Source: https://pracuj.vc/privacy-policy/
Timestamp: 2020-05-26 16:54:44
Document Index: 213119042

Matched Legal Cases: ['art. 33', 'Art. 13', 'art. 6', 'Art. 6', 'art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art 6']

Privacy Policy - Pracuj Ventures
applicable as of July, 26th 2019
Pracuj Ventures Spółka z ograniczoną odpowiedzialnością Alternatywna Spółka Inwestycja spółka komandytowa (“PV”) being the owner of the Internet portal www.pracuj.vc protects privacy of persons using its services and their personal data.
For the sake of observing the principle of legal, reliable and transparent processing of personal data during the use of the services of the Internet portal www.pracuj.vc PV has adopted this “Privacy Policy” which sets out: the purposes and scope of the processed personal data, the methods of their protection, the legal grounds for their processing and the rights of data subjects.
Controller– a controller of personal data within the meaning of the GDPR is Pracuj Ventures Spółka z ograniczoną odpowiedzialnością Alternatywna Spółka Inwestycja sp.k. with its registered seat in Warsaw, Prosta 68, 00-838 Warszawa, entered into the registry of entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw XII Commercial Division of the National Court Register under the NCR (KRS) number: 779117;
Personal data – all information on an identified or an identifiable natural person [Article 4 paragraph 1 GDPR], i.e. a person that may be indirectly or directly identified, especially by an identifier such as first name and surname, ID number, location data, online ID or one or one or several special factors defining physical, genetic, mental, economic, cultural or social identity of a natural person;
Clients – all entities cooperating with the Controller, its contractors, to whom the Controller provides its services and directly related marketing services, as well as a natural person, a legal person or an organizational unit referred to in art. 33 [1] of the Act of 23 April 1964 Civil Code, for which the Controller provides goods or provides services on the basis of a separately concluded contracts;
Service Providers – all entities cooperating with the Controller, its contractors, providing the Controller with their services and directly related marketing services;
Profile – set of personal and behavioral information regarding the User, collected by the Controller;
Profiling – each form of automated processing of personal data by the Controller consisting in the use of the data collected by the Controller for the evaluation of certain personal factors concerning a natural person, especially their analysis or projections regarding aspects of data collected within the Profile or inference about personal features and factors relating to Users, other than the ones collected by the Controller;
GDPR– Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, Dz. U. UE. L. z 2016 r. Nr 119).
Website– Internet portal belonging to and managed by the Controller, as a part of which the Controller provides its services, available at the address: www.pracuj.vc;
User – natural person using the Services through the Website;
Services – group of services provided by the Controller, in particular electronically through the Website, as well as direct marketing services.
The Controller of Users’ personal data shall be the Controller, who is Pracuj Ventures Spóła z ograniczoną odpowiedzialnością Alternatywna Spółka Inwestycyjna sp.k. with its registered seat in Warsaw.
In case of any questions on the personal data processing and rights of Users, it is possible to contact the Controller via following channels:
contact form or contact details, available under the address: https://pracuj.vc/contact/ ;
telephone, under the number: + 48 698 170 933;
e-mail, at the address: contact@pracuj.vc
Legal ground: disclosure obligation under Art. 13(1) letter a GDPR.
Users’ personal data are processed by the Controller while maintaining the rules set out in the GDPR and only to provide access to the Website functionality and provision of electronic services, as well as complaint/request/contact process.
Personal data is gathered in connection with the business activity and will be used for the purposes of the provision of the Services.
Purpose 1: Use the Website, browsing Website contents
Types of Services: The Controller processes the personal data in order to enable the User to use the Website and browse its contents.
Scope of data: For this purpose, the Controller processes personal data regarding the activity of the User in the Website, including registered and stored in cookie files, i.e. data regarding the viewed subpages, as well as data on the User’s device session, operating system, browser, localization and unique ID, as well as information on the device, which has been used to access and browse the Website.
Legal ground: necessity for the performance of a contract for the provision of Services by electronic means (art. 6(1) letter b GDPR) and legitimate interest of the Controller (Art. 6(1) letter f GDPR), consisting in diligent provision of the Services and maintaining the Website accessible by Users.
Purpose 2: Establishing contact with the Controller, processing requests and complaints, answering questions
Types of Services: The Controller processes Users’ personal data provided as part of the contact form, by e-mail or during a telephone conversation, in order to receive a message sent to the Controller via the contact form and to contact the User, including replying and conducting further correspondence.
Scope of data: The Controller processes the following personal data of Users for the above purpose: name and surname, e-mail address, telephone number, address and name of the represented entity, as well as data collected in the Profile, the data submitted in order to use the Service, included in documents annexed to a request, complaint or history of correspondence with the Controller.
Legal ground: necessity for the performance of a contract for the provision of Services by electronic means (art. 6(1) letter b GDPR) and legitimate interest of the Controller (Art. 6(1) letter f GDPR), consisting in improvement of operation of Services and building positive relationships with Users.
Purpose 3: Statistics of use of specific functions and parts of the Website, popularity of subpages and facilitation of the Website’s use
Scope of data: For these purposes, personal data are processed by the Controller in respect of User activity on the Website, such as: the visited pages and subpages of the Website and the amount of time spent on each of them, as well as data regarding the IP address, location, device ID and information on the browser, session and operating system.
Legal ground: legitimate interest of the Controller (Art. 6(1) letter f GDPR) consisting in improvement of the Website’s functionality.
Purpose 4: Marketing and remarketing
Type of Services: The Controller processes Users’ personal data for the purposes of direct or indirect marketing (remarketing) of its own services or products, aimed at matching the Services to User’s current needs.
Scope of data: For this purpose, the Controller processes personal data submitted in the contact form, such as first name, surname, e-mail address, phone number (where consent has been given to the use of telecommunication terminal equipment for direct marketing purposes by means of electronic communication), workplace/represented entity and data on a User’s activity on the Website, registered and stored by means of cookies, in particular the history of accessed subpages of the Website, clicks on the Website, information on accessing and use of specific services on the Website, activity relating to communication with the Controller.
Remarketing: To reach Users by means of marketing communications outside the Websites, the Controller takes advantage of services provided by external suppliers. Such services consist in displaying the Controller’s marketing communications, including commercial information, on pages other than the Website. For that purpose, external suppliers (such as Google, Facebook) install, e.g., an appropriate code, text file or pixel to collect information on User activity on the Website. These information relate to the User’s activity on the Website, in particular to the fact of visiting the Website and the history of accessing subpages within the Website.
Legal ground: legitimate interest of the Controller (Art. 6(1) letter f GDPR) consisting in direct marketing of the Controller’s services or products and in certain cases – User’s consent as well (Art 6(1) letter a GDPR).
Personal data used by the Controller for the purposes indicated above shall not be used for other purposes without prior approval. In particular, personal data will not be processed for marketing purposes without explicit consent.
The controller uses third party cookies (e.g. Google Analytics, Google Analytics 360) to calculate the number of views on the Website, their duration, and to determine what functions or parts of the Website were most frequently used or visited. The information so collected allow the Controller to analyze efficiency of the Website and determine the directions for development of new functions and services.
Displaying advertisements tailored to the User’s preferences (advertising cookies)
Controller’s cookies and external suppliers’ cookies (e.g. Google Adwords) are used to run marketing campaigns and remarketing campaigns that reach our User with marketing communication, if they have previously visited the Website. These cookies remember that the User visited our Website and what activities he performed. Information collected in this way is transferred to external suppliers.
Submission of certain personal data makes a precondition for the use of Services (data specified in Purpose #2). The obligatory data are marked within the Website with [*]. A consequence of an omission to submit such data is the User’s impossibility to use offered Services. Apart from data marked as obligatory, provision of other personal data is voluntary.
The Controller shall make all reasonable efforts to adjust the offer of its own services and all marketing communications addressed to Users to their interests and preferences. For that purpose, it undertakes automated processing of personal data, which does not take the form of Profiling. The Controller may, however, use the effects of Profiling made by third parties (e.g. Google, Facebook) when sending marketing and remarketing messages to Users.
At the same time, the Controller points out that targeting and personalization of the Controller’s marketing communications, especially offers and trade information, based on the collected behavioral data (relating to the Users’ behavior and his activity on the Website, in particular the history of subpages viewed), as long as it is not a consequence of inference about other features and personal factors of a User based on the data collected by the Controller, does not amount to Profiling.
Automated processing of personal data and decision-making, does not pose any substantial threat to Users’ rights and freedoms, does not produce any substantial legal consequences to users and is not an excessive nuisance, and, consequently – there are no reasons which would preclude affording priority to the Controller’s interests.
The consequences of automated processing of personal data will be exclusively the diversification of marketing messages addressed to the Users, depending on the activities they have undertaken on the Website.
To take advantage of Services, a User must be at least 16 years of age or obtain consent from a person exercising parental authority or guardianship over the child (legal guardian). The Controller does not intend to consciously collect any personal data from children under 16 years of age without obtaining consent of a parent or guardian.
Users’ personal data may be disclosed by the Controller to other entities in order to provide services offered on the Website. Depending on the circumstances, such entities may be under Controller’s instructions as to the purposes and methods of processing such data (processors), or independently establish the purposes and methods of processing Users’ personal data (controllers).
The Controller shares Users’ personal data with the following categories of recipients:
Processors. The Controller takes advantage of services by entities processing Users’ personal data only upon its request. Those include, among others, providers of hosting services, drive space in a cloud, marketing systems (e.g. for distribution of newsletters and other emails), systems analyzing Website traffic or effectiveness of marketing campaigns, etc.
A2 Hosting (PO BOX 2998, Ann Arbor, MI 48106, USA)
Controllers. The Controller uses also services of entities that do not act exclusively on its instruction and by themselves establish the purposes and methods of utilization of Users’ personal data. These are entities which mainly provide services of remarketing campaigns and undertake statistical research.
Facebook Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland);
Twitter International Company (One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland);
Location. Service Providers are domiciled both in Poland and other countries of the European Economic Area (EEA). However, some of the Service Providers may be domiciled outside the EEA. In connection with personal data transfers outside the EEA, the Controller attended that service providers guarantee high level of personal data protection. Such guarantees follow in particular from participation in the “Privacy Shield” program put in place under the implementing decision of the Commission (EU) 2016/1250 of 12 July 2016 on the adequacy of protection afforded by the EU-US Privacy Shield. A User may obtain by email a copy of the personal data transferred from the Controller to a third country, in the same way as he may request access to personal data. Where the above requirement has not been fulfilled, the Controller shall ensure compliance of the data processing with the GDPR by obtaining User consent to such transfer, and in the absence of such consent – exclusion of the personal data of such User from transfers to a third country.
The Controller shall disclose personal data to all persons authorized by the Controller to process data on its behalf, which follows from the fact that on everyday basis these are people that are responsible for the Controller’s actions.
Personal data are disclosed also when authorized state authorities so request, in particular organizational units of the prosecutor’s office, the Police, or the supervision authority responsible for data protection issues (President of the Data Protection Authority (PUODO).
The Personal data of Users, who used the Services, are stored by the Controller throughout the entire period of using the Website Services to provide the Services as well as for marketing purposes. Personal data are processed, as the case may be, until the consent for processing has been withdrawn, the right to object to the processing of data for direct marketing purposes has been exercised or the right to delete data has been exercised, and in the absence of such activities, for a period of usefulness for the purpose for which they were collected, a significant change the subject of the Controller’s activity, termination of the Controller’s marketing activity or termination of the Controller’s activities in the scope in which he conducted his activity on the day of data collection.
The Personal data of Users, who haven’t used the Services, but only browsed the contents of the Website, are stored for a period corresponding to the validity of the cookies saved on their devices or until the deletion of cookie files.
The Controller shall ensure execution of the below rights to Users by contacting the Controller in one of the ways indicated in section II.
A User shall have the right to withdraw each consent that he/she expressed upon registration on the Website, and during the use of Services. Withdrawal of consent shall be effective as of the moment of the consent’s withdrawal. Withdrawal of consent shall not affect the processing legally performed by the Controller before such withdrawal.
Withdrawal of consent shall not entail any negative consequences and is free of charge. However, it may disable further use of Services. Withdrawal of consent shall be without prejudice to the processing performed under a legal ground other than consent from the data subject, for instance for the purpose of performing the contract between the Controller and a User.
Where the Controller is unable to indicate any other legal ground for the processing of personal data of a User who lodged a complaint which would be precedent to the interests, rights and freedoms of a User or grounds for the establishment, assertion or defense of claims, the Controller shall promptly erase the personal data of such User.
A User may request erasure of all or certain personal data.
Despite a request for erasure of personal data, in connection with a submission of objection or withdrawal of consent, the Controller may keep certain personal data to the extent necessary for the establishment, assertion or defense of claims.
the Controller no longer needs the personal data for the purposes of processing, but they are necessary to the User for the establishment, assertion or defense of claims;
Everyone may obtain confirmation from the Controller whether the Controller processes personal data of any given person and to what extent, and if so, such person may:
A. User may rectify, supplement or update the personal data which he/she submitted.
B. User may request from the Controller rectification of that data (if inaccurate) or their supplementation (if incomplete).
A. User may receive his personal data which he/she submitted to the Controller, and then send them to another personal data controller of his/her choice.
B. User may also request that the personal data be sent by the Controller directly to such another controller as far as this is technically possible.
The Controller sends data as a file in the *.xls or *.xml or *.csv format. This format is in general use, machine-readable and permits the transfer of the received data to another personal data controller.
In each situation of automated processing of personal data (automated decision-making, including Profiling), a User may question the decision made exclusively by automated means, express his opinion about the decision made and request human intervention from the Controller. Human intervention is made by repeated evaluation of the features, factors and premises that have been taken into account in the automated decision-making by a person authorized by the Controller and issuance of a decision other than the previous one or its upholding.
This right shall be excluded where such decision does not produce any legal consequences to the User or the impact on his situation is minimal, as well as in a situation where the processing of your personal data is not solely automated.
If a User, in exercise of the rights specified in section X, submits an appropriate request to the Controller, the Controller shall promptly consider that request positively or negatively, however, not later than within a month of its receipt. However, if, as a result of a complex nature of the request or number of requests – it is impossible to comply with the monthly deadline, the Controller shall fulfil its obligation to process the request within the following two months, upon prior notification of the circumstances to the User.
If the User decides that the Controller has violated the rules for the processing of personal data, he has the right to submit a complaint directly to the supervisory authority, i.e. the President of the Office for Personal Data Protection (PUODO). The complaint should be submitted directly to the supervisory authority.
The Controller and entities with whom it cooperates shall make every effort to ensure security to the personal data processed on the Website, including but not limited to, by the use of encrypted data transmission (SSL) during access to the Website, which considerably hinders interception of the Personal data by unauthorized systems or persons.
If needed, the Controller may amend or update the Privacy Policy. All amendments or supplementation’s shall be notified to Users by publication on the Website’s home page of appropriate information or by an email sent to Users.