privacy policy

Who is the controller of my personal data?

The controller of personal data is STRABISCAN sp. z o.o., ul. Przemysłowa 17, 32-083 Balice, Poland.

What personal data is processed by the Controller?

STRABISCAN sp. z o.o., as the controller of personal data within the meaning of the GDPR, processes in particular the following categories of personal data:

  • Job candidates’ personal data (data provided by candidates in connection with participation in recruitment processes – in particular data contained in a CV).
  • Contractors’ and their representatives’ personal data (company data* and contact persons – basic data used for issuing and accounting invoices (name, VAT ID, business address), and for contact purposes (first name, last name, company name, job title, email address, phone number)).
  • Individuals submitting inquiries via contact forms, email, or telephone (basic contact data – first name, last name, email address – provided in connection with inquiries submitted to the controller).
  • Personal data processed in connection with managing social media profiles on LinkedIn and YouTube.

* Company data is considered personal data only insofar as it allows the identification of the individuals it relates to. Data of corporate entities is not treated as personal data.

* GDPR = Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).

On what basis does the Controller process my personal data?

The following presents the principles of processing your personal data (in particular, explaining who has access to it, how long it is kept and the basis for its processing).

Job candidates’ personal data

  • Purpose and legal basis for processing: Your personal data will be processed for the purposes of the recruitment process, or also for future recruitment processes if you give your consent. The legal basis for processing this data is the applicable legal regulations (in particular the Labor Code) and your consent.
  • Data recipients: Data may be disclosed to entities authorized by law. Service providers supporting STRABISCAN sp. z o.o. in the field of IT services and infrastructure may also have access to the data under appropriate agreements.
  • Retention period: Personal data processed by the Controller will be stored until the recruitment process is completed, or until you withdraw your consent if the data is processed for the purposes of future recruitment processes.
  • Transfer of data to a third country: As a rule, STRABISCAN sp. z o.o. does not transfer data outside the European Economic Area (EEA). However, there may be cases where STRABISCAN sp. z o.o. uses IT service providers whose headquarters/servers may be located outside the EEA. In such cases, the legal basis for the transfer will be the Standard Contractual Clauses approved by the European Commission.
  • Automated decision-making / profiling: STRABISCAN sp. z o.o. does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
  • Voluntariness / obligation to provide data: Providing personal data required by law, in particular the Labor Code, is mandatory. In other cases, providing data is voluntary.

Contractors’ and their representatives’ personal data

  • Purpose and legal basis for processing: Contractors’ personal data will be processed for the purposes of performing contracts concluded between the parties (based on Art. 6(1)(b) GDPR – processing is necessary for the performance of contracts to which you are a party) and for fulfilling the obligations imposed on the Controller by applicable legal regulations (based on Art. 6(1)(c) GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject, in particular for issuing and storing VAT invoices, as required by, among others, the Accounting Act and the VAT Act).

The personal data of contractors’ representatives will be processed for contact purposes, including initiating and maintaining business relations (based on Art. 6(1)(f) GDPR – the Controller’s legitimate interest in ensuring communication with contractors and proper performance of contracts concluded with them), as well as for fulfilling the obligations imposed on the Controller by law (Art. 6(1)(c) GDPR).

Contractors’ and their representatives’ personal data may also be processed for the purpose of pursuing or defending against claims (based on Art. 6(1)(f) GDPR – the Controller’s legitimate interest in pursuing and defending claims).

  • Data recipients: Data may be disclosed to entities authorized by law. Service providers supporting STRABISCAN sp. z o.o. in IT services (in particular hosting providers) may also have access to the data under appropriate agreements.
  • Retention period: Contractors’ and their representatives’ personal data will be stored for the period required under applicable legal regulations. Contact details of contractors’ representatives processed for business communication purposes will be stored until an objection is raised against such processing.
  • Transfer of data to a third country: As a rule, STRABISCAN sp. z o.o. does not transfer data outside the European Economic Area (EEA). However, there may be cases where STRABISCAN sp. z o.o. uses IT service providers whose headquarters/servers may be located outside the EEA. In such cases, the legal basis for the transfer will be the Standard Contractual Clauses approved by the European Commission.
  • Automated decision-making / profiling: STRABISCAN sp. z o.o. does not make decisions based on automated processing, including profiling (with respect to the purposes described above).
  • Voluntariness / obligation to provide data: Providing personal data is voluntary, but necessary for maintaining business communication with STRABISCAN sp. z o.o. and for the performance of contracts concluded between the parties.

Individuals submitting inquiries via contact forms, email, or telephone

  • Purpose and legal basis for processing: Personal data will be processed for the purpose of conducting electronic correspondence and carrying out actions taken at your request (the legal basis for processing is the legitimate interest of the Controller in conducting electronic correspondence and fulfilling requests made by data subjects).
  • Data recipients: Data may be disclosed to entities authorized by law. Providers of IT infrastructure and services processing data on behalf of STRABISCAN sp. z o.o. under appropriate agreements may also have access to the data.
  • Retention period: Personal data processed by the Controller will be stored for the duration of the electronic correspondence and subsequently for archival purposes for the period specified in the Controller’s office procedures (records management instructions).
  • Transfer of data to a third country: As a rule, STRABISCAN sp. z o.o. does not transfer data outside the European Economic Area (EEA). However, there may be cases where STRABISCAN sp. z o.o. uses IT service providers whose headquarters/servers may be located outside the EEA. In such cases, the legal basis for the transfer will be the Standard Contractual Clauses approved by the European Commission.
  • Automated decision-making / profiling: STRABISCAN sp. z o.o. does not make decisions based on automated processing, including profiling (with respect to the purposes described above).
  • Voluntariness / obligation to provide data: Providing personal data is voluntary but necessary for the exchange of electronic correspondence or for carrying out actions taken at your request.

Personal data processed in connection with managing profiles on social media platforms LinkedIn and YouTube

Data Controllers: The controllers of personal data processed on LinkedIn and YouTube are also the entities operating these platforms:

  • LinkedIn Ireland Unlimited Company, which processes your personal data under the terms described [here].
  • The administrator of the YouTube platform, which processes your personal data under the terms described [here].

These are collectively referred to as the “Platforms.”

  • Purpose and legal basis for processing: STRABISCAN sp. z o.o. processes your personal data for the purpose of managing its profiles on the Platforms, in particular to publish posts, participate in discussions in comments, conduct correspondence via private messages, and for statistical purposes (e.g., obtaining statistics generated based on your activity on our profile, such as post views). In justified cases, data may also be processed for the establishment, exercise, or defense of legal claims. These activities constitute the legitimate interest of STRABISCAN sp. z o.o. (Article 6(1)(f) GDPR), which forms the legal basis for processing your personal data.
  • Data recipients: When posts are shared or discussions are conducted, access to this data is granted to authorized employees of STRABISCAN sp. z o.o., the Platforms, as well as other individuals and entities as described in the Platforms’ privacy policies. References to those privacy policies are listed under “Data Controllers.”
  • Retention period: Your personal data will be stored for the period defined in the Platforms’ privacy policies.
  • Transfer of data to third countries: As a rule, STRABISCAN sp. z o.o. does not transfer data outside the European Economic Area (EEA). However, there may be cases where STRABISCAN sp. z o.o. uses IT service providers whose servers may be located outside the EEA. In such cases, the legal basis for the transfer will be the Standard Contractual Clauses approved by the European Commission.
  • Automated decision-making / profiling: STRABISCAN sp. z o.o. does not make decisions based on automated processing, including profiling (with respect to the purposes described above).
  • Voluntariness / obligation to provide data: Providing personal data is voluntary but necessary to post comments, send private messages to STRABISCAN sp. z o.o., or use other functionalities of the Platforms.

 

What rights do I have in connection with the processing of my personal data by STRABISCAN sp. z o.o.?

Depending on the situation, you have the right to:

  • request access to your personal data, rectification, erasure, and restriction of processing, as well as the right to data portability;
  • withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;
  • object to the processing of your personal data;
  • lodge a complaint with a supervisory authority (PUODO – President of the Personal Data Protection Office in Poland).

Where can I contact STRABISCAN sp. z o.o. with questions regarding the processing of my personal data and the exercise of my rights?

All inquiries and statements regarding the above rights should be directed to the following contact details:

Data Controller’s contact details:

STRABISCAN sp. z o.o., ul. Przemysłowa 17, 32-083 Balice, Poland



Information on Cookies

Cookies: The website https://cxe.pl/strabiscan/ uses cookies. These are small files stored in your web browser and used for the following purposes:

  • Optimization – to make it easier to use the website (e.g., remembering dismissal of notifications displayed on the website).
  • Analytics – to create statistics that help the website better adapt its content to user preferences.
  • Marketing – to display advertisements tailored to users’ preferences (based on Article 6(1)(f) GDPR – the legitimate interest of the data controller, namely direct marketing – where consent has been given for the use of cookies).

If you do not agree to cookies being stored on your device, please change your browser settings and/or block the operation of external cookies in the manner described in the “External Cookies” section below.

Limiting the use of cookies may affect some of the functionalities available on https://cxe.pl/strabiscan/


External Cookies

STRABISCAN sp. z o.o. uses cookie solutions and/or similar technologies provided by the following external entities:

  • Google Ireland Limited – Google Analytics – for analytical and advertising purposes (displaying STRABISCAN sp. z o.o. advertisements within the Google advertising network). Users can block the use of their data in Google Analytics at any time [here].

The above-mentioned solutions are used to tailor advertisements to users’ preferences and for analytical purposes. These solutions make it possible to track user activity within the website (e.g., viewing a specific subpage). On this basis, advertisements of STRABISCAN sp. z o.o. may be displayed to the user within the Google / Facebook advertising network.


More information about cookies can be found in the “Help” section of your web browser’s menu.