Privacy Policy - ViewPro s.c.

General information
Tomasz Mróz and Justyna Mróz, operating as a civil partnership ViewPro S.C. T.MRÓZ, J.MRÓZ, with its registered office at ul. Skoroszewska 2B lok. 34, 02-495 Warsaw, REGON: 147452308, NIP: 5223019335, and email address info@viewpro.pl (hereinafter referred to as the “Administrator”), are responsible for the protection of your personal data.
We take all necessary precautions to ensure that your personal data is processed in accordance with applicable laws and regulations.
How do we obtain your personal data?
We obtain your personal data through voluntary entry of data in forms available on websites belonging to the Administrator or through cookies saved on end-user devices.
How do we protect your personal data?
We are committed to ensuring the security of the personal data we process. To this end, we design our services with your security in mind. We have implemented appropriate procedures, policies, and precautions. We provide training in data protection, confidentiality, and security. We regularly review the implemented protection measures to ensure their adequacy for the security of the processed personal data and compliance with GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).
Do we transfer personal data outside of the European Economic Area (EEA)?
Due to contracts with external entities, the Administrator may transfer personal data outside of the European Economic Area. The transfer of personal data is based on appropriate mechanisms ensuring the security of data processing.
What is the scope of the collected data?
The Administrator may collect the following data from you:
- email address,
- first and last name,
- phone number,
- company details,
- residential address and/or shipping address.
  
  The detailed scope of data collected for a specific purpose is specified each time on the Administrator’s website in places allowing for leaving such data.
How is the data used?
We process your personal data for the following purposes:
- to conclude and perform a contract between you and the Administrator for the provision of electronic services via internet platforms owned by the Administrator, including ensuring the proper quality of services,
- to fulfill legal obligations incumbent on the Administrator, e.g.:
- issuing and storing invoices and accounting documents,
- responding to complaints within the time and form provided for by regulations,
- to consider requests, complaints, and inquiries submitted by you,
- to detect and prevent abuses,
- to establish the validity of claims, defend against claims and assert claims,
- with your consent – for marketing purposes, sending a newsletter, as well as for direct marketing carried out by the Administrator,
- with your consent – for the purposes of ongoing recruitment,
- to contact you if our legally justified interest speaks for it.
Does the Administrator perform profiling?
The Administrator does not perform profiling within the meaning of GDPR.
How long do we store your personal data?
We store your data for a specific period depending on the purpose:
- the duration of the contract, and then for the period after which the claim arising from the contract is time-barred, and in the case of the Administrator’s pursuit of claims or notification of the relevant authorities, for the duration of such proceedings;
- performance of obligations, such as issuing invoices;
- the period for which regulations require data to be kept, e.g. tax law;
- necessary to consider requests, complaints, inquiries addressed by you;
- the period in which the Administrator may incur legal consequences for failing to fulfill an obligation, e.g. receive a financial penalty from state authorities;
- necessary to assess creditworthiness;
- as long as we have your consent, i.e. until it is withdrawn;
- until you object, in case the legal basis for processing is the legitimate interest of the Administrator.
The principles we follow
We take due care to protect the interests of the individuals whose data we process, and in particular we strive to ensure that the data collected by the Administrator are:
- processed lawfully, fairly and in a transparent manner,
- collected for specific, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes,
- adequate, relevant and limited to what is necessary for the purposes for which they are processed,
- accurate and, where necessary, kept up to date,
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures,
- kept in a form which permits identification of the data subjects for no longer than is necessary for the purposes for which the personal data are processed.
When do we share your personal data with other entities?
We never sell the personal data we hold.
We may disclose your personal data to other recipients:
- when we use services provided by entities cooperating with us or our subcontractors, which applies in particular to accounting offices and marketing agencies.
  
  *In order to provide you with the highest level of services, we may use the services of other companies, entrusting them with the processing of your personal data on our behalf. At the same time, we take care to ensure that your personal data is treated as if we processed it directly. We carefully select external entities with whom we cooperate, share with them only those personal data that are necessary for them to perform their services. We ensure that your personal data is secure.
- when we are required by law to disclose your data to other organizations,
- when it is necessary to protect the vital interests of the data subject or of another natural person.
What kind of rights do you have?
You have full control over your personal data.
You have the right to:
- access the data we store as a data controller,
- obtain a copy of your personal data being processed,
- request rectification of your personal data,
- withdraw your consent to processing of personal data, if the processing is based on your consent,
- object to processing of personal data, if the processing is based on our legitimate interests,
- restrict processing of your personal data,
- receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller,
- request erasure of your personal data, unless there is a legal obligation to process them,
- lodge a complaint with the President of the Personal Data Protection Office (address: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00 – 193 Warszawa).
Cookies mechanism on the Administrator’s website
Cookies are small text information stored on the user’s device in order to:
- Provide the service offered by the website and ensure the highest convenience of using the service (e.g. saving and remembering settings and preferences, automatic logging in).
- Introduce and store certain information, create counters, statistics, monitor activity and assess the use of the website by visitors.
- Create reports on website traffic for website operators and provide other services related to website traffic and internet usage.
  
  The user can opt out of using cookies by selecting the appropriate settings in the browser, but it should be remembered that in such a case, using all the website’s features may be impossible.
  More information, including information on disabling cookies for different browsers, can be found on the website: http://en.wikipedia.org/wiki/HTTP_cookie.
  The Administrator uses cookies for analysis and research, as well as to audit viewership, and in particular to create anonymous statistics that help understand how users use the Administrator’s services, which allows for improving their structure, content, and the information displayed to users.
  The Administrator may use Google Analytics, i.e. a service provided by Google Inc. Google Analytics uses cookies to analyze how you use the website. The obtained data is transmitted to Google’s servers in the United States and stored there.
How can I contact the Administrator?
If you have any questions or comments regarding this policy, you can contact us:
- by post at the Administrator’s address indicated in point 1 of this policy,
- by email at the email address indicated in point 1 of this policy.
Information on the processing of personal data for employees or collaborators of the Administrator’s contractors – “contact persons”
The Administrator will be the controller of your personal data.
We will process your personal data because you are a contact person for the Administrator at our contractor or potential contractor. Therefore, we will process your data to:
- Contact you on current issues, including regarding the performance of agreements between us and your employer/entity that you represent, presenting offers, receiving orders, and answering questions. The legal basis for processing data is our legitimate interest in being able to maintain ongoing contact with our contractors (i.e., their employees/collaborators).
- Provide other information about our business and possible forms of cooperation. The legal basis for processing data is our legitimate interest in maintaining relations with employees and collaborators of our contractors.
- Defend ourselves against possible claims or pursue possible claims related to an agreement with the entity in which you work or that you represent, i.e., our contractor – if a dispute arises concerning the agreement. The legal basis for processing data is our legitimate interest in being able to defend against claims or pursue claims.
  
  We obtained your data directly from you or from your employer/entity that you represent.
  From your employer/entity that you represent, we receive data such as your name and surname, work phone number and email address, place of work, position, or information about the type of matters you deal with.
  We will process your personal data for the period of performance of the agreement concluded between your employer/entity that you represent and us, as well as for the period of limitation of claims arising from the agreement.
  Your personal data may be transferred to our subcontractors who will perform services for your employer/entity that you represent, as well as to law firms with whom we cooperate.
  
  You have the following rights related to the processing of your personal data:
- the right to access your data and receive a copy of it, correct (amend) your data, delete personal data, limit data processing, the right to object to the processing of your data due to a particular situation, the right to data portability; a request in this regard can be sent to the contact address of the Administrator provided above,
- the right to file a complaint with the President of UODO (address: Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland).
Information about the processing of personal data of other people contacting the Administrator (by phone, email, or contact form), as well as people whom the Administrator contacts (by phone or email).
The Administrator will be responsible for processing your personal data.
We will process your personal data in order to fulfill your request based on our legitimate interests according to Article 6(1)(f) of the GDPR, as well as for marketing purposes based on your consent according to Article 6(1)(a) of the GDPR.
Your personal data may be transferred to our cooperating entities or subcontractors.
According to the GDPR, you have the right to:
- access your data and receive a copy of it,
- rectify (correct) your data,
- erase your personal data,
- restrict the processing of your data,
- object to the processing of your data due to a special situation,
- data portability.
  *Requests regarding the above can be sent to the data administrator’s contact address, provided above.
  
  You have the right to file a complaint with the President of the Personal Data Protection Office (UODO) (at the address: Stawki 2, 00-193 Warsaw).
  Regarding data processed for marketing purposes, you can withdraw your consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  
  Providing personal data is voluntary and not required by law.
Processing of personal data for the purpose of delivering a newsletter is carried out on the basis of Art. 6 (1) (a) of the GDPR.
Your personal data may be transferred to entities cooperating with us or our subcontractors.
You have the following rights related to the processing of your personal data:
- the right to access your data and obtain a copy of it,
- the right to correct your data,
- the right to erase your personal data,
- the right to restrict the processing of your data,
- the right to data portability.
  *Requests regarding the above matters can be sent to the contact address of the data administrator, provided above.
  
  You also have the right to lodge a complaint with the President of the Personal Data Protection Office (address: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).
  At any time, you may withdraw your consent by contacting us. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  Providing personal data is voluntary, not required by law, and failure to provide such data will result in the inability to subscribe to the newsletter.
This is a privacy policy for the recruitment process of the Administrator’s employees. The personal data will be collected from the website and related social media profiles such as Facebook, LinkedIn, etc.
The legal basis for processing personal data is:
- The law (Article 22[1] § 1 of the Labor Code) – regarding the following data:
  - name and surname,
  - parents’ names,
  - date of birth,
  - place of residence (address for correspondence),
  - education,
  - previous employment history.
- Your consent – for the data provided in the CV and cover letter, if you provide us with data other than those provided in Art. 22[1] § 1 k.p. above (e.g. phone number and email address) or if you provide your personal data, applying for a position that involves cooperation with the Administrator on a basis other than an employment contract.
- Our legitimate interest – for data collected during the job interview and qualification test results. We have a legitimate interest in verifying your skills and abilities – this is necessary to assess whether you are suitable for the position we are recruiting for.
  
  Personal data will not be disclosed to other recipients.
  
  It is possible to transfer your data to a third country if they are processed using cloud tools, and the disk space may be located on servers outside the EEA or the email administrator you use for contacting the Administrator uses servers located physically outside the EEA.
  
  We will store your personal data until the end of the recruitment process for the position you applied for. However, if you have given separate consent for the processing of data for future recruitment purposes, we will store your data until you withdraw your consent for their processing, but no longer than 5 years from the time of collection.
  
  According to GDPR, you have the right to:
- access your data and obtain a copy of it,
- rectify (correct) your data,
- erase your personal data,
- restrict the processing of your data,
- object to the processing of your data due to your particular situation,
- data portability,
- requests regarding the above matters can be sent to the contact address of the data controller provided above,
- lodge a complaint with the President of the Personal Data Protection Office (address: ul. Stawki 2, 00-193 Warsaw).
  
  You can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
  
  Giving consent to the transfer of personal data is voluntary, but necessary to participate in the recruitment process. Without consent, we will not be able to consider your application documents.
Processing of personal data in case of photographs
Photos containing your image are stored on servers that are at the disposal of the Administrator and belong to Zenbox sp. z o.o. with headquarters in Częstochowa. The photos may also be stored in the “sent messages” folder on the Zenbox account, which is at the disposal of the Administrator. Providing personal data, i.e. sharing your image, is voluntary, but not providing them (i.e. not sharing your image) makes it impossible to take the photo.
Use of plugins for integration with other services

In some of the content on our website, social plugins for social media platforms such as Facebook, Google, Twitter, YouTube, and LinkedIn are used. Using these features, you can share individual content with friends on these social media platforms or recommend it to them.

When using these social plugins, such as the Facebook “Like” button, Google+ or Twitter button, personal data may be collected by these social media platforms in the manner described below.

When browsing the content on our website in which a social plugin is integrated, the social media platform establishes a direct connection with the search engine. Through this, the social media platform receives, among other things, information that you visited us from a particular IP address or device ID. This occurs regardless of whether you are currently logged in or registered on the social media platform at all.

If you are simultaneously logged in to a social media platform, the social media platform automatically associates your visit to the site with your profile. Also, when using social plugins and, for example, recommending an article or other content, the social media platform may associate this information with your profile. If you do not want the social media platform to associate your visit to our site with your specific user account, you should log out of the social media platform during your use of our website.

We point out that data collected in connection with social plugins can only be exchanged between your search engine and the operator of the social media platform. We have no knowledge of the content of the data being collected and transmitted. Therefore, we recommend that you read the current privacy policy of the above-mentioned social media platform operators.
Can the privacy policy and cookie policy be changed?
The Administrator reserves the right to change and update the Privacy Policy. Each time we make changes, we will publish a new version of the privacy policy on our website.