Privacy Policy

§1. General Provisions

1. The data controller within the meaning of Article 4(4) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter GDPR), is PRM CORP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Czeladź at ul. Nowopogońska 98, 41-250 Czeladź, NIP: 6252466528, REGON: 381211948, entered in the Register of Entrepreneurs of the National Court Register under the number KRS: 0000747579, registration court: District Court Katowice – Wschód in Katowice, VIII Commercial Division of the National Court Register, with a fully paid-up share capital of PLN 5,000.00. 
2. The data controller’s email address: bet@betit.ai. 
3. The data controller is committed to maintaining the confidentiality of personal data and securing it properly. 
4. The data controller, in accordance with Article 32(1) of GDPR, adheres to the principles of data protection and applies appropriate technical and organizational measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data processed in connection with the conducted activities. 
5. Providing personal data by the user is voluntary. 
6. The scope of data processed by the data controller is always adequate to the purpose for which the data was collected. 
7. The mobile application, with the user’s consent, may access the following permissions on the mobile device, including:
   a) technical data,
   b) access to the photo gallery,
   c) access to the camera,
   d) displaying notifications.

§2. Purpose and Legal Basis of Data Processing

1. The data controller processes personal data for the following purposes:
   a) providing electronic services through BetIt.ai based on the concluded agreement (Article 6(1)(b) GDPR);
   b) issuing and receiving billing documents, based on tax law provisions (Article 6(1)(c) GDPR);
   c) handling the complaint process, based on the obligation incumbent on the data controller under applicable law (Article 6(1)(c) GDPR);
   d) contacting users, particularly in response to inquiries directed to the data controller, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR);
   e) sending technical information regarding the functioning of BetIt.ai and services used by the user, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR);
   f) marketing, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR) or based on prior consent (Article 6(1)(a) GDPR).

§3. Data Recipients. Transfer of Data to Third Countries

1. The data controller processes personal data for the following purposes:
   a) providing electronic services through BetIt.ai based on the concluded agreement (Article 6(1)(b) GDPR);
   b) issuing and receiving billing documents, based on tax law provisions (Article 6(1)(c) GDPR);
   c) handling the complaint process, based on the obligation incumbent on the data controller under applicable law (Article 6(1)(c) GDPR);
   d) contacting users, particularly in response to inquiries directed to the data controller, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR);
   e) sending technical information regarding the functioning of BetIt.ai and services used by the user, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR);
   f) marketing, which is a legitimate interest of the data controller (Article 6(1)(f) GDPR) or based on prior consent (Article 6(1)(a) GDPR).

§4. Data Retention Period

1. The data controller stores personal data for the duration of the user’s use of BetIt.ai, i.e., until the user is deleted from BetIt.ai.

§5. Rights of the Data Subject

1. Every data subject has the right to:
   a) access – obtain from the data controller confirmation as to whether or not personal data concerning them is being processed. If such data is being processed, they have the right to access the data and obtain the following information: the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the data has been or will be disclosed, the period for which the data will be stored or the criteria used to determine that period, the right to request rectification, erasure, or restriction of processing of their personal data, and to object to such processing (Article 15 GDPR);
   b) receive a copy of the data – obtain a copy of the data undergoing processing, with the first copy being free of charge, and for additional copies, the data controller may charge a reasonable fee based on administrative costs (Article 15(3) GDPR);
   c) rectification – request the rectification of their personal data that is inaccurate or the completion of incomplete data (Article 16 GDPR);
   d) erasure – request the erasure of their personal data if the data controller no longer has a legal basis to process it or the data is no longer necessary for the purposes of processing (Article 17 GDPR);
   e) restriction of processing – request the restriction of processing of personal data (Article 18 GDPR) when:

• the data subject contests the accuracy of the personal data – for a period enabling the data controller to verify the accuracy of the data,
• the processing is unlawful, and the data subject opposes the erasure of the data and requests the restriction of its use instead,
• the data controller no longer needs the data for the purposes of processing, but it is required by the data subject for the establishment, exercise, or defense of legal claims,

the data subject has objected to processing – pending verification whether the legitimate grounds of the data controller override those of the data subject;
f) data portability – receive the personal data concerning them, which they have provided to the data controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another data controller if the processing is based on consent or a contract and is carried out by automated means (Article 20 GDPR);
g) object – object to the processing of their personal data in the legitimate interests of the data controller, for reasons related to their particular situation, including profiling. In this case, the data controller shall cease to process the data unless the data controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims. If the interests of the data subject outweigh the interests of the data controller, the data controller shall cease to process the data for these purposes (Article 21 GDPR). To exercise the aforementioned rights, the data subject should contact the data controller using the provided contact details and inform the data controller of which right and to what extent they wish to exercise it.

2. The data subject has the right to lodge a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection in Warsaw.

§6. Automated Data Processing. Profiling

1. The data controller may process user data regarding the frequency of their use of BetIt.ai and the functionalities they utilize.
2. The data controller processes the data mentioned in paragraph 1 to improve BetIt.ai.
3. A user who disagrees with the processing of their data in the manner specified in paragraph 1 may object to the automatic data processing, which may result in the inability to use BetIt.ai.

§7. Cookies

1. The service provider collects data about the user in the form of so-called “cookies.” Cookies are small text files that are stored on the device during the use of BetIt.ai.
2. The cookies store technical data related exclusively to the user’s use of BetIt.ai, such as the date of connection to BetIt.ai with its servers, the IP address of the device, dates of use of BetIt.ai and its specific functions. These data are used solely for the purposes specified in paragraph 3 and do not allow for the identification of an individual user. Data entered by the user in other device applications are not stored in cookies.
3. The service provider has access to cookies and uses them to facilitate the provision of services available on BetIt.ai, as well as to improve and develop these services and BetIt.ai itself by analyzing user behavior on BetIt.ai. The service provider processes the data contained in cookies automatically.
4. The user does not have to accept cookies (by making the appropriate settings on the device), but this may cause the application to not function fully correctly.
5. Cookies do not constitute malicious software (such as viruses, trojans), do not change the configuration of the device hardware, and can be deleted by the user at any time.

§8. Google Analytics

1. The data controller uses Google Analytics, an analytics service provided by Google Inc. based in the USA. 
2. Google Analytics uses mechanisms that enable the analysis of the user’s use of BetIt.ai. Information about the use of BetIt.ai is transmitted and stored on Google’s servers. On behalf of the data controller, Google will use this information to analyze the use of BetIt.ai by users, prepare reports on activity on BetIt.ai, and provide other services related to the use of BetIt.ai. 
3. The data will not be used to identify any individual.

§9. SmartLook

1. The data controller uses the SmartLook tool provided by Smartsupp.com, s.r.o., Milady Horakove 13, Brno, 602 00, Czech Republic. With the help of SmartLook, the data controller analyzes user behavior on BetIt.ai to optimize BetIt.ai for the user experience. These activities are carried out by the data controller based on its legitimate interest in optimizing BetIt.ai. 
2. SmartLook uses cookies and other technologies to collect information about the user’s behavior on BetIt.ai. SmartLook stores this information in a pseudonymized profile. Neither SmartLook nor the data controller will use this information to identify the user. More information can be found in the SmartLook privacy policy: SmartLook Privacy Policy.

§10. Facebook Pixel

1. The data controller uses Facebook Pixel, an analytics tool that helps measure the effectiveness of ads based on the analysis of actions taken by users on BetIt.ai.
2. The data controller uses Facebook Pixel to target personalized ads to the user on Facebook. This involves using Facebook’s cookies. The legal basis for the use of Facebook Pixel by the data controller is Article 6(1)(f) GDPR.

§11. TikTok Pixel

1. The data controller uses TikTok Pixel – an analytical tool belonging to TikTok Technology Limited (Ireland), which helps measure the effectiveness of ads based on the analysis of actions taken by users on the website.
2. Data from the Pixel may be used to: display ads to the appropriate audience, create ad audience groups, and use other TikTok advertising tools. By using BetIt.ai, the user agrees to the collection, processing, and transfer of the above data for the purposes mentioned above in accordance with TikTok’s privacy policy.
3. More information related to privacy protection and the processing of personal data by TikTok can be found at: TikTok Privacy Policy.

§12. Newsletter

1. The data controller provides a service that allows subscribing to and receiving free information about its services (Newsletter) electronically.
2. The agreement for the provision of the Newsletter service electronically is concluded for an indefinite period when the user subscribes to the “Newsletter” service using the functionality available in the BetIt.ai mobile application and ends when the user unsubscribes from the subscription list using the hyperlink (link) included in the Newsletter messages.
3. The Newsletter service also ends upon the withdrawal of consent given by the user for the processing of their data for marketing purposes or upon the user’s objection to the processing of their personal data.