These Regulations define the rules for the processing and protection of personal data provided by Users in connection with their use of the website.

The owner and operator of the Application and website is DREAM-IT.

The administrator of all personal data provided as part of the use of the Application and website is DREAM-IT.

DREAM-IT is responsible for the processing of information collected on the website and in the Application, and makes every effort to ensure respect for User's privacy and protection of personal data provided when using the website. Dream-IT don't process sensitive data.

Personal data obtained by DREAM-IT in connection with the User's use of the website and Application are processed in particular to:

• implementation of the main functionality of the Application, consisting in providing a website that allows you to participate in virtual meetings, concerts, meet other website participants in virtual clubs, participate in games available on the website,
• sending information by electronic means - notifications about application activity,
• fulfillment of the obligations imposed on the Application under the generally applicable provisions of law.

Dream-IT for the sake of security of entrusted data has developed an internal security policy, procedures and recommendations that are to prevent data from providing data to unauthorized persons. Dream -IT controls their performance and constantly checks their compliance with relevant legal acts - Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals data and repeal of Directive 95/46/EC, the Act on the provision of electronic services, as well as all kinds of executive acts and files of community law.

Dream-IT processes personal data in accordance with applicable law, in particular in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals data and repealing Directive 95/46/EC (so -called ‘GDPR’).

The website and application performs the functions of obtaining information about users and their behavior as follows:

• through voluntarily entered in the application.

The processing of personal data will take place to fulfill contractual obligations (Article 6 (1) (b) of the GDPR). The data is processed to perform Dream-IT activities as part of the implementation of the contract concluded with the Website and Application User, or to perform activities before the conclusion of the contract that is performed at the User's request.

After obtaining a separate consent, we can process your personal data also for marketing purposes (i.e. to inviting you to use organized promotions and send you other marketing information). Therefore, art. 6 para. 1 lit. a) GDPR (data subject has agreed to the processing of their personal data in one or more specific purposes).

In addition, we process the data of each user characterizing the way he uses our application (this is the so -called operational data). This processing includes an automatic reading of a unique designation identifying the end of the telecommunications network or the ICT system you use (i.e. your IP address), as well as the date and server time, information about the technical parameters of the software and the device you use (e.g. are you using the application for with the help of a laptop or from a phone), as well as the place from which you connect with our server. This information can be used by us for statistical purposes and to improve the operation of the application. The data saved in the server logs is not associated with specific people using the application. Server logs are only auxiliary material used to administer the application.

The legal basis for the operation of processing operational data is art. 6 para. 1 lit. f) GDPR (processing is necessary for the purposes arising from legitimate interests pursued by the Administrator). This legitimate interest is to enable diagnostics of application errors and improve its quality.

The User's consent to data processing may be withdrawn at any time. Withdrawal of consent by the User does not affect the lawfulness of data processing until the consent is withdrawn.

Personal data will be processed for the period necessary to achieve the purposes of processing, in particular:

• in the scope of the implementation of the contract concluded with the Dream-IT-until the completion of its performance, and after that time for the period required by the law or until the expiry of the claims of the claims under this contract (3 years or 6 years), in the case of a 6-year period Pursuant to art. 118 of the Civil Code extended to the end of the calendar year, in which the 6 years of the period passes - e.g. if the 6 years of the period expires on May 1 of a given year, the limitation period is extended to December 31 this year). The beginning of the term is calculated from the date of the claim for the claim, in the scope of fulfilling legal obligations suffering from Dream-IT in connection with conducting activities and the implementation of the concluded contracts-until these duties are fulfilled by Dream-I The basis for this processing or until such processing is raised, unless there are legitimate grounds for further data processing.

Personal data left on the Website or application will not be sold or made available to third parties. However, the Administrator reserves the right to use the services of entities providing hosting services to store personal data.

User's personal data will not be made available outside the European Economic Area.

The personal data contained in the form is entitled to the natural person who placed them there. This person also has the right to modify and demand to stop processing his data at any time.

The user should be transferred to the GDPR related to the GDPR to the e-mail address: rodo@dream-it.com.pl

User's personal data may be transferred by Dream-IT to recipients who are service providers, including Payment agents. Data may also be made available to other entities than those indicated above, which have access to access directly from applicable law, e.g. public authorities. Data to the extent provided by the User may also be available to other Website Users.

The User has the right to lodge a complaint to the Office for Personal Data Protection, in particular in a Member State of his ordinary stay, his workplace or the presumed place of violation.

Information clause from art. 13 GDPR

Pursuant to art. 13 para. 1 and 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general regulation on data protection) (Official Journal EU L 119 of 04.05.2016, p. 1), hereinafter “GDPR’, I would like to inform you that:

The administrator of your personal data is Dream-IT sp.z o.o., ul. Krakowska 7/11, 31-062 Kraków, Personal Data Protection Inspector at Dream-IT sp.z o.o. is Mr. Jakub Kobosko, iod@dream-it.com.pl, tel. +48 695 724 134;

Your personal data will be processed on the basis of art. 6 para. 1 lit. C GDPR in connection with the use of your application and service by you;

Personal data is collected on the basis of the consent granted by you during the acceptance of the Mobile Application Regulations;

The website and application performs the functions of obtaining information about users and their behavior as follows:

• through voluntarily entered in the application.

The processing of personal data will take place to fulfill contractual obligations (Article 6 (1) (b) of the GDPR). The data is processed to perform Dream-IT activities as part of the implementation of the contract concluded with the Website and Application User, or to perform activities before the conclusion of the contract that is performed at the User's request.

After obtaining a separate consent, we can process your personal data also for marketing purposes (i.e. to inviting you to use organized promotions and send you other marketing information). Therefore, art. 6 para. 1 lit. a) GDPR (data subject has agreed to the processing of their personal data in one or more specific purposes).

In addition, we process the data of each user characterizing the way he uses our application (this is the so -called operational data). This processing includes an automatic reading of a unique designation identifying the end of the telecommunications network or the ICT system you use (i.e. your IP address), as well as the date and server time, information about the technical parameters of the software and the device you use (e.g. are you using the application for with the help of a laptop or from a phone), as well as the place from which you connect with our server. This information can be used by us for statistical purposes and to improve the operation of the application. The data saved in the server logs is not associated with specific people using the application. Server logs are only auxiliary material used to administer the application.

The legal basis for the processing of operational data is Art. 6 sec. 1 lit. f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the administrator). This legitimate interest is to enable the diagnosis of application errors and improve its quality.

Personal data is processed in order to enable the use of application resources.

Personal data is processed due to the above-mentioned Project, and the processing is necessary to perform the service.

Personal data will be processed from the moment you accept the Regulations, until you delete your account in the application, except for the e-mail address that was provided when registering for the newsletter. Data that has not been deleted will be stored for archival purposes on the Microsoft Azure platform, including the PlayFab service for the implementation of the contract concluded with DREAM-IT - until its performance is completed, and after that time for the period required by law or until the expiry of the statute of limitations claims under this contract (3 or 6 years), in the case of a 6-year period, it is in accordance with Art. 118 of the Civil Code, extended until the end of the calendar year in which the 6-year period expires - e.g. if the 6-year period expires on May 1 of a given year, the limitation period is extended to December 31 of this year). The beginning of the period is counted from the date of maturity of the claim; as regards the fulfillment of legal obligations incumbent on DREAM-IT in connection with the conduct of business and the implementation of concluded contracts - until these obligations are fulfilled by DREAM-IT; until fulfilling the legitimate interests of DREAM-IT constituting the basis for this processing or until an objection to such processing is raised, unless there are legitimate grounds for further data processing.

The recipients of personal data will be Dream-IT sp.z o.o. and entities providing services necessary for the implementation of tasks by Dream-IT sp.z o.o. These data may also be transferred to IT partners, entities providing technical or organizational support.

You have rights in relation to Dream-IT sp.z o.o. down:

• requesting access to your personal data,
• rectification, processing restrictions,
• object to the processing of your personal data.

In the matter of exercising your rights, you can contact the data protection officer at the e-mail address provided in point 2 above.

You have the right to lodge a complaint with the President of the Personal Data Protection Office.

Personal data will not be transferred to a third country.

Personal data is not subject to automated decision making, including profiling.