Privacy Policy

1. Who is the controller of personal data?

2. For what purpose, on what basis, and for how long do we use personal data?

1. Concluding and performing an agreement for the duration of the agreement and settlements after its termination, or taking steps before concluding an agreement, where applicable under Article 6(1)(b) GDPR.

2. Complying with legal obligations, for example issuing and storing invoices and accounting documents or maintaining employee records, under Article 6(1)(c) GDPR.

3. Performing legal obligations for the time necessary to perform them, for the period required by law, and for the time during which we have a legitimate interest, for example where we may face legal consequences for failing to perform an obligation.

4. Verifying payment credibility, establishing, defending and pursuing claims, detecting and preventing abuse, preparing summaries, analyses and statistics, including selling claims under an agreement to another entity and disclosing source documents containing personal data, reporting, marketing research and creating statistics, for the limitation period for claims arising from an agreement, because we have a legitimate interest.

5. Direct marketing for the duration of an agreement, because we have a legitimate interest.

3. To whom may we disclose personal data?

1. Entities processing data on our behalf and participating in our activities, including employees, associates, subcontractors and affiliated companies supporting our business, maintaining our IT systems, helping with marketing or delivering services to clients.

2. Advisers, consultants and auditors providing legal, tax or accounting assistance.

3. Postal, courier and payment service providers, banks, payment institutions, debt purchasers and financial institutions.

4. State authorities to the extent required by law, and clients where necessary before concluding an agreement or while performing an agreement.

4. Will personal data be transferred outside the European Economic Area (EEA)?

5. Your rights

1. Rectification, deletion, restriction of processing, access, and transfer of data to another controller or to you, within the scope set out in Article 20 GDPR.

2. Objecting to processing, including profiling, for direct marketing purposes within the scope set out in Article 21 GDPR.

3. Withdrawing consent where data is used on the basis of consent and processing is not necessary to perform an agreement, comply with a legal obligation, or pursue our legitimate interest.

4. Filing a complaint with the President of the Personal Data Protection Office.

5. After reviewing a request, it may turn out that we will not be able to process personal data covered by an objection on that basis, unless we demonstrate legal grounds for doing so.

6. Which data must be provided?

1. Data necessary to conclude an agreement, meaning data in the agreement form or accompanying documents, for example identification of the parties and correspondence address. If you do not provide it, we may be unable to conclude the agreement.

2. From job applicants for employment contracts and employees, we require the data specified in the Labour Code.

3. Optional data that we may request and that does not affect conclusion of an agreement. If we do not receive it, we may be unable, for example, to call a contact phone number.