Data Act
1)
The ICT infrastructure used to process Customers’ data in connection with the provision of OChK Platform Services by the Company is located in Poland. This infrastructure is subject to the jurisdiction of the Republic of Poland and to Polish and European Union law,
2)
applies the technical, organizational, and contractual measures set forth in the OChK Platform Terms of Service and the User Guide, made available to customers using the OChK Platform Services, to prevent international access to non-personal data stored within the Union or its transfer to government authorities, where such access or transfer would result in a violation of European Union law or the national law of the relevant Member State, in particular:
a)
technical measures - including data encryption (such as allowing customers to use their own cryptographic keys), segmentation of processing environments, authentication mechanisms, and security monitoring systems,
b)
organisational measures - including access control based on the principle of least privilege, incident response procedures, and periodic security audits, as well as the verification and assessment of the legitimacy of access requests, particularly with regard to compliance with national and European Union law, including in accordance with Article 32 of the Data Act,
c)
contractual measures - ensuring that the OChK undertakes to comply with European Union law or national law and, to the extent permitted by generally applicable law, informs customers of requests for access to their data.