GERDA Sp. z o.o. privacy policy / Information on the processing of personal data - Gerda
Home > Service > About us > GERDA Sp. z o.o. privacy policy / Information on the processing of personal data

GERDA Sp. z o.o. privacy policy

GERDA SP. Z O.O.

INFORMATION ON THE PROCESSING OF PERSONAL DATA

v.1.2

In reference to the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data, and repealing Directive 95/46/EC (GDPR ), Gerda sp. z o.o. with its seat in Sokołów, provides you with a set of necessary information related to the rules for processing your personal data and about the rights that you are entitled to.
Should you have any questions regarding the method and scope of processing your personal data by Gerda, as well as your rights, please contact us, i.e.: Gerda sp. z o.o. with its seat in Sokołów, at ul. Sokołowska 49, 05-806 Komorów to the e-mail address: dane.osobowe@gerda.pl, or with our personal data protection supervisor to the e-mail address: gerda.iod@discretia.pl.

  1. What does this policy describe? What does this policy describe?

This privacy policy (“Policy”) provides information on the processing of personal data by Gerda sp. z o.o.:

  • it defines the types of personal data we gather;
  • it clarifies how and why we collect and use your personal data;
  • it explains when and why we will share personal data with other entities;
  • it explains the rights and choices that you have when it comes to your personal data.

We would like it to be transparent to you whether this Policy also includes the rules for the processing of your personal data. This policy shall apply, if:

  • you are a Website User, i.e. you use one of our websites: gerda.pl or www.akademiagerda.pl (Website) and the forms contained therein;
  • you are an End Customer, i.e. you purchase our products, or use our services as an end customer;
  • you are a Contractor, i.e. you purchase products or services from us as part of your business, or provide us with any products or services;
  • you are a Contractor’s Representative, i.e. you represent the Contractor in relations with us;
  • you are a Gerda Academy Participant, i.e. you participate in trainings, exams organized as part of the Gerda Academy, or you are a certified editor of the Gerda Academy;
  • you are a Job Candidate, i.e. you participate in our recruitment process or send us your application documents for future recruitment processes.

We process your personal data in accordance with the General Data Protection Regulation of the European Union (2016/679) (“GDPR”) and other applicable provisions on the protection of personal data, which supplement and/or implement the GDPR.

  1. Who is the Data Controller of your personal data?

The Data Controller of your data is:

Gerda sp. z o.o.
Sokołowska 49
05-806 Komorów

e-mail: dane.osobowe@gerda.pl

(“Gerda”, “we”, “us” or “our”).

In any issues related to the processing of your personal data, you can contact us by regular correspondence, or by e-mail.

To increase the protection of your personal data, we have appointed a Personal Data Protection Supervisor (PDPS). This function is performed by Paweł Latkowski. You can contact our PDPS at the following e-mail address: gerda.iod@discretia.pl

  1. What information, and where do we collect it from?

If you are a Website User, we collect information provided to us via the forms placed on the Website and saved when you use the Website. These are in particular your name, surname and contact details.

If you are an End Customer, we collect information that you provide to us via the forms placed on the Website, i.e.: telephone contact, e-mail or social media profiles, as well as data that we receive from our contractors, e.g. in connection with complaints. These are in particular your name, surname and contact details.

If you are a Contractor, we collect information provided to us via the contact forms placed on the Website, in the Partner Zone, in the documents you send, during conversations, exchange of e-mails and meetings, including in particular information necessary to conclude and perform a contract. These may be, in particular, name, surname, company, business address, PESEL (Personal ID No.), NIP (Tax ID No.), REGON (National Business Registry No.), or a bank account number. Your data may also come from publicly available sources.

If you are a Contractor’s Representative, we collect information provided to us via the contact forms available on the Website, in the Partner’s Zone, during conversations, e-mail exchange, or meetings. This may include, in particular, your name, surname, contact details, position, data concerning the entity you represent, data necessary for us to conclude a contract with this entity, if such information is necessary. Your data may also be provided to us by the entity you represent both before, and in the course of cooperation with us.

If you are a Gerda Academy Participant, we collect information provided to us via the contact forms placed on the Website during registration to the Gerda Academy, applications for training, exams, in e-mail correspondence and as part of participation in the Gerda Academy. These are in particular first name, surname, company, address, telephone number, NIP (tax identification number), e-mail address, PESEL (personal identification number), or image.

If you are a Job Candidate, we collect information provided to us in your CV, or other application document as part of the recruitment process. These may include, in particular, your name and surname, date of birth, contact details, education, professional qualifications and the course of previous employment as well as other personal data that you provide to us on your own initiative. Please bear in mind that providing your personal data to the extent resulting from legal provisions, including Art. 221 § 1 and 4 of the Labour Code is necessary to participate in the recruitment procedure. Providing other data is voluntary, and failure to provide them will not result in any negative consequences for you, especially it will not be a reason justifying the refusal of employment.

  1. For what purpose and on what legal basis do we process your data?

As a rule, we process your personal data:

  1. with your consent (as long as it is a valid and effective basis for data processing) (Article 6 (1) (a) of the GDPR) in order to:
  • send you e-mail or text messages containing information about our products and services, offers, promotions or events, including answering questions that you might ask;
  • to recognize your needs and expectations;
  • to enable you to use the Partner Zone;
  • to conduct the recruitment process;
  1. when it is necessary to fulfil the legal obligations imposed on us (Art. 6 sec. 1 letter c of the GDPR);
  2. when it is necessary to pursue our legitimate interests (Art. 6 sec. 1 letter f of the GDPR), when:
  • we contact you answering your questions, requests, comments and handling your requests sent via the contact form or by other means;
  • as part of an existing relationship, we inform you about our products and services, offers or events that we believe may be of interest to you;
  • we manage our business, which includes creating new products and services, conducting research, evaluating the effectiveness of our sales, marketing and advertising;
  • we handle, manage and improve our products and services;
  • we create reports and statements, and archive information;
  • we provide security of our network and systems.

Additionally:

If you are a Website User, we process your data on the basis of a legitimate interest (Art. 6 sec. 1 letter f of the GDPR), when we use analytical and profiling tools in order to: adapt the service to your needs (personalization); adjust the displayed content (including advertisements) to your interests and the way you use on-line services and technologies that we provide; manage our business; provide support in the diagnosis of technical problems; operate our on-line services and technology; identify users of on-line services; identify devices for fraud prevention purposes; collect demographic data about our users; determine the ways of using the Website.

If you are an End Customer, we process your personal data in order to perform the service (Art. 6 sec. 1 letter b of the GDPR), or on the basis of a legitimate interest to consider a complaint (Art. 6 sec. 1 letter f of the GDPR).

If you are a Contractor, we process your personal data in order to conclude and perform the contract (Art. 6 sec. 1 letter b of the GDPR).

If you are a Contractor’s Representative, we process your personal data on the basis of a legitimate interest (Art. 6 sec. 1 letter f of the GDPR) to the extent that we maintain business relations, conduct talks or negotiations, conclude contracts and resolve other issues related to cooperation with entities, which you represent.

If you are a Job Candidate, we process your personal data on the basis of your consent for the purposes of future recruitment processes (Art. 6 sec. 1 letter a of the GDPR), and data of a specific category, if you have provided them to us on your own initiative (Art. 6 sec. 1 letter a of the GDPR), or in order to fulfil the legal obligations incumbent on the Data Controller as an employer and the corresponding rights of the applicant, resulting from the provisions of law, including the provisions of the Labour Law (Art. 6 sec. 1 letter c of the GDPR).

  1. Who do we share your data with?

When it is necessary to achieve the purposes for which we process your data, we may transfer them to:

  1. entities authorized to receive them on the basis of legal provisions (e.g. courts, legal protection authorities, administrative authorities, supervisory authorities, etc.);
  2. entities processing personal data on our behalf, i.e. companies providing specific services to us, the performance of which involves the processing of personal data. e.g. entities operating our IT systems or providing us with ICT tools, entities providing us with services in the field of law, accounting, advisory, consulting, marketing or research agencies, recruitment portals or recruitment companies;
  3. other entities belonging to the capital group to which we belong, i.e. entities related by capital directly or indirectly to Gerda sp. z o.o.

Additionally:

If you are an End Customer, we may transfer your data to our contractors, i.e. entities whom we cooperate with, e.g. when handling a complaint.

If you are a Contractor, Contractor’s Representative or Gerda Academy Participant, we may transfer your data to the Users of the Website, provided that they are made available there.

In each case of sharing your data, we will make sure that only the minimum information necessary to achieve the purpose of data processing is provided.

Your data will not be transferred outside the European Economic Area (EEA). If your data were to be transferred outside the EEA, we will ensure that cooperation with such entities is based on an appropriate legal basis, and that they ensure appropriate protection standards.

  1. How long do we store your data?

We keep information about you for the period necessary to achieve the purposes set out in this privacy policy and in accordance with our data retention policies (unless a longer period is required by applicable law). Our data storage policies are based on the provisions of applicable law. We will retain and use information about you to the extent necessary to comply with legal requirements (e.g. if we are required to retain information about you for tax purposes), resolve disputes, perform a contract, settlement, or for the purpose set out in this privacy policy.

In the case of processing based on your consent, we will store your data for the period until its withdrawal, and thereafter for the period and to the extent required for Gerda to implement the legitimate interest of the Data Controller.

If you are a Candidate, we store your data until the end of the recruitment process, and only if you have consented to its processing for the purposes of future processes.

  1. What rights do you have?

By exercising your rights in the field of personal data processing, you can submit the following requests to us:

  1. if we process your personal data on the basis of your consent, you can withdraw this consent at any time; remember, however, that the withdrawal of consent does not affect the lawfulness of the processing we have made on the basis of your consent before its withdrawal;
  2. you can request access to your personal data and obtain a copy of them;
  3. you can exercise the right to transfer your personal data, i.e. request us to obtain your data in a structured, commonly used machine-readable format, and you can request that we send these data directly to another Data Controller, if we process them in an automated manner on the basis of your prior consent;
  4. you can request the correction of your personal data if they are incorrect or incomplete;
  5. due to your special situation, you can object to the processing of your personal data if we process them on the basis of our legitimate interest; you can also object to the processing of your data for direct marketing purposes;
  6. in cases specified by law – e.g. if your data are out of date, redundant, unlawfully processed, and also if you have withdrawn your consent to their processing (when the consent was the basis for such processing), or you have successfully objected to the processing of your personal data – you can request the deletion of your personal data;
  7. you can also request to limit your data processing for the time we are considering your objection or notification regarding the correctness of your personal data, the lawfulness of the processing of your data or our legitimate interest, and if you need the data to establish, assert or defend claims.

For this purpose, please contact us by regular correspondence, or by e-mail: dane.osobowe@gerda.pl, and if you are a Candidate, by this e-mail: kadry@gerda.pl.

Whenever you believe that the processing of your personal data by us violates the provisions of the GDPR, you also have the right to lodge a complaint with the President of the Personal Data Protection Office.

  1. Do you have to provide us with your data?

Providing your data is completely voluntary, but without providing them, we will not be able to achieve the objectives referred to above, in particular to respond to your inquiries, present you with offers, conclude contracts with you, maintain business relations, consider your application in the recruitment process, etc.

If you are a Candidate providing your personal data to the extent resulting from legal provisions, including Art. 22(1) § 1 and 4 of the Labour Code is necessary to participate in the recruitment procedure. Providing other data is voluntary, and failure to provide them will not result in any negative consequences for you, especially it will not be a reason justifying the refusal of employment

WEBSITE AND COOKIE USE POLICY

v 1.0.

We apply cookies and other tracking technologies to: (i) expand your knowledge of how users (“Users”) use our www.gerda.pl or www.akademiagerda.pl websites (“Website”) and (ii) improve the quality of your experience resulting from interacting with us on the web. This Policy of using the Website and cookies contains information about the technologies we apply and manner how to handle them.

  1. Cookies and other tracking technologies: Definition

A “cookie” is a text file that a website sends to a visitor’s computer or other Internet-connected device to identify the visitor’s browser, or to save information or settings in the web browser. A cookie usually contains the name of the domain from which it was sent, the “lifetime” of the cookie and a randomly generated unique identifier.

We may use other technologies, including web beacons, analytical scripts and JavaScript, which in some cases cooperate with cookies and other means with our Website to enable the identification of your device. These other technologies enable certain functions to be activated on our Website. We may also use certain technologies to determine whether an e-mail message that we sent you has been opened or whether a link in it has been clicked by you.

  1. How we use cookies?

When using our on-line services, both we and other entities (such as advertising networks or marketing and sales automation platforms) may obtain information related to users about their network use, network use over time and the use of websites run by third parties.

We use cookies for various purposes. For example, we monitor the total number of visitors to our Website – based on an anonymous and aggregated rules. We may also use cookies so that we could “remember” you when you visit the Website again and to personalize the Website according to your preferences. In this situation, certain information about you may be associated with the cookie, which may constitute personal data. We also use cookies to determine whether by visiting our Website you are in the target group of marketing campaigns planned by us, which we will carry out ourselves as well as with the use of external entities.

Monitoring technologies may function permanently (i.e. files remain on your computer or device until you delete them), or as sessions (i.e. files remain only until the browser is closed).

Our Website, in particular, uses the following types of cookies:

  • Essential cookies. These are files necessary to provide services and ensure the availability of functionalities that you expressly request. We may use cookies and tracking technologies to prevent fraud, improve security, system administration, or to enable you to use payment functions. We are under no obligation to obtain your consent in relation to cookies whose use is essential.Pliki cookie służące do analizy oraz oceny wydajności. 
  • Cookies used for analysis and performance evaluation. We may use cookies to evaluate the performance of our Website, also as part of analytical activities aimed at improving the quality of the content offered through the Website.
  1. Cookie settings and deletion

In the settings of your web browser you can block the receipt of cookies or set it so that each time you receive a cookie you will be informed about this fact.

Nevertheless, please note that blocking cookies completely may prevent you from using all the functions of our Website.

Alternatively, you can also visit https://jakwylaczyccookie.pl/jak-wylaczyc-pliki-cookies/, which contains comprehensive information on how to disable cookies in your browser or device, as well as more general information on cookies. You can find information on how to delete cookies from your mobile phone in the operating instructions for your mobile phone. You can also refuse receiving cookies.

Remember that limiting the possibility of receiving cookies may affect the functionality of the Website.

  1. Web server logs

Information about some of the Users’ behaviours is logged in the server layer. These data are used only to administer the website and to ensure the most efficient service of the hosting services provided.

The browsed resources are identified by URL addresses. In addition, the following may be saved:

  • inquiry reception time,
  • time of sending the answer,
  • name of the customer’s station – identification performed by the http protocol,
  • information about errors that occurred during the execution of the http transaction,
  • URL address of the page previously visited by the user (referrer link) – if the website was accessed via a link,
  • information about the User’s browser,
  • information about the IP address.

These data are not associated with specific people browsing the Website and are used only for the purposes of server administration.

Information on the processing of personal data – marketing

Please read the information on the processing of personal data carefully

In reference to the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data, and repealing Directive 95/46/EC (GDPR ), Gerda sp. z o.o. with its seat in Sokołów, provides you with a set of necessary information related to the rules for processing your personal data and about the rights that you are entitled to.
Should you have any questions regarding the method and scope of processing your personal data by Gerda, as well as your rights, please contact us, i.e.: Gerda sp. z o.o. with its seat in Sokołów, at ul. Sokołowska 49, 05-806 Komorów to the e-mail address: daneosobowe@gerda.pl, or with our personal data protection supervisor to the e-mail address: gerda.iod@discretia.pl.

Who will be the Data Controller of your data?
The Data Controller of your personal data is Gerda sp. z o.o. with its registered office in Sokołów, at ul. Sokołowska 49, 05-806 Komorów.

What data do we process?
As far as commercial information is concerned, we collect and process information about you obtained from you during:
• filling in forms or questionnaires;
• telephone calls;
• e-mail correspondence

For what purpose and on what legal basis will we process your data?
We will process your data:
a) on the basis of your consent (Art. 6 sec. 1 letter a of the GDPR) for the purposes of presenting you with a Gerda commercial offer, in particular, to:
• contact you by e-mail and telephone;
• recognize your needs and expectations;
• inform you about Gerda’s current offers
• inform you about current Gerda promotions;
• help you use the Partner Zone;
• send the newsletter;
b) in order to implement the legitimate interest of the Data Controller (Art. 6 sec. 1 letter f of the GDPR), e.g. when creating compilations, analyses, statistics, reports for direct marketing purposes and to ensure security.

Who do we share your data with?
Your data, to the extent it is necessary, may be shared with:
a) entities authorized to receive them on the basis of legal provisions (e.g. courts, legal protection authorities, administrative authorities, supervisory authorities);
b) entities processing your data on our behalf (e.g. entities operating our ICT systems or providing us with ICT tools, entities providing advisory and consulting services, research agencies, etc.);
c) in each case of sharing your data, we will make sure that only the minimum information necessary to achieve the purpose of data processing is provided.

Your data will not be transferred outside the European Economic Area (EEA). If your data were to be transferred outside the EEA, we will ensure that cooperation with such entities is based on an appropriate legal basis, and that they ensure appropriate protection standards.

How long will we keep your data?
We will store your personal data for the period necessary to achieve the purposes for which the personal data were collected, or for which they are processed; to the extent necessary to ensure compliance with the applicable legal requirement, or to the extent indicated in the light of applicable archiving regulations.
In the case of processing based on your consent, we will store your data for the period until its withdrawal, and thereafter for the period and to the extent required for Gerda to implement the legitimate interest of the Data Controller.

What rights do you have in relation to the processing of your data?
Remember that you have the right to:
a) access to the content of your personal data, including the right to obtain a copy of these data;
b) request rectification (correction) of your personal data in the event that the data are incorrect or incomplete;
c) request to delete your personal data (the so-called “right to be forgotten”), if: (i) the data are no longer necessary for the purposes for which they were collected or otherwise processed; (ii) you have objected to data processing; (iii) you have withdrawn your consent on which the processing is based and there is no other legal basis for the processing; (iv) the data are processed unlawfully; (v) the data must be deleted in order to comply with the legal obligation;
d) request to limit the processing of your personal data, if: (i) you contest the accuracy of the personal data; (ii) the processing of the data is unlawful and you oppose the deletion of the data and request their restriction instead; (iii) we will no longer need your data for our purposes, you will need them to establish, defend or pursue claims; (iv) you have objected to the processing of data – until it is determined whether the legitimate grounds on the part of the Data Controller override the grounds for objection;
e) transfer your personal data in the event that: (i) the processing takes place on the basis of a contract concluded with you or on the basis of your consent; (ii) the processing is carried out by automated means;
f) object to the processing of your personal data, including profiling, if: (i) there are reasons relating to your particular situation and; (ii) data processing is based on the necessity to achieve the legitimate purposes of the Data Controller.
g) withdraw your consent to the processing of your personal data to the extent that you have granted consent to the processing of personal data at any time, without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
In addition, you have the right to lodge a complaint with the competent supervisory authority, i.e. the President of the Personal Data Protection Office, if you believe that the processing of your data violates the provisions of the General Data Protection Regulation “GDPR”.

Profiling
The data collected from you may be profiled.

Do you have to provide your data?
Providing your data is completely voluntary. But, failure to provide your data will result in the inability to present you a Gerda commercial offer.

Who to contact in relation to matters of data processing?
In any issues connected with the processing of your data you can contact us at the e-mail address: daneosobowe@gerda.pl, or by correspondence to the address of Gerda sp. z o.o. with its seat in Sokołów, ul. Sokołowska 49, 05-806 Komorów. In order to increase the security of your data processing, we have appointed a Data Protection Supervisor, whom you can contact with at the e-mail address: gerda.iod@discretia.pl
In reference to the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data, and repealing Directive 95/46/EC (GDPR ), Gerda sp. z o.o. with its seat in Warsaw, provides you with a set of necessary information related to the rules for processing your personal data and about the rights that you are entitled to.

Should you have any questions regarding the method and scope of processing your personal data by Gerda, as well as your rights, please contact us, i.e.: Gerda sp. z o.o. with its seat in Sokołów, at ul. Sokołowska 49, 05-806 Komorów to the e-mail address: daneosobowe@gerda.pl, or with our personal data protection supervisor to the e-mail address: gerda.iod@discretia.pl.