Privacy policy

Last modification: 29.07.2022

Introduction

Thank you for visiting our website. We respect the rights of the users of our website, in particular their right to respect for their privacy, as well as their right to be informed in a transparent manner about how we process their personal data. We make every effort to ensure that the data we obtain is processed in accordance with generally applicable laws and in a manner that ensures its security. To ensure transparency in how we process your data, below you will find the data protection principles, including the information required to be provided to you in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter "GDPR").

Administrator

Stillsec Ltd. Limited partnership, 1 Ks. J. Poniatowskiego Av. /M5/B01.144, KRS: 0000579836, NIP: 5252631872, REGON: 362708106., 03-901 Warsaw

How can I contact the Administrator?

The Controller can be contacted on all matters relating to the processing of personal data by writing to:

E-mail:

office [at] stillsec.com

Mailing address:

3/5 Czackiego St. local 405, 00-043 Warsaw.

Scope and source of data processed:

In the case of employees/co-workers of our Clients/Contractors and persons representing our Clients/Contractors, the scope of personal data processed by the Administrator includes, inter alia, the following: name and surname, job position, information on the place where you work/co-work, contact details, pesel no. and identity document no. in the event that the indicated data is included in the power of attorney provided to us.

In the case of persons who contact our Company by lodging a complaint, making a complaint, submitting a question, the scope of the data processed includes: name, e-mail address, telephone number (depending on what data you provide in the form or in the content of the e-mail/letter addressed to the Administrator).

In the case of job applicants, the scope of the data generally includes: name, contact details (e-mail, telephone number), information on education and work experience (unless you provide more information in the documents submitted).

In the case of direct contact with the Administrator, as a rule you provide us with most of your data yourself when you contact us. Your personal data may also be provided by our Contractor/Customer whom you represent and obtained by the Administrator from public registers (KRS, CEIDG).

Aims, grounds and duration of processing of personal data:

We process your data for the following purposes and on the following legal bases:

Purpose of processing:

Legal basis for processing personal data:

Data retention period:

Actions to conclude and perform a contract with our customer or contractor

  • Customers or Contractors - basis for processing - Article 6(1)(b) of the GDPR - the necessity of processing the data for the conclusion or performance of the Contract.
  • Persons cooperating with us on behalf of the Customer/Contractor (e.g. employees of our Customers, co-workers of our Contractors) - basis for data processing - Article 6(1)(f) GDPR - implementation of the Administrator's legitimate interest, which is the need to contact employees and co-workers of our Customers/Contractors in connection with activities undertaken for the purpose of concluding or implementing the concluded agreement.

    • Attention: personal data in the case of persons cooperating with us on behalf of our clients/contractors may also be collected from those clients/contractors

For the duration of the contract, then for the period resulting from generally applicable legislation (including tax legislation).

In order to identify the Counterparty/Customer or its representative

Persons authorised to represent our Client/Contractor - basis for data processing - Article 6(1)(f) GDPR - fulfilment of a legitimate interest by the Controller, which is the need to ensure reliable identification of the Contractor and the person representing him/her.

Attention:Data may also be obtained from the KRS, CEIDG or the power of attorney provided.

For the duration of the contract, then for the period resulting from generally applicable legislation (including tax legislation).

In order to answer a question, deal with an application, complaint, claim

Persons submitting questions, complaints, requests, complaints - the legal basis for data processing is Article 6(1)(b), (c) (fulfilment of legal and contractual obligations) and (f) GDPR - fulfilment of the Administrator's legitimate interest, which is to enable the Administrator to respond to the question, request.

For the entire duration of the contract or until the warranty expires or the Complaint is settled. In the case of requests/questions, until a response is sent, then for one year after the question/request was asked.

For the establishment, investigation and defence of claims

Data of Customers/Contractors/employees/co-workers/former employees/co-workers/other claimants - the basis for data processing is - Article 6(1)(f) GDPR - the legitimate interest pursued by the Administrator, which is the possibility for the Company to establish or assert or defend against claims.

Until the statute of limitations for claims - in accordance with applicable law or until the legal conclusion of the proceedings relating to the claim in question.

Accounting, bookkeeping and financial reporting

Data of Customers/Contractors/employees/co-workers/former employees/co-workers/people's data contained in invoices/bills or other accounting documents - the basis for processing is - Article 6(1)(c) GDPR - the fulfilment of legal obligations by the Administrator (e.g. tax, accounting).

For the period resulting from generally applicable regulations, in particular those obliging the Company to keep accounting documents (in principle, for 5 years after the year in which the legal event occurred that obliged the Company to issue the accounting document).

For future recruitment

Data of job applicants - basis for data processing - Article 6(1)(b) and (c) of the GDPR in accordance with the generally applicable legal provisions related to the employment process, including the provisions of the Labour Code Act of 26 June 1974, and with regard to the processing of data not required by law - the legal basis for processing is the consent given by the applicant (Article 6(1)(a) of the GDPR), which can be withdrawn at any time.

For the purposes of future recruitment - basis of processing - Article 6(1)(a) GDPR - consent to process data for this purpose.

  • Dane osobowe będą przetwarzane do czasu zakończenia rekrutacji.
  • Jeżeli wyrażono zgodę na przetwarzanie danych osobowych na potrzeby przyszłych rekrutacji dane osobowe przechowywane będą przez 2 lata lub będą przetwarzane do chwili wycofania zgody, wniesienia wniosku o usunięcie danych lub złożenia wniosku w sprawie ograniczenia danych.

Cookies

  • Processing of Cookies necessary for the smooth operation of our website - basis for processing Article 6(1)(f) GDPR - i.e. the legitimate interest pursued by the Administrator, which is to maintain and ensure the correct operation of the website.
  • Processing of cookies for the analysis of traffic that takes place on our website - basis for processing - consent, which can be withdrawn at any time - Article 6(1)(a) GDPR.

You can object to the use of cookies by clicking on the box with consent to cookies (please tick the appropriate box). In addition, we would like to inform you that you can edit your cookie settings via the configuration options of your browser. Cookies policy

30 days

Recipients of data

  • our suppliers of IT systems and services (e.g. Microsoft),
  • entities providing accounting services to the Administrator,
  • banks, where settlement is required,
  • entities that provide support to our Company during the recruitment process (e.g. pracuj.pl),
  • where appropriate, also to entities accessing the data on the basis of applicable legislation.

Your rights in relation to data processing

As we process your personal data, you have the following rights:

  • Right of access to data,
  • The right to obtain a copy of the data,
  • Right to rectification (correction) of data,
  • The right to erasure (the so-called "right to be forgotten"),
  • Right to restrict data processing,
  • Right to data portability - you may request data portability of data processed by the Controller - where the legal basis for processing is consent (Article 6(1)(a) or Article 9(2)(a) GDPR) or contract (Article 6(1)(b) GDPR),
  • Right to object to the processing of your personal data - you have the right to object to the processing of your personal data where the legal basis for the processing is a legitimate interest pursued by our Company (Article 6(1)(f) of the GDPR),
  • The right to withdraw consent to data processing at any time, without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal,
  • The right not to be subject to automated decisions, including decisions based on profiling - you have the right to request non-automated (human-assisted) decision-making.
  • You also have the right to lodge a complaint against the Administrator to the supervisory authority (in Poland this is the President of the Office for Personal Data Protection Stawki 2 St., Warsaw, contact details: https://uodo.gov.pl/en if you believe that we are processing your data in an unlawful manner. For more information on how to lodge a complaint with the President of the Data Protection Authority, please see:https://uodo.gov.pl/en/559/941

Is it necessary to provide personal data?

The provision of personal data is necessary for the conclusion of contracts, their settlement and their execution. This means that if you wish to make use of our services, you must provide your data. If your employer/other entity with whom you work has designated you as the contact person or person responsible for the execution/conclusion of the contract your data will be processed by us - as necessary data.

In the case of job applicants, it is necessary to provide the data indicated in the Labour Code Act - failure to do so, in particular failure to provide data such as your name, contact details, may result in you not being able to participate in the recruitment process.

For those who address questions/requests/complaints/complaints to us, failure to provide contact details may prevent us from responding to your request.

Data transers?

We do not transfer your personal data to third countries (outside the EEA) or to international organisations.

Processing of personal data by automated means

Your personal data is not used for the purpose of automated decision-making - including decisions based on profiling.

Cookies

Information on the processing of cookies can be found in the Cookies policy.

Back to main page