GDPR - Data Protection
Last updated: December 4, 2025
1. Data Controller Information
The controller of personal data processed through the Deal & Chill CRM platform is:
Deal & Chill CRM Ltd.
Address: 123 Example Street, Warsaw, Poland
Email: privacy@dealchill.io
Phone: +48 22 123 45 67
2. Legal Basis for Processing
We process your personal data based on:
-
Art. 6(1)(b) GDPR - processing is necessary for contract performance (CRM services)
-
Art. 6(1)(a) GDPR - consent (newsletter, marketing, cookies)
-
Art. 6(1)(f) GDPR - legitimate interest (security, analytics, claims)
-
Art. 6(1)(c) GDPR - legal obligation (accounting, taxes)
3. Your Rights under GDPR
As a data subject, you have the following rights:
Right of Access (Art. 15 GDPR)
You have the right to know whether we process your data and receive a copy.
Right to Rectification (Art. 16 GDPR)
You can request correction of inaccurate or incomplete data.
Right to Erasure - "Right to be Forgotten" (Art. 17 GDPR)
In certain cases, you can request deletion of your personal data.
Right to Restriction of Processing (Art. 18 GDPR)
You can request restriction of processing in specific situations.
Right to Data Portability (Art. 20 GDPR)
You can receive your data in a structured format and transmit it to another controller.
Right to Object (Art. 21 GDPR)
You can object to data processing based on legitimate interest.
Right to Withdraw Consent
You can withdraw consent at any time (does not affect lawfulness of processing before withdrawal).
4. How to Exercise Your Rights
To exercise any of the above rights:
- Send email to: privacy@dealchill.io
- Describe which right you want to exercise
- Provide information enabling your identification
- We will respond within 30 days of receiving the request
5. Data Retention Period
-
Active user data: duration of contract + 3 years
-
Accounting and tax data: 5 years (by law)
-
Marketing data (consent): until consent withdrawal
-
System logs (security): 90 days
6. Right to Lodge a Complaint
If you believe we process your data unlawfully, you have the right to lodge a complaint with a supervisory authority.
7. Automated Decision-Making
The Platform uses AI assistant to analyze notes and suggest actions, however:
- Final decision always belongs to the user
- We do not use fully automated profiling affecting your rights
- You have the right to obtain explanation of AI logic