PRIVACY POLICY

Summary

We collect data that you provide to us while using our service:

• Clickpath (the user's path across pages)
• Financial information
• Fraud detection and prevention
• Timestamp
• IP address
• Tracking user device
• Visitor behavior
• User agent (browser and OS)
• Language (interface language)
• Timezone
• Visited website
• Tracking user network
• Location (geolocation)

Owner and Data Controller

WeExpert Sp. z o.o. | ul. Józefa Piłsudskiego, 50-020 Wrocław, PL

Owner's contact email address: contact@paydone.io

PayDone is a platform of the WeExpert group of companies. Both projects (weexpert.io and paydone.io) are operated by WeExpert Sp. z o.o., registered in Poland. This Policy applies exclusively to the paydone.io platform.

Categories of Data Collected

The categories of Personal Data collected by https://paydone.io/ (independently or through third parties) include:

• Clickpath (the user's path across the site)
• Financial information
• Fraud detection and prevention
• Timestamp
• Tracking clicks on ads
• Tracking conversion
• Match and combine with offline data
• IP address
• Tracking media (media activity)
• Tracking timezone
• Tracking time and date
• Tracking user device
• Location (geolocation)
• Tracking user network
• Visitor behavior
• User agent (browser and operating system)
• Language (interface language)
• Visited website
• Timezone

Full information about each category of collected Personal Data is provided in the relevant sections of this privacy policy or in dedicated explanatory texts displayed on screen before the Data is collected.

Personal Data may be provided by the User independently or, in the case of Usage Data, it may be collected automatically by https://paydone.io/ when used.

Unless otherwise specified, all Data requested by https://paydone.io/ is mandatory. In case of failure to provide such Data, https://paydone.io/ may be unable to provide its Services.

In cases where https://paydone.io/ specifically states that certain Data is not mandatory, Users are entitled not to communicate such Data without any consequences regarding the availability or functioning of the Service.

Users who are unsure about which Personal Data is mandatory are encouraged to contact the Owner.

https://paydone.io/ or the owners of third-party services that https://paydone.io/ engages use "Cookies" (or other tracking tools) for the purpose of providing the Service required by the User, as well as for any other purposes described in this document and in the Cookie Policy.

Users are responsible for any Personal Data of third parties that they obtain, publish or share with other persons through https://paydone.io/.

Method and place of Data processing

The Owner takes adequate security measures to prevent unauthorized access to, disclosure, modification or unauthorized destruction of the Data.

Data processing is carried out using computers and/or IT-enabled tools in accordance with organizational procedures and methods strictly related to the stated purposes.

In some cases, the Data may be accessible, in addition to the Owner, to certain categories of responsible persons involved in the operation of this Service (administration, sales department, marketing department, legal department, system administrators), or to external organizations (such as third-party providers of technical services, mail organizations, hosting providers, IT companies, communication services), to whom the Owner entrusts, where necessary, the performance of the functions of Data Processor. An updated list of such persons and parties may be requested from the Owner at any time.

The Data is processed at the Owner's operating offices (Poland) and at any other places where the parties involved in the processing are located. The paydone.io platform server is located on the territory of Poland (EU).

Depending on the User's location, data transfers may involve the transfer of the User's Data to a country outside their own country. For more detailed information about the place of processing of such transferred Data, Users may refer to the section containing detailed information about the processing of Personal Data.

Unless otherwise specified in this document, Personal Data must be processed and stored for as long as required by the purposes for which they have been collected and may be retained for a longer period due to applicable legal obligations or based on the User's consent.

Purposes of processing

The Data concerning the User is collected to enable the Owner to provide the Service, comply with legal obligations, respond to law enforcement requests, protect their rights and interests (or the rights and interests of Users or third parties), detect any malicious or fraudulent activities, as well as for the following purposes:

• Registration and management of the User's account on the Platform;
• Identity verification (KYC) in accordance with legal requirements;
• Generation, processing and sending of invoices to the User's clients;
• Carrying out payment transactions and payouts (fiat currencies and cryptocurrency);
• Calculation and withholding of taxes (PIT) for tax residents of Poland;
• Provision of legal documentation (copyright transfer agreements, etc.);
• Communication with the User regarding account, transactions and Platform updates;
• Sending marketing communications (with the User's consent);
• Prevention of fraud, money laundering and other illegal activities;
• Fulfillment of obligations stipulated by the legislation of Poland and the EU;
• Improvement of Platform functionality and the quality of user service;
• Data transfer outside the EU (where there are grounds specified in this document).

Additional information about the processing of Personal Data

The Owner may use the Personal Data and Usage Data which were collected using https://paydone.io/ to create or update User profiles. This type of Data processing allows the Owner to evaluate Users' choices, preferences and behavior for the purposes set out in the relevant section of this document.

User profiles may also be created using automated tools such as algorithms, which may also be provided by third parties. Additional information about the profiling conducted may be found by Users in the relevant sections of this document.

The User has the right at any time to object to such profiling. In order to obtain further information about the User's rights and the procedure for exercising them, the User is encouraged to read the section of this document setting out the User's rights.

Vendors (Service providers)

https://paydone.io/ uses the following service providers, which may process Users' Personal Data:

• CookieBot — cookie consent management
• Facebook (Meta) — targeted advertising and analytics
• fontawesome.com — fonts and icons
• Google Ads — advertising campaigns
• Google Analytics — traffic and user behavior analysis
• Google Fonts — web fonts
• Google General — general Google services
• Google Maps — mapping services
• Google Tag Manager — tag and analytics management
• Microsoft Advertising / Bing Ads — advertising campaigns
• Microsoft Clarity — user behavior analysis
• paydone.io — internal platform services
• YouTube — embedded video content

Each of the above providers processes data in accordance with their own privacy policy. Users are encouraged to review the privacy policies of the relevant providers to obtain full information about data processing.

Additional information for Users in the European Union

The Owner may process Personal Data relating to Users if one of the following criteria applies:

• Users have given their consent to the use of Data for one or more specific purposes. Note: under the legislation of some jurisdictions, the Owner may be allowed to process Personal Data until the User objects to such processing ("opt-out"), without the need to rely on consent or any other of the legal bases listed below. However, this shall not apply where the processing of Personal Data is regulated by European data protection legislation;
• provision of Data is necessary for the performance of an agreement with the User and/or any pre-contractual obligations;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the purposes of the legitimate interests pursued by the Owner or a third party.

In any case, the Owner will willingly help clarify the specific legal basis applicable to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary for the conclusion of a contract.

Unless otherwise specified in this document, Personal Data must be processed and stored for as long as required by the purposes for which they have been collected and may be retained for a longer period due to applicable legal obligations or based on the User's consent.

Thus:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
• Personal Data collected for the purposes of pursuing the Owner's legitimate interests shall be retained for as long as is necessary to achieve such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner in the relevant sections of this document, or by contacting the Owner.
• The Owner may be permitted to retain Personal Data for a longer period of time where the User has consented to such processing, until such consent is withdrawn.
• In addition, the Owner may be obliged to retain Personal Data for a longer period of time if required to fulfill a statutory obligation or by order of an authority.

After the retention period expires, the Personal Data shall be deleted. Therefore, the right of access, the right of erasure, the right of rectification and the right to data portability cannot be exercised after the retention period has expired.

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following within the limits provided by law:

• Withdraw their consent at any time.
• Object to the processing of their Data.
• Access their Data.
• Verify the Data and request its rectification.
• Restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than its storage.
• Request the erasure of their Personal Data or otherwise destroy it.
• Receive their Data and transfer it to another controller.
• Lodge a complaint with the competent data protection authority.

Users also have the right to be informed of the legal basis for the transfer of Data abroad, as well as of the security measures taken by the Owner to protect their Data.

In cases where Personal Data is processed in the public interest, in the exercise of official authority or for the purposes of the legitimate interests, Users may object to such processing by providing a ground related to their particular situation.

In the case of processing of data for direct marketing purposes, Users may at any time and free of charge object to such processing without providing any justification. Upon receipt of the objection, processing for these purposes shall cease.

Any requests may be sent to the Owner using the contact details provided in this document. Such requests are free of charge. The Owner will respond to them as soon as possible, not exceeding one month. The Owner will inform every recipient to whom the Data was disclosed of any rectification or erasure of the data, except where this proves impossible or would require disproportionate effort. Upon Users' request, the Owner will inform them about these recipients.

Users' Personal Data is transferred from the EU to third countries only if the User has expressly consented to such transfer after being informed about the possible risks. In such cases, the Owner must duly inform the Users and obtain their clearly expressed consent, using https://paydone.io/ for this purpose.

Users have the right to lodge a complaint with the Polish supervisory authority:
Urząd Ochrony Danych Osobowych (UODO)
Address: ul. Stawki 2, 00-193 Warszawa, Polska
Website: https://uodo.gov.pl
Email: kancelaria@uodo.gov.pl

Additional information about Data collection and processing

The User's Personal Data may be used by the Owner in legal proceedings or at stages leading to a possible recourse to court in connection with improper use of the Services. The User declares that they are aware that the Owner may be forced to disclose the Personal Data at the request of public authorities.

In addition to the information contained in the policy, https://paydone.io/ may provide, at the User's request, additional contextual information about specific Services.

For the purposes of ensuring the operation of the system, https://paydone.io/ and third-party services may collect system log files (in particular, the IP address).

Additional information may be requested from the Owner at any time. See contact details at the beginning of the document.

The Owner reserves the right to make changes to these rules at any time by notifying Users on this page and possibly within the application. Users are strongly encouraged to check this page often. Should the changes affect activities based on consent, the Owner must re-obtain consent from the User.

Definitions of terms and references to legal regulations

Any information that, directly, indirectly, or in connection with other information — including a personal identification number — makes it possible to identify or recognize a natural person.

Information automatically collected by https://paydone.io/ or third-party services (IP addresses, URI addresses, time of request, request method, file size, response status code, country of origin, browser and OS characteristics, information about the time of visit and movements within the Service).

An individual using https://paydone.io/, who, unless otherwise specified, coincides with the Data Subject.

A natural person to whom the Personal Data refers.

A natural or legal person, official public authority, agency or other body, that processes personal data on behalf of the Controller.

A natural or legal person, public authority, agency or other body, that, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including security measures. Unless otherwise specified, the Data Controller is the Owner.

The means by which the collection and processing of the User's Personal Data is carried out. PayDone is a platform for issuing invoices and receiving payouts for freelancers and specialists working in the IT and digital sphere.

The service provided by https://paydone.io/, as described in the relevant terms and on this site or in this application.

Unless otherwise specified, all references in this document to the European Union include all current member countries of the European Union and the European Economic Area.

Unless otherwise specified in this document, the privacy policy applies exclusively to https://paydone.io/.