I. BASIC INFORMATION ON THE PROCESSING OF PERSONAL DATA
1. The controller of your personal data is GRASO ZS Sp. z o.o. with its registered office at Krąg 4A, 83-200 Starogard Gdański (hereinafter referred to as the “Controller”).
2. This Privacy Policy (hereinafter referred to as the “Policy”) specifies how we use and process the personal data of website users (hereinafter referred to as “Users”) in connection with the use of our website. The Policy also contains information about the cookie files used on our website.
3. While visiting the Website, personal data may be processed if the User provides the Controller with information that allows for their identification, in particular when the User uses the forms available on the site or functionalities such as “Chat with us” – live chat.
4. The Controller processes Users’ personal data in order to enable Users to use the full functionality of the website and to present products and services on the site, as well as to establish, pursue, or defend against claims related to the use of the Controller’s website or the processing of the User’s personal data.
5. The website does not automatically collect any information, except for information contained in cookie files (so-called “cookies”),
6. While Users use our website, we collect in particular IP addresses, the URL address, clicks on website elements, dates and times of visits to the website, the internet service provider’s name, and information on the type of operating system and the type and version of the User’s browser.
7. The Controller may process data contained in cookie files while visitors use the Website, in particular for the following purposes:
- remembering data from completed forms;
- adapting the content of the Website to the User’s preferences and optimizing the use of the Website;
- keeping anonymous statistics showing how the Website is used, which allows for improving its structure and content;
8. The User’s data will be processed for the purpose of providing the Controller’s services. Your data may also be processed for the purpose of adapting the Site to the ways it is used, statistical measurements and improving services, responding to your inquiries, and detecting abuse.
9. The legal basis for processing the User’s personal data on the website is:
Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting in adapting the content of the service to the User, ensuring the security of these services, responding to inquiries, and conducting statistical measurements and service improvements,
II. COOKIE FILES
1. Cookie files (so-called “cookies”) are IT data, in particular text files, stored on the User’s end device and intended for use with the Controller’s website. Cookie files usually contain the name of the website they come from, the storage time on the end device, and a unique number.
2. The Controller uses cookie files to enable the User to use the full range of website functionalities and to present the Controller’s products and services on the site.
3. Using the Website without changing the browser’s cookie settings means that they will be saved and stored in the device’s memory. Failure to change the settings to those blocking the saving of cookie files is equivalent to the User’s consent to their being saved.
4. If the User does not want cookie files to be installed on the end device they are using, they may refuse to consent to the installation of cookie files. To do this, the User may independently change the cookie settings, determining the conditions for their storage and access to the User’s device by cookie files. Changes can be made using the internet browser settings. These settings can be changed in such a way as to block the automatic handling of cookie files in the internet browser settings or to inform about their placement on the User’s device each time.
5. The Controller informs that restrictions on the use of cookie files may affect some of the functionalities available on the Website.
III. RIGHTS OF USERS RELATED TO THE PROCESSING OF PERSONAL DATA
1. The User has the right to access the personal data processed by the Controller that concerns them and to receive a copy of the processed data.
2. The User has the right to request the rectification (correction, completion) of personal data processed by the Controller, the restriction of their processing, or their deletion.
3. The User has the right to object to the use of personal data for the purposes of establishing, pursuing, or defending against claims.
4. The User has the right to request the transfer of data processed by the Controller that was provided by the User, i.e., to receive it in a structured, commonly used, machine-readable format and the right to send this data to another controller. If technically feasible, the User has the right to request that the personal data be sent by the Controller directly to another controller.
5. The User has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of the User’s personal data violates data protection regulations.
6. If the User has accepted the use of cookie files on the website, the User has the right to withdraw the consent given at any time.
Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L. of 2016, No. 119) – hereinafter GDPR, we inform that:
INFORMATION CLAUSE – CUSTOMER
1. Data Controller
The controller of your personal data is GRASO ZS Sp. z o.o. with its registered office at 83-200 Starogard Gdański, Krąg 4a. The data controller is not required to appoint a data protection officer.
2. Purposes and legal basis of processing
Your personal data will be processed on the basis of:
a) Article 6(1)(b) GDPR – in order to conclude and perform an order/sales agreement, or to provide services based on interest in our offer, or to take action at the request of the data subject prior to concluding an agreement,
b) Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting in handling matters conducted through correspondence, including electronic correspondence, as well as by telephone, in connection with the Controller’s business activity,
c) Article 6(1)(f) GDPR – a legitimate interest pursued by the Controller on behalf of the customer for the purpose of accepting, considering, and handling complaints or other claims,
d) Article 6(1)(a) GDPR – consent given by the person in a voluntary, specific, informed, and unambiguous manner in the form of a statement or clear affirmative action to process their personal data for the purpose of handling the inquiry.
3. Recipients of data
Personal data may be accessed by our subcontractors (entities processing data based on concluded data entrustment agreements), distributors, IT service providers, software and service providers, as well as accounting and legal advisory service providers, e.g. accounting offices, law firms.
4. Transfer of data to third countries or international organizations.
We do not transfer data outside the territory of Poland/EU/European Economic Area.
5. Data storage period
Your data will be stored for the period necessary to fulfill the order/sales agreement, handle the matter, and pursue any potential claims/defend rights. After 6 years, counted from the end of the calendar year in which the sales agreement was concluded, the data will be deleted.
6. You are entitled to:
- the right to access your personal data,
- the right to rectify your data,
- the right to erase your data,
- the right to restrict the processing of your data,
- the right to data portability,
- the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office
7. Information on the requirement/voluntariness of providing data
Providing your data is voluntary, but it may be necessary to conclude the sales agreement and fulfill the order.
8. Automated decision-making
Your personal data is not subject to automated decision-making by the Controller or profiling.
9. For matters related to personal data protection, you may contact the Controller by email at: kadry@graso.com.pl or at the Controller’s registered office.
INFORMATION CLAUSE – JOB CANDIDATE
1. Data Controller
The controller of your personal data is GRASO ZS Sp. z o.o. with its registered office at 83-200 Starogard Gdański, Krąg 4a. The data controller is not required to appoint a data protection officer.
2. Purposes and legal basis of processing
Your personal data will be processed on the basis of:
Article 6(1)(a) GDPR – consent given by the person in a voluntary, specific, informed, and unambiguous manner in the form of a statement or clear affirmative action to process their personal data. An additional legal basis is: the Act of 26 June 1974 – Labor Code
The purpose of processing is to conduct the recruitment process for the position.
3. Recipients of data
Personal data may be accessed by our subcontractors (entities processing data based on concluded data entrustment agreements), IT service providers, software and service providers, as well as accounting and legal advisory service providers, e.g. accounting offices, law firms.
4. Transfer of data to third countries or international organizations.
We do not transfer data outside the territory of Poland/EU/European Economic Area.
5. Data storage period
Your data will be stored for the period necessary to carry out the recruitment process for the given position, no longer than 3 months after its completion. If you consent to the processing of your personal data also for further recruitment processes, your personal data will be processed for this purpose for a period of no more than 1 year, or until the consent is withdrawn.
6. You are entitled to:
- the right to access your personal data,
- the right to rectify your data,
- the right to erase your data,
- the right to restrict the processing of your data,
- the right to data portability,
- the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office
7. Information on the requirement/voluntariness of providing data
Providing your data is voluntary, but it may be necessary to conclude the sales agreement and fulfill the order.
8. Automated decision-making
Your personal data is not subject to automated decision-making by the Controller or profiling.
9. For matters related to personal data protection, you may contact the Controller by email at: kadry@graso.com.pl or at the Controller’s registered office
INFORMATION CLAUSE – EMPLOYEE
1. Data Controller
The controller of your personal data is GRASO ZS Sp. z o.o. with its registered office at 83-200 Starogard Gdański, Krąg 4a. The data controller is not required to appoint a data protection officer.
2. Purposes and legal basis of processing
Your personal data will be processed on the basis of:
Article 6(1)(c) GDPR, for the purpose of carrying out the employment relationship, based on the provisions of the Labor Code, and concern exclusively the employer’s fulfillment of obligations and exercise of specific rights in the field of labor law, social security, and social protection, in particular on the basis of:
The Act of 26 June 1974 – Labor Code, the Act of 27 August 1997 on Vocational and Social Rehabilitation and Employment of Persons with Disabilities, the Regulation of the Minister of Family, Labor and Social Policy of 10 December 2018 on employee documentation, the Act of 26 July 1991 on Personal Income Tax, the Act of 13 October 1998 on the Social Insurance System, the Regulation of the Minister of Family, Labor and Social Policy of 24 May 2019 on the template protocol for establishing the circumstances and causes of an accident at work (Journal of Laws of 2019, item 1071), the Act of 4 March 1994 on the Company Social Benefits Fund, and
Article 6(1)(a) GDPR – consent given by the person in a voluntary, specific, informed, and unambiguous manner in the form of a statement or clear affirmative action to process their personal data.
3. Recipients of data
Personal data will be transferred to the Social Insurance Institution (ZUS), a facility providing preventive healthcare, and a company providing occupational health and safety services. Personal data may also be accessed by our subcontractors (entities processing data based on concluded data entrustment agreements), IT service providers, software and service providers, as well as accounting and legal advisory service providers, e.g. accounting offices, law firms.
4. Transfer of data to third countries or international organizations.
We do not transfer data outside the territory of Poland/EU/European Economic Area.
5. Data storage period
Your personal data will be processed for the duration of the employment relationship, and for up to 10 years, or stored in accordance with the Act of 14 July 1983 on the National Archival Resource and Archives.
Data processed on the basis of consent will be stored until the consent is withdrawn, until a request for erasure or to be forgotten, but no longer than until the personal file is deleted.
6. You are entitled to:
- the right to access your personal data,
- the right to rectify your data,
- the right to erase your data,
- the right to restrict the processing of your data,
- the right to data portability,
- the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office
7. Information on the requirement/voluntariness of providing data
Providing your data is voluntary, but it may be necessary to conclude the sales agreement and fulfill the order.
8. Automated decision-making
Your personal data is not subject to automated decision-making by the Controller or profiling.
9. For matters related to personal data protection, you may contact the Controller by email at: kadry@graso.com.pl or at the Controller’s registered office
INFORMATION CLAUSE – MONITORING
1. Data Controller
The controller of your personal data is GRASO ZS Sp. z o.o. with its registered office at 83-200 Starogard Gdański, Krąg 4a. The data controller is not required to appoint a data protection officer.
2. Purposes and legal basis of processing
Your personal data will be processed on the basis of Article 6(1)(f) GDPR, for the purpose of ensuring the safety of people and the protection of property on and around the company premises, through image recording (monitoring) using technical means that enable this.
3. Recipients of data
Your data will not be transferred to other entities. However, at the justified request of authorized public authority bodies, it may be disclosed to them – solely for evidentiary purposes, in proceedings conducted on the basis of legal provisions.
4. Transfer of data to third countries or international organizations.
We do not transfer your data outside the territory of Poland/EU/European Economic Area.
5. Data storage period
Your data will be stored until the disk space is full, but no longer than for a period of 2 months, in accordance with the Personal Data Protection Act.
6. You are entitled to:
- the right to access your personal data,
- the right to rectify your data,
- the right to erase your data,
- the right to restrict the processing of your data,
- the right to object to the processing of your data,
- the right to lodge a complaint with the supervisory authority.
7. Information on the requirement/voluntariness of providing data
By entering an area covered by monitoring, you agree to the recording of your image. Processing data based on monitoring is necessary for the purposes arising from the Controller’s obligation to ensure the safety of people and the protection of property, and results from the Personal Data Protection Act.
8. Automated decision-making
Your personal data is not subject to automated decision-making by the Controller or profiling.
9. For matters related to personal data protection, you may contact the Controller by email at: kadry@graso.com.pl or at the Controller’s registered office