Privacy Policy
I. Introduction
- Union of Employers Business & Science Poland with its registered office in Warsaw, address: ul. Żurawia 32/34, 00-515 Warsaw, registered in the Register of Entrepreneurs and the Register of Associations, other social and professional organizations, foundations and independent public healthcare institutions of the National Court Register maintained by the District Court for the city of Warsaw, 12th Commercial Division of the National Court Register, under number KRS 0000771006, having TIN 7010907314 and REGON 382582948 (“ZPBSP”) makes every effort to protect personal data from making them available to unauthorized persons, taking them by an unauthorized person, processing in violation of applicable law provisions and alteration, loss, damage or destruction and respecting the privacy of each person whose personal data is processed.
- Personal data are processed by ZPBSP in compliance with the requirements of generally applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR, OJ L 119, 4.5.2016, pp. 1-88).
- This Privacy Policy of ZPBSP (hereinafter: the Policy) sets out the principles of processing and protection of personal data adopted by ZPBSP. The Policy regulates:
- types of personal data collected by ZPBSP
- How we use this data
- rights of persons whose data are processed by ZPBSP
- categories of entities to whom the data is shared
- measures for the protection and security of personal data
- method of contact regarding the exercise of the rights of persons whose data are processed by ZPBSP
- personal data protection measures and methods used by ZPBSP
- information about cookies
II. Basic concepts
- personal data — any information relating to an identified or identifiable natural person, e.g. name, telephone number, address, identity card number. An identifiable person is a person whose identity can be determined directly or indirectly, in particular by reference to an identification number or to one or more specific factors determining his or her physical, physiological, mental, economic, cultural or social characteristics. Information shall not be considered as enabling the identification of a person if this would require excessive costs, time or action.
- data processing — any operations performed on personal data, such as the collection, retention, storage, processing, alteration, sharing and deletion, and in particular those carried out in IT systems.
III. Personal Data Administrator
- Union of Employers Business & Science Poland with its registered office in Warsaw, address: ul. Żurawia 32/34, 00-515 Warsaw, registered in the Register of Entrepreneurs and the Register of Associations, other social and professional organizations, foundations and independent public health care institutions of the National Court Register maintained by the District Court for the city of Warsaw, XII Commercial Division of the National Court Register, under number KRS 0000771006, having NIP 7010907314 and REGON 382582948. (“ZPBSP”)
IV. Rules for the collection of personal data
- ZPBSP obtains personal data primarily directly from data subjects. Where business contact details were not collected directly from the data subject (e.g. by the receipt by the ZPBSP of a business card containing such data or from the employer of such person), they may have been provided by another entity or obtained from publicly available sources, such as public registers (e.g. National Court Register, CEIDG).
- ZPBSP obtains personal data, in particular, in the scope of:
- contact information (such as name, residence/residence/corresponding/business address, email and telephone number)
- business contact information (such as job title, department and institution name)
- required to issue a VAT invoice (such as NIP, REGON)
- personal data necessary for the performance of the contract concluded with ZPBSP and fulfillment of legal obligations incumbent on ZPBSP
- personal data necessary for the conduct of activities by ZPBSP consisting in the organization of events and trainings
- personal data necessary to run the newsletter service
- Content provided in connection with the activities of ZPBSP (such as photos, articles and comments)
V. Method of processing personal data
- ZPBSP ensures control over the type and scope of personal data processed, the period and method of their processing, as well as the persons authorized to process them.
- ZPBSP makes every effort to protect the information and personal data it collects.
- ZPBSP ensures adequate administrative, technical and physical protection of personal data against accidental, unlawful or unauthorized damage, loss, modification, access, disclosure or use.
- ZPBSP stores personal data only for as long as it is necessary to fulfill the purpose for which the personal data were collected, unless otherwise required by applicable law.
- ZPBSP takes measures to destroy or permanently deprive the possibility of identifying personal data if this is required by applicable law or if the personal data are no longer needed to fulfill the purpose for which they were collected.
- The ZPBSP declares that:
- processes personal data in accordance with the law
- collects personal data for marked, lawful purposes and does not subject to further processing incompatible with these purposes
- stores personal data in an identifiable form for no longer than is necessary to achieve the purpose of processing
- processed personal data that are substantively correct and adequate in relation to the purposes for which they are processed
- Access to personal data is held by: ZPBSP, its authorized employees, associates and persons providing services to it. Access to personal data by the aforementioned persons is carried out exclusively for the purpose and scope specified by the ZPBSP.
- The ZPBSP and the persons authorised to process this data shall apply technical and organisational measures to ensure the protection of the personal data processed.
- The data collected by ZPBSP may be used for, among others, the following purposes:
- the provision of services or the performance of contracts, their administration and communication by the ZPBSP; in the case of the processing of personal data of a person at whose request actions have been taken to conclude a contract with the ZPBSP or the performance of a contract concluded with it pursuant to Article 6 (1) (b); in the case of obtaining personal data for the purposes related to the performance of a specific contract, the ZPBSP transfers the data to the person whose data concerning, detailed information concerning the processing of her personal data at the time of the conclusion of such a contract
- fulfillment of legal obligations incumbent on the ZPBSP, which arise from the regulations governing the provision of services or the activities of the ZPBSP, as well as the accounting and tax regulations (on the basis of Article 6 (1) (c) of the GDPR)
- Conducting electronic and traditional correspondence
- making telephone contacts
- collecting personal data in connection with the activities of ZPBSP
- risk assessment and improvement of the activities of ZPBSP
- estimation of interest in employment or use of services offered by ZPBSP
- recruitment
- as required by law or in connection with ongoing legal proceedings
- ensuring compliance of processing with personal data protection regulations
- Providing personal data is voluntary, but failure to provide them will prevent the fulfillment of the purposes mentioned above. Your personal data will be stored by ZPBSP for the period necessary to achieve the aforementioned purposes, but not longer than is required by the provisions of generally applicable law.
VI. Sharing and entrusting the processing of personal data
- ZPBSP does not share, sell or disclose in any other way the personal data collected, except as described in the Policy or when this is required by generally applicable law.
- ZPBSP may entrust the processing of personal data to service providers acting on its behalf, in particular electronic, accounting, legal, courier, postal, agency, IT, printing, marketing, graphic services related to the services provided by ZPBSP.
- ZPBSP requires these service providers to comply with the law, a high level of protection of privacy and security of the personal data processed by them on behalf of ZPBSP.
VII. Rights of persons whose data is processed by ZPBSP
- Within the limits of the law, you have the right to access your personal data, in particular as a form of control of the processing by ZPBSP of your personal data, in particular to obtain information about the purpose, scope and method of data processing.
- Within the limits of the law, you also have the right to amend, supplement, rectify and update your personal data processed by ZPBSP.
- Within the limits of the law, you also have the right to request the deletion of your personal data processed by ZPBSP.
VIII. Rights of persons whose data is processed by ZPBSP (continued)
- If the processing of personal data is carried out on the basis of your consent, you have the right to withdraw your consent to the processing of your personal data by notifying ZPBSP in any way.
- You have the right — in cases provided for by law — to request ZPBSP to restrict the processing of your personal data.
- For reasons related to your particular situation and within the limits of the law, you have the right to object to the processing of your personal data by ZPBSP based on the realization of its legitimate interest.
- Within the limits of the law, you have the right to receive in a structured, commonly used machine-readable format the personal data concerning you that you have provided to ZPBSP.
- The above rights may be exercised by sending an e-mail to the following address: https://zpbsp.com/pl/polityka-prywatnosci/.
- If you consider that the processing of personal data by ZPBSP violates the provisions of the law, you may file a complaint with the supervisory authority, in the case of the Republic of Poland — the President of the Office for Personal Data Protection.
IX. Cookies and analysis software
- Use of the website https://zpbsp.com/pl/polityka-prywatnosci/ may be associated with the need to provide your data when using the ZPBSP contact form, in particular in connection with the use of the newsletter service.
- ZPBSP, its service providers and business partners collect certain information through automated means, such as cookies, when you browse the website https://zpbsp.com/pl/polityka-prywatnosci/.
- Cookies contain little information and are downloaded to your computer or other device by the server hosting the website https://zpbsp.com/pl/polityka-prywatnosci/.
- However, cookies can collect information about you each time you visit the website: https://zpbsp.com/pl/polityka-prywatnosci/.
- ZPBSP uses cookies only to study the functionality of the website https://zpbsp.com/pl/polityka-prywatnosci/.
- Using the site https://zpbsp.com/pl/polityka-prywatnosci/ you agree to the placement of the cookies described above on your computer or other device.
- The above control is carried out through the browser settings.
- In order to monitor the website https://zpbsp.com/pl/polityka-prywatnosci/ ZPBSP may use analysis software belonging to third parties, such as Google Analytics.
- For your convenience and to provide you with additional information, the website https://zpbsp.com/pl/polityka-prywatnosci/ may contain links to websites administered by entities independent of the ZPBSP.
X. Changes and Updates to the Policy
- The policy may be modified from time to time.
- Significant changes to the Policy will be signaled by means of clearly visible messages posted on the ZPBSP website.
XI. Contact
- You may contact ZPBSP at any time to obtain information about whether and how ZPBSP uses or intends to use your personal data, as well as if you have any questions or comments about the Policy.