Privacy and cookies policy  
Good morning!  
If you have arrived here, it is a reliable sign that you value your privacy. We understand this very well, which is why we  
are putting a document in your hands that provides you with a one-stop shop for the rules on the processing of  
personal data and the use of cookies and other tracking technologies.  
Formal information to start: the administrator of your personal data is Show Your Score Prosta Spółka Akcyjna with its  
registered office in Warsaw at Aleja Jana Pawła II 27, 00-867 Warsaw, entered into the National Court Register by the  
District Court for the City of Warsaw in Warsaw under KRS number: 0001010337, using VAT number PL5273034354,  
share capital: 25,000 PLN.  
We process your personal data primarily for purposes related to your use of our website, such as maintaining your  
user account, placing orders and handling contracts, processing complaints and withdrawals, fulfilling legal tax  
obligations, sending newsletters, claims cases, analysis, statistics, marketing, etc. We process your personal data for  
the period of time necessary for the respective purpose. You have the right to access, rectify, erase or restrict the  
processing of your personal data, to object to the processing, as well as the right to data portability. In addition, you  
can lodge a complaint with the President of the Data Protection Authority.  
Please refer to the following section of the Privacy Policy for details of how your personal data will be processed.  
If you have any concerns about the Privacy Policy, you can contact us at any time by sending an email to  
# 1: Who is the controller of personal data?  
The administrator of your personal data is Show Your Score Prosta Spółka Akcyjna with its registered seat in Warsaw  
at Aleja Jana Pawła II 27, 00-867 Warsaw, entered into the National Court Register by the District Court for the capital  
city of Warsaw in Warsaw under KRS number: 0001010337, using NIP number 5273034354, share capital: 25,000 PLN.  
This Privacy Policy applies to the application called "Show Your Score", which belongs to the administrator.  
With regard to the social media profiles associated with our website, according to the case law of the Court of Justice  
of the European Union, the provider of the social network is a joint controller of personal data together with the  
controller of the respective profile. Details of the processing of personal data by the individual social media providers  
can be found here:  
TikTok,  
# 2: Who can you contact regarding the processing of personal data?  
As part of the implementation of a data protection system in our organisation, we have decided not to appoint a Data  
Protection Officer due to the fact that it is not mandatory in our situation.  
In matters relating to data protection and privacy more broadly, you can contact contact@showyourscore.com, by  
email. In terms of social media, you can additionally contact directly the administrators of the social networks on  
which we maintain our profiles.  
1
# 3: For what purposes do we process personal data?  
There are more than one of these objectives. Below is a list of them, together with a more detailed discussion. We  
have also assigned the respective legal bases for processing to the various purposes:  
Purpose of processing Discussion of the purpose of processing  
When you create a user account, you must provide the data necessary to set  
Legal basis  
up your account as specified in the registration form.  
The provision of data is a prerequisite for creating an account.  
As part of editing your account details, you can enter your further details in  
accordance with the options available within your account.  
If you create an account through integration with a social media account, we  
will gain access to certain data stored within the social media account  
(name, email address, profile picture) on the basis of your prior  
authorisation.  
User account handling  
Article 6(1)(b) RODO  
In addition, our system used for user accounts records your IP number,  
which you used when registering your user account.  
The data is processed for the purpose of providing the user account service  
to you. After deletion of your user account, the data is archived for the  
possible establishment, investigation or defence of claims related to the  
user account service.  
When you place an order, you must provide the data necessary to process  
the order as specified on the order form.  
Provision of data is a prerequisite for placing an order.  
In addition, the system used to process your order saves the IP number you  
used to place the order.  
Each order is saved in a database, which means that your personal data  
assigned to the order is also accompanied by order-related information such  
as the date and time of the order, order ID, transaction ID, subject of the  
order, price, method and date of payment, date and time of download (in the  
case of digital content).  
In connection with the conclusion of the contract, it may also process your  
other personal data in order to perform the services provided for in the  
contract that has been concluded. The extent of this data depends on which  
personal data are needed to perform the contract.  
Order processing and  
contract handling  
Article 6(1)(b) RODO,  
Article 6(1)(f) RODO  
Where we receive your data in the performance of a contract, e.g. from an  
entity that employs you, we base such processing on a legitimate interest,  
which in this case is to ensure the efficient and effective handling of the  
contract concluded. In this case, we may process your identifying and  
contact data.  
The data are processed for the purpose of concluding and performing the  
contract. Once the contract has been performed, the data goes into the  
archives for the purpose of possibly establishing, asserting or defending  
claims related to the contract. Data also goes into the accounting records  
for the purpose of complying with tax obligations.  
As some customers start placing an order but do not complete it (do not  
validate the order and do not enter into a contract with us), we may take  
steps to ensure that our customers complete the purchase process.  
Actions  
complete orders by  
customers  
taken  
to  
Article 6(1)(b) RODO,  
Article 6(1)(f) RODO  
To this end, we can, for example, send emails containing information about  
an unfinished order and an incentive to complete the transaction.  
For the purposes of the activities described above, we may process personal  
data such as the information provided during the ordering process, in  
particular your name and e-mail address, as well as information about the  
2
contents of your shopping cart, the date on which the transaction was  
initiated and other data left in connection with the purchase process.  
The legal basis for the processing of your personal data is Article 6(1)(b) of  
the RODO, as these activities are aimed at the conclusion of a contract.  
Furthermore, we see the basis for the processing as our legitimate interest,  
which in this case is to increase sales.  
If you make a complaint or withdraw from the contract, you provide the  
personal data contained in the content of the complaint or withdrawal  
statement.  
Article 6(1)(c) of the  
RODO in connection  
The provision of data is a condition for the submission of a declaration of with  
withdrawal or complaint.  
the  
provisions on the right  
of withdrawal and  
liability for compliance  
with the contract,  
relevant  
Handling complaints  
or withdrawals  
The data are processed for the purpose of handling the withdrawal or  
complaint process. Once such a process has been carried out, the data goes  
into an archive for the purpose of possibly establishing, asserting or  
defending claims related to the handling of the withdrawal or complaints  
process. The data also goes into accounting records for the purpose of  
complying with tax obligations.  
Article 6(1)(b) of the  
RODO  
When subscribing to the newsletter, you must provide the necessary data to  
receive the newsletter as specified in the subscription form.  
Provision of data is a condition of receiving the newsletter.  
In addition, the mailing system records your IP number, which you used  
when signing up for the newsletter, determines your approximate location,  
the mail client you use for email, and tracks your actions taken in relation to  
the messages sent to you. Accordingly, we also have information about  
which messages you have opened, within which messages you have clicked  
on links, etc.  
In the mailing system, we may also define, on the basis of various criteria  
related to your activities, interests or other preferences, specific groups or  
segments of newsletter recipients that influence what kind of messages you  
receive in the newsletter.  
The data you provide in connection with subscribing to the newsletter is  
used for the purpose of sending you the newsletter, and the legal basis for  
its processing is the performance of the electronic service contract, as well  
as our legitimate interest, which in this case is the fulfilment of marketing  
purposes.  
Handling  
newsletter  
the  
Article 6(1)(b) RODO,  
Article 6(1)(f) RODO  
With regard to the processing of information that does not come from you,  
but is collected automatically by the mailing system, we rely in this respect  
on our legitimate interest to analyse the behaviour of newsletter subscribers  
in order to optimise mailing activities.  
You can unsubscribe from the newsletter at any time by clicking on the  
dedicated link included in each message sent as part of the newsletter, or  
simply by contacting us.  
Opting out of the newsletter does not lead to the deletion of your data from  
the mailing system. The data is archived for the possible establishment,  
assertion or defence of claims relating to the newsletter, as well as to  
ensure that it can be demonstrated that the newsletter activities were  
carried out in accordance with the law.  
When you add a comment/feedback, you must provide the data necessary  
to publish the comment/feedback you receive as set out in the  
comment/feedback form.  
Handling  
comments/feedback  
Article 6(1)(f) RODO  
The provision of data is a prerequisite for the publication of the comment /  
opinion.  
3
In addition, the comment/feedback system records your IP number, which  
you used when submitting your comment/feedback.  
The comment/feedback system may be operated by an external provider. If  
this is the case, your use of the system is subject to the terms and  
conditions and privacy policy of the external provider. For details of the  
third-party provider's tools, please see the section on the tools we use.  
The data is processed for the purpose of publishing a comment / opinion,  
which is our legitimate interest.  
The comment or opinion you have added, together with your data made  
public within the settings, will be visible on the website. You can modify or  
delete your comment or opinion at any time. A deleted comment / opinion  
together with your data will be archived for the purpose of establishing,  
investigating or defending claims related to the comment / opinion.  
When you contact us via the available means of communication, e.g. email,  
social messaging, chat rooms, etc., you naturally provide your personal data  
contained in the content of your correspondence.  
The provision of data is a condition of contact.  
In addition, the communication system records your IP number, which you  
used when sending the message.  
Contact  
correspondence  
handling  
and  
A communication system (e.g. chat, instant messaging) may be operated by  
an external provider. In such a situation, the use of the system is subject to  
the terms and conditions and privacy policy of the external provider. For  
details on the tools of external providers, please see the section on the tools  
we use.  
Article 6(1)(f) RODO  
The data is processed for the purpose of carrying out the communication,  
which is our legitimate interest. Once the communication has ended, the  
data is archived for the possible establishment, investigation or defence of  
claims related to the communication.  
In connection with the performance of the contract, we also fulfil various tax  
and accounting obligations, in particular the issuing of an invoice, the  
inclusion of the invoice in our accounting records, the retention of records,  
etc.  
Article 6(1)(c) of the  
RODO in connection  
Fulfilment of tax and  
accounting obligations In order to issue an invoice, we process data such as name, company, with  
the  
relevant  
business address, TIN, among others.  
provisions of tax law  
The provision of data required by tax law is necessary to fulfil the obligations  
indicated.  
We may create archives for the purposes of our business: both in traditional  
and digital form. The archives include personal data that we have processed  
in connection with you, and may vary depending on what data has come to  
us and the extent of the data justified in terms of archiving. In this case, we  
rely on our legitimate interest in organising and structuring the personal data  
carriers.  
Creation of an archive  
Article 6(1)(f) RODO  
The use of our website, as well as the conclusion of a contract with us, may  
give rise to certain claims on our side or yours in the future. Accordingly, we  
are entitled to process personal data for the purpose of defending,  
Defence,  
establishment  
or establishing or asserting claims. As part of this purpose, we may process Article 6(1)(f) RODO  
enforcement of claims any personal data that is related to the claim in question, so the extent of the  
processing may vary depending on what the claim is about. In this case, we  
rely on our legitimate interest to protect our interests in this regard.  
4
Your e-mail address stored in our database may be sent to a specific  
advertising system (e.g. Facebook Ads, LinkedIN Ads) in order to create an  
audience for advertisements using this e-mail address.  
When using this function, the email address is hashed before being sent to  
the relevant system to create a recipient group.  
The e-mail address will be used in the matching process conducted by the  
advertising system concerned.  
The advertising system does not share the e-mail address with third parties  
or other advertisers and deletes the e-mail address immediately after the  
matching process is completed.  
Creation of ad groups  
Article 6(1)(f) RODO  
The advertising system implements processes and procedures to ensure the  
confidentiality and security of the e-mail address sent to it and the set of  
user identifiers forming the group of recipients created using the e-mail  
address by, among other things, applying technical and physical safeguards.  
The creation of an audience for advertisements using your e-mail address  
constitutes our legitimate interest, which in this case is the fulfilment of our  
marketing objectives.  
If you follow our social media profiles or interact with content that we  
publish on social media, we naturally see your data that is publicly available  
in your social media profile. We process this data only within the respective  
social network and only for the purpose of operating the respective social  
network, which is our legitimate interest.  
If you contact us by private message, you naturally provide us with your  
personal data contained in the content of the correspondence, in particular  
your image and your name. Your data is processed in this case for the  
purpose of contacting you, and the basis of the processing is our legitimate  
interest.  
Social media handling  
It may be the case that we are the party initiating contact with you via social Article 6(1)(f) RODO  
media in order to offer cooperation, in which case your data will be  
processed for the purpose of seeking potential contractors, offering and  
establishing cooperation, which is our legitimate interest.  
Messages sent to us via social media are automatically archived via the  
tools available within the individual social media sites and are available to us  
until you delete them. You have access to all messages exchanged with us  
in the private messages tab.  
Your use of social media sites is subject to the rules and privacy policies of  
the administrators of those sites, and those administrators provide  
electronic services to you, fully independently and autonomously of us.  
We carry out analytical and statistical activities using tools provided by  
external providers. As part of the analytical tools, we only have access to  
Anonymous Information. We base the processing of Anonymous  
Information on our legitimate interest in creating, viewing and analysing  
statistics related to user activity on the website in order to draw conclusions  
Analysis and statistics  
using only Anonymous  
Information  
Article 6(1)(f) RODO  
for the subsequent optimisation of our activities.  
From within the tools, we only have access to a set of statistics and  
information not assigned to specific individuals.  
For details on third-party supplier tools, please see the section on the tools  
we use.  
We carry out marketing activities using tools provided by external providers.  
Within the marketing tools, we only have access to Anonymous Information.  
We base the processing of Anonymous Information on our legitimate  
interest, which is to create marketing leads based on Anonymous  
Own marketing using  
only  
Anonymous  
Article 6(1)(f) RODO  
Information  
5
Information and to target advertisements within external systems based on  
Anonymous Information, for the purpose of marketing our own products and  
services. From within the tools, we only have access to a set of statistics  
and information not attributed to specific individuals.  
For details on third-party supplier tools, please see the section on the tools  
we use.  
In order to increase sales of products / services, we may run various  
promotional campaigns, including in cooperation with external partners.  
Rules related to the organisation of promotional campaigns are set out in  
separate regulations. The scope of personal data we will process in  
connection with the organisation of a promotional action may vary  
depending on the type of promotional action.  
Organisation  
promotional activities  
of  
Article 6(1)(b) RODO,  
Article 6(1)(f) RODO  
The legal basis for processing your personal data is our legitimate interest,  
which in this case is marketing and increasing sales of our own products.  
On our pages, we may embed video or audio players, social widgets, a  
comment module, chat, newsletter forms or other tools provided by third  
parties. All of these tools process Anonymous Information. We base the  
processing of Anonymous Information on our legitimate interest, which in  
this case is to provide you with the opportunity to use additional functions Article 6(1)(f) RODO  
on the website. The tools do not give us access to other information and we  
do not need this information for anything - Anonymous Information is only  
processed so that additional functions can function. For details on the tools  
of external providers, please see the section on the tools we use.  
Provision of additional  
functions using only  
Anonymous  
Information  
As a data controller, we are obliged to comply with data protection  
obligations. Accordingly, we may process your personal data insofar as this  
Implementation  
of is necessary to comply with these obligations (e.g. when processing your  
Article 6(1)(c) RODO,  
Article 6(1)(f) RODO  
data  
protection request for your personal data). The extent of the data depends on what  
data we need to fulfil the obligation and prove compliance with the DPA. In  
addition, in this case we also rely on our legitimate interest in securing the  
data necessary to demonstrate accountability.  
obligations  
When you use the AI image generation feature, we transmit your text  
prompts and any images you provide to third-party AI service providers  
(Google Gemini and OpenAI) for processing. These providers process your  
data in accordance with their respective privacy policies. When you save a Article 6(1)(b) RODO,  
generated image, we store it on our servers to display it in your "Recently Article 6(1)(f) RODO  
Generated" section. These images are associated with your account and are  
not shared with other users. You may delete your saved images at any time  
through the app.  
AI Image Generation  
# 4: What information do we have about you?  
We have described the scope of the processing for each purpose of processing. Information in this regard can be  
found above, in section 3 of the Privacy Policy. Among the data are information such as:  
name,  
e-mail address,  
IP address,  
address for service,  
invoice details,  
details of the order placed,  
data collected in the mailing system,  
data related to the comment / opinion added,  
information visible on social media profiles,  
information contained in correspondence,  
Anonymous Information.  
6
# 5: What is "Anonymous Information"?  
We use tools that collect a range of information about you related to your use of our website and mobile application.  
This includes, in particular, the following information:  
information about the operating system and web browser,  
subpages viewed,  
time spent on the site,  
transitions between individual sub-pages,  
clicks on individual links,  
mouse movements,  
page scrolling,  
the source from which you go to the site,  
the age range you are in,  
Your gender,  
Your approximate location limited to the village.  
Your interests or other preferences as determined by your online activity,  
video recordings of your sessions on our websites,  
heat maps illustrating your behaviour on our websites.  
This information is referred to in this Privacy Policy as "Anonymous Information".  
Anonymous Information in itself does not, in our view, have the character of personal data, as it does not allow us to  
identify you and we do not collate it with the typical personal data we collect about you. Nevertheless, given the strict  
jurisprudence of the Court of Justice of the European Union and the divided opinions among lawyers, as a precaution,  
in case Anonymous Information is attributed the character of personal data, we have also included detailed  
explanations in the Privacy Policy regarding the processing of this information.  
We are unable to provide you with access to Anonymous Information about you, as we are unable to attribute any of  
the Anonymous Information to any specific user. From the Anonymous Information collection tools, we only have  
access to a set of statistics and information that is not attributed to specific individuals.  
The processing of Anonymous Information allows us to provide you with the functionality available on the website. In  
addition, Anonymous Information is used for analytical and statistical purposes as well as for marketing purposes,  
such as setting and targeting advertisements.  
Anonymous information is also processed by tool providers under the terms of their terms of service and privacy  
policies. It may be used by these providers to provide, improve and manage services, develop new services, measure  
the effectiveness of advertisements, protect against fraud and abuse, and personalise the content and  
advertisements displayed on individual services, websites and applications. Please see the section on the tools we  
use for more detailed information related to this.  
# 6: Where do we get your personal data from?  
In most cases, you provide them to us yourself. For example, this is the case when you register a user account, place  
an order, send a complaint or withdraw from a contract, contact us via email or chat, or use the functionalities  
available on our Site or on external services (e.g. social networks).  
In addition, some information about you may be automatically collected by tools we use. Please see the section on the  
tools we use for details on the tools of third party providers.  
In exceptional cases, we may also obtain your personal data from other sources, e.g. when the entity that employs you  
indicates your data to us as contact persons for contractual matters, or when you represent an entity that enters into a  
contract with us.  
7
# 7: Is the data safe?  
We care about the security of your personal data. We have analysed the risks involved in the various processes of  
processing your data and then implement appropriate security and personal data protection measures. We monitor  
the state of the technical infrastructure on an ongoing basis, train staff, look at the relevant procedures, and  
implement the necessary improvements.  
# 8: How long will we keep personal data?  
We process your personal data for as long as it is justified within the framework of a given purpose for processing  
your personal data, and therefore processing periods vary depending on the purpose. Please note that the termination  
of the processing of your data for one purpose does not necessarily lead to the complete erasure or destruction of  
your personal data, as the same set of data may be processed for another purpose, for the period of time indicated for  
that purpose. Complete erasure or destruction of data occurs when we have completed all purposes and in other  
cases indicated in the RODO.  
Below you will find a description of the processing periods:  
User account - data related to the user account is processed for the duration of the user account;  
Fulfilment of orders and the concluded contract - contract-related data are processed for the time necessary  
for the conclusion and performance of the contract;  
Action taken to complete orders by customers - data related to unfinished orders will be processed for a  
maximum of 6 months from the date you placed the order;  
Complaints and withdrawals - data related to complaints and withdrawals are processed for the time  
necessary to handle the complaint or withdrawal;  
Newsletter - data related to the newsletter will be processed for the duration of your use of the newsletter;  
Comments/feedback - data related to the posting of a comment/feedback will be processed until you delete  
the comment or feedback;  
Contact and correspondence handling - data related to correspondence handling will be processed for the  
duration of the contact between us;  
Tax and accounting obligations - data related to the fulfilment of tax and accounting obligations will be  
processed for the time prescribed by tax law, usually 5 years after the end of the tax year;  
Archive - data related to the archive will be processed until the information contained in the archive is no  
longer relevant;  
Determination, investigation and defence of claims - data related to claims will be processed until the statute  
of limitations for claims, whereby the period of limitation for claims may vary according to the applicable law  
(e.g. for businesses it may be 3 years and for consumers 6 years);  
Recipient groups - data related to recipient groups will be processed until they are no longer relevant or you  
successfully object;  
Social media - in general, I have no control over the retention period of your personal data on social media.  
They are available on Facebook, Instagram, YouTube or LinkedIN under the terms of the terms and conditions  
and privacy policies of those sites. We are not able to remove your data from Facebook, Instagram, YouTube  
or LinkedIN - only you can do this;  
Analytics and statistics - data related to analytics and statistics will be processed until it is no longer relevant  
or you successfully object;  
Self-marketing - data related to self-marketing will be processed until it is no longer relevant or you  
successfully object;  
Organisation of promotional campaigns - we process data related to the organisation of promotional  
campaigns for the time necessary to carry out the promotional campaign;  
8
Ancillary tools - data related to ancillary tools will be processed until it is no longer useful or you successfully  
object;  
Data Protection Obligations - Data relating to personal data protection will be processed until it is no longer  
relevant, you have successfully lodged an objection or the expiry of the limitation period of our liability as data  
controller.  
Where we process your personal data on the basis of your consent, you may withdraw such consent at any time: either  
by your action or by contacting us at the contact details provided. Please note that withdrawal of consent does not  
affect the lawfulness of the processing that was carried out on the basis of consent prior to its withdrawal.  
# 9: Who are the recipients of personal data?  
We would venture to say that modern business cannot do without services provided by third parties. We also make  
use of such services. Some of these services involve the processing of your personal data. Third-party service  
providers that are involved in the processing of your personal data are:  
Hosting provider - for data storage on the server;  
mailing system provider - for the use of the mailing system;  
supplier of an invoicing system - for the purpose of issuing an invoice;  
CRM system provider - for workflow improvement;  
chat provider - for contact via chat;  
provider of a pop-up display system - for the display of pop-ups;  
customer service system provider - to improve the customer service process;  
provider of a landing page management tool - for data collection via landing pages;  
cloud provider - for the use of cloud solutions;  
accounting office - for the use of accounting services;  
law firm - for the provision of legal services to us;  
payment intermediaries - for payment of services;  
maintenance - for the purposes of carrying out technical work on those areas where data is processed;  
other subcontractors, in particular IT solution providers - for the purposes of working with various  
subcontractors who may have access to your personal data if they provide services in relation to such access.  
AI service providers — for the purpose of generating images using artificial intelligence (Google Gemini,  
OpenAI);  
If the need arises, your data may be shared with a legal adviser or lawyer bound by professional secrecy. The need  
may arise from a legal need requiring access to your personal data.  
Your personal data may also be forwarded to the tax authorities to the extent necessary for the fulfilment of tax and  
accounting obligations. This includes, in particular, all declarations, reports, statements and other accounting  
documents containing your personal data.  
In addition, if necessary, your personal data may be made available to entities, authorities or institutions entitled to  
access the data under the law, such as police, security services, courts, public prosecutors' offices.  
When it comes to Anonymous Information, the providers of the tools or plug-ins that collect Anonymous Information  
have access to it. The providers of these tools are their own controllers of the data collected in them and may share  
this data under the terms of their own terms of use and privacy policies, which are beyond our control.  
# 10: Do we transfer data to third countries or international organisations?  
9
Yes, part of the processing of your personal data may involve transfers to third countries.  
We transfer your personal data to third countries in connection with the use of tools using resources located in third  
countries, in particular in the USA. The providers of these tools guarantee an adequate level of personal data  
protection through the relevant compliance mechanisms provided for by the RODO, in particular through the use of  
standard contractual clauses.  
Currently, your personal data is transferred to third countries in connection with our use of the following solutions:  
Type of solution  
Electronic mail  
Solution provider  
Google  
Third country  
USA  
Data backup  
Google  
USA  
Database hosting  
AI Image Generation  
AI Image Generation  
Google  
USA  
Google (Gemini API)  
OpenAI  
USA  
USA  
In addition, Anonymous Information collected in connection with the use of the tools indicated in the annex to this  
privacy policy may be transferred to third countries, in particular the USA.  
# 11: Do we use profiling?  
We do not make decisions to you based solely on automated processing, including profiling, that would produce legal  
effects on you or similarly affect you materially. Yes, we do use tools that may take certain actions depending on the  
information collected through tracking mechanisms, but we consider that these actions do not materially affect you  
as they do not differentiate your situation as a customer, do not affect the terms of the contract you may enter into  
with us, etc.  
Using certain tools, we can, for example, target you with personalised advertising based on your previous activities on  
the Site or suggest products that may be of interest to you. This is known as behavioural advertising. We encourage  
you to learn more about behavioural advertising, particularly with regard to privacy issues. You will find detailed  
information, including the possibility of managing your settings with regard to behavioural advertising, here.  
# 12: What rights do you have?  
The RODO grants you the following potential rights in relation to the processing of your personal data:  
The right to access your data and to receive a copy of it;  
The right to rectification (amendment) of your data;  
The right to erasure (if in your opinion there are no grounds for us to process your data, you can request that  
we erase it);  
The right to restrict processing (you can request that we restrict processing to only storing your data or  
carrying out activities agreed with you if, in your opinion, we have inaccurate data or are processing it unduly);  
The right to object to processing (you have the right to object to processing on the basis of a legitimate  
interest; you should indicate the particular situation which you think justifies us stopping the processing  
covered by the objection; we will stop processing your data for these purposes unless we can demonstrate  
that the grounds for our processing override your rights or that your data is necessary for us to establish,  
assert or defend our claims);  
The right to data portability (you have the right to receive from us in a structured, commonly used  
machine-readable format the personal data you have provided to us on the basis of a contract or your  
consent; you can have this data sent directly to another entity);  
The right to withdraw your consent to the processing of your personal data if you have previously given such  
consent;  
10  
the right to lodge a complaint with a supervisory authority (if you find that we are processing your data  
unlawfully, you may lodge a complaint to the President of the Office for Personal Data Protection or any other  
competent supervisory authority).  
The rules related to the exercise of the rights indicated above are described in detail in Articles 16-21 of the DPA. We  
encourage you to familiarise yourself with these provisions. For our part, we consider it necessary to explain to you  
that the rights indicated above are not absolute and you will not be entitled to them in relation to all processing  
activities of your personal data.  
We emphasise that one of the rights indicated above is always available to you: if you consider that we have violated  
data protection regulations in the processing of your personal data, you have the possibility to lodge a complaint with  
a supervisory authority (the President of the Office for Personal Data Protection).  
# 13: Do we use cookies and what are they?  
Our app, like almost all other websites, uses cookies.  
Cookies are small textual information stored on your terminal device (e.g. computer, tablet, smartphone) that can be  
read by our ICT system (our own cookies) or by third-party ICT systems (third-party cookies). In cookies, specific  
information can be recorded and stored, which ICT systems can then access for specific purposes.  
Some of the cookies we use are deleted when your session ends, i.e. when you close your session (so-called session  
cookies). Other cookies are stored on your terminal device and allow your device to be recognised the next time you  
access the application (persistent cookies).  
If you would like to find out more about cookies as such, you can read, for example, this material.  
# 14: On what basis do we use cookies?  
We use cookies on the basis of your consent, except where cookies are necessary for the proper provision of an  
electronic service to you.  
Cookies that are not necessary for the correct provision of the electronic service remain blocked until you have given  
your consent to the use of cookies. During your first visit to the Website in question, we display a message asking you  
for your consent, together with the option of managing cookies, i.e. deciding which cookies you agree to and which  
you wish to block.  
# 15: Can you disable cookies?  
Yes, you can manage your cookie settings within your device. You can block all or selected cookies. You can also  
block cookies for specific sites. You can also delete previously saved cookies and other site and plug-in data at any  
time.  
Web browsers also offer the possibility to use incognito mode. You can use this if you do not want information about  
pages visited and files downloaded to be saved in your browsing and download history. Cookies created in incognito  
mode are deleted when you close all windows in this mode.  
Browser plug-ins are also available to control cookies, such as Ghostery. The option to control cookies may also be  
provided by additional software, in particular anti-virus packages, etc.  
In addition, there are tools available on the internet to control certain types of cookies, in particular to collectively  
We also give you the possibility to control your cookies directly from within our application. We have implemented a  
special mechanism for managing cookies that allows you to block those cookies that you do not wish. Please note  
that disabling or restricting cookies may prevent you from using some of the features available in the application and  
may cause difficulties in using the Sites, as well as many other websites that use cookies. For example, if you block  
11  
the cookies of social networking plug-ins, the buttons, widgets, social features implemented in the application may not  
be available to you.  
# 16: For what purposes do we use our own cookies?  
Custom cookies are used to ensure the correct functioning of the various mechanisms of the application, such as  
remembering the contents of the shopping cart for a specific period of time after adding selected products to it, the  
correct transmission of forms visible in the application, the handling of newsletter forms, etc. Proprietary cookies also  
store information about the cookie settings you have defined through the cookie management mechanism.  
# 17: What third-party cookies are used?  
A list of tools that require the use of cookies and a description of the cookies used can be found in the appendix to  
this Privacy Policy.  
# 18: Do we track your behaviour undertaken within the site?  
Yes, we use tools from third-party providers that involve collecting information about your activities on our websites.  
These tools are described in detail in the appendix to this Privacy Policy.  
# 19: Are we targeting you with targeted advertising?  
Yes, we use third-party vendor tools where we can target advertising to specific target groups defined based on  
various criteria such as age, gender, interests, profession, job, activities previously undertaken on our sites. These  
tools are described in detail in the appendix to this Privacy Policy.  
# 20: How can you manage your privacy?  
The answer to this question can be found in many places in this Privacy Policy when describing individual tools,  
behavioural advertising, consent to cookies, etc. Nevertheless, we have once again gathered this information in one  
place for your convenience. Below you will find a list of options for managing your privacy.  
the cookie settings within the application;  
Browser plug-ins supporting cookie management, e.g. Ghostery;  
additional cookie management software;  
incognito mode in the web browser;  
behavioural advertising settings, e.g. youronlinechoices.com;  
a mechanism for managing cookies from within our application;  
Google Analytics Opt-out;  
# 21: Is there anything else you should know?  
As you can see, the topics of personal data processing, the use of cookies and the management of privacy in general  
are quite complex. We have done our best to ensure that this document provides you with as much knowledge as  
12  
possible on the issues that are important to you. If anything is unclear to you, you would like to find out more or simply  
discuss your privacy, please email us at contact@showyourscore.com.  
# 22: Is this Privacy Policy subject to change?  
Yes, we may modify this Privacy Policy, in particular due to technological changes and changes in legislation. If you  
are a registered user, you will receive a message about any change to the Privacy Policy. Changes to the Privacy Policy  
will become effective after 7 days at the earliest. All archived versions of the Privacy Policy are linked below.  
13  
Annex to the Privacy Policy  
LIST OF TOOLS THAT USE COOKIES  
Name of the tool  
Description of operation and cookies  
ClipDrop is a small tool provided by Init ML, based in France at 211 rue Etienne Marcel, 93100 Montreuil.  
By integrating ClipDrop into the application, users can use features such as removing backgrounds and  
objects from photos, reworking graphics, etc.  
ClipDrop  
When you use our app, the provider ClipDropa may receive information from cookies that are installed on  
your device. These may include both essential cookies and cookies that are used to fulfil another purpose  
of the provider, such as analytical or advertising purposes.  
You can find detailed information on the Cookie Policy of the ClipDrop tool provider at this link.  
We use the Google Tag Manager tool provided by the US company Google LLC to manage tags and script  
loading within the website.  
Google  
Tag  
Manager  
Google Tag Manager, as a tool in itself, does not collect any information beyond that necessary for its  
proper operation, but is responsible for loading the other scripts described below.  
We use the Google Analytics tool provided by the US company Google LLC. In order to use Google  
Analytics, a special Google Analytics tracking code is implemented in the code of the website. The  
tracking code uses cookies relating to the Google Analytics service. You can block the Google Analytics  
tracking code at any time by installing a browser add-on provided by Google.  
Google Analytics automatically collects information about your activity on our website. As part of Google  
Analytics, we only have access to Anonymous Information.  
Google Analytics  
Thanks to the information gathered in this way, we can analyse user behaviour on our website and keep  
statistics related to it, and then draw conclusions from these statistics in order to design solutions to  
improve the efficiency of the website.  
If you are interested in the details related to Google's use of data from sites and applications that use  
Google services, we encourage you to read this information.  
We use the Meta advertising system provided by the US company Meta Platform Inc. In order to target you  
with advertisements personalised to your behaviour on our website, we have implemented the Meta Pixel  
within the website, which automatically sends information about your activity on our website to the Meta  
advertising system.  
Within the Meta advertising system, we only have access to Anonymous Information.  
With the information gathered in this way, we are able to display advertisements to you within the Meta  
advertising system according to your behaviour on our website and to measure the effectiveness of the  
advertising campaigns you run in order to draw conclusions that allow us to optimise these campaigns for  
effectiveness.  
Meta Pixel  
Meta Platform Inc. may combine information collected using Pixel Meta with other information about you  
collected as part of your use of services operated by the company (including but not limited to Facebook,  
Instagram) and use for its own purposes, including marketing. Such activities of Meta are no longer  
dependent on us, and you can look for information about them directly in Meta's privacy policy. From your  
Facebook account, you can also manage your privacy settings. You will find useful information in this  
regard here.  
Our website uses plug-ins, buttons and other social media tools, collectively referred to as "plug-ins",  
associated with social media services managed by the US company Meta Platform Inc.  
Facebook Connect  
This gives you the opportunity to use selected social features on our pages, e.g. like button, share, etc.  
The plugins collect information about your activity on our site. We do not have access to this information.  
14  
It is only important to us that the plugins work properly.  
The information collected by the plugins may be used by Meta Platform Inc. for its own purposes, such as,  
for example, improving its own products, creating user profiles, analysing and optimising its own activities,  
targeting advertisements, over which, however, we have no real influence. You can refer to Meta's privacy  
policy for details in this regard.  
We use remarketing functions available within the Google advertising system provided by the US company  
Google LLC. When you visit our website, a remarketing cookie from Google is automatically left on your  
device, which collects information about your activity on our website.  
With the information collected in this way, we are able to display advertisements to you within the Google  
network depending on your behaviour on our website.  
For example, if you display a product, this information will be noted by a remarketing cookie, so that we  
can target you with advertising about that product or any other we deem appropriate.  
Google Ads  
This advertising will be displayed to you within the Google network when you use the Internet, browse  
other websites, etc. We emphasise that when using Google Ads, we only use Anonymous Information.  
Using Google Ads, we are only able to define the audience groups we would like our ads to reach. On this  
basis, Google decides when and how it will present our ad to you.  
If you do not wish to receive personalised ads, you can manage your ad settings directly on the Google  
website: https://adssettings.google.com/. If you are interested in details related to Google's use of data  
from sites and applications that use Google services, we encourage you to read this information.  
We use the Hotjar tool to better understand your needs and to optimise our website for your user  
experience. The tool is provided by Hotjar Limited.  
Hotjar records every visitor to our website and enables us to play a video recording of their traffic on our  
site, as well as to generate so-called heat maps. As part of the Hotjar tool, we do not have access to  
information that allows us to identify you, as Hotjar does not record the process of filling in forms  
designed to provide personal data.  
In order to use Hotjar, we have implemented a special Hotjar tracking code in the code of our website. The  
tracking code uses cookies from Hotjar Limited. The information collected through cookies is stored by  
Hotjar as part of a pseudonymous user profile. Neither Hotjar nor we use this information to identify you.  
Hotjar  
You can object to Hotjar's creation of your user profile, Hotjar's storage of information about your use of  
our website and Hotjar's use of cookies here.  
If you are interested in the details related to Hotjar's data processing, we encourage you to read Hotjar's  
15