Privacy Policy

§1 General Provisions

The administrator of personal data collected via HITME LTD (registration no. 14428102 in the United Kingdom), hereinafter referred to as the “Administrator,” is also the “Service Provider.”

Personal data collected by the Administrator via the website shall be processed in accordance with the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free flow of such data, and the revocation of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "RODO").

Any capitalized terms or phrases in this Privacy Policy shall have the meanings assigned to them in the Regulations of HitMe.

§2 Type of Personal Data Processed, Purpose, and Scope of Data Collection

Purpose of Processing and Legal Basis:

The Administrator processes HitMe Users’ personal data for the following purposes:

Account Registration: To create and manage an individual account in accordance with Article 6(1)(b) of RODO (performance of a contract for electronically supplied services under the Website's Regulations).
Subscription Purchase: To provide access to paid website content under Article 6(1)(b) of RODO (performance of a contract for electronically supplied services under the Website's Regulations).

Types of Data Processed:

For account registration, the User shall provide:
- Email address
- IP address
For subscription purchases, the User shall provide:
- First name and surname
- Address of residence
- Tax Identification Number (TIN)
- Email address
- IP address

Retention Period of Personal Data:

If the legal basis for processing is the performance of a contract, personal data will be retained for the duration of the contract and subsequently for the period necessary to address claims (typically six years, or three years for claims related to business activity or periodic obligations).
If the legal basis is consent, personal data will be retained until the consent is withdrawn. After withdrawal, data may still be stored for the limitation period of claims (six years or three years for business-related claims).

Additional information, such as the User's IP address, domain name, browser type, access times, and operating system, may also be collected during website usage.

Positioning data may be collected to analyze User interactions (e.g., clicked links), based on the Administrator’s legitimate interest under Article 6(1)(f) of RODO.

Providing personal data is voluntary but may be necessary for the proper use of the Website.

Personal data may be processed automatically, including profiling, if the User consents under Article 6(1)(a) of RODO. Profiling assigns specific attributes to predict preferences, behaviors, or attitudes.

The Administrator ensures that collected data is:

Processed lawfully.
Collected for specified lawful purposes and not further processed for incompatible purposes.
Accurate, relevant, and stored no longer than necessary for the processing purposes.

§3 Transfer of Personal Data

Personal data may be shared with service providers, including:

Payment system providers
Accounting offices
Hosting providers
Business software providers (e.g., accounting software)
Mailing system providers
Website management software providers

Depending on agreements, service providers may act as data processors or independent data controllers.

Personal data may be stored within the European Economic Area (EEA) or outside, such as in the United States. For example, Google Inc. (USA) processes email correspondence. Users acknowledge that correspondence sent via their accounts uses Google's SMTP servers.

§4 Rights to Control, Access, and Correct Personal Data

Data subjects have the following rights:

Access (Article 15, RODO)
Correction (Article 16, RODO)
Deletion ("Right to be Forgotten") (Article 17, RODO)
Restriction of processing (Article 18, RODO)
Data portability (Article 20, RODO)
Objection (Article 21, RODO)
Consent withdrawal (Article 7(3), RODO)

Requests will be addressed within one month, extendable by two months for complex cases, with prior notification.

Users may exercise these rights by sending a request using the available contact forms at the Contact Centre and the Support Centre.

In case of RODO violations, complaints can be filed with the Head of the Office for Personal Data Protection.

§5 Cookies

The Website uses cookies to function properly and gather visit statistics.

Two types of cookies are used:

Session cookies: Stored temporarily until the User logs out or leaves the Website.
Persistent cookies: Stored for a specified time or until deleted by the User.

Cookies improve website functionality and User experience but do not store personal data.

External cookies from Google Analytics are used for anonymous statistical data collection (administered by Google Inc., USA).

Users can manage cookie preferences in their browser settings.

§6 Social Plugins

The Website uses social plugins for platforms like Facebook, Instagram, Pinterest, Twitter, and YouTube.

When visiting HitMe, data (e.g., IP address) may be transmitted to these platforms, even without active User profiles.

For details, refer to the respective platform's privacy policy:

Users may disable plugins via browser extensions (e.g., "NoScript").

§7 Final Provisions

The Administrator employs technical and organizational measures to protect personal data against unauthorized access, modification, or loss.

Matters not covered in this Privacy Policy are governed by RODO and other applicable EU laws.