This website uses cookies to give you the best possible service. Cookie information is stored in your browser and performs functions such as recognizing you when you return to our website and helping our team understand which sections of the website you find most interesting and useful.
Valid from: 28/02/2024
PRIVACY POLICY
1. General provisions
- This privacy policy is for informational purposes only. It primarily contains rules regarding the processing of personal data by the Administrator on the Website, including the basis, purposes of processing, and rights of data subjects, as well as information regarding cookies and analytical tools used on the Website.
- The Controller of Personal Data collected via the Website is SGP – SORTING GROUP POLNAD SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Częstochowa at ul. Legionów 92, 42-202 Częstochowa, entered into the National Court Register under the KRS number: 0000300466; district court where the company documentation is kept: District Court in Częstochowa, 17th Commercial Division of the National Court Register; share capital: PLN 50 000,00, Tax Identification Number (NIP): 9492069403, National Business Registry Number (REGON): 240833412, hereinafter referred to as the Controller, which is also the Service Provider of the Website.
- You can contact the Administrator by phone at the following number: +48 34 361 31 18, or in electronic form via e-mail to the address biuro@sgpgroup.eu
- The Controller has appointed a Data Protection Supervisor, Ms. Magdalena Cichoń, who can be contacted at the Controller’s registered office address or by e-mail: iodo@sgpgroup.eu.
- Personal data are processed by the Controller in accordance with applicable law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the GDPR.
- Using the Website, including participation in recruitment processes, is voluntary, as is providing personal data on the Website.
- The Administrator makes every effort to protect the interests of the persons whose data it processes, in particular ensuring that the data it collects are processed in accordance with the law; collected for specified, lawful purposes and not subject to further processing incompatible with these purposes; factually correct and adequate in relation to the purposes for which they are processed; stored in a form which allows identification of the persons to whom they relate for no longer than is necessary to achieve the purpose of processing and processed in a way that ensures appropriate data security, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organizational measures.
2. Basics of personal data processing
- The Controller is entitled to process personal data when at least one condition is met: (1) the data subject has consented to the processing of his or her personal data for one or more specific purposes; (2) processing is necessary to fulfill a legal obligation to which the Controller is subject, or (3) processing is necessary for the purposes of the legitimate interests pursued by the Controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
3. Purpose, basis and period of personal data processing
The Administrator may process personal data for the purposes and bases indicated below and for the period indicated:
| Purpose of processing | The basis for processing | Storage period |
| Determining, investigating or defending claims that may be raised by the Administrator or which may be raised against the Administrator | Article 6(1)(f) of the GDPR Regulation – processing is necessary for the purposes of the legitimate interests of the Controller – consisting in establishing, pursuing or defending claims that may be raised by the Controller or may be raised against the Controller | Data is stored for the duration of the legitimate interest of the Administrator, but no longer than the limitation period for claims that may be brought against the Administrator (the basic limitation period for claims is 6 years) |
| Using the website of the Website and ensuring its proper functioning | Article 6(1)(f) of the GDPR Regulation – processing is necessary for the purposes of the legitimate interests of the Controller – consisting in the operation and maintenance of the Website | Data is stored for the duration of the legitimate interest pursued by the Controller, but no longer than the limitation period for the Controller's claims against the data subject arising from the Controller's business activities. The limitation period is specified by law, in particular the Civil Code (the basic limitation period for claims related to business activities is three years). |
| Keeping statistics and traffic analysis on the Website | Article 6(1)(f) of the GDPR Regulation – processing is necessary for the purposes of the legitimate interests of the Controller – consisting in keeping statistics and analysing traffic on the Website in order to improve its functioning | Data is stored for the duration of the legitimate interest pursued by the Controller, but no longer than the limitation period for the Controller's claims against the data subject arising from the Controller's business activities. The limitation period is specified by law, in particular the Civil Code (the basic limitation period for claims related to business activities is three years). |
4. Data recipients
- Personal data of Website Users may be transferred to the following recipients:
- Service providers supplying the Controller with technical, IT and organizational solutions enabling the Controller to conduct business activities (in particular software, e-mail, hosting providers, company management software providers and providers of technical support to the Controller) – access is made only in the case and to the extent necessary to achieve the purpose of processing in accordance with this privacy policy.
- Legal service providers providing legal support to the Controller – access is provided only in the case and to the extent necessary to achieve the purpose of processing in accordance with this privacy policy.
- Providers of social plugins placed on the Website:
- Meta Platforms Ireland Ltd. – The Administrator uses social plugins from Facebook and Instagram on the Website and therefore shares the Website user’s data with Facebook and Instagram to the extent and in accordance with the privacy policies available at the links, respectively for Facebook: https://www.facebook.com/privacy/policy, and Instagram: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
- Linkedin Ireland Unlimited Company – The Administrator uses social plugins of the Linkedin service on the Website and therefore makes the Website user data available to Linkedin to the extent and in accordance with the privacy policies available at the link: https://pl.linkedin.com/legal/privacy-policy
- Google Ireland Limited – The Administrator uses YouTube social plugins on the Website and therefore makes the Website user data available to Google to the extent and in accordance with the privacy policies available at the link: https://policies.google.com/privacy?hl=pl
- The data controller does not transfer data outside the European Economic Area, subject to the transnational nature of data flows within Facebook, Instagram, Linkedin, YouTube using contractual clauses used by these services approved by the European Commission and decisions of the European Commission confirming the adequate level of data protection in relation to specific countries.
- Information on automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR, and important information on the principles of such decision-making, as well as on the significance and anticipated consequences of such processing for the data subject – at present, the Controller does not undertake and does not plan to undertake such activities.
5. Rights of the data subject
- The right of access, rectification, restriction, deletion or transfer - the data subject has the right to request from the Administrator access to his or her personal data, rectification, deletion ("right to be forgotten") or limitation of processing and the right to object to processing, and also has the right to transfer his data. Detailed conditions for exercising the above-mentioned rights are indicated in Art. 15-21 of the GDPR Regulations.
- The right to withdraw consent at any time – a person whose data is processed by the Controller on the basis of expressed consent (based on art. 6 sec. 1 letter a) or art. 9 sec. 2 letter a) of the GDPR Regulation) has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
- The right to lodge a complaint with a supervisory authority – an individual whose data is processed by the Controller has the right to lodge a complaint with a supervisory authority in the manner and procedure specified in the provisions of the GDPR and Polish law. The supervisory authority in Poland is the President of the Personal Data Protection Office.
- The right to object - the data subject has the right to object at any time - for reasons related to his or her particular situation - to the processing of his or her personal data based on Art. 6 section 1 letter e) (public interest or tasks) or f) (legitimate interest of the administrator), including profiling based on these provisions. In such a case, the Administrator is no longer allowed to process this personal data, unless he demonstrates the existence of valid legally justified grounds for processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing or defending claims.
In order to exercise the rights referred to in this point of the privacy policy, you can contact the Administrator by sending an appropriate message in writing or by e-mail to the Administrator's address indicated at the beginning of the privacy policy.
6. Cookies on the Website and analytics
- The website uses cookies and similar technologies, among others, to adapt the website to the needs of users and for statistical purposes.
- Cookies are small pieces of information in the form of text files sent by the server and stored on the website visitor's side. Cookies that may be sent by the website can be divided according to the following criteria:
- Due to the supplier:
- Own (created by the Website page)
- Owned by third parties
- Due to the period of their storage on the website visitor's device:
- Persistent – stored for a specified period of time defined by the file parameters or until they are manually deleted
- Due to the purpose of their use:
- Necessary – enabling the website to function
- Functional – enabling the website to be adapted to the user
- Analytical and performance – collecting information about how the website is used.
- Due to the supplier:
- Analytical cookies are not automatically installed on the website user's device. The user can consent to the installation of analytical cookies by expressing consent on a banner displayed when opening the website. After clicking the "Accept all" button, the Administrator will be authorized to install cookies in accordance with the browser settings used by the website user. The user can also consent to the installation of only selected analytical cookies. To do this, click the "Customize" button on the banner displayed when opening the website and select the cookies to which the website user wishes to consent. Consent can be withdrawn at any time. To do this, click the icon in the lower left corner (consent preferences) and change the analytical cookie settings by deactivating the previously granted consent.
- Most web browsers accept cookies by default. However, everyone can specify the terms of use of cookies through their browser. This means that you can partially or completely disable the ability to save cookies. In the latter case, this may affect the functionality of the website. Detailed information on changing cookie settings and deleting them yourself is available in your browser's help section or by clicking the links below:
- Chrome browser: https://support.google.com/chrome/answer/95647?hl=pl
- Firefox browser: https://support.mozilla.org/pl/kb/wzmocniona-ochrona-przed-sledzeniem-firefox-desktop?redirectlocale=pl&redirectslug=wlaczanie-i-wylaczanie-ciasteczek-sledzacych
- Internet Explorer browser: https://support.microsoft.com/pl-pl/windows/usuwanie-plik%c3%b3w-cookie-i-zarz%c4%85dzanie-nimi-168dab11-0753-043d-7c16-ede5947fc64d
- Opera browser: https://help.opera.com/pl/latest/web-preferences/%23cookies
- Safari browser: https://support.apple.com/pl-pl/guide/safari/sfri11471/11.0/mac/10.13
- Microsoft Edge browser: https://support.microsoft.com/pl-pl/windows/program-microsoft-edge-i-przegl%c4%85danie-danych-a-prywatno%c5%9b%c4%87-bb8174ba-9d73-dcf2-9b4a-c582b4e640dd
- The Administrator may use Google Analytics services provided by Google Ireland Limited on the Website. These services help the Administrator compile statistics and analyze traffic on the Website. Data collected as part of this service is processed to generate statistics that aid in website administration and traffic analysis on the Website. The data is aggregated. Full information on the processing of personal data of Website visitors by Google Ireland Ltd. can be found in the Google privacy policy: https://policies.google.com/technologies/partner-sites
- The Administrator may use social plugins of the "X" service (formerly Twitter) on the Website (e.g. sharing content on the X service) and therefore collects and shares personal data of the User using the Website to Twitter International Company to the extent and in accordance with the privacy policies available here: https://twitter.com/privacy
7. Final provisions
The Website may contain links to other websites. After visiting other websites, the Administrator encourages you to review the privacy policies established there. This privacy policy applies only to the Administrator's Website.