Privacy Policy

This documents outlines the rules regarding the collection (gathering), processing and usage of personal data.

Personal Data Administrator

The personal data administrator is Esysco Ltd. located in Zygmunta Krasińskiego 16; 60- 830 Poznan with the tax number 7811885510 oraz REGON 302450525.

Contact us via:

The legal basis of personal data processing

The processing of personal data takes place in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) further in this document called “GDPR”.

General Assumptions

The personal data administrator does their utmost to protect the rights of the data subjects and particularly makes sure that the data are:

  • Processed in a legal, earnest and transparent way

  • Collected for legal purposes about which you are informed while the data is collected

  • Not processed any further in ways that are not in accordance with the purposes presented in the required disclosure

  • Correct and if need be updated

  • Factually true and adequate to the purposes with which they are being processed

  • Fully protected from any unauthorised access, destruction, exposure and exploitation

  • Stored in a way that allows for the identification of the source for no longer it is necessary to fulfil the purpose of data processing

The legal basis and the data processing time

While collecting personal data we always inform about the legal basis of data processing. The specific articles of the GDPR refer to:

  • Article 6 bill 1 (a) GDPR – personal data processing takes place only after received consent

  • Article 6 bill 1 (b) GDPR – data processing is necessary for the performance of a contract or taking steps prior to entering into a contract

  • Article 6 bill 1 (c) GDPR – the data are being processed in order to complete the legal obligation

  • Article 6 bill 1 (f) GDPR– the data are processed for the purposes of legal interests that we always inform about

We can also process personal data on the basis of other provisions.

The time of personal data processing is dependent on the basis and the purpose of their processing and it is disclosed prior to or during the data collection.

Authorisation of the subjects of the data

In connection to personal data processing, the persons being subjects to the data have certain rights regarding the processing. The possibility of using the rights mentioned below is dependent on the legal basis of personal data processing.

Right to Accessing the Data

The data subject has the right to obtain from us a confirmation regarding whether their personal data are being processed. If this indeed is taking place, they are allowed to get access to the data and the additional information, such as e.g. the purposes, categories of the processed data, the recipients, retention and the source of the data being processed. After receiving the request for accessing the data, we are obliged to deliver a copy of the personal data being processed. If the request was filed via email and no objection was expressed, the information will also be provided via email.

Right to Data Correction

The data subject has the right to demand immediate correction if the data contains mistakes. He/She also has the right to demand the supplementation of incomplete personal data including the purposes of the processing by presenting an additional statement.

Right to Being Forgotten

The data subject has the right to demand an immediate deletion of their personal data. We have an obligation to promptly delete the personal data in the case of one of the following:

  • The consent to process personal data has been revoked and there is no other basis on which this could continue

  • The data subject has effectively objected to the processing

  • Personal data has been processed illegally

  • Personal data need to be deleted in order to fulfil the legal obligation

Right to Limiting the Processing

The data subject has the right to demand limiting the processing in one of the following cases:

  • The data subject is questioning the correctness of the data- for the time period which allows us to check the correctness of the data

  • Processing is illegal and the data subject is objecting to its deletion and instead demands limiting its processing

  • We no longer need the data for the purposes of processing but the subject expresses the need to keep them for the establishment, obtaining and defending their claims

  • The data subject has objected to the data being processed in accordance with article 21 GDPR- for the time it takes to decide whether the legally based reasons of the administrator override the data subject’s objection.

Right to Object

The data subject has the right to object at any moment to the processing of his/her personal data in accordance with article 6 bill 1 (f) GDPR. Then we are not allowed to process his/her data unless we present an overriding to the interests, rights and freedoms of the subject and legitimate basis to continue the processing, or present sufficient basis for cause action.

What is more, if the subject of the data objects to the processing with the purpose of direct marketing, we are obliged to no longer process the data with such a purpose.

Right to complain to the supervisory authority

The data subject has the right to object to the supervisory authority being the President of the Personal Data Protection Office, which is concerned with personal data protection in Poland. The office can be reached by:

Address: ul Stawki 2, 00-193 Warszawa,

E-mail: kancelaria@uodo.gov.pl

Automated decisions, including profiling

The data subject has the right to not be a subject to any decisions based purely on automated processing, including profiling, as well as decisions which are imposing legal effects on the data subject or are impacting him/her in a significant way. The right does not apply in any of the circumstances mentioned below:

  • the decision is imperative for the conclusion and the performance of the contract between the data subject and the administrator

  • is permitted by the law of the EU or the Republic of Poland which regulates the means for data protection, rights, freedoms and legitimate interests of the data subject

  • is based on explicit consent of the data subject

Areas of personal data processing

Information on the conditions for processing personal data of potential employees

Personal data within the scope of labour law will be processed in order to complete the recruitment process, in accordance with article 6 bill 1(b) GDPR. Other data provided for this purpose or for the purpose of future recruitment processes will be processed on the basis of the data subject’s consent, in accordance with article 6 bill 1 (a) or article 9 bill 2 (a) GDPR.

We kindly inform about the right to withdraw previously expressed consent for data processing at any moment. The withdrawal does not affect the legality of the prior processing.

We would also like to inform about the right to access one’s own data, correct or delete them, limit the processing and file a complaint to the Personal Data Protection Office.

Providing the data within the scope outlined in the Article 22 of the Polish Labour Code is necessary for taking part in the process of recruitment and the refusal to do so makes it impossible to take part. Providing additional data is optional.

Personal data will be processed for three months following the end of the recruitment process (the conclusion of the contract) or until the previously expressed consent has been withdrawn but no longer than 9 months.

The recipients of personal data will include the server hosting provider, the email hosting provider, the recruitment internet platforms and recruitment agencies.

Personal data provided via e-mail correspondence and helpline

Personal data will be processed in order to present our offer, provide services, issue invoices and answer the questions received by us via a message or any other form of contact in accordance with article 6 bill 1 (b) and (f) GDPR.

Providing the data is optional but necessary for us to present our offer, provide services, issue invoices and answer questions. Deciding not to provide the data might result in us being unable to perform the actions mentioned above.

The data will be stored for as long as it is necessary to fulfil the purposes mentioned below:

  • Regarding our offers until they expire- more information in the specific offer

  • Regarding the provision of services- for 6 years

  • Regarding the correspondence- for 6 months after the last contact

You have the right to access, correct or delete your data, limit the processing as well as file a complaint to the Personal Data Protection Office.

Your data, depending on the purpose of processing will be entrusted to other parties such as the e-mail hosting provider or other subjects depending on the topic of the correspondence.

While using the tools available on the administrator’s website such as the chat and the contact form the information provided in this paragraph apply.

Personal data processed during the provision of retail services

Personal data will be processed for purposes such as:

  • Performing the contract or taking action on the behalf of the promise in accordance with article 6 bill 1(b) GDPR and possible protection against any potential claims and the pursuit of them

  • Clearances and tax returns in accordance with article 6 bill 1 (c) GDPR

  • In accordance with article 6 bill 1 (a) GDPR- for purposes resulting from the consent to personal data processing, in the case the processing is taking place on this basis

The recipients of the personal data will be the e-mail hosting provider, the server hosting provider, delivery companies, HR and accounting service providers, accountancy software providers, and payment service providers.

Data regarding the orders that were realised without a guarantee will be processed for 3 years counting from order fulfilment. Data regarding the orders that were realised with a guarantee will be processed for the duration of the guarantee plus one extra year, while the billing data will be processed for 6 years counting from the moment of billing. The data being processed on the basis of previously expressed consent will be processed until the consent is revoked or the purpose of the processing is fulfilled.

Providing personal data such as identification, contact and clearance data is necessary to conclude and perform the service provision contract. Not providing the data will result in the inability to conclude the contract and deliver the service. Providing additional data is optional but the failure to do so will result in the inability to achieve the purpose of expressing consent.

We would also like to inform about the following rights:

  • The right to access one’s own data, correct or delete them, limit the data processing and in the circumstances described in article 17 GDPR

  • The right to transfer the data being processed to another administrator (if that is technically possible) in accordance with article 6 (a) and (b) GDPR and the right to receive a copy of the data in a structured format. This right applies only if the processing takes place in an automated way.

  • The right to revoke the consent for data processing, even if it was previously expressed. Revoking the consent does not change the legality of the processing that took place up to that point.

  • The right to file a complaint to the Personal Data Protection Office.

We would also like to inform about the right to object to personal data processing with the purpose of any possible protection from potential claims and their pursuit.

Data processed during service provision

Personal data will be processed with the purpose of:

  • Performing the contract or taking action on the behalf of the promise in accordance with article 6 bill 1 (b) GDPR and possible protection against any potential claims and the pursuit of them

  • Clearances and tax returns in accordance with article 6 bill 1 (c) GDPR

  • In accordance with article 6 bill 1 (a) GDPR- for purposes resulting from the consent to personal data processing, in the case the processing is taking place on this basis

 

The recipients of the personal data will be the email hosting provider, the server provider, delivery companies, HR and accounting service providers, accountancy software providers, and payment service providers.

The personal data will be processed during the 6 year period counting from the date of the contract fulfilment except the cases when the data will be processed on the basis of the previously expressed consent. In such cases the processing will stop when the consent is withdrawn or the purpose of the processing is fulfilled.

Providing personal data withing the scope of identification, contact and clearance data is necessary to conclude and perform the service provision contract. Not providing the data will result in the inability to conclude the contract and deliver the service. Providing additional data is optional but the failure to do so will result in the inability to achieve the purpose of expressing consent.

We would also like to inform about the following rights:

  • The right to access one’s own data, their correction, limiting the data processing and their deletion in the circumstances described in article 17 GDPR

  • The right to transfer the data being processed to another administrator (if that is technically possible) on the basis of article 6 bill 1 (a) and (b) GDPR and the right to receive a copy of the data in a structured format. This right applied only if the processing takes place in an automated way.

  • The right to revoke the consent for data processing, even if it was previously expressed. Revoking the consent does not change the legality of the processing that took place up to that point.

  • The right to file a complaint to the Personal Data Protection Office.

We would also like to inform about the right to object to personal data processing with the purpose of any possible protection from potential claims and their pursuit.

 

 

Data processing by visiting the administrator profile on social media

Personal data are processed in accordance with article 6 bill 1 (f) GDPR in order to stay in touch with the users who decided to follow the administrator’s profile.

The data subject has the right to access his/her data, correct them, have them deleted or limit the processing, as well as to file a complaint to the supervisory authority.

We would also like to inform about the right to object to personal data processing.

Providing the data is optional, yet necessary to follow the administrator’s profile on the given social media platform. The failure to provide the data will make it impossible to follow the administrator’s profile.

Data will be processed for as long as the administrator’s profile is followed or up until the moment of clearly objecting to the processing.

The recipients of the data include the social media platform’s administrator and the platform’s other users.

The personal data come from the administrator of the social media platform. We are only processing the data that have been shared by the user on their profile, especially identification data and image.

Cookies

In order to guarantee the highest comfort while visiting our website, cookies will be saved on your device. These files help us match the contents of the website to better fit your needs and interests. When saved on your device, cookies make it is possible to display the page in a way that is best suited for a given user. Cookies also enable us to collect statistical data and further develop the site according to the preferences of the users.

The user can block or limit the possibility of cookies being saved on his/her device, however, there is a risk that it might make using the website more difficult.

Other online tools

In order to optimise the website and customise the displayed content to fit the user’s needs we use the software provided by external companies, for example: Google Analytics.

This software anonymously collects data on the users’ behaviours in order to facilitate marketing. The data is not connected with any other data bases and is collected anonymously, making it impossible to identify specific users.

Summary

All personal data processed by us is secured in accordance with the requirements of GDPR. If any changes are introduced to this privacy policy, we are obliged to update the document. We are doing our utmost to secure and protect your data from any third parties.

If any changes introduced to this privacy policy we are obliged to publish an updated version. The new version will be uploaded instead of this one.

Please contact us if you have any questions or doubts.