(1)(f) GDPR - legitimate interest of the Administrator in protecting rights.

CONTACT FORMS

As part of the Website's functionality, the Administrator provides the ability to contact using electronic contact forms. Using the form requires providing personal data necessary for return contact. Providing mandatory data is required to accept and process the query.

Purposes of processing personal data:

  • For identifying the sender and handling the submitted query, in accordance with Art. 6(1)(b) GDPR - necessity of processing to perform the service contract;
  • For analytical, statistical and optimization purposes, in accordance with Art. 6(1)(f) GDPR - legitimate interest of the Administrator.

MARKETING

The Administrator processes Users' personal data for marketing activities, including:

  • Sending email notifications about current events, changes in offer and planned promotional campaigns with the User's express prior consent;
  • Conducting other types of activities related to direct marketing of goods and services.

Marketing activities are conducted with the User's prior, express and direct consent. The granted consent can be withdrawn or modified at any time.

PERIOD OF PERSONAL DATA PROCESSING

The period of processing personal data by the Administrator depends on the type of service provided and the purpose of processing. Personal data is processed for the duration of the service or order fulfillment.

The processing period may be extended in connection with the fulfillment of legal obligations incumbent on the Administrator, as well as in the case of processing personal data for the purpose of establishing and pursuing possible claims or defending against them. After the expiry of the processing period, data is irreversibly deleted or anonymized.

USER RIGHTS

Persons whose personal data is processed have the following rights:

  • Right to information about data processing - by submitting a request, information is received about data processing, purposes and legal bases, scope of data held and entities to whom data is disclosed;
  • Right to obtain a copy of data - by submitting a request, a copy of processed data is received;
  • Right to rectification - one can request removal of inconsistencies or errors concerning processed data and their supplementation or updating;
  • Right to erasure - one can request deletion of data whose processing is no longer necessary;
  • Right to restriction of processing - one can request cessation of operations on personal data;
  • Right to data portability - one can request issuance of data in a machine-readable format;
  • Right to object to data processing for marketing purposes - one can at any time object without justification;
  • Right to object to other purposes of data processing - one can object to processing based on legitimate interest (requires justification);
  • Right to withdraw consent - one can at any time withdraw granted consent to data processing;
  • Right to lodge a complaint - if it is considered that data processing violates GDPR, a complaint can be lodged with the President of the Personal Data Protection Office.

Procedures for exercising rights:

  • Requests can be submitted in writing to: Greenrivers Jakub Duszka, Kasprzaka 29/438, 01-234 Warsaw, or by email to: hello@greenrivers.dev
  • The request should contain identification of the data subject and indicate what the request concerns.
  • The Administrator provides a response within 30 days from the date of receipt of the request.

DATA RECIPIENTS

In connection with the provision of services, Users' personal data may be disclosed to external entities, in particular providers responsible for IT systems service, entities such as banks and payment operators, entities providing accounting, legal, auditing, consulting services, couriers.

The Administrator reserves the right to disclose selected information concerning the User to appropriate authorities or third parties that submit a request for such information, based on an appropriate legal basis and in accordance with applicable law.

PERSONAL DATA SECURITY

The Administrator continuously conducts risk analysis to ensure that Users' personal data is processed securely – ensuring primarily that access to data is available only to authorized persons and only to the extent necessary due to the tasks they perform.

The Administrator takes all necessary actions to ensure an appropriate level of security for personal data transferred and processed on behalf of the Administrator by third parties.

COOKIES POLICY

The Administrator uses cookies – small text files saved on the User's device.

Types of cookies used:

  • Cookies used by the Administrator are safe for the User's device.
  • Cookies allow identification of software used by the User and customization of the Website individually.
  • Session cookies – stored on the device until the end of the browser session.
  • Persistent cookies – remain on the device until deleted by browser functionality.

The Administrator uses cookies for the following purposes:

  • Website configuration – adjusting website content to User preferences and optimization;
  • Analysis, research and audience audit – creating anonymous statistics helping understand how the Website is used;
  • Providing advertising services – presenting advertising messages tailored to preferences.

Cookie settings:

  • The User can independently and at any time change cookie settings through appropriate browser settings.
  • Disabling or limiting the use of cookies may cause partial or complete unavailability of the Website.
  • Detailed information about cookie handling is available in browser settings and help files.

CHANGES TO PRIVACY POLICY

The Administrator reserves the right to modify this document in accordance with the current Privacy Policy. The document in modified form is valid from the date of its announcement on the website.

The Privacy Policy comes into force on the date of announcement.

Privacy Policy effective from March 1, 2026.