Personal data processing
Personal data processing
Purposes of Collecting Personal Data Through the Website
Use of Cookie Mechanisms and Other Marketing Tools
Contact Forms, Recruitment Forms, and Order Forms
Principles of Sharing and Entrusting Personal Data (Data Recipients)
Rights of Data Subjects
Transfer of Data Outside the EEA
Retention Period of Personal Data
Automated Decision-Making and Profiling
External Websites
Privacy Policy Updates
Purposes of Collecting Personal Data Through the Website
Use of Cookie Mechanisms and Other Marketing Tools
Our goal is to reach as many people as possible to whom we can offer our products and services. We want to use modern marketing tools that help us understand user preferences and prepare the most tailored offers. During a user’s visit to the website, information about the user—which may constitute personal data—can be collected automatically through services provided by modern marketing tool providers, including cookies. Such information is collected only when the website user has given consent. The user will be asked to express consent to the use of individual types of cookies when visiting the website. Before giving consent, the Controller provides access to this Privacy Policy and recommends reading it. One of the types of cookies we use are so-called strictly necessary cookies, which enable the website to function. These may be, and are, used regardless of the user’s consent. More information about cookies can be found in the Cookies tab.
Contact Forms, Recruitment Forms, and Order Forms
We provide tools that enable users to contact us, obtain necessary information, and provide data to make use of our offer. To ensure maximum transparency, the forms on our websites are accompanied by information on the data controller, the purpose of processing, the legal basis, recipients, storage period, and other information required by applicable law. This allows users, before providing personal data through a form, to review all the necessary information about how their data will be processed.
Principles of Sharing and Entrusting Personal Data (Data Recipients)
The Personal Data Controller shares (and entrusts) personal data with other entities (data recipients) on the basis of:
- legislation in force
- business decisions on outsourcing selected parts of the business.
When data is shared with entities to which the Personal Data Controller subcontracts services in their name and on their behalf, a written data processing agreement is required. The decision to entrust is preceded by an analysis of the entity's credibility and reliability.
Each decision regarding outsourcing of services requires the Personal Data Controller to analyze whether it is necessary to conclude a data processing agreement.
Rights of Data Subject
All requests regarding the exercise of data subject rights should be submitted:
- By email to: [email protected]
- W formie pisemnej na adres: Asseco Data Systems S.A. ul. Narutowicza 136, 90-146 Łódź, Polska z dopiskiem „Inspektor Ochrony Danych”.In writing to the following address: Asseco Data Systems S.A. ul. Narutowicza 136, 90-146 Łódź, Poland with the note "Inspektor Ochrony Danych” [meaning: Data Protection Officer].
If we are unable to identify a person based on the data provided with the request, we will ask the applicant for additional information. Providing such data is not mandatory, but failure to do so will result in our refusal to fulfill the request.
If a request is submitted electronically, we will respond in the same form unless a different form of response is requested. In other cases, we provide responses in writing.
PBELOW IS A DETAILED DESCRIPTION OF DATA SUBJECT RIGHTS:
Transfer of Data Outside the EEA
We take all reasonable measures to store personal data on servers located within the European Economic Area (EEA). For this reason, in the vast majority of cases, we use tools that ensure data is located in the EEA.
However, the use of certain tools on our websites may involve cooperation with providers outside the EEA, requiring the transfer of data outside this area. In such cases, we transfer personal data outside the EEA only when necessary and with adequate safeguards, primarily through:
Most often, we transfer data to third countries in connection with solutions provided by entities supporting our business, including communication tools via contact forms.
Retention Period of Personal Data
The period for which we process personal data collected through the website is determined by the lifespan of the cookies used. More information on this is provided in the Cookies section. The retention period for personal data provided through contact forms on the website is specified separately in the applicable privacy notices associated with each form.
Automated Decision-Making and Profiling
Asseco does not make decisions in a fully automated manner—that is, based solely on automated processing (without human involvement) that produces legal effects or similarly significant impacts on the data subject. We also do not use profiling based on automated decision-making, that is, decisions made solely by technical means without human involvement that produce legal effects or otherwise significantly affect the profiled person.
Data may be profiled in specific cases, in line with the terms of use established by social media platform operators.
External Websites
Asseco websites may contain links to third-party websites. Asseco Data Systems S.A. has no influence over the privacy practices of those websites and bears no responsibility for them.
Privacy Policy Updates
The Privacy Policy is updated by publishing a new version on the website.
Privacy Notices
We conduct our activities with respect for the right to privacy and control over personal data. For this reason, we provide transparent information on the purposes and methods of processing personal data. Below we present privacy notices containing detailed explanations of the rules governing personal data processing. Each notice specifies to whom it is directed and in what situation it applies.
CONTACT
Controller
The Controller of personal data collected in connection with the use of the websites is: Asseco Data Systems S.A., ul. Jana z Kolna 11, 80-864 Gdańsk (hereinafter: Controller or Asseco). You may contact the Controller by sending an e-mail to: [email protected].
The Controller has appointed a Data Protection Officer (DPO). You may contact the DPO in all matters relating to the protection of personal data.
