1. Data controller
The controller of your personal data is MS-PROGRESS Sp. z o.o., with its registered office at Rudzica 755, 43-394 Jasienica, KRS 0000466082, NIP (Tax ID) 5482663373 (hereinafter “MS-PROGRESS”, “we”).
Contact person for personal data matters: Alicja Sikora, e-mail: alicja.sikora@ms-progress.com, www.ms-progress.com. You may also contact us in writing at our registered office address.
2. What data we process and for what purpose
| Purpose | Scope of data | Legal basis |
|---|---|---|
| Responding to an enquiry submitted via the contact form, by e-mail or by phone | full name, company, position, e-mail, phone, content of the message | Art. 6(1)(f) GDPR - legitimate interest (handling correspondence); Art. 6(1)(b) GDPR - steps taken prior to entering into a contract |
| Preparing a quotation, concluding and performing a contract with a customer or supplier | contact details of persons representing the business partner | Art. 6(1)(b) and (f) GDPR |
| Conducting recruitment (application form, CV) | data from the CV and the form, to the extent specified in Art. 22¹ of the Polish Labour Code; other data - on the basis of consent | Art. 6(1)(c) GDPR in conjunction with Art. 22¹ of the Polish Labour Code; Art. 6(1)(a) GDPR - consent (additional data, future recruitment processes) |
| Sending the Knowledge hub newsletter | e-mail address, area of interest | Art. 6(1)(a) GDPR - consent |
| Statistics and marketing (cookies, LinkedIn Insight Tag, Meta Pixel) | cookie identifiers, IP address, data on website activity | Art. 6(1)(a) GDPR - consent |
| Accounting and tax obligations | data from accounting and billing documents | Art. 6(1)(c) GDPR |
| Establishing, pursuing or defending claims | data necessary to substantiate a claim | Art. 6(1)(f) GDPR |
3. How long we retain data
- correspondence and enquiries - until concluded, and thereafter until the expiry of the limitation period for any claims;
- business partner data - for the duration of the contract and until the expiry of the limitation period for claims and tax obligations (as a rule, 5 years from the end of the tax year);
- applicant data - until the recruitment process is completed, and where consent has been given for future recruitment processes - for no longer than 12 months or until consent is withdrawn;
- newsletter and marketing data - until consent is withdrawn;
- cookies - for the period specified in the Cookie policy.
4. Recipients of data
We may transfer your data only to entities that support us in conducting our business, under data processing agreements or as separate controllers: providers of hosting and e-mail services, IT services and newsletter distribution systems, accounting firms and law firms, courier companies, and operators of marketing tools - LinkedIn Ireland Unlimited Company and Meta Platforms Ireland Limited.
5. Transfers of data outside the EEA
In connection with the use of LinkedIn and Meta tools, data may be transferred to the United States. Such transfers take place on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
6. Your rights
You have the right to:
- access your data and obtain a copy of it;
- request rectification of your data;
- request erasure of your data;
- request restriction of processing;
- data portability (to receive your data and transmit it to another controller);
- object to processing based on legitimate interest;
- withdraw consent at any time - without affecting the lawfulness of processing carried out before its withdrawal;
- lodge a complaint with the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warszawa).
7. Voluntary provision of data
Providing your data is voluntary, but necessary for us to respond to an enquiry, prepare a quotation, conduct recruitment or send the newsletter. To the extent required by the Polish Labour Code, provision of applicant data is mandatory.
8. Automated decision-making
We do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.
9. Changes to this policy
This policy may be updated in connection with changes in legislation or in the services available on the website. The current version is always available on this page.