Privacy Policy

  1. General information and definitions
    This Privacy Policy sets out the rules for the processing and protection of personal data provided by Users in connection with their use of Expertdata Sp. z o.o.’s services.

    Personal Data Administrator: Expertdata Sp z o.o. with its registered office in Poland, Elbląska Str. 47 m.66, 01-737 Warsaw, entered into the register of entrepreneurs by the District Court for the City of Warsaw in Warsaw, XIV Economic Department of the National Court Register under the KRS number 0001014946, having the tax identification number / NIP 5252940515 and the REGON number 524254427.

    Personal Data: is any information about an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

    Processing of Personal Data: a set of operations performed on Personal Data consisting of collecting, recording, organising, structuring, storing, adapting, modifying, retrieving, viewing, using, disclosing by transmission, sharing, matching, linking, limiting, deleting or destroying.

    GDPR / RODO: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

    Website: the website operated by the Administrator at www.expertdata.pl.

    User: any natural person visiting the Website or using the services or functionalities described in this Privacy Policy.
  2. Purposes and grounds for processing personal data
    Depending on the process, the Administrator processes the personal data of Service Users for the following purposes:
    • Use of the Website and its functionalities – management of the Website and analysis of traffic on the Website, including through cookies.
    • Completion of the contact form on the Website – for the purposes of handling an enquiry sent via the contact form.
    • In the case of cookies – to verify the authenticity of the browser session, to optimise, increase the performance and improve the configuration of the Website, to adapt the content of the Website to the User’s preferences, to remember the User’s settings and interface choices, e.g. in terms of language, to remember the history of pages visited on the Website for future content recommendations, to identify the parameters of the User’s device in order to adapt the Website to the User’s needs and resources, to adapt the content provided to the User’s location, to generate general and anonymised statistics which help to understand how the Website is used by the general public, to improve the structure and content of the Website.
    • Using the website
      When using the Website, Personal Data is processed for the purposes of providing electronic services in terms of providing Users with the content collected on the Website and for analytical and statistical purposes. Personal Data is processed on the basis of Article 6(1)(b) GDPR / RODO (necessity of processing for the conclusion) and performance of the contract and Article 6(1)(f) GDPR / RODO (fulfilment of the Administrator’s legitimate interest, consisting in conducting analyses of the Users’ activities, as well as their preferences in order to improve the functionalities used and services provided).
    • Contact form
      The Administrator processes the Personal Data provided in the contact form in order to answer the questions provided in the form or to collect contact data for the purpose of marketing the Administrator’s own products or services. The processing of Personal Data takes place on the basis of Article 6(1)(a) of the RODO or Article 6(1)(f) of the RODO – on the basis of consent and for the fulfilment of the Administrator’s legitimate interest, which is the need to provide proper service to Users visiting the Website.
  3. Period of retention of personal data
    Depending on the process, the Administrator retains Users’ Personal Data for the following period:
    • Use of the website – until you object to such processing.
    • Contact form – until you object to such processing.
  4. Use of cookies or similar technologies
    The Administrator uses cookies primarily to provide the User with services provided electronically and to improve the quality of these services.
    • Cookies
      Administrator oraz inne podmioty świadczące na jego rzecz usługi analityczne i statystyczne korzystają The Administrator and other entities providing analytical and statistical services to the Administrator use cookies to store information or access information already stored in the User’s telecommunications end device (computer, phone, tablet, etc.). Cookies used for this purpose include:
      • Cookies with data entered by the User (session ID), for the duration of the session.
      • Authentication cookies used for services that require authentication, for the duration of the session.
      • Cookies for security purposes, e.g. used to detect misuse of authentication.
      • Session media player cookies (e.g. flash player cookies), for the duration of the session.
      • Persistent cookies to personalise the user interface, for the duration of the session or slightly longer.
    • Google Analytics
      The Administrator uses Google Analytics analytical tools that collect information about visits to the Website, such as the sub-pages that Users have viewed, the time that Users have spent on the Website, or the time taken to navigate between different sub-pages. Google LLC’s Google Analytics cookies are used for this purpose. Google Analytics collects demographic and interest data. Neither the Administrator nor Google uses the collected data to identify the User, nor does it combine this information to enable identification of the User. Detailed information on the scope and principles of data collection in connection with this service can be found at the following link: https://www.google.com/intl/pl/policies/privacy/partners.
      In any case, the User may object to the storage of information about him/herself within the cookie settings from the Website and decide which tools the Administrator may use when the User visits the Website. 
  5. Social media websites
    The Administrator processes the personal data of Users visiting the Administrator’s social media profiles. This data is processed exclusively in connection with the running of the profile, including for the purpose of informing Users about the Administrator’s activities and promoting various events, services and products. The legal basis for the Administrator’s processing of personal data for this purpose is the Administrator’s legitimate interest (Article 6(1)(f) GDPR / RODO) in promoting its own brand.
  6. Data recipients
    The recipients of Users’ Personal Data may be:
    • Entities processing data on behalf of the Controller, e.g. IT service providers, marketing agencies.
    • Entities entitled to obtain data on the basis of applicable law, e.g. courts or law enforcement agencies.
  7. Categories of Personal Data Processed
    The Administrator processes the following categories of Personal Data belonging to persons who contact the Administrator or with whom the Administrator is in contact:
    • Identifying information, in particular name, surname, company name, address, tax identification number / NIP.
    • Contact information such as e-mail address, telephone number.
    • Data of employees or associates of the Administrator’s business partners (contractors, subcontractors), coming directly from them or from their employer or the entity they represent.
  8. Voluntary provision of Personal Data 
    Personal data is provided voluntarily, but refusal to provide it may make it impossible to use the Website’s functionalities, including, but not limited to, processing an enquiry submitted via a form, downloading files or other marketing communications. Lack of consent for the use of cookies or its withdrawal may result in a limitation of the Website’s functionality.
  9. Users’ rights
    Users have the following rights in relation to the processing of Personal Data by the Administrator:
    • PThe right to access, obtain a copy of, rectify, erase or restrict the processing of your Personal Data.
    • The right to withdraw consent to the processing of Personal Data to the extent that your Personal Data is processed on the basis of consent. The withdrawal of consent shall not affect the lawfulness of the processing carried out before its withdrawal.
    • The right to object to the processing of Personal Data.
    • Right to portability of Personal Data.
    • The right to lodge a complaint with a supervisory authority (President of the Office for Personal Data Protection / Prezes Urzędu Ochrony Danych Osobowych).
      In order to exercise the above rights, please contact the Data Controller or the Data Protection Coordinator at the following email address: kontakt@expertdata.pl. 
  10. Automated processing of data
    Users’ Personal Data may be subject to automated data processing, including profiling. The Administrator carrying out the processing of Personal Data contained in cookies for marketing purposes, enabling the Administrator to reach out again to Users who have previously visited the Administrator’s Website, expressed interest in the Administrator’s products or services or interacted with the Administrator’s advertising content. This mechanism allows for the display of personalised advertisements on websites and applications belonging to advertising networks, such as Google Ads, based on the personal data contained in the cookies.
  11. Data security
    The Administrator shall on an ongoing basis carry out a risk analysis to ensure that the Personal Data is processed by him in a secure manner, ensuring in particular that only authorised persons have access to the data and only to the extent necessary for the performance of their tasks. The Controller shall ensure that all operations on Personal Data are recorded and performed only by authorised employees and associates.

    The Controller shall take the necessary measures to ensure that also its subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process Personal Data on behalf of the Controller.
  12. Changes to the Privacy policy
    The Administrator reserves the right to amend this Privacy Policy. Users will be informed of any changes by publishing updates on the Website.
  13. Contact
    For matters relating to personal data, please contact us at the following email address: kontakt@expertdata.pl.