PRIVACY POLICY H4E SERVICES SP. Z O.O.
1. About us
The administrator of your personal data is H4E SERVICES sp. z o.o. (hereinafter: “H4E SERVICES”) with its registered office in Warsaw (00-020), at Chmielna 2/31 St. If you have any questions regarding our processing of your personal data, please read this Policy and, if in doubt, contact us: rodo@h4eservices.pl Personal data is obtained and processed in the manner and on the terms specified in this Policy.
2. General Provisions
At H4E SERVICES, we attach particular importance to protecting the privacy of our customers, contractors and employees. One of the key aspects of this process is the protection of the rights and freedoms of individuals in connection with the processing of their personal data. We strive to ensure that the processing of your data is carried out in accordance with the provisions of the General Data Protection Regulation 2016/679/EC (hereinafter referred to as “RODO”), the Personal Data Protection Act, as well as specific regulations (contained in the Labor Law or the Accounting Act, among others). H4E SERVICES, with its registered office in Warsaw (00-020), Chmielna 2/31 St., is a personal data controller within the meaning of Article 4(7) of the RODO. We also use the services of processors referred to in Article 4(8) of the RODO – they process personal data on our (the controller’s) behalf (these are, for example, accounting or IT companies). We implement appropriate technical and organizational measures to ensure a degree of security corresponding to the possible risk of violating the rights or freedoms of individuals with different probability of occurrence and severity of the threat. Our data protection measures are based on adopted policies and procedures and regular training to improve the knowledge and competence of our employees in this area.
3. What we use your personal data for
We use the contact data we obtain from clients and customers (e.g., the data of their employees) to conclude and efficiently execute contracts. As an employer, we process the data of employees and those who cooperate with us on a basis other than employment. We share your data with third parties with your consent or when we are required to do so by law.
4. On what terms and on what basis we process your data
We endeavor to protect the interests of data subjects and, in particular, ensure that the data are: processed lawfully, fairly and in a transparent manner for the data subject; collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes; adequate, relevant and limited to what is necessary for the purposes for which they are processed; correct and updated as necessary (we take steps to ensure that personal data that are inaccurate in light of the purposes for which they are processed are promptly deleted or rectified); kept in a form that allows identification of the data subject for no longer than is necessary for the purposes for which they are processed; processed in a manner that ensures their adequate security, including protection against unauthorized or unlawful processing and accidental loss or destruction. We process your data most often when it is necessary for the performance of a contract (provision of services) to which you are a party, or to take action at your request even before the conclusion of the contract (Article 6(1)(b) RODO). We may also process your data on the basis of the consent you have given us (Article 6(1)(a) RODO), which can be withdrawn at any time. In some situations, the processing is necessary to fulfill a legal obligation incumbent on us (as a controller). Such obligations arise, for example, from legal regulations, e.g. tax or accounting obligations (Article 6(1)(c) RODO). Processing may also be necessary for purposes arising from our legitimate interests, examples of which include pursuing claims in connection with our business activities or responding to questions or requests addressed to us (Article 6(1)(f) RODO).
5. What rights you have
We take appropriate measures to provide you with all relevant information in a concise, transparent, understandable and easily accessible form, in clear and simple language, and to conduct all communications with you regarding the processing of personal data in connection with your exercise of your right (if the prerequisites for its relaziaion are met) to: information provided on the acquisition of personal data; information provided on request – whether data is being processed, and other matters set forth in Article 15 of the RODO – including the right to obtain a copy of your data; rectification of your data; deletion of your data (“right to be forgotten”); restriction of processing; data portability; to object to processing on the grounds of your particular situation (where the basis for processing is our legitimate interest); not to be subject to a decision based solely on automated processing (including profiling); information about a data protection breach. However, some of the above rights are available only under specific circumstances. In addition, if your personal data is processed on the basis of consent, you have the right to withdraw it. Consent may be withdrawn at any time, but its withdrawal does not affect the legality of processing carried out prior to its withdrawal. If you wish to exercise the right in question, please contact us by email or post: email address: rodo@h4eservices.pl mailing address: H4E SERVICES sp. z o.o. with registered office in Warsaw (00-020), Chmielna 2/31 St. The security of your data is our priority. However, if you feel that by processing your personal data we violate the provisions of RODO, you have the right to file a complaint with the President of the Office for Personal Data Protection.
6. How we will contact you
We will provide information in writing or by other means, including electronically where appropriate. If you request it, we may provide information orally, as long as we confirm your identity by other means. If you communicate your request electronically, the information will also be provided electronically, if possible, unless you indicate to us another preferred form of communication.
7. Within what timeframe we will comply with your request
We strive to provide information without undue delay – as a rule, within one month of receiving your request. If necessary, this deadline may be extended by another two months due to the complexity of the request or the number of requests. However, in any case, within one month of receipt of the request, we will inform you of the action taken and, if applicable, of the extension of this deadline and the reasons for the delay in responding.
8. Subcontractors/processors
If we work with entities that process personal data on our behalf, these are processors that provide sufficient guarantees to implement appropriate technical and organizational measures so that the processing meets the requirements of the RODO and protects the rights of data subjects. We carefully check the entities to which we entrust the processing of your data. We enter into detailed contracts with them, and periodically inspect the compliance of processing operations with the content of these contracts and the law.
9. How we take care of the processing of your data
In order to meet the requirements of the law, we have developed detailed procedures covering the following issues: data protection by design and data protection by default, data protection impact assessment, breach notification, maintenance of a register of data processing operations, data retention, exercise of data subjects’ rights, among others.
