PRIVACY POLICY
WHAT IS THE PRIVACY POLICY?
We would like to familiarise you with the details of our processing of your personal data in order to provide you with full knowledge and comfort in using our website.
As we are in the internet business ourselves, we know how important it is to protect your personal information. That is why we make a special effort to protect your privacy and the information you provide to us
We carefully select and apply appropriate technical measures, in particular those of a programming and organisational nature, to ensure the protection of personal data processed. Our website uses encrypted data transmission (SSL), which ensures the protection of data that identifies you.
In our Privacy Policy you will find all the most important information regarding our processing of your personal data.
We ask you to read it and promise that it will not take you more than a few minutes.
Who is the controller of the www.expatcafe.pl website?
The controller of the www.expatcafe.pl website is Katarzyna Siewruk running a business activity under the business name ExpatCafe , registered in the Central Registration and Information on Business Activity conducted by the minister responsible for economy at the address Komuny Paryskiej 44/29, 50-451 Wrocław, Tax Identification Number (NIP): 8981925195, Statistical Identification Number (REGON): 021192836 (i.e.: we).
PERSONAL DETAILS
What legal act governs the processing of your personal data?
Your personal data is collected and processed by us in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1), commonly referred to as: the RODO. To the extent not regulated by the RODO, the processing of personal data is governed by the Personal Data Protection Act of 10 May 2018.
Who is the controller of your personal data?
The controller of your personal data is:
Katarzyna Siewruk conducting business activity under the business name ExpatCafe
At ul. Komuny Paryskiej 44/29, 50-451, Wrocław
e-mail: contact@expatcafe.pl
tel.: +48 600 148 224
You can contact us about your personal data via:
– e-mail: contact@expatcafe.pl,
– postal mail: Komuny Paryskiej 44/29, 50-451, Wrocław
– by telephone: +48 600 148 224.
HOW WE PROCESS THE PERSONAL DATA YOU PROVIDE US WITH
What personal data we process and for what purposes?
On our website, we offer you a number of different services for which we process different personal data, based on different legal bases.
Purpose |
Personal data |
Legal basis for processing |
Data storage period |
conclusion and performance of a contract for the provision of paid services |
first name, surname, tax identification number (NIP), company, correspondence address, telephone number, e-mail address, bank account number |
Article 6(1)(b) of the GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until the statute of limitations for claims |
opening and maintaining a user account |
e-mail address, telephone number, first name, surname, correspondence address |
Article 6(1)(b) of the GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until your account is deleted |
opening and maintenance of an account for the Announcer |
e-mail address, telephone number, first name, surname, company, business address, logo |
Article 6(1)(b) of the GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until your account is deleted |
maintenance of the Announcer’s profile |
e-mail address, telephone number, first name, surname, company, business address, logo, social media pages |
Article 6(1)(b) of the GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until your account is deleted |
contact form |
e-mail address, first name |
Article 6(1)(f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest consisting in maintaining continuity of communication and enabling contact with us in matters of business |
until you object to the processing of your personal data |
providing a form to send a message to the Announcer |
e-mail address, first name |
Article 6(1)(b) of the GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until the claims are barred |
newsletter
|
e-mail address |
Article 6(1)(a) of the GDPR, i.e. processing on the basis of your consent to the processing of your personal data |
until the date on which you withdraw your consent to data processing |
adding comments on blog articles and other contents on the site presented by us |
first name, e-mail address, profile name, web address |
Article 6(1)(f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in providing comments on articles and other contents presented by us on the web site |
until you object to the processing of your personal data |
application for recruitment in response to a job advertisement placed by the Announcer |
first name, e-mail address |
Article 6(1)(b) of the GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until the claims are barred |
marking Announcers as favourites |
data contained in the account |
Article 6(1)(f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in saving the Announcers you have selected as your favourites |
until you object to the processing of your personal data |
adding feedback on Announcers |
first name, e-mail address, profile name, web address |
Article 6(1)(f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in presenting the opinions of Announcers on the web site |
until you object to the processing of your personal data |
adding announcements |
data provided in the Announcer’s Profile |
Article 6(1)(b) of the GDPR, i.e. processing for the purpose of taking steps at your request prior to entering into a contract and processing necessary for the performance of a contract to which you are party |
until the claims are barred |
fulfilment of legal obligations arising from legislation, in particular tax and accounting legislation |
first name, surname, e-mail address, billing address, telephone number, bank account number |
Article 6(1)(c) of the GDPR, i.e. the processing is necessaryto comply with legal obligations incumbent on the controller resulting from legal regulations, in particular tax and accounting regulations |
until the expiry of the legal obligations incumbent on the Controller which justified the processing of personal data |
determination, investigation, enforcement and defence against claims in proceedings before the courts and other state bodies |
first name, surname, company, correspondence address, Tax Identification Number (NIP) or Statistical Identification Number (REGON), e-mail address, telephone number, IP address, bank account number |
Article 6(1)(f) of the GDPR, i.e. processing for the purpose of pursuing our legitimate interest in determining, pursuing and enforcing claims and defending against claims before the courts and other state bodies |
until the expiry of the statute of limitations for claims concerning the performance of the contract |
web site traffic analysis |
IP address |
Article 6(1)(f) of the GDPR, i.e. processing in order to pursue the legitimate interest of the controller consisting in analysing users’ traffic on the web site |
for 50 months after collection of the data or until you object to the processing of your personal data |
Voluntariness of providing personal data
The provision by you of the required personal data is voluntary, but it is a condition for us to provide services to you (e.g. opening an account).
Recipients of personal data
You can find the current list of entities to which we disclose your personal data here
Automated decision-making (including profiling)
We do not make automated decisions about you, nor do we use profiling.
Will we transfer your personal data outside the EEA or to an international organisation?
In order to use Google’s measurement, statistical and marketing tools, your personal data may be transferred to the United States, where Google LLC servers are located.
Google LLC is on the list of entities participating in the Privacy Shield programme (link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) and also applies the model contractual clauses on data security approved by the European Commission.
We use the MailChimp system for sending newsletters, the controller of which is The Rocket Science LLC, which means that your personal data processed in the framework of the newsletter service may be transferred to the United States, where the servers of The Rocket Science Group LLC are located.
The Rocket Science Group LLC is on the list of entities participating in the Privacy Shield program (link: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active), and uses model contractual clauses on data security approved by the European Commission.
WHAT RIGHTS DO YOU HAVE IN RELATION TO OUR PROCESSING OF YOUR PERSONAL DATA?
Under the GDPR you have the right to:
- request access to your personal data
- request the rectification of your personal data
- request the erasure of your personal data
- request the restriction of the processing of your personal data
- object to the processing of your personal data
- demand the transfer of personal data
If you submit any of the above-mentioned requests to us without undue delay – and in any case within one month of receipt of the request – we shall inform you of the action taken in respect of your request.
If necessary, we may extend the one-month period by further two months due to the complicated nature of the request or the number of requests.
In any event, we shall inform you of the extension of the period within one month of receipt of the request and shall give you the reasons for the delay.
Right of access to personal data (Article 15 of the GDPR)
You have the right to be informed whether we are processing your personal data.
- If we process your personal data you have the right to:
- access to your personal data,
- obtain information on the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of such data, the intended period of storage of your data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the President of the Office for Personal Data Protection, the source of such data, automated decision-making, including profiling, and the safeguards applied in connection with the transfer of such data outside the European Union;
- obtain a copy of your personal data.
If you wish to request access to your personal data, please submit your request to: contact@expatcafe.pl.
Right to rectification of personal data (Article 16 of the GDPR)
If your personal data is incorrect, you have the right to request us to rectify your personal data immediately. You also have the right to request that we complete your personal data.
If you wish to request rectification or completion of your personal data, please send your request to: contact@expatcafe.pl.
The right to erasure of personal data, the so-called “right to be forgotten” (Article 17 of the GDPR)
- You have the right to request the erasure of your personal data when:
- your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- you have withdrawn a specific consent, insofar as personal data was processed based on your consent;
- your personal data has been unlawfully processed;
- you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of your personal data is related to direct marketing;
- you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of legitimate interests pursued by us or a third party.
Despite your request for erasure of your personal data, we may still process your data in order to determine, assert or defend your claims, of which you will be informed.
If you wish to request the erasure of your personal data, please submit your request to: contact@expatcafe.pl.
The right to request the restriction of the processing of personal data (Article 18 of the GDPR)
You have the right to request the restriction of the processing of your personal data when:
- you challenge the accuracy of your personal data, in which case we will restrict the processing of your personal data for a period of time to allow you to check the accuracy of that data;
- the processing of your personal data is unlawful and you request the restriction of the processing of your personal data instead of the erasure of your personal data;
- your personal data is no longer necessary for the purposes of the processing, but it is necessary in order to determine, assert or defend your claims;
- you have objected to the processing of your personal data – until such time as we have ascertained whether our legitimate interests prevail over the grounds indicated in your objection.
If you wish to request the restriction of the processing of your personal data, please send your request to: contact@expatcafe.pl.
Right to object to the processing of personal data (Article 21 of the GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in relation to:
- processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Controller of the personal data or a third party;
- processing for the purposes of direct marketing.
If you wish to object to the processing of your personal data, please send your request to: contact@expatcafe.pl.
Right to request portability of personal data (Article 20 of the GDPR)
You have the right to receive your personal data from us in a structured, commonly used, machine-readable format and to send it to another controller of personal data.
As standard we will provide you with your personal data in CSV format. If you prefer to receive your data in another format, please indicate your preferred format in your request. Where possible, we will endeavour to provide you with the data in your preferred format.
You can also request that we send your personal data directly to another controller (as far as this is technically possible).
If you wish to request a transfer of your personal data, please submit your request to: contact@expatcafe.pl.
Can you withdraw your consent to the processing of personal data?
You may withdraw your consent to the processing of your personal data at any time.
The withdrawal of consent to the processing of personal data shall not affect the lawfulness of the processing carried out by us on the basis of your consent before its withdrawal.
If you wish to withdraw your consent to the processing of your personal data, please send your request to: contact@expatcafe.pl.
In the event that you wish to withdraw your consent to the processing of personal data for the purpose of providing the “Newsletter” service, you can opt out here.
Complaint to the supervisory authority
If you believe that the processing of your personal data breaches the provisions on data protection, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your normal residence, your place of work or the place where the alleged breach has been committed.
In Poland, the supervisory authority within the meaning of the GDPR is the President of the Office for Personal Data Protection, who as of 25 May 2018 replaced the Inspector General for Personal Data Protection (GIODO).
More information can be found here.
COOKIES
General information
When browsing the websites of this Web site, “cookies”, hereinafter referred to as “Cookies”, are used, i.e. small text information which is saved in your final device in connection with the use of the Web site. Their use is aimed at proper functioning of websites of the Web site.
These cookies allow us to identify the software you are using and to tailor the Web site to your individual needs.
Cookies typically contain the name of the domain from which they originate, the duration of their storage on your device and the assigned value.
Security
The cookies we use are safe for your device. In particular, it is not possible for viruses or other unwanted software or malware to enter your device via cookies.
Types of Cookies
We use two types of Cookies:
Session cookies: are stored in your device and remain there until your browser session ends. The saved information is then permanently deleted from the memory of your device. Session cookies do not permit the collection of any personal or confidential information from your device.
Permanent cookies: are stored in your device and remain there until you delete them. Ending the session of a given browser or switching off the device does not cause them to be deleted from your device. The mechanism of permanent Cookies does not allow collecting any personal data or any confidential information from your device.
Purposes
We also use third-party Cookies for the following purposes:
- the configuration of the Web site;
- the creation of statistics which helps us understand how visitors of the Web site use these websites, which makes it possible to improve their structure and contents by means of Google Analytics analytical tools, whose controller is Google Ireland Ltd. with its registered office in Ireland, Google’s privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
- determination of the user’s profile for the purpose of displaying him/her tailored materials in advertising networks using the Google Ads Internet advertising tool, whose controller is Google Ireland Ltd. based in Ireland, Google’s privacy policy is available at the following link: https://policies.google.com/privacy?fg=1;
- handling of the newsletter by means of the MailChimp system, whose controller is he Rocket Science Group LLC, MailChimp Privacy Policy is available at the following link: https://mailchimp.com/legal/privacy/;
- the use of Facebook Pixel marketing tools, whose controller is Facebook Ireland Ltd. Facebook’s privacy policy is available at the following link: https://pl-pl.facebook.com/privacy/explanation.
Cookies may be used by advertising networks, in particular Google, to display advertisements tailored to your preferences. For this purpose, information about your navigation or the time you used the website may be stored.
To view and edit information about your preferences collected by the Google advertising network, you can use the tool located at the link https://www.google.com/ads/preferences/.
By means of the settings of your Internet browser or through the configuration of the service, you can change your Cookies settings independently and at any time, specifying the conditions for storing and accessing Cookies in your device. You can change these settings so as to block the automatic handling of Cookies in the settings of your web browser or inform on their placement in your device each time. Detailed information on the possibility and methods of using Cookies is available in the settings of your software (web browser).