Privacy policy

I. INDICATION OF THE ADMINISTRATOR AND HOW TO CONTACT HIM

1. The administrator of your personal data is CENTRUM ELEKTRONIKI STOSOWANE "CES" Limited Liability Company, Podłęże 676, 32-003 Podłęże, entered in the Register of Entrepreneurs of the National Court Register by the District Court for Krakow - Śródmieście in Krakow, XI Economic Department of the National Court Register under the number 0000185827, REGON: 350553452, NIP: 6790028986, share capital: PLN 100,000.00

2. If you have any questions about the processing of your personal data or to make requests for the exercise of your rights, please contact me by e-mail: daneosobowe@ces.com.pl or contact me in writing at the following address: Podłęże 676, 32- 003 Podłęże or personal contact at the administrator's office.

3. The request can also be made by proxy.

4. If the Administrator is unable to identify an individual on the basis of the request made, it will ask you for additional information. It is not mandatory to provide such data, but failure to do so will result in the denial of the request.

5. The application should be answered within one month of receipt. If it is necessary to extend this period, the Administrator will inform the applicant of the reasons for this action. In the case where the request was in electronic form, the response will be provided in the same form, unless the applicant has requested a response in another form.

6. The administrator shall store information regarding your reported request in order to demonstrate the administrator's compliance with its obligations under the law (i.e. due to the fulfillment of the administrator's legitimate interests - Art. 6 (1) f. RODO).

II. DEFINITIONS

For the purposes of this Privacy Policy, it is understood that the following terms will have the following meanings:

Administrator – CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Limited Liability Company, Podłęże 676, 32-003 Podłęże, entered in the Register of Entrepreneurs of the National Court Register by the District Court for Krakow - Śródmieście in Krakow, XI Economic Department of the National Court Register under the number 0000185827, REGON: 350553452, NIP: 6790028986, share capital: PLN 100,000.00

Personal data - any information about a natural person identified or identifiable by one or more specific factors determining physical, physiological, genetic, mental, economic, cultural or social identity, including image, voice recording, contact data, location data, information contained in correspondence, information collected through recording equipment or other similar technology;

RODO - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC Directive 95/46/EC (General Data Protection Regulation);

Service/website - the website available at: https://www.ces.com.pl/,

Data processing - performing any operation on personal data, i.e. collecting, recording, organizing, structuring, storing, adapting or modifying, downloading, viewing, using, disclosing by sending, distributing or otherwise making available, matching or combining, limiting, deleting or destroying.

III. METHOD OF PROCESSING PERSONAL DATA

In connection with its business activity CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Ltd. based in Podlęże, collects and processes Personal Data in accordance with the relevant legislation

In particular, it provides:

security, confidentiality and transparency of the processing of Personal Data;
the use of appropriate technical and organizational measures to ensure the integrity and confidentiality of the data, ensuring the protection of the processed Personal Data, appropriate to the risks and categories of Personal Data,
securing your Personal Data from being accessed by unauthorized persons, from being taken by unauthorized persons, from being processed in violation of the law, and from being altered, lost, damaged or destroyed (only authorized persons have access to Personal Data and only to the extent necessary due to the tasks they perform),
you have access to information about the processing of your Personal Data,
ensuring that Personal Data is collected only to the extent necessary for the stated purpose and is processed only for the necessary period,
providing information about the processing of Personal Data at the time of collection, in particular, about the purpose and legal basis for the processing of Personal Data in cases where this is mandated by law,
registration of all operations on Personal Data,
to take all necessary measures so that also other entities cooperating with me provide guarantees to apply appropriate security measures whenever they process Personal Data on behalf of the Administrator,
conducting on an ongoing basis a risk analysis and monitoring the adequacy of the applied safeguards of Personal Data to the identified risks
Implementing additional measures to enhance the security of Personal Data, if necessary,
informing you of a Personal Data breach (e.g., data "leakage" or loss), should it occur, and such a breach could result in a high risk of violation of your rights or freedoms.

IV. PURPOSES AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

When contacting the Administrator (e.g., in person, via contact form, email, traditional mail, telephone), data processing is carried out for the purposes and on the legal grounds described below.

IV.1 PERSONAL DATA OF CLIENTS/CONTRACTORS (OR THEIR REPRESENTATIVES OR EMPLOYEES WITH THE STATUS OF NATURAL PERSONS)

1. Processing by the CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Ltd. based in Podlęże Personal Data of its customers/contractors (or their representatives or employees having the status of natural persons) is carried out:

in order to undertake any actions necessary for the performance of the contract or actions at your request prior to the conclusion of the contract (premise of Article 6(1)(b) of the RODO) and in connection with the administrator's obligation under tax law Article 70 in connection with Article 86 of the Act, August 29, 1997 Tax Ordinance, Journal of Laws 2020.132 - premise of Article 6(1)(c) of the RODO.
for purposes other than those indicated above, but necessary due to the realization of the legitimate interests of the administrator (premise of Article 6(1)(f) of the RODO), in particular:

in connection with the establishment and assertion of claims or the defense against claims;
for purposes related to IT support, including analysis of Personal Data and statistics collected automatically when using the site, saving data in the form of cookies and use of cookies on the Site - if you have given separate consent to do so;
for analytical and statistical purposes conducting analysis of Users' activities, as well as their preferences in order to improve applied functionalities and provided services;

2. In the event that you provide optional Personal Data (other than that necessary to achieve the aforementioned purposes, the legal basis for processing is your consent (Article 6(1)(a) RODO).

IV. 2 PERSONAL DATA OF PERSONS NOT RELATED TO THE SERVICES PROVIDED TO THE CONTROLLER OR ANY OTHER CONTRACT CONCLUDED WITH THE CONTROLLER

1. The processing of your Personal Data by the CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Ltd., based in Podlęże, on a matter not related to the services provided to the Administrator or another contract concluded with the Administrator, is carried out for the purpose of realization of the Administrator's legitimate interests (premise of Article 6.1.f. RODO), in particular:

for the purpose of communication and resolution of the matter contacted,
for the purpose of correspondence addressed to the Administrator or as a result of the need to resolve a reported matter related to the Administrator's business activities,
in connection with the establishment and assertion of claims or the defense against claims;
for purposes related to IT support, including analysis of Personal Data and statistics collected automatically when using the site, saving data in the form of cookies and use of cookies on the Site - if you have given separate consent,

In the event that you provide optional Personal Data (other than that necessary to achieve the aforementioned purposes, the legal basis for processing is your consent (Article 6(1)(a) of the RODO).

IV. 3 SOCIAL MEDIA PROFILES

1. The site uses plug-ins and other social tools provided by social networks such as Facebook, YouTube, Google, LinkedIn, Pinterest

2. In connection with the possession by the CESNTRUM ELEKTRONIKI STOSOWANEJ "CES" Ltd. based in Podlęże, of public profiles on the above-mentioned portals, the Administrator processes data left by visitors to these profiles, including:

identification data (including name, surname) or
nickname,
profile photo, other photos that may present an image,
content of comments, likes of profile visitors,
Other data to the extent published on the aforementioned social networks,
Anonymous statistical data on fanpage visitors available through the "Facebook Insights" feature.

3. CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Ltd., based in Podlęże, as the creator of the Facebook fanpage, is the co-administrator of personal data together with Facebook

4. The data was obtained directly from you. Your data may also come from other sources, i.e. the Internet, as well as from our Clients/Contractors with whom you are specifically employed, represented, or with whom you cooperate.

5. data processing shall be carried out for the purpose of:

to enable you to be active on profiles or for statistical or analytical purposes,
effectively maintain profiles by presenting portal users with information about the Administrator's initiatives and other activities in connection with providing information about its services,
in order to assert and defend against claims
promoting the Administrator's brand.

6. he legal basis for the processing of personal data is the legitimate interest of the Administrator (Article 6(1)(f) RODO).

7. The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contacting you and your rights in this regard and the possibility of making settings to ensure the protection of your privacy are described in the privacy policies of individual service providers.

Facebook - https://www.facebook.com/privacy/explanation,

YouTube -https://support.google.com/youtube/topic/9386940?hl=pl&ref_topic=2803240

Google – https://policies.google.com/privacy?hl=pl

LinkedIn - https://pl.linkedin.com/legal/privacy-policy

Pinterest - https://help.pinterest.com/pl/article/your-privacy-and-data-settings

8. Details on the rules of use:

YouTube you will find at: https://www.youtube.com/t/terms

Facebook you will find at: https://pl-pl.facebook.com/legal/terms

Google you will find at: https://policies.google.com/terms?hl=pl

LinkedIn you will find at: https://pl.linkedin.com/legal/user-agreement

Pinterest you will find at: https://policy.pinterest.com/pl/terms-of-service

IV.4 RECRUITMENT

1. In the case of recruitment processes carried out by the CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Ldt. based in Podlęże Personal data are processed in order to:

a/ to perform legal obligations related to the employment process, including primarily the Labor Code - in case the preferred form of employment is an employment contract. The legal basis for processing is a legal obligation incumbent on the Administrator (the premise of Article 6(1)(c) of the RODO in connection with labor laws);

b/ to conduct the recruitment process - in case the preferred form of employment is a civil law contract. The legal basis for processing the data contained in the application documents is to take action prior to the conclusion of a contract at the request of the data subject (premise of Article 6(1)(b) of the RODO);

c/ to conduct future recruitment processes - the legal basis for processing is your consent (Article 6(1)(a) RODO). They will be deleted no later than two years after their receipt by the Administrator, unless your consent has been previously withdrawn;

d/ in order to check the competence of an applicant for employment with the Administrator - the legal basis for data processing is the Administrator's legitimate interest (Article 6(1)(f) RODO), which is to check the competence of an applicant for employment;

e/ in order for the Administrator to establish or pursue possible claims or to defend against claims made against the Administrator - the legal basis for data processing is the Administrator's legitimate interest ( the premise of Article 6(1)(f) RODO).

2. Provision of personal data is voluntary; however, the consequence of failure to provide data required by labor laws is that a given candidacy will not be considered in the recruitment process.

3. Provide the Administrator with Personal Data only to the extent specified in the labor laws.

4. In the situation where you send Personal Data beyond the scope indicated by the provisions of the Labor Law or optional data (other than necessary to achieve the above-mentioned purposes) are given, their processing will be based on your consent (the premise of Article 6(1)(a) of the RODO), expressed through an unambiguous affirmative action of sending documents containing the data.

5. If the submitted Personal Data is inadequate for the purpose of conducting the recruitment process, it will not be used or considered by the Administrator.

IV. 5 COLLECTION OF DATA AS PART OF THE MARKETING PROCESS

1. The processing of personal data by the administrator is carried out for marketing purposes. The legal basis for data processing is the legitimate interest of the controller (the premise of Article 6(1)(f) of the RODO Regulation), consisting in the application of marketing , taking care of its interests and good image. In the case of the use of marketing by electronic or telecommunications, the basis for the processing of personal data is the consent of the data subject (Article 6(1)(a) of the RODO Regulation). Personal data collected in such cases are processed only for the purpose for which they were collected.

2. In addition, in certain situations it may be necessary to process your data for purposes other than those indicated above, but which are necessary due to the realization of the legitimate interests of the controller (Article 6.1.f. RODO), in particular:

in connection with the establishment and assertion of claims or the defense against claims;
for the purposes of IT support and ensuring IT and information security, including in particular the monitoring of electronic communications and data flows at the controller.

3. The administrator may store your identification, address, contact information.

V. WITHDRAWAL OF CONSENT AND REQUIREMENT OF PERSONAL DATA

1. Your provision of personal data is voluntary, but necessary to contact/send an inquiry and respond.

2. If your Personal Data is processed based on your consent, you may withdraw it at any time, without affecting the lawfulness of the processing performed before the withdrawal.

VI. RETENTION PERIOD OF PERSONAL DATA

1. Your personal data will be processed CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Ltd. based in Podlęże:

in the case of the processing of Personal Data on the basis of the Administrator's legitimate interest for the period necessary to realize its legitimate interest or to raise an effective objection to the processing,
in the case of processing of Personal Data on the basis of consent, until you withdraw your consent to process the Personal Data,
in the case of processing of Personal Data for the purpose of entering into or performing a contract, until the contract is terminated,
for the period specified by law (e.g., the provisions of applicable tax law).

2. The period of processing of Personal Data may be extended if the processing is necessary for the establishment or assertion of claims or defense against claims, and after that period - only if and to the extent required by law.

3. After the end of the processing period, the data is irreversibly deleted or anonymized

VII. RECIPIENTS OF PERSONAL DATA AND SOURCES OF OBTAINING SUCH DATA

The data was obtained directly from you when entering into contracts or in the course of activities aimed at entering into contracts or performing them. Your data may also come from other sources, i.e., in particular, from publicly available sources such as CEIDG or KRS or the Internet, as well as from our Clients/Contractors with whom, in particular, you are employed, whom you represent, or with whom you cooperate.

In the recruitment process, the data was obtained directly from you, as a job applicant. Your data may also come from other sources, i.e. employment agencies in particular.

We inform you that your personal data may be shared with the following categories of recipients

public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes arising from the law (e.g. Police, Prosecutor's Office);
entities that support the controller in its business processes, including entities that process personal data on behalf of the controller (so-called data processors),
entities providing support and development services for IT services; e.g., hosting providers;
entities providing archiving and document destruction services;
entities providing postal and courier services;
to entities providing substantive support services, such as an accountant..

VIII. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION

1. the Administrator uses the services of entities based outside the European Union (e.g. Facebook, Google, Youtube) these entities may collect anonymous data about you and store it on servers located in third countries, outside the European Economic Area (EEA).

2. The Administrator will transfer your Personal Data outside the European Economic Area (EEA) only if it is necessary and an adequate degree of protection is provided primarily by:

use of standard contractual clauses issued by the European Commission or
application of binding corporate rules approved by the competent supervisory authority supervisory organ.

IX. WHAT RIGHTS YOU HAVE IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA?

All persons whose Personal Data is processed by CENTRUM ELEKTRONIKI STOSOWANEJ "CES" Ldt. based in Podlęże are entitled to the relevant rights under RODO, and these are:

the right of access to personal data, including the right to obtain a copy of such data;
the right to request rectification (amendment) of personal data - in case, when the data is incorrect or incomplete;
the right to request deletion of personal data (the so-called "right to be forgotten") - in case,

(i) data are no longer necessary for the purposes for which they were collected or otherwise processed,

(ii) The data subject has objected to the processing of personal data and the Controller has not demonstrated the existence of valid grounds for further processing of personal data overriding the interests, rights and freedoms of the of the data subject, or grounds for establishing, asserting or defending claims,

(iii) The data subject has withdrawn the consent on which the processing is based and there is no other legal basis for processing,

(iv) data is processed illegally,

(v) data must be deleted in order to comply with the obligation under the legislation;;

The right to request the restriction of the processing of personal data - in case:

(i) the data subject questions the accuracy of the personal data,

(ii) the processing of the data is unlawful, and the data subject, objects to the erasure of the data, requesting instead that it be restricted,

(iii) the controller no longer needs the data for its purposes, but the data subject needs them to establish, defend or pursue a claim,

(iv) the data subject has objected to the processing - until determine whether the legitimate grounds on the part of the controller override to the grounds for the objection;

The right to data portability - where

(i) processing is carried out on the basis of consent or the premise of necessity for conclusion or performance of the contract and

(ii) processing is carried out by automated means (in computer systems IT systems)

the right to object to the processing of your personal data in situations where the controller processes your personal data on the premise of a legitimate legitimate interest of the controller,
the right to lodge a complaint with a supervisory authority - in all cases related to the processing of personal data, you have the right to lodge a complaint with the competent supervisory authority dealing with the protection of personal data,
the right not to be subject to a decision based solely on automated processing of Personal Data (including profiling),

2. The Administrator shall not make decisions with respect to you based solely on automated data processing, including profiling, which would produce legal effects with respect to you or similarly materially affect you.

X. ARE LINKS TO EXTERNAL SITES COVERED BY THE PRIVACY POLICY?

The Administrator is not responsible for the privacy policies of websites that may be linked to its Service. The Administrator recommends that you read the privacy policies available when you go to the external sites to which you are redirected. This privacy policy applies only to the Administrator's Service.