1. The Controller of Personal Data of Participants is Commerce Media Tech with a registered office at ul. Lubicz 17G, 31-503 Kraków, Poland incorporated under the laws of Poland and registered in the companies register of the National Court Register held by District Court Krakow – Srodmiescie in Cracow XI Commercial Division (Sąd Rejonowy dla Krakowa – Śródmieścia w Krakowie XI Wydział Gospodarczy) under (KRS) no. 0000830352, having EU VAT ID: PL5272922087 and the share capital in the amount of 5 000 PLN.
2. The contact details of the Controller’s Data Protection Officer are: dpo@cm.tech.
3. Data of Participants (email, name, company name, Voluum login, image and voice, other data provided in the Participant’s submission) will be processed for the following purposes:

1. as necessary to verify the Voluum account of the Participant, grant the Prize, ask for the feedback and promote the Contest and the Controller’s business activity – the legal grounds for the processing will be the consent of Participant to participate in the Contest (Article 6.1(a) of the GDPR);
2. to exercise the Commerce Media Tech’s rights under the given license - the legal grounds for the processing will be concluded Terms and Conditions (Article 6.1(b) of the GDPR);
3. to comply with legal obligations resulting from generally applicable regulations (if any) – the legal grounds for the processing will be compliance with Controller’s legal obligation (Article 6.1(c) of the GDPR);
4. to establish or pursue claims or defend against claims – the legal grounds for the processing will be a legitimate interest of the Controller (Article 6.1(f) of the GDPR);
5. for receiving commercial information – the legal grounds for the processing will be the voluntary consent of the Participant (Article 6.1(a) of the GDPR).

1. Personal Data may be provided to trusted parties acting on behalf of the Controller: suppliers of information systems and IT services, accounting companies, tax advisors and providers of legal services.  
2. Personal data of Participants may be transferred to a country outside of the European Economic Area (EEA) based on a decision of the European Commission, stating that a third country may be considered as providing an adequate level of data protection or based on Standard Contractual Clauses approved by the European Commission (Implementing Decision 914/2021/EU on standard contractual clauses for the transfer of personal data to third countries pursuant Regulation (EU) 679/2016).
3. Personal data of Participants will be processed for the duration of the Contest and time to file a complaint. The processing period may each time be extended by a period of limitation of the claims if the processing of personal data is necessary for the Controller to pursue any claims or defend against such claims. After such a period, data will be processed only to the extent and for the time required by regulations. Personal data gathered on the basis of voluntary consent will be processed until withdrawn.
4. Participant has the right to:

• confirm whether their personal data is processed and the right to obtain access to it,
• obtain copies of processed personal data,
• rectify inaccurate personal data and the right to have incomplete personal data completed,
• erase personal data - "right to be forgotten",
• have the processing of personal data restricted,
• personal data portability,
• object to the processing of personal data.
• withdraw consent - the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal,

1. The Participant may exercise the abovementioned rights by contacting the Controller’s Data Protection Officer at the following email address: dpo@cm.tech.
2. The Participant has also the right to submit a complaint to the competent supervisory authority at any time in the event of a breach of rights regarding the processing of personal data. The competent supervisory authority for the Organizer is the Bureau of the President of the Personal Data Protection Office (PUODO), address: u. Stawki 2, 00-193 Warsaw, Poland.
3. Provision of data is voluntary, but it is required in order to take part in the Contest, including to receive a Prize, if any.

‍