Privacy Policy
1.0. INTRODUCTION
The Privacy Policy describes why and how we (Nivalit) collect and use
personal data and provides information about individuals’ rights. When
using personal data the Privacy Policy is to be transparent about why and
how we process your personal data.
We may use personal data for a variety of purposes. Especially, We process
personal data provided to us for purposes described below or as otherwise
stated at the start of processing your personal data.
1.1. DEFINITION OF PERSONAL DATA
Personal data means any information relating to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier. Personal data also refers to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of an individual
2.0. PERSONAL DATA CONTROLLER
The contorller of your personal data is Nivalit spółka z ograniczoną odpowiedzialnością, the
company organized under the laws of Poland, with its registered office at:
Wadowicka 6/67, 30-415 Kraków, Poland, entered into the register of
business entities maintained by the National Court Register in the District
Court (Sąd Rejonowy) for Kraków-Śródmieście in Kraków, XI Commercial
Division of the National Court Register, under the registration number:
0000857093, tax identification number (NIP): 6762584557, statistical
identification number (REGON): 386863710 (hereinafter referred to as „Nivalit” or „ The Personal Data Controller”).
3.0. LEGAL BASIS FOR PROCESSING:
Fulfilling the obligations according to the art. 13 sec. 1 and 2 of
Regulation (EU) 2016/679 of the European Parliament and of the Council of
27 April 2016 on the protection of natural persons with regard to the
processing of personal data and on the free movement of such data, and
repealing Directive 95/46/EC (General Data Protection Regulation),
hereinafter be referred to as “GDPR” the Personal Data Controller informs
that legal bases for each processing activity might be different, depending
on the purpose of processing personal data – specified in the relevant
sections.
3.1. BUSINESS CONTACTS
Nivalit processes your personal data on the following legal bases and for
the following purposes:
§ Art. 6 sec. 1 let. f) of the GDPR [legitimate interests pursued by the
Nivalit]
– Offering of Nivalit’s services;
– Developing Nivalit’s businesses and services;
– Providing information to you about us and our range of services;
– Performing analytics such as on market trends, relationships maps or
sales opportunities;
– Improving the quality of our services;
– Sending newsletters and informing about Nivalit’s – applies only for data
subjects who gave explicit consent for receiving marketing communication;
– Exercising legal claims.
3.2. CONTRACTORS
Nivalit processes your personal data on the following legal bases and for
the following purposes:
§ Art. 6 sec. 1 let. b) of the GDPR [the performance of a contract to which
the data subject is a party]
– Concluding and executing the contract;
§ Art. 6 sec. 1 let. c) of the GDPR [a legal obligation] or art. 9 sec. 2
let. b and h) of the GDPR [carrying out the obligations and exercising
specific rights in the field of social security and social protection law
and the provision of health or social care or treatment or the management
of health or social care systems and services]
– Collecting the advance for the personal income tax (PIT), social security
contributions or health security contributions;
§ Art. 6 sec. 1 let. f) of the GDPR [legitimate interests pursued by the
Nivalit];
– Business related advertising, marketing and public relations in
accordance with the provided services;
– Personnel management, surveys, benchmarking and other personnel related
analyses;
– Exercising legal claims, investigating and defending against claims;
– Monitoring of business mobile devices computers, file and database
servers and network traffic
3.3. CLIENTS AND SUBCONTRACTORS WHO ARE NATURAL PERSONS
Nivalit processes your personal data on the following legal bases and for
the following purposes:
§ Art. 6 sec. 1 let. b) of the GDPR [the performance of a contract or to
take steps at the request of the data subject prior to entering into a
contract]
– Establishing cooperation with a corporate Client or Subcontractor;
– Enabling the provision of professional services to Clients;
– Ordering and receiving services from Clients and Subcontractors;
§ Art. 6 sec. 1 let. c) of the GDPR [compliance with a legal obligation]
– Fulfilling tax obligations
§ Art. 6 sec. 1 let. f) of the GDPR [legitimate interests pursued by the
Nivalit];
– Clients and Subcontractors relationship management;
– Performing data analytics
– Administration and management;
– Offering of Nivalit’s services;
– Exercising legal claims, investigating and defending against claims.
3.4. NATURAL PERSONS WHOSE PERSONAL DATA WE GAIN IN CONNECTION WITH
SERVICES PROVIDED TO OUR CLIENTS
Nivalit processes your personal data on the following legal bases and for
the following purposes:
§ Art. 6 sec. 1 let. a) of the GDPR [legitimate interests]
– Enabling the provision of professional services to Clients;
– Administration of services;
– Developing Nivalit’s businesses and services;
– Administration and management, in particular the website, IT systems and
business applications;
– Performing data analytics;
– Safety management and operational risk assessment;
– Exercising legal claims, investigating and defending against claims;
– Administration, management and development of FamiSpot (Nivalit’s
application).
3.5. RECRUITMENT
Nivalit processes your personal data on the following legal bases and for
the following purposes:
§ Art. 6 sec. 1 let. a) of the GDPR [consent]
– Participating in recruitment processes
– Sending informations about job offers
§ Art. 6 sec. 1 let. b) of the GDPR [taking steps at the request of the
data subject prior to entering into a contract] or art. 6 sec. 1 let. c) of
the GDPR [legal obligation art. 221 § 1 of the Labor Code and the Ordinance
of the Minister of Family, Labour and Social Policy regarding keeping
documentation related to employment] or art. 6 sec. 1 let. of the GDPR
[consent applies if candidate points out another data than in Labor Code]
or art. 9 sec. 2 let. a) of the GDPR [consent applies if special categories
of personal data (sensitive data) are contained in application] or art. 10
of the GDPR [processing is authorised by Union or Member State law applies
if a job position requires collecting personal data relating to criminal
convictions and offences or related security measures]
– Performing a recruitment process for the job offered
§ Art. 6 sec. 1 let. f) of the GDPR [legitimate interests pursued by the
Nivalit];
– Administration and management;
– Exercising legal claims, investigating and defending against claims.
3.6. WEBSITE VISITORS
Nivalit processes your personal data on the following legal bases and for
the following purposes:
§ Art. 6 sec. 1 let. a) of the GDPR [consent]
– Monitoring and enforcing compliance with our terms and conditions for use
of our website;
– Offering of Nivalit’s services;
– Providing information to you about us and our range of services;
– Administering and managing our website;
– Aggregating data for website analytics and improvements;
– Exercising legal claims, investigating and defending against claims.
3.7. NEWSLETTER
Nivalit processes your personal data on the following legal bases and for
the following purposes:
§ Art. 6 sec. 1 let. a) of the GDPR [consent] or art. 6 sec. 1 let. f) of
the GDPR [legitimate interest]
– Sending newsletter;
– Developing our services;
– Informing about activity of Nivalit;
– Offering Nivalit’s products and services;
– Identifying clients with similar needs.
4.0. DISCLOSURE OF INFORMATION
Your personal data will not be disclosed to third parties except the
following recipients:
§ service providers to proces data on a Nivalit’s behalf;
§ governmental or regulatory authorities, courts and law enforcement
authorities or agencies as required by or in accordance with applicable law
or regulation.
5.0. TRANSFERING TO OUTSIDE COUNTRIES
Your personal data may be transferred to countries outside the European
Economic Area (EEA) – third countries, based on:
§ art. 45 sec. 1 of the GDPR [European Commission’s adequacy decision];
§ art. 46 sec. 2 let. c) of the GDPR [standard data protection clauses
adopted by the European Commission].
6.0. PERSONAL DATA STORAGE
Your personal data will be retained until the end of Client’s cooperation
with Nivalit. After that, personal data might be stored only for the period
indicated by statutory provisions of law or as long as you or us may pursue
legal claims towards each other.
7.0. RIGHTS RELATED TO PROCESSING PERSONAL DATA
In accordance with processing your personal data you have the following
rights:
§ right of access,
§ to rectification (updating),
§ to erasure,
§ to restriction of processing,
§ to data portability,
§ to object.
8.0. PROVISION OF PERSONAL DATA
The provision of personal data is:
§ necessary in order to establish and perform Client’s cooperation with
Nivalit – in the scope of processing purposes pursued within the PwC
legitimate interests;
§ mandatory – in the scope of processing purposes pursued within the legal
obligation.
9.0.
MINORS
Our Website is not designed for use by minors under the age of sixteen
years. It is not our purpose to collect information about minors under the
age of sixteen years.
10.0. COOKIES
A cookie is a small piece of data stored on the user’s computer by the web
browser while browsing our website. Cookies were designed to be a reliable
mechanism for websites to remember stateful information or to record the
user’s browsing activity. Cookies can also be used to remember pieces
of information that the user previously entered into form fields, such as
names, addresses, passwords, etc.
We use cookies to build a better communication with you. We want to provide
you with an improved user experience and to personalize content. If you use
this website or Nivalit’s application, you consent to the use of cookies.
You can manage cookies by using your browser. Please notice that blocking
or removing cookies can impact on your user experience
10.1. TYPES OF COOKIES
§ Temporary (session) – temporarily stored in the
browser’s memory, which remain in its memory until the end of the session
(turning off the browser).
§ Constant – remain in the browser’s memory as long as the
browser settings selected by the user allow it.
§ External – originating from an external site than
nivalit.com website (Google Analytics; Facebook ).
§ Necessary – enable the use of services available on the website.
§ Functional – allow users to remember the website functionalities preferred by the user.
§ Advertising – enable the delivery of advertising content tailored to the interests of the user.
11.0. COMPLAINTS
If you want to complain about our use of personal data, please send us an
email with the details of your complaint to
gdpr@nivalit.com. You can also submit a complaint to the competent supervisory authority in Poland at:
Urząd Ochrony Danych Osobowych
Stawki 2 Street,
00-193 Warsaw
Poland
12.0. CONTACT:
If you have any questions about this Privacy Policy or how and why we
process personal data, please contact us at:
Nivalit spółka z ograniczoną odpowiedzialnością,
Wadowicka 6/67 Street,
30-415 Cracow, Poland
E-mail: contact@nivalit.com
Phone : +48 737 301 685
13.0. VERSION OF THE PRIVACY POLICY
This Privacy Policy was last updated on 21st of October 2020.