Privacy Policy

Privacy Policy

Online Arbitration S.A. Privacy Policy

1. General Information

• all the data of the current and potential clients of the OAC (the data of potential clients is understood as data of the persons who have filled in a registration form but have not concluded an agreement with the OAC yet in accordance with the Regulations for Electronic Services Provided by Online Arbitration S.A.);  
• every person participating in the arbitration procedure before the permanent Online Arbitration Court – whether as an individual or a representative of a legal person – this also applies to the persons not being parties to proceedings (e.g. arbitrators, witnesses, expert witnesses and others);
• the persons who are not clients of the OAC, e.g. the contact persons for corporate clients (not being individuals).

2. Types of your data that we collect

• Identification data, such as full name, address, PESEL number of another domestic identification number of a natural person, email address, phone number, citizenship, data of business entities with which you are associated in different ways (as an employee, partner, body member, attorney, etc.).
• Information on the arbitration proceedings in which you participate as a party, witness, expert witness or an Arbitrator, in particular the data from the submitted pleadings and evidence.
• Financial data regarding settlements between you and the OAC.
• Data in audio-visual form, such as recordings from the hearings conducted in the form of video conferences within arbitration proceedings.

3. What do we do with your personal data?

• Performance of the agreement, including day-to-day management of relationships with client: while registering your user account, we collect the information necessary for verifying the correctness of opening your account and for the purpose of contacting our users. In this case, the legal grounds for processing your data are art. 6 point 1 letter b of the Regulation: processing is necessary for performing the agreement of the data subject.  Performance of the Agreement is also understood as using user data for providing it with important information on the operation of the Website (e.g. information on temporary unavailability of the Website).
• Conduct of arbitration proceedings: for the purposes of conducting arbitration proceedings, we collect the information on your relationship with the given case, in particular the information on your business activities or on the business activities of the entities with which you are associated in any way. In this case, the legal grounds for processing your data are art. 6 point 1 letter d of the Regulation: the processing is necessary for protecting the legitimate interests of the data subject and art. 6 point 1 letter f of the Regulation: the processing is necessary for the purposes resulting from the legitimate interests of the administrator or a third party.
• Marketing: we may send to you emails or text messages offering products or services if you consent to it, e.g. during registration on the OAC Website or during registration for newsletter purposes on our website. You may revoke your consent at any time.

• The stated personal data will be used solely for opening Arbitrator accounts, verifying their identity and in the scope necessary for concluding, performing, amending or terminating the framework agreement and for conducting the arbitration proceedings in which the Arbitrator is member of the Adjudication Panel. Performance of the Agreement is also understood as using Arbitrator data for providing it with important information on the operation of the Website (e.g. information on temporary unavailability of the Website).

4. Whom do we provide with your data and why?

• courts on account of conducted proceedings for the purpose of confirming enforceability of awards of the Online Arbitration Court at the Online Arbitration S.A. company with its registered office in Wrocław;
• tax authorities which may require us to provide information on the proceedings in which you were a party;
• judicial/ law enforcement authorities, such as police, public prosecutor’s offices and courts, at their explicit and legal requests.

• proper personal data processing agreements,
• standard contractual clauses adopted in the European Union (they refer to provision of data by entities from the European Union outside of the European Economic Area for the purpose of compliance with the EU data protection provisions);  
• the “EU-US Privacy Shield” agreement which protects the personal data sent to the United States.

5. Your rights and the methods in which we respect them

• Right of access to data: You are entitled to request that we send a list of your personal data that we process.
• Right to rectify data: If your personal data is incorrect, you are entitled to request that we rectify it. If we provide your data to a third party, and that data is later rectified, we will inform the third party about that fact.
• The right to object to processing: You may raise an objection with the OAC against the processing of your personal data due to the legitimate interests of the OAC or third parties. We will analyze your objection and whether the processing of your data has any adverse influence on you that requires that we cease such processing.
• Right to restriction of data processing: You are entitled to request that we limit the use of our personal data if you believe that it is incorrect, that we process your data in breach of the law, that the OAC no longer needs such data, but you want us to keep it in case of claims, you object to our processing of your data due to legitimate interests of the OAC and that objection was accepted by the OAC.
• Right to data portability: You are entitled to request that we transfer your personal data directly to you or to another organization. This refers to the personal data we process in an automated way and with your consent or under an agreement concluded with you. If technically possible, we will provide you with that personal data.
• Right to erasure: You may request that we erase your personal data, if we no longer need it for the purposes, for which it has been collected, if you revoke your consent for the processing thereof and OAC has no other grounds for processing, if you object to our processing of your data based on our legitimate interests and there are no superior legitimate interests of data processing and that objection is accepted or for the purpose of sending personalized commercial messages (in the last case, we will stop to process data for marketing purposes), if the OAC processes your personal data in breach of the law or if the provisions of the European Union or of an EU member state require the OAC to erase your personal data.
• Right to submit a complaint: If you believe that the processing of data by the OAC takes place in breach of your rights, you may submit a complaint with the supervisory authority, i.e. President of the Personal Data Protection Office. Also, you are entitled to submit a complaint by contacting the data protection authority in your country.

6. How we protect your personal data

7. What may you do in order to facilitate our protection of your data?

• install antivirus software, antispyware software and a firewall and update them,
• always log out of the OAC Website immediately after ending work,
• keep your passwords confidential and apply the so-called strong passwords, i.e. avoid obvious combinations of letters and digits.

8. How long do we store your personal data?

9. Contacting the OAC