The terms used in this Privacy Policy have the same meaning as in the EU Parliament and Council Regulation 2016/679 of April 27, 2016. on the protection of individuals with regard to the processing of personal data and on the free flow of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119 of 04.05.2016, p. 1, as amended announced in Official Journal of the EU L 127 of 23.05.2018, p. 2), unless otherwise defined in this Privacy Policy.
Personal data controller
The administrator of the personal data is Xpert-In-Processes – Krzysztof Drozd, ul. Mielczarskiego 28/30 m1, 91-067 Lodz, brand owner: Xpert-In-Processes and Your.Mentorist.
Data Protection Officer
The controller has appointed a data protection officer. His duties are performed by Krzysztof Drozd. For matters related to the processing of personal data, including for the purpose of exercising rights related to the processing, contact can be made at: info@xpertinprocesses.com
Purposes of personal data processing and legal basis for processing
Processing of personal data for the implementation of training courses
If you are among the trainees, you make a participant application for training, we process your data for the purpose of concluding or executing a contract (Article 6(1)(b) of the RODO), and in certain cases for the purposes of legitimate interests (Article 6(1)(f) of the RODO).
Categories of personal data processed may include identification data, address data, contact data, data of a financial nature, data of a business nature (function/position).
In connection with processing, you have the right to access and rectify data, the right to restrict processing, the right to object to processing, the right to lodge a complaint with the President of the Office for Personal Data Protection.
Provision of data is a contractual requirement, and refusal to provide it may prevent the conclusion or execution of the contract.
Processing of personal data of customers, suppliers
If you are one of our customers, suppliers or partners, we process your data for the purpose of entering into or performing a contract (Article 6(1)(b) of the DPA), and in certain cases for the purposes of legitimate interests (Article 6(1)(f) of the DPA).
Categories of personal data processed may include identification data, address data, contact data, data of a financial nature, data of a business nature (function/position).
In connection with processing, you have the right to access and rectify data, the right to restrict processing, the right to object to processing, the right to lodge a complaint with the President of the Office for Personal Data Protection.
Provision of data is a contractual requirement, and refusal to provide it may prevent the conclusion or execution of the contract.
Processing of personal data of newsletter subscribers, people using the contact form and enrolling in training courses
We may provide certain services to you via electronic communication means, in particular the Internet or other electronic networks in a broader sense, the provision of which is largely automated and does not require significant human involvement, and which would not be possible without the use of telecommunications technology.
These include the following services:
Categories of personal data processed may include identification data, address data, contact data, data of a financial nature, data of a business nature (function/position).
In connection with processing, you have the right to access and rectify data, the right to restrict processing, the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal), the right to object to processing, the right to lodge a complaint with the President of the Office for Personal Data Protection.
Your personal data may be processed in the form of analytical, sales and marketing profiling, in order to tailor our materials to your needs and interests, and to make measurements to improve our services.
In the case of the conclusion of a contract for the provision of electronic services, the provision of data is a contractual requirement, and the refusal to provide such data may prevent the conclusion or implementation of the contract.
Processing of personal data for contact purposes
Your personal data may also be processed for contact purposes (Article 6(1)(f) RODO).
Categories of personal data processed may include identifying information, contact information.
You have the right to access, rectify, transfer and delete your data, as well as the right to restrict data processing and the right to lodge a complaint with the President of the Office for Personal Data Protection.
Processing of personal data for employment purposes
If you are interested in our job/collaboration offers, we process your data on the basis of your voluntary application for a specific position (Article 6(1)(a) of the DPA). For this purpose, we process data to the extent you specify – based on information voluntarily included in your resume, application documents (Article 6(1)(a) of the DPA). We also process your personal data for the purposes of legitimate interests (Article 6(1)(f) RODO). If you wish to participate in future recruitments, future projects, or include information in your application documents that may be considered sensitive data, it will be processed on the basis of your voluntarily given consent (Article 6(1)(a) or Article 9(2)(a) of the RODO).
The categories of data processed include: first name(s) and last name, date of birth, contact information you indicated, education, professional qualifications, history of previous employment, company (in the case of sole proprietors), as well as other data you provided in your application documents, resumes.
The data will be kept for the duration of the recruitment in question, unless you consent to further storage for future recruitment.
In connection with processing, you have the right to access and rectify data, the right to restrict processing, the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal), the right to object to processing, the right to erasure, the right to lodge a complaint with a supervisory authority.
Providing data to participate in the recruitment is voluntary. However, the application documents should contain at least the following information: name(s), date of birth, contact information, education, professional qualifications, history of previous employment. The scope follows from Art. 22(1) § 1 of the Law of June 26, 1974. Labor Code (Article 6(1)(c) of the RODO). Provision of other personal data is optional.
Other purposes and legal bases for processing personal data
In certain cases, we may also process your data for other purposes. This may involve extending the storage period of your data. For the purposes necessary to comply with our legal obligations (Article 6(1)(c) RODO), we will process your data:
If we process your personal data for purposes arising from our legitimate interests (Article 6(1)(f) RODO), we do so for:
Recipients of personal data
Recipients of your personal data may be separate controllers of personal data or processors. If we outsource operations whose essence is the processing of personal data to another entity, this will be done in accordance with Art. 28 and Art. 32 RODO, that is, under the entrustment of personal data for processing. The entrustment of your personal data will apply only to operations in which data processing is the main, primary activity, and not the result of other, side processes.
Your personal data can also be accessed by so-called “data managers. third parties. As defined in the DPA, a third party is not a data subject, a controller or processor, or a representative of a controller or processor. These will mainly be public authorities that are not considered recipients under the RODO, but may receive personal data in the context of a specific proceeding under European Union or member state law.
Recipients of the data may be service providers supplying IT, technical and organizational solutions to operate and manage the organization (accounting, postal and courier operators, Internet service providers, including e-mail, software, hosting), law firms and law firms providing legal services.
Transfer of personal data
The transfer of personal data may take place:
Period of storage of personal data
Personal data processed on the basis of voluntarily given consent will be kept until it is withdrawn. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Personal data necessary for the performance of the contract or for taking action prior to the conclusion of the contract will be kept for a period of 5 years, starting from the end of the calendar year in which the deadline for payment of taxes has passed.
Personal data necessary for the purposes of the legitimate interests pursued by the administrator of establishing, asserting or defending against claims will be kept until the expiration of the statute of limitations. The general statute of limitations for claims is 6 years. For claims related to periodic benefits, it is three years. The end of the statute of limitations is the last day of the calendar year.
Your rights in relation to processing
In connection with our processing of your personal data, you may exercise the rights described below in certain cases.
Without undue delay, we will provide you with information on the measures taken in response to your request within one month of receipt. If necessary, this period may be extended by two months, depending on the complexity of the application or the number of applications. In this case, we will inform you of the need to extend the processing period and give you the reasons for the delay.
The right to withdraw consent at any time (Article 7(3) RODO)
If your data are processed on the basis of your voluntarily given consent, you can opt out of performing data operations on this basis at any time. We will then immediately cease processing the data for the purpose for which the consent was collected. However, we would like to point out that the withdrawal of consent does not affect the fact that the processing of personal data on the basis of consent was legal before the withdrawal.
The right to access and obtain copies of personal data (Article 15 RODO)
You may receive information from us regarding our processing of your personal data and obtain a copy of it. It will be made available to you in a popular IT file format. The first copy will be provided free of charge, but we may charge a fee for the issuance of a subsequent copy, which we will determine in accordance with the terms of the RODO.
Right to rectification of data (Article 16 of the RODO)
We are committed to ensuring the accuracy of the data we process. You may request correction or deletion of your data if it is inaccurate, incomplete or has been collected illegally. However, the burden of proving these inaccuracies rests with the data subject.
The right to erasure, including the “right to be forgotten” (Article 17 RODO)
Upon your request, we are obliged to delete personal data concerning you. This will be done if:
“The right to be forgotten” is a special form of the right to erasure. If your data has been published, for example, on this website, and you have the right to request the deletion of this data, we are obliged to delete all copies and links leading to this data. We must also take steps to ensure that other entities that have processed your personal data also remove it from their resources. However, this right is not absolute – when taking steps to implement it, we must take into account the available technology and costs, which may limit its application.
The right to restrict processing (Article 18 RODO)
We are obliged to restrict the processing of your personal data at your request. In this case, we must refrain from performing any operations on the data other than storing it. If you have doubts about the accuracy of the data, we will limit its processing for a period of time to allow you to check the issue. We will also limit processing if you object.
Right to data portability (Article 20 RODO)
You have the right to receive your personal data and send it to another personal data controller of your choice. The right to portability applies when the Administrator processes personal data on the basis of your consent (Article 6(1)(a) of the RODO) or when it is necessary for the performance of a contract (Article 6(1)(b) of the RODO), and operations on the data are carried out by automated means, i.e. without human involvement.
The right to object to processing (Article 21 RODO)
You may request that the processing of your personal data be discontinued, in particular for reasons related to your particular situation.
However, the objection does not apply if you have given your consent to the processing. In this situation, you should withdraw the consent in question – the effect will be the same, but from a legal point of view, objection and withdrawal of consent are two different institutions that apply in different cases.
You may not file an effective objection if:
The right not to be subject to automated decisions in individual cases, including profiling (Art. 22 RODO)
You have the right not to be subject to decisions based solely on automated processing, including profiling, if such decisions would have legal effects on you or similarly affect you significantly.
However, automated processing of your data, including profiling, is permitted if:
The right to lodge a complaint with a supervisory authority (Article 77 RODO)
If you believe that your rights have been violated by our processing activities, you may file a complaint with the supervisory authority, the independent public authority responsible for monitoring the application of the RODO. In Poland, this function is performed by the President of the Office for Personal Data Protection. Contact with the supervisory authority is possible:
The rights listed above may be limited in certain situations, such as when we can demonstrate that we are legally obligated to process your data. If you wish to exercise your due rights, all you need to do is to send an appropriate request using the contact information indicated in the Privacy Policy.
Sources of personal data
Most of the data we process is information you provide to us yourself. In some cases, however, we may process other information that we are able to infer from your activity or in combination with other data. This applies in particular to information collected for ongoing analysis and measurement in a marketing context.
In case we have not obtained personal data directly from you, we inform you that:
Cookies
Our website uses cookies, or so-called “cookies”. cookies. Cookies are information in the form of small text files stored on your computers by the server. They allow the server to read the information each time it connects to a specific computer.
Information collected using cookies does not constitute personal information, but may be used to provide you with certain features. Such data is encrypted in a way that prevents unauthorized access.
The software you use to browse the web allows cookies to be placed on your computer by default – you have given your consent through your browser settings (Article 173 of the Act of July 16, 2004. Telecommunications Law in conjunction with Article 6(1)(a) of the RODO).
You can make the appropriate configuration of your browser to block the automatic acceptance of cookies or to be informed each time a file is sent to your device. For more information about cookie handling and possible configurations, please refer to your browser settings. They are available at the following links:
The level of restrictions on the use of cookies may affect the availability and functionality offered by our website, including the possibility of blocking its full operation.
Our website uses cookies for correct configuration, in particular to:
Changes to the Privacy Policy
We reserve the right to update our Privacy Policy. Changes may be due to the following reasons:
The changes will take effect immediately after they are posted on the site.