Privacy Policy

Data Administrator

The administrator of personal data is Grupa IDEACTO Sp. z o.o. with its registered office in Wrocław (50-307) at ul. Wyszyńskiego 143/6, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for Wrocław-Fabryczna in Wrocław, VI Commercial Division of the National Court Register, under KRS number 0000858322, share capital in amount of PLN 5,000, TIN 8992885051.

Contact with the administrator is possible via e-mail address kontakt@ideacto.pl

Data processing without separate consent

We may process personal data without express consent in the following situations:

• Responding to a request sent by the contact form — the legal basis is the necessity of data processing for the performance of the contract (Article 6 (1) (b) of the GDPR); the consequence of failure to provide data will be the inability to send the contact form.
  
• Responding to a request sent by the recruitment form — the legal basis is the necessity of data processing for the performance of the contract (Article 6 (1) (b) of the GDPR); the consequence of failure to provide data will be the inability to send the recruitment form.
  
• Contact the person who responded to our surveys — the legal basis is the necessity of data processing for the performance of the contract (Article 6 (1) (b) of the GDPR); the consequence of failure to provide data will be the impossibility of contact.
  
• Statistical measurement of website traffic — the legal basis is the legitimate interest of the controller (Article 6 (1) (f) GDPR).

Personal data will be processed for the period necessary for the performance, termination or expiration of the contract and for the period after which any claims expire.

Data processing after consent

We may process personal data subject to separate consent in the following situations:

• Sending marketing information to the specified email address (newsletter) — the legal basis is the consent of the data subject (Article 6 (1) (a) of the GDPR); the consequence of failure to provide data will be the failure to receive e-mails from the Controller.

Personal data will be processed until receipt of an appropriate request (deletion of data or withdrawal of consent to their processing) from the data subject.

Data transfer

Personal data obtained from the contact and recruitment form are not transferred or sold to any other entities.

Certain personal data and activities may be transferred outside the EEA (European Economic Area):

• Personal data obtained from the newsletter subscription form to The Rocket Science Group LLC as part of the Mailchimp service,
• Personal data collected in the statistical measurement of traffic on the website to Google LLC as part of the Google Analytics service. You can revoke your consent to the collection and processing of data within the scope of Google Analytics using the tool Google Analytics Opt-Out.
• Some of your activity to Google LLC as part of the Google reCAPTCHA service. Detailed information can be found in Google's Privacy Policy.

Cookie Files

The administrator also uses “cookies” to analyze the use of the website and marketing (retargeting). The administrator uses the services of entities:

• Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Additional information is available at privacy policy Google.
• Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Additional information is available at privacy policy Facebook.

You can refuse the use of “cookies” by modifying your browser settings.

Profiling

Personal data will not be used for automated decision-making and profiling.

Additional rights

The data subject has the right to access the content of their data, receive a copy thereof, rectify, delete, limit processing, transfer data, object, withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. You also have the right to lodge a complaint with the President of UoDo regarding the violation of the rights to the protection of personal data or other rights granted under the GDPR