2. Data Collection

We approach all information about you responsibly and in accordance with the law – particularly with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

Our contact details can be found in the “Contact” section, and we also provide our email address: .

In the individual sections, there are detailed privacy policies dedicated to:

• business relations;
• recruitment.

Please familiarise yourself with the information contained there. Regardless of the context in which we process your data, below we explain who has access to your data and what rights you have related to the processing of your data.

The last section of this policy explains what “cookies” are and how we use them on this website.

3. Who has access to your personal data?

Access to your personal data will be granted solely to our appropriately authorised employees or collaborators, to the extent necessary for the performance of their duties. All these individuals are bound by professional confidentiality – either legal or advisory – which is one of the strongest legal mechanisms protecting the confidentiality of information about you, as well as appropriate confidentiality obligations.

Data related to our settlements are entrusted for processing to a professional accounting firm.

We also use work and documentation management tools, such as the Microsoft Office 365 suite. All these solutions provide an appropriate level of security for the scope of data processed there, based on appropriate agreements and security measures. If the servers are located outside the European Economic Area, we apply the appropriate legal mechanisms to ensure the security of transferred data.

Your data may also be shared to a limited extent (contact details, general description of the areas of cooperation) with professional entities involved in creating industry rankings – if our agreement or your consent provides for it.

4. Your rights related to the processing of your personal data by us

To efficiently exercise your rights, please send any requests to the email address: , from the address you provided for contact, with the subject “GDPR Request,” and specify in the body which right you wish to exercise. Under the GDPR and Polish regulations, you have the following rights:

Access to personal data – you can ask us:
– whether we process your personal data;
– the purpose for which we process your personal data;
– which categories of data we process;
– who the recipients of your data are;
– the planned period for which your data will be stored, and if it is not possible to determine this period, the criteria for determining this period;
– if personal data was not collected from you – all available information about its source.

You may also request insight into the data we process about you.

Rectification of data – if the information about you is/has become incorrect or incomplete, you have the right to request its update.
Revocation of consent – you may revoke your consent to the processing of your data at any time without affecting the lawfulness of processing carried out before its withdrawal.

Deletion of data – in certain situations, the GDPR grants you the so-called right to be forgotten. You may exercise this right if we are still processing your data, particularly in the following cases:
– no longer necessary for the purposes for which the data was collected or otherwise processed;
– withdrawal of your consent to the processing of personal data, where there is no other legal basis for further processing;
– objection raised by you to the processing of personal data, where there are no overriding legitimate grounds for processing;
– objection raised by you to the processing of personal data for marketing purposes;
– processing of your data is unlawful;
– there is a legal obligation to delete the data.

Restriction of processing – in certain situations, you may request that we limit our actions to essentially just storing the information about you. These are cases where:
– you dispute the accuracy of the personal data we process – for the period allowing us to verify the accuracy of the data;
– the processing of your personal data is unlawful, but instead of deleting it, you prefer the restriction of processing;
– we no longer need your personal data for processing purposes, but you need it for the establishment, exercise, or defence of legal claims;
– you have objected to the processing of your personal data – only until it is determined whether your interests outweigh our legitimate grounds for processing.

Data portability – you have the right to receive your data in a commonly used, machine-readable format and to transmit it to another controller, if:
– processing is based on your consent or contract; and
– processing is carried out in an automated manner.

Objection – for reasons related to your particular situation, you may object to certain operations we carry out, particularly in the following cases:
– when we base our processing on our legitimate interest;
– when we process your personal data for scientific or historical research purposes or for statistical purposes.

However, please note that if, despite your objection, we conclude that there are important, legitimate grounds for processing that override your interests, rights, and freedoms, or grounds for the establishment, exercise, or defence of legal claims, we will continue to process your data subject to the objection to the necessary extent. If you disagree with such an assessment, you may exercise your right to lodge a complaint with the supervisory authority (more information below).
Complaint to the supervisory authority – in relation to our actions as the data controller, you have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (PUODO).

A detailed description of the complaint procedure is available at: https://uodo.gov.pl/pl/83/155
. Of course, if you have any comments regarding our actions, we encourage you to first contact us at .

5. What are “cookies”? How do we use them?

Cookies are small text files sent by our server and stored on your device (e.g., on your computer’s hard drive). They store information that we may need to adapt to how you use our website and to collect statistical data. During your visit to our website, we can learn, for example, which browser and operating system you use, your IP address, which pages of our website you visited, and the city where the device you used to access our site was located.

All information obtained this way is collected as statistical data and is used by us solely for the purposes outlined in this policy. Cookies are by no means harmful to you or the device you are using, as they do not make any configuration changes to it.

Of course, you can change how cookies are used, including blocking or deleting them via your web browser or service configuration. However, please note that such operations may prevent or significantly hinder the proper functioning of our website, such as significantly slowing it down. Therefore, we recommend not disabling cookies in your browser.

Cookies used on our website:
– technical – includes cookies necessary for the proper functioning of the site, such as information that you have accepted or rejected cookies;
– analytical – used for analysing statistical user behaviour on the site (improving the site’s performance), not including information allowing identification of a specific user.