1. Controller of Personal Data

The controller of your personal data is Coffee Mug – R.Kowal, P. Podsiadło Spółka Cywilna ("we", "us").

You can contact us regarding data protection matters at: contact@coffeemug.io.

‍

2. Scope of this Policy

This Privacy Policy applies to the processing of personaldata in connection with cold email outreach for business-to-business (B2B)purposes, including initial contact and further correspondence.

‍

3. Categories of Personal Data

We may process the following categories of personal data:

• name     and surname,
• business     email address,
• job     title or role,
• company     name,
• other     information made publicly available in a professional context.

‍

4. Source of Personal Data

Personal data is obtained from publicly available sources, including but not limited to

• company     websites,
• professional     networking platforms,
• business     directories and registers
  ‍

5. Purposes and Legal Basis of Processing

We process personal data for the purpose of:

• initiating     and conducting business contact,
• presenting     our products or services,
• maintaining     professional correspondence.

The legal basis for processing is Article 6(1)(f) GDPR– our legitimate interest in conducting business development and marketingactivities in a B2B context.
‍

6. Legitimate Interest

Our legitimate interest consists of establishing andmaintaining business relationships. We ensure that our interests do notoverride your rights and freedoms, in particular by limiting the scope of data,the frequency of contact, and by enabling an easy right to object.

‍

7. Data Retention

Personal data is processed for the duration necessary toachieve the above purposes. In particular:

• data     used for cold outreach is removed without undue delay if an objection is     raised,
• correspondence     data may be retained for evidentiary and organisational purposes for a     limited period.
  ‍

8. Recipients of Personal Data

Personal data may be disclosed only to:

• authorised     employees and collaborators,
• external     service providers acting on our behalf as data processors, including     providers of email outreach and marketing services, who process data     exclusively under our instructions and subject to appropriate contractual     safeguards.

We do not sell personal data or share it with third partiesfor their own marketing purposes.

‍

9. Transfers Outside the EU/EEA and the UK

Personal data may be processed using tools or serviceproviders located outside the EU/EEA or the United Kingdom. In such cases,appropriate safeguards are applied, including standard contractual clauses orother lawful transfer mechanisms in accordance with the GDPR and UK GDPR, whererequired.

10. Your Rights

You have the right to:

• access     your personal data,
• rectify     inaccurate data,
• erase     your data,
• restrict     processing,
• object     to processing carried out on the basis of legitimate interest.

You may exercise your rights by contacting us at contact@coffeemug.io.

‍

11. Right to Object

You have the right to object at any time to the processingof your personal data for the purposes of business contact and marketing. Uponobjection, we will cease such processing without undue delay.

‍

12. Supervisory Authority

You have the right to lodge a complaint with the competentsupervisory authority. In the EU, this is the supervisory authority of yourhabitual residence, place of work, or place of the alleged infringement. In theUnited Kingdom, this is the Information Commissioner's Office (ICO).

‍

13. Automated Decision-Making

We do not use automated decision-making or profiling withinthe meaning of Article 22 GDPR in connection with cold email outreach.

‍

14. Changes to this Policy

This Privacy Policy may be updated from time to time. Thecurrent version will always be available on our website.

‍