Privacy Policy

This Privacy Policy sets out the rules for storing and accessing data on the Devices of Users using the Website for the provision of electronic services by the Controller, as well as the rules for collecting and processing personal data of Users provided personally and voluntarily through the tools available on the Website. This Privacy Policy forms an integral part of the Website Terms of Service, which define the rules, rights, and obligations of Users using the Website. §1 Definitions • Website – the online service "VanStev" operating at https://vanstev.pl • External Service – websites of partners, service providers, or service recipients cooperating with the Controller • Controller / Website Administrator – the controller of the Website and personal data controller (hereinafter "Controller") is "VAN STEV SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ", registered at ul. Wspólna 7B, 45-837 Opole, Poland, Tax Identification Number (NIP): 7543103819, REGON: 363216753, National Court Register (KRS): 0000591565 (District Court in Opole, VIII Commercial Division of the National Court Register), providing electronic services via the Website. • User – a natural person for whom the Controller provides electronic services via the Website. • Device – an electronic device with software through which the User accesses the Website. • Cookies – text data collected in the form of files placed on the User's Device. • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). • Personal Data – means any information relating to an identified or identifiable natural person ("data subject"). • Processing – means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means. §2 Data Protection Officer Pursuant to Article 37 of the GDPR, the Controller has not appointed a Data Protection Officer. In matters concerning the processing of personal data, including the exercise of rights under the GDPR, please contact the Controller directly via email: praca@vanstev.pl or by phone: +48 664 186 710. §3 Types of Cookies • Internal Cookies – files placed and read from the User's Device by the Website's ICT system. • External Cookies – files placed and read from the User's Device by the ICT systems of External Services (e.g., analytics, forms, Cloudflare Turnstile anti-spam protection). • Session Cookies – files placed and read from the User's Device by the Website during a single session of the Device. After the session ends, the files are deleted from the User's Device. • Persistent Cookies – files placed and read from the User's Device by the Website until manually deleted by the User or until expiration. §4 Security of Data Storage • Cookie Storage and Retrieval Mechanisms – these mechanisms do not allow the retrieval of any personal data or confidential information from the User's Device. The transmission of viruses, trojans, or malware to the User's Device is practically impossible. • Internal Cookies – cookie files used by the Controller are safe for User Devices and contain no scripts, programs, or code that could compromise data security. • External Cookies – the Controller makes every effort to verify partners regarding the safety of Users. The Controller collaborates exclusively with reputable, established market partners. • Cookie Control – the User may independently change settings regarding saving, deleting, and accessing data stored in Cookies through their browser settings or using the cookie preferences button on the website at any time. §5 Purposes for Which Cookies Are Used • Improving and Facilitating Access to the Website – remembering language preferences and session settings. • Security – protection against spam, DDoS attacks, and unauthorized bot traffic (e.g. Cloudflare Turnstile). • Statistics – anonymous collection and processing of statistical data concerning visits to the Website. §6 Purposes of Personal Data Processing Personal data voluntarily provided by Users is processed for one of the following purposes: • Provision of electronic services (including handling contact forms, job inquiries, recruitment processes, and workforce outsourcing inquiries), • Communication between the Controller and Users regarding inquiries, recruitment, service delivery, and data protection, • Pursuing the legitimate interests of the Controller (defense against claims, archiving correspondence), • Fulfilling legal and tax obligations incumbent upon the Controller. §7 Personal Data Collected by the Website The Website collects the following categories of personal data submitted via forms: • First name and last name, • Email address, • Contact phone number, • Content of the message / information contained in the recruitment application or service inquiry, • IP address and technical device data (collected automatically in server access logs). §8 Access to Personal Data by Third Parties As a general rule, the Controller is the sole recipient of personal data provided by Users. Data collected within the services provided is never sold or unlawfully disclosed to third parties. Access to data may only be granted to data processors under data processing agreements: • Hosting and server providers – database infrastructure and VPS server providers located in the European Union, • IT and software service providers – entities providing technical support, CMS systems, and Website security, • Accounting and legal service providers – to the extent necessary to perform statutory duties. §9 Method of Personal Data Processing • Personal data will not be transferred outside the European Economic Area (EEA), unless carried out in compliance with GDPR security standards (e.g., Standard Contractual Clauses of the European Commission). • Personal data will not be used for automated decision-making producing legal effects concerning the User. • Personal data will not be profiled in a manner infringing on User privacy. §10 Retention Period of Personal Data • Data provided for handling inquiries / recruitment / contact – for the duration of correspondence or recruitment process, plus the limitation period for potential claims (up to 3 years from contact termination). • Data necessary for accounting and tax purposes – for the statutory period required by tax law (5 years from the end of the calendar year). • Anonymous statistical data – for an indefinite period. §11 User Rights Under the GDPR Every User has the right to: • Right of access – obtain confirmation and a copy of personal data processed (Art. 15 GDPR). • Right to rectification – request rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR). • Right to erasure ("right to be forgotten") – request prompt deletion of data under conditions specified in Art. 17 GDPR. • Right to restriction of processing – suspend operations on personal data under Art. 18 GDPR. • Right to data portability – receive personal data in a structured, commonly used machine-readable format (Art. 20 GDPR). • Right to object – object to processing based on legitimate interest (Art. 21 GDPR). • Right to withdraw consent – at any time, without affecting the lawfulness of processing based on consent before its withdrawal. §12 Right to Lodge a Complaint with a Supervisory Authority If the User considers that the processing of personal data infringes GDPR provisions, the User has the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl. §13 Contact to the Controller The Controller may be contacted via: • Postal address: VAN STEV SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Wspólna 7B, 45-837 Opole, Poland • Email: praca@vanstev.pl • Phone: +48 664 186 710 §14 Changes to Privacy Policy The Controller reserves the right to modify this Privacy Policy in response to legal amendments or technological developments of the Website. The current version of the Privacy Policy is always accessible at https://vanstev.pl/en/privacy-policy.