ITENERUM
PLEN
← HOME

Privacy Policy of ITENERUM Sp. z o.o.

This is an English translation provided for convenience. In case of any discrepancy, the Polish version prevails.

INTRODUCTION

Respecting your right to privacy, ITENERUM Sp. z o.o., with its registered office in Warsaw (04-767), ul. Patriotów 303 (hereinafter: the “Controller”), processes your personal data in accordance with Polish and European law.

The Controller ensures the security of personal data, i.e. its confidentiality, availability and integrity, as well as the accountability of the activities it carries out.

To make our processing operations transparent to you, this privacy policy sets out the most important information on the processing of personal data by the Controller under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: “GDPR”).

DATA CONTROLLER

The controller, i.e. the entity that determines the purposes and means of the processing of personal data, is ITENERUM Sp. z o.o., with its registered office in Warsaw 04-767, ul. Patriotów 303.

SOURCES OF DATA AND PURPOSES OF PROCESSING

Depending on your relationship with us, in performing our business functions we process personal data for various purposes and to various extents:

  1. Users of the itenerum.com website.
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    Users are not required to provide their personal data in order to use the itenerum.com Website. However, if you wish to use its functionalities, we then process the data necessary to prepare an IT support subscription offer for you and, if the offer is accepted, the data necessary to conclude and perform the contract. The legal basis for processing is then Article 6(1)(b) GDPR, i.e. processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. With regard to persons acting on behalf of or for the Client, the legal basis for processing will be Article 6(1)(f) GDPR, i.e. the legitimate interest of the controller, namely the conclusion of the contract.

    Data will also be processed for the purpose of fulfilling obligations under the Polish Telecommunications Law (Prawo telekomunikacyjne) and the Polish Act on the Provision of Electronic Services (ustawa o świadczeniu usług drogą elektroniczną) (Article 6(1)(c) GDPR).

    Where applicable, data will also be processed for the purposes of settlements, accounting and financial reporting (Article 6(1)(c) and (f) GDPR).

    Your data may also be processed in connection with the pursuit of other legitimate interests of the controller (Article 6(1)(f) GDPR):

    - to establish, exercise or defend against legal claims,

    - for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.    		If a contract is concluded as a result of our offer, your personal data will be stored for the term of the contract and, after its termination, for the period required by law or until the limitation periods for claims related to it expire.

    If no contract is concluded following the offer presented to you, your data will be stored for 1 month from the date the offer was presented to you and, where you have consented to the processing of your data for the purpose of sending you offers of our services, until you withdraw your consent or object, i.e. indicate to us in any manner that you no longer wish to stay in touch with us and receive information about our activities.    		If we have not obtained the personal data directly from you, its source is your Employer/Business Partner, who provided us with your data for the purpose of concluding/ performing a contract. In this case, the personal data obtained comprises the data necessary to conclude and perform the contract (typically first name, surname, e-mail address, telephone number and/or correspondence address, place of work, job title).
  2. Newsletter subscribers and recipients of marketing activities
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    Pursuit of the legitimate interest of the Controller (Article 6(1)(f) GDPR), consisting in the marketing of its own products and services and, subject to explicit consent, also the products and services of companies cooperating with the Controller (Article 6(1)(a) GDPR), using the following forms of communication:

    - newsletter (sending an information bulletin),

    - voice calls (telemarketing),

    - sending commercial information (e-mail messages),

    - sending commercial information (text messages),

    - sending promotional materials by traditional mail.

    The purposes indicated in the wording of consents to the processing of personal data – where such consents have been given (Article 6(1)(a) GDPR),

    The purpose of fulfilling obligations under the law, in particular the Polish Telecommunications Law and the Act on the Provision of Electronic Services (Article 6(1)(c) GDPR).

    Data is also processed in connection with the pursuit of other legitimate interests of the controller (Article 6(1)(f) GDPR):
    - to establish, exercise or defend legal claims,

    - for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.    		Your personal data will be stored until you withdraw your consent or object, i.e. indicate to us in any manner that you no longer wish to stay in touch with us and receive information about our activities. After consent is withdrawn or an objection is raised, personal data may be stored for the purpose of demonstrating the proper fulfilment of the legal obligations incumbent on the Controller and claims related to them.If we have not obtained the personal data directly from you, its source is an entity that held your consent to disclose it to the Controller, or another valid legal basis. In this case, the personal data obtained comprises the data necessary to carry out the given type of marketing activity (typically first name, surname, e-mail address, telephone number and/or correspondence address).
  3. Clients and persons designated to perform the contract
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To perform the contract with the Client or to take steps prior to entering into a contract at the Client’s request, expressed in any manner, e.g. by completing the contact form on the website (Article 6(1)(b) GDPR – if you are the Client; Article 6(1)(f) GDPR – if you are a person acting on behalf of or for the Client),

    for the purposes of settlements, accounting and financial reporting (Article 6(1)(c) and (f) GDPR),

    to fulfil obligations under the law (Article 6(1)(c) GDPR),

    for the purposes indicated in the wording of consents to the processing of personal data – where such consents have been given (Article 6(1)(a) GDPR). Note: providing data other than that requested by the Controller, or data marked as optional, is a clear affirmative action equivalent to consenting to the processing of personal data for the purposes for which it was provided.

    Data may also be processed in connection with the pursuit of the legitimate interests of the controller (Article 6(1)(f) GDPR):

    - to establish, exercise or defend against legal claims,

    - for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.    		Your personal data will be stored until the limitation periods for claims arising from the contract with the Client expire.The personal data was obtained from you, from the Client or from a person cooperating with us on behalf of the Client. We obtain personal data to the extent necessary to conclude and perform the contract, most often: first name, surname, postal address, e-mail address, telephone number, order details and invoicing data. Where the contract is concluded in writing, we also process the PESEL number (Polish national identification number) or identity card number. Where transactions are handled electronically – also the login, password and purchase and activity history.
  4. Business partners, suppliers and persons designated to perform the contract
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To perform the contract with the Business Partner or to take steps prior to entering into a contract at the Business Partner’s request (Article 6(1)(b) GDPR – if you are the Business Partner; Article 6(1)(f) GDPR – if you are a person acting on behalf of or for the Business Partner),

    for the purposes of settlements, accounting and financial reporting (Article 6(1)(c) and (f) GDPR),

    to fulfil other obligations under the law (Article 6(1)(c) GDPR).

    Data may also be processed in connection with the pursuit of other legitimate interests of the controller (Article 6(1)(f) GDPR):

    - to establish, exercise or defend against legal claims,

    - for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.    		Your personal data will be stored for the period required by law or until the limitation periods for claims arising from the contract with the Business Partner expire – whichever period is longer.As a rule, we process the data you provide. If you have not provided us with your data, we obtained it from our Business Partner or from a person acting on behalf of or for our Business Partner. We obtain personal data to the extent necessary to conclude and perform the contract, most often: first name, surname, postal address, e-mail address, telephone number, order details and invoicing data. Where the contract is concluded in writing, we also process the PESEL number or identity card number. Where cooperation takes place in an IT system – also the login, password and history of cooperation.
  5. Applicants, complainants and their representatives
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To handle a complaint, request or claim submitted (Article 6(1)(f) GDPR),

    to perform a contract related to the submission (Article 6(1)(b) GDPR – if you are a party to the contract; Article 6(1)(f) GDPR – if you are a person cooperating with us on behalf of our client or business partner),

    where applicable – for the purposes of settlements, accounting and financial reporting (Article 6(1)(c) and (f) GDPR),

    to fulfil other obligations under the law (Article 6(1)(c) GDPR),

    for the purposes specified in the wording of the consent, if such consent has been given (Article 6(1)(a) GDPR).

    Data may also be processed in connection with the pursuit of the legitimate interests of the controller (Article 6(1)(f) GDPR):

    - to establish, exercise or defend legal claims,

    - for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.

    NOTE: if the description of the circumstances of the event contains special categories of data, such data will be processed for the purpose of establishing, exercising or defending against legal claims (Article 9(2)(f) GDPR).    		Your personal data will be stored until the submission has been handled and the limitation periods for claims have expired.As a rule, we process the data you provide. If you have not provided us with your data, its source is the person who included your data in the submission. We process personal data to the extent resulting from the submission, most often first name and surname, e-mail address, telephone number, correspondence address and the circumstances being reported.
  6. Candidates for employment or cooperation
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To take steps necessary to enter into a contract, at your request (Article 6(1)(b) GDPR),

    to the extent required by law, in particular the Polish Labour Code (Kodeks pracy) – on the basis of Article 6(1)(c) GDPR, for the purpose of conducting the recruitment process,

    where the Candidate provides data other than that required by law – on the basis of their consent, for the purpose of conducting the recruitment process (Article 6(1)(a) GDPR and, where special categories of data are provided, also Article 9(2)(a) GDPR),

    to pursue the legitimate interest of the Controller consisting in establishing, exercising or defending against legal claims (Article 6(1)(f) GDPR and, where special categories of data are provided, also Article 9(2)(f) GDPR),

    where additional consent is given – for consideration in future recruitment processes (Article 6(1)(a) GDPR).

    where additional consent is given – to contact persons indicated by the candidate as referees (Article 6(1)(a) GDPR),

    NOTE: the provision by a candidate of information beyond the minimum scope of data regulated by labour law is a clear affirmative action equivalent to consenting to the processing of such data for the purpose of conducting the recruitment on the basis of Article 6(1)(a) GDPR. Providing such data does not affect the possibility of taking part in the recruitment.

    Pursuant to Article 22¹ of the Labour Code: “§ 1. The employer shall request a person applying for employment to provide personal data comprising: 1) first name(s) and surname; 2) date of birth; 3) contact details indicated by that person; 4) education; 5) professional qualifications; 6) previous employment history. § 2. The employer shall request the personal data referred to in § 1(4)–(6) where this is necessary for performing work of a specific type or in a specific position.” This is the scope of personal data required by default – an obligation to provide other data may arise from specific provisions of law.    		Your personal data will be processed for 3 months and, where you consent to participating in future recruitment processes, for the period for which consent was given or until it is withdrawn.

    Where there is justified information about the possibility of claims arising, personal data will also be stored until the limitation periods for such claims expire.    		As a rule, your personal data is not obtained other than from you. Exceptionally, subject to your prior consent, the personal data was provided to us by recruitment agencies, through a referral programme or by referees. The categories of personal data obtained are first name, surname, contact details, information on education, employment history and other data provided by you in the application documents, while in the case of referees this is typically data on the candidate’s achievements with a previous employer.
  7. Referees
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To verify the qualifications of a candidate for a given position and the accuracy of the personal data provided by the candidate – this constitutes a legitimate interestYour personal data will be processed for no longer than the retention period of the candidate’s application documents.Your personal data was obtained from the job candidate who named you as a referee. Your personal data is processed to the following extent: first name, surname, position, business e-mail address or telephone number.
  8. Employees and associates
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To perform the employment contract (Article 6(1)(b) GDPR),

    for the purposes of settlements, accounting and financial reporting (Article 6(1)(c) and (f) GDPR),

    to enable you to exercise your rights in the field of employment, social security and social protection law (Article 6(1)(c) and Article 9(2)(b) GDPR),

    to fulfil the Controller’s obligations under the law – in particular labour law, which we understand to include obligations towards ZUS (Social Insurance Institution), the tax office and NFZ (National Health Fund), occupational health and safety obligations, the settlement of all amounts due and the archiving of personnel files (Article 6(1)(c) and Article 9(2)(b) GDPR),

    for the purposes indicated in the wording of consents to the processing of personal data – where such consents have been given (Article 6(1)(a) GDPR, Article 9(2)(a) GDPR).

    And also in connection with the pursuit of the legitimate interests of the controller (Article 6(1)(f) GDPR):

    to ensure an organisation of work that enables full use of working time, production control and the proper use of work tools made available to the employee, including company cars,

    to ensure the safety of persons on the organisation’s premises and the protection of property (including through the use of video surveillance, access control measures and e-mail monitoring),

    to organise events and social initiatives – where you express a wish to participate,

    to establish, exercise or defend legal claims,

    to market the products and services of the Controller and its partners – where this results from the legal relationship with the employee, e.g. from the terms of a permission to use their image granted under copyright law,

    for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.    		Your data will be stored:

    for 10 years from the end of the calendar year in which the employment relationship ended/was terminated, where it was established no earlier than 01.01.2019,

    for 50 years from the end of the calendar year in which the employment relationship ended/was terminated, where it was established before 01.01.2019,

    where a cooperation agreement/contract of mandate/contract for specific work has been concluded – until the limitation period for claims arising from the contract expires or the statutory data retention obligations cease, in particular those relating to the retention of accounting documents,

    until a justified objection is raised or consent is withdrawn, where the legal basis for processing personal data is the legitimate interest of the controller or the voluntary consent of the data subject,

    video surveillance recordings will be stored for up to three months and, where necessary to establish, exercise or defend legal claims – until the claims pursued have been finally satisfied or the limitation period for them has expired.    		As a rule, we process the data you provide.
  9. Associates
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To perform the contract between you and the Controller (Article 6(1)(b) GDPR),

    for the purposes of settlements, accounting and financial reporting (Article 6(1)(c) and (f) GDPR),

    to fulfil other obligations under the law (Article 6(1)(c) and Article 9(2)(b) GDPR),

    for the purposes indicated in the wording of consents to the processing of personal data – where such consents have been given (Article 6(1)(a) GDPR and, in the case of special categories of data, also Article 9(2)(a) GDPR).

    And also in connection with the pursuit of the legitimate interests of the controller (Article 6(1)(f) GDPR):

    to ensure an organisation of cooperation that enables full use of working time, production control and the proper use of the work tools made available, including company cars,

    to ensure the safety of persons on the organisation’s premises and the protection of property,

    to organise events and social initiatives – where you express a wish to participate,

    to perform contracts with the organisation’s clients, business partners and suppliers,

    to establish, exercise or defend legal claims,

    to market the products and services of the controller and its partners – where this results from the legal relationship with the associate, e.g. from the terms of a permission granted under copyright law.

    for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.    		Your personal data will be stored until the limitation periods for claims arising from the contract between you and the Controller expire.As a rule, we process the data you provide.
  10. Family members and companions of the Controller’s employees and associates
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To enable you to take part in social benefits, i.e. to register and confirm your entitlement to a given social benefit (Article 6(1)(c) and Article 9(2)(b) GDPR),

    to enable you to exercise your rights in the field of employment, social security and social protection law, and to fulfil the related legal obligations incumbent on the Controller (Article 6(1)(c) and Article 9(2)(b) GDPR),

    where you have been named as an emergency contact person – to inform you of an emergency (Article 6(1)(f) GDPR),

    for the purposes of settlements, accounting and financial reporting (Article 6(1)(c) and (f) GDPR),

    to fulfil other obligations under the law (Article 6(1)(c) GDPR),

    for the purposes indicated in the wording of consents to the processing of personal data – where such consents have been given (Article 6(1)(a) GDPR, Article 9(2)(a) GDPR).

    And also in connection with the pursuit of other legitimate interests of the controller (Article 6(1)(f) GDPR):

    to establish, exercise or defend legal claims,

    for statistical purposes related to improving work efficiency and the quality of the services provided and tailoring them to their recipients.    		Your personal data will be stored for the period necessary to achieve the purpose for which it was collected, until consent is withdrawn (where given), for the period required by law or until the limitation periods for claims expire – whichever of these periods is longer.If your personal data was not obtained directly from you, it was provided to us by our employee or associate. Your personal data is processed to the extent corresponding to the purposes indicated above. The data typically required to achieve these purposes is first name, surname, date of birth, address and PESEL number. For social insurance purposes, a wider scope of data is required: NIP (tax identification number), document series and number, sex, citizenship, family name at birth, periods of work in special conditions or of a special nature, code of the degree of kinship/affinity, code of the degree of disability.
  11. Correspondents
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To conduct correspondence and to ensure the circulation and archiving of documents, which constitutes a legitimate interest of the controller (Article 6(1)(f) GDPR). Information on the processing of data contained in the content of correspondence and the related legal bases is available in the remaining part of this policy, depending on the subject of the correspondence.As a rule, data is processed for the periods specified by law and, where no such periods are specified for particular documents, for as long as its storage falls within the legitimate purpose of the controller, as determined by the period during which claims may be pursued. However, the retention period for data constituting the content of correspondence depends on the purpose of processing to which the correspondence relates (where other data erasure periods apply, information on them is provided in a separate information notice).As a rule, we process the data you provide.
  12. Visitors
    Purpose and legal basis of processingData retention periodWhere data is not collected from you – its source and the categories of personal data
    To ensure the safety of persons on the organisation’s premises and the protection of property (Article 6(1)(f) GDPR), and also:

    to establish, exercise or defend legal claims (Article 6(1)(f) GDPR);

    to perform the contract with the Client or Business Partner (Article 6(1)(b) GDPR – if you are a party to the contract; Article 6(1)(f) GDPR – if you are a person cooperating with us on behalf of the Client or Business Partner);

    to fulfil legal obligations (Article 6(1)(c) GDPR).    		Your personal data, including video surveillance recordings, will be stored for up to three months and, where necessary to establish, exercise or defend legal claims – until the claims pursued have been finally satisfied or the limitation period for them has expired.As a rule, we process the data you provide. If you have not provided us with your data, its source is the person who notified us of your visit.

NOTE: There are also situations in which our organisation is a processor of data and the controller is the entity on whose behalf we process the data. Where such a situation arises, you will receive information about the processing from that controller.

Detailed information on the processing of personal data on the website:

Cookies - Information on the cookies used can be found in a separate document – the Cookie Policy (link).

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA. However, as IP anonymisation is activated on these pages, your IP address will first be truncated by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other data held by Google.

The purpose of the processing is to evaluate the use of the website and to compile reports on website activity. Other related services will be provided on the basis of the use of the website and the internet. The processing is based on the legitimate interest of the website operator.

Google Analytics collects data on IP addresses, network location, date of visit, operating system and browser type. You can prevent the storage of cookies by selecting the appropriate setting in your browser software; please note, however, that if you do so you may not be able to use all the features of this website to their full extent.

In addition, you can prevent Google from collecting the data generated by cookies and relating to your use of the website (including your IP address), and from processing such data, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en (Browser Add-On), in order to disable Google Analytics.

Use of Google Ads

Our website uses Google Conversion Tracking. If you reached our website via an advertisement served by Google, Google Ads will place a cookie on your computer. The tracking cookie is used when a user clicks on an advertisement served by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not expired, we and Google can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across the websites of Ads advertisers. The information collected using the conversion cookie is used to generate conversion statistics for Ads advertisers who use this functionality. Customers are informed only of the total number of users who clicked on the advertisement and were redirected to the page. However, they do not receive any information that identifies users.

If you do not want your activity on the website to be tracked, change your browser settings, e.g. by blocking cookies from the “googleleadservices.com” domain.

Please note that you cannot opt out of the use of cookies if you want measurement data to continue to be recorded. If you have deleted all cookies in your browser, you must set the relevant cookie again.

Use of Google reCAPTCHA

To ensure data security when forms are used, in some cases we use the reCAPTCHA service provided by Google Inc. It is particularly useful for distinguishing whether an entry is made by a natural person or whether there is abuse consisting in software or a machine “impersonating” a natural person. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. The service involves sending the IP address and any other data required by Google for the reCAPTCHA service. More information on the Google Inc. Privacy Policy can be found here

Use of Facebook social plug-ins

On the basis of our legitimate interests (i.e. our interest in the analysis, optimisation and economically efficient operation of our online offering, within the meaning of Article 6(1)(f) GDPR), we use social plug-ins (“plug-ins”) of the social network facebook.com, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plug-ins may represent interactive elements or content (e.g. videos, graphics or text contributions) and may be identified, e.g., by the Facebook logo (a white “f” on a blue tile), the “Like” button or a thumbs-up sign, or may be marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook social plug-ins can be viewed here

When a user uses features on a website that contains such a plug-in, their device establishes a direct connection with Facebook’s servers. The content of the plug-in is transmitted by Facebook directly to the user’s device and incorporated by it into the online offering. In this process, user profiles may be created from the processed data. We have no influence on the amount of data that Facebook collects by means of the plug-in and therefore inform users of how it works to the best of our knowledge.

Through the integration of the plug-ins, Facebook receives information that the user has accessed the relevant page. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plug-ins, for example by using the “Like” button or the commenting feature, the information is transmitted from the device directly to Facebook and stored there. If the user is not a Facebook member, it is still possible for Facebook to obtain their IP address.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting users’ privacy, can be found in Facebook’s privacy policy.

If a user is a Facebook member and does not want Facebook to collect data about them via this website and link it to the user data already stored on Facebook, they must log out of Facebook and delete their cookies before using our website. Further settings regarding the use of data for advertising purposes can be changed in the profile settings on Facebook. The settings apply across all devices, such as desktop computers and mobile devices.

Conversion measurement with the Facebook pixel

With your consent, we use the “visitor action pixel” known as the “Facebook pixel”, i.e. a service provided by Meta Platforms, Inc., Meta, 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”), on our website. It allows us to track users’ actions after they have seen or clicked on a Facebook advertisement. This enables us to track the effectiveness of Facebook advertisements, which we use for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, of which we inform you to the best of our knowledge. Facebook may link this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook’s privacy policy. You can prevent Facebook and its affiliates from displaying advertisements on and off Facebook.

This consent may only be given by users over the age of 13. If you are younger, please ask your parents or guardians to give it.

If you would like to learn more about how Facebook ensures compliance with European data protection law, click here.

Server logs
  • Using the Website involves sending requests to the server on which the Website is hosted.
  • Each request sent to the server is recorded in the server logs. The logs include, among other things, the User’s IP address, the server date and time, and information about the web browser and operating system used by the User.
  • The logs are recorded and stored on the server.
  • The data recorded in the server logs is not associated with specific persons using the Website and is not used by the Controller to identify the User.
  • The server logs serve solely as auxiliary material for administering the Website, and their content is not disclosed to anyone other than persons authorised to administer the server.

RECIPIENTS OF DATA

In connection with our business activities, your personal data may be disclosed to the following entities:

  1. public authorities or other entities authorised by law – where necessary to fulfil legal obligations,
  2. entities supporting our business activities on our behalf, in particular: providers of external ICT systems supporting our business, subcontractors, entities auditing our business or experts, provided that such entities will process the data on the basis of an agreement with the Controller and solely in accordance with its instructions,
  3. entities providing accounting, HR or legal services – to the extent necessary to ensure the fulfilment of legal obligations or to establish, exercise or defend legal claims,
  4. companies disposing of or archiving documents and other media – to the extent that data is stored in paper form or on such media,
  5. companies providing courier and postal services – where correspondence is conducted,
  6. referees – where they have been named by the candidate,
  7. medical facilities – in the event of a referral for occupational medical examinations or other circumstances requiring their involvement,
  8. banks, insurance undertakings and other financial and payment institutions - where settlements need to be made,
  9. companies providing security, access control and work tool usage monitoring services, with regard to the Controller’s employees and associates.
  10. companies conducting marketing activities, where the relevant consent has been given,
  11. companies providing training, where you take part in such training,
  12. hotels and transport companies, in the case of business travel.

RIGHTS REGARDING THE PROCESSED DATA

Every person whose data is processed by the Controller has the right to:

  1. access their personal data,
  2. rectification of their personal data,
  3. erasure of their personal data,
  4. restriction of the processing of their personal data,
  5. object to the processing of their personal data (in accordance with Article 21(1) GDPR, when lodging an objection, you should state the grounds relating to your particular situation),
  6. portability of their personal data.

More information on the rights of data subjects can be found in Articles 12–23 GDPR, the text of which is available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

You also have the right to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw; more information is available at: https://uodo.gov.pl/pl/p/skargi

VOLUNTARY NATURE OF PROVIDING DATA

Providing data is necessary to conclude contracts, settle business activities and enable the Controller to comply with legal requirements. In all other respects (in particular, for the processing of data by the Controller for marketing purposes), providing data is voluntary.

TRANSFERS OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

As a rule, personal data will not be transferred outside the European Economic Area (hereinafter: “EEA”). However, given that our subcontractors provide services in supporting ICT services and IT infrastructure, the Controller may commission certain IT operations or tasks to recognised subcontractors operating outside the EEA, which may result in your data being transferred outside the EEA. In accordance with a decision of the European Commission, the countries of recipients outside the EEA ensure an adequate level of personal data protection consistent with EEA standards.

In the case of recipients in countries not covered by a European Commission decision, in order to ensure an adequate level of such protection, the data exporter (the controller or a processor acting on behalf of the controller) enters into agreements with the recipients of personal data that are based on standard contractual clauses adopted by the European Commission in accordance with Article 46(2)(c) GDPR.

A copy of the standard contractual clauses can be obtained from the controller – its contact details are provided above. The method used by the controller to safeguard your data complies with the rules laid down in Chapter V GDPR. You may request further information on the safeguards applied in this respect, obtain a copy of those safeguards and find out where they have been made available.

AUTOMATED PROCESSING OF PERSONAL DATA

Your data will not be subject to automated decision-making, including profiling.