If you have come to this page, it means that the protection of your personal data is important to you. We want to assure you that we care about your privacy, which is important to us. With this goal in mind, we have implemented legal and technical measures to strengthen its protection further.
In accordance with the GDPR, below we present the rules for the processing of your personal data by us. Read the most important questions regarding your personal data, and in case of any doubts regarding the Privacy Policy, please contact us at: kontakt@evostudio.pl
PRIVACY
§1 Who is the Administrator of your personal data?
The data controller is EvoStudio sp. z o.o. with its registered office in Reda (ul. Gdańska 26/11, 84-240 Reda), NIP: 5882459771, REGON: 38652424400000, KRS: 0000849881. You can contact the Administrator by writing to the following e-mail address: kontakt@evostudio.pl
§2 For what purpose do we collect your data and how long do we store it?
We may process your data for the following purposes:
1. Communication with you, including answering questions provided by the contact form, e-mail, etc.;
The data will be processed based on the legitimate interest of the Administrator, in the form of communication with Website Users (Article 6 (1) (f) of the GDPR). Your data will be processed no longer than until you object or the business purpose ceases. Providing this data is voluntary, but at the same time necessary to communicate with you. The data may also be processed during the archiving process for internal purposes, based on the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), until an objection is raised or the business purpose ceases.
2. Conclusion of the contract and its implementation (placing an order);
3. Establishing, defending and pursuing claims;
4. Fulfilling legal obligations incumbent on the Administrator (e.g. tax and archiving obligations);
The data necessary for the conclusion and performance of the contract will be processed for the duration of the contract, including the duration of the exercise of rights under the contract, such as the right to complain under the warranty (Article 6 (1) (b) and (f) of the GDPR). Providing this data is voluntary, but at the same time necessary to conclude and perform the contract.
Additional data provided in order to, e.g. improve the performance of the contract, will be processed no longer than until you object or the business purpose ceases, based on a legitimate interest in customer service (Article 6 (1) (f) of the GDPR).
After this time, the data will be processed for the period of limitation of claims, based on the legitimate interest of the Administrator in order to defend against claims, as well as to establish and pursue claims (Article 6 (1) (f) of the GDPR).
If the data is necessary to fulfil legal obligations incumbent on the Administrator (such as issuing and storing invoices) – the data will be processed for this purpose for no longer than 6 years (archiving obligations regarding accounting documents), unless the law requires a longer period (Article 6 (1) (c) of the GDPR).
The data may also be archived for internal and statistical purposes, until you object or the business purpose ceases, based on the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR).
5. Provide marketing information (e.g. sending a newsletter and information about services, products, promotions, free content using other tools, e.g. chatbot, telephone);
The data will be processed based on the legitimate interest of the Administrator, in the form of marketing of the Administrator's products and services (Article 6 (1) (f) of the GDPR). The data will be processed no longer than until you object or the business purpose ceases – whichever occurs first. Providing data is voluntary, but necessary to receive marketing / commercial information.
Pursuant to Article 10 of the Act on the provision of electronic services, for the purposes of maintaining commercial and telephone communication, we need your consent. You can withdraw it at any time, by clicking the link in the footer of the e-mail or by writing to me at the address given above.
6. Administer and manage the website and groups on social media platforms (e.g. Facebook (Meta), Instagram, LinkedIn), in the case of data processing on social platforms, including communication and marketing targeting;
This data will only be processed if you decide to: like the page / join the group / select the "Follow" option or otherwise leave your data on the platform managed by me, e.g. in the form of posting a post or comment. The data will be processed for the duration of the existence of the page/group or until you object, which may be done by unclicking on the "Like", or "Follow" option, deleting the comment/post or in any other way provided for within the platform/website or by contacting me. Please be advised that the rules relating to the page / fanpage / group are set by the Administrator, while the rules of using the social networking site on which the page / fanpage / group is located are determined by the entity managing these portals.
7. Analytical and statistical;
Data processing for analytical and statistical purposes consists in particular in the analysis of data obtained automatically when using the website, including cookies. The data is processed on the basis of the legitimate interest of the Administrator, in the form of adjusting the content of the Website to the User's preferences and optimizing the use of the Website; creating statistics that help to understand how Users use the Website, which allows improving its structure and content (Article 6 (1) (f) of the GDPR). The data may also be archived for internal and statistical purposes, based on the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), until you object or the business purpose ceases.
8. Promotion and marketing;
In a situation where you provide us with your data, in particular in the form of an opinion regarding a product or service, including image data, they will be processed based on the legitimate interest of the Administrator in the form of marketing, for the purpose of improving the quality of services and products and promoting the Administrator's services and products. These data will be processed for the period necessary to achieve business purposes or until an objection is raised. Providing data is voluntary.
9. Recruitment;
The data may be processed for the time necessary for the recruitment process and the conclusion of the contract (Article 6 (1) (b) and Article 6 (1) (c) of the GDPR), and in the case of additional data, voluntarily provided – based on your consent. They may also be used for the purposes of future recruitment – based on your consent – for a maximum period of 3 years (this period is counted from the end of the year in which the application was obtained). Providing personal data is voluntary, however, the transfer of some data may be necessary to carry out the recruitment process, as well as to conclude a contract. The consequence of not providing this data will be a failure to take the above-mentioned actions.
§3 To whom can we transfer your data?
We transfer your data to other entities only if it is necessary to achieve the purposes of processing referred to in §2 and only to the extent necessary to achieve this purpose. As a rule, we collect and process only the data that you have provided to us, subject to data collected automatically (cookies). More about cookies can be found in §7.
If necessary, your data may be transferred to entities with whom we cooperate in the implementation of the above-mentioned purposes, in particular a hosting company, an IT company / entity managing the website, a company providing accounting and accounting services, a company providing an invoicing program, a company providing newsletter services, a company providing cloud services, entities providing marketing services, entities providing administrative services, entities providing consulting services, subcontractors, lawyers, couriers or postal operators, training platform, social platform, customer service platform, a platform for arranging visits, platform for providing products or services, other entities that support the Administrator in achieving the purposes of the processing.
As a rule, data will not be transferred outside the EEA, except as described below. In other cases, if the data is transferred outside the EEA, it will be based on your consent, standard contractual clauses or on the basis of other safeguards provided for in the GDPR, after fulfilling the m.in information obligation.
Services provided by Google or Facebook (META) are generally performed by entities based in the European Union. However, due to the global nature of these entities, your data may be transferred to the USA in connection with their storage on American servers (in whole or in part). Regardless, Google and Facebook have implemented GDPR-compliant safeguards to protect your personal data through the use of standard contractual clauses. More information about the principles of data processing by the above-mentioned providers can be found in the Privacy Policies of each entity.
§4 What rights do you have?
In connection with the GDPR, you have the right to access your personal data, rectify personal data, delete personal data, limit the processing of personal data, object to the processing of personal data, transfer personal data, withdraw consent to data processing; withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal. Detailed information on the above-mentioned rights can be found in the GDPR Regulation, i.e. in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
If you believe that your personal data is processed contrary to applicable law, you have the right to complain to the President of the Office for Personal Data Protection. In this case, however, I encourage you to contact me in advance to clarify your doubts.
§5 Is your data profiled?
The administrator analyzes personal data in an automated manner, using tools provided by software providers (e.g. using statistics, history), only to the extent that it does not cause any legal effects towards you or does not significantly affect your situation, including guaranteed rights and freedoms. The purpose of data processing in an automated manner is to get to know the preferences of Users (more information about the analysis can be found in §7 Cookie Policy).
§6 Legal provisions applicable to personal data
In matters not regulated, the relevant provisions of law shall apply, including European law (e.g. GDPR).
§7 Cookies policy
The website does not automatically collect any information, except for the information contained in cookies. These data are collected in a way that prevents the identification of the User, so-called anonymous data.
Cookies are IT data, in particular text files, which are stored on the Website User's end device and are intended for using the Website. Cookies usually contain the name of the website from which they originate, the time of their storage on the end device and a unique number.
Cookies are used: to adapt the content of the Website to the User's preferences and to optimize the use of the Website, as well as to create statistics that help to understand how Users use the Website, which allows improving its structure and content.
You can make changes to the settings for cookies yourself. In many cases, the web browser by default allows the storage of cookies on the User's end device. Detailed information about the possibilities and ways of handling cookies is available in the software (web browser) settings. Lack of consent to cookies may limit the operation of some functionalities on the Website.
The Administrator uses technologies that observe the actions taken by the User within the Website:
- Facebook conversion pixel (Meta) supplied by Meta Platforms Ireland Limited – to manage advertisements on Meta and conduct remarketing activities; Facebook Pixel is a piece of code published on a website that allows you to reach the target group based on the data of people who used the website. As part of the Facebook Pixel function, it is therefore only possible to display published advertisements on Meta portals to users who have shown an interest in products or services or who have common factors to the aforementioned persons. These data are processed based on the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR). Detailed information about the Facebook pixel can be found at Facebook Privacy Policy (Meta).
- Google tools, including Google Analytics provided byGoogle LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. I use the data obtained as part of the use of the above-mentioned tool to analyze Site statistics. Google Analytics uses its own cookies to analyze the actions and behaviour of Website Users. These files are used to store information, e.g. from which page the User came to the current website. Help improve the Site. These data are processed based on the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR). Detailed information on. Google Analytics, can be found at: Google's tools policy.
§8 Social plugins
The Website uses plug-ins, widgets and other social tools provided by portals such as: Facebook (Meta), Instagram, YouTube, LinkedIn. The rules regarding the processing of personal data are described directly on the websites of the above-mentioned Service Providers.
§9 Co-administration
Data processed for the purposes of statistics collected as part of the Facebook platform (Meta) are co-administered by the Administrator and Meta Platforms Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. Detailed rules regarding joint data administration, including information about your rights, are described on the Privacy Policy page.
The data processed within the LinkedIn platform is jointly controlled by Administrator and LinkedIn Ireland Unlimited Company, adres: Legal Dept. (Privacy Policy and User Agreement), Wilton Place, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. Detailed rules regarding joint data administration, including information on your rights, are described on the website Privacy.
The administrator processes data in based on the legitimate interest of the Administrator, consisting in conducting an analysis of Users' activity, as well as their preferences, in order to improve the functionalities used and services provided. In matters concerning personal data, you can contact both the Administrator and the Co-administrator.