Privacy policy

2018-05-21

EPRD Sp. z o.o. attaches great importance to protecting the confidentiality and privacy of the information entrusted to us. One of the basic duties of EPRD Sp. z o.o. is to ensure adequate protection and proper use of personal data collected via websites.

We only collect personal information that has been voluntarily provided by the visitors of our websites in order to provide them with information and/or services, as well as with information about employment opportunities. Please read this Privacy Policy (hereinafter “Privacy Policy”) to find out how we collect, use and protect the personal data provided to us.

Collection and use of personal data

We acquire personal data only if it is voluntarily provided by the user, e.g. sent to contact e-mails, or during registration for the use of selected services. In some cases, personal data could have been forwarded to EPRD by the user earlier (e.g. in the case of former employees). If you decide to register and/or provide personal information on our websites, EPRD will be able to contact you with the use of the provided data in accordance with the provisions of this Privacy Policy. Personal data will not be used for purposes other than those specified in the Privacy Policy, unless we obtain your consent, or unless other use of personal data will be required or permitted by law. For example, if you send us an e-mail requesting information about EPRD, we will use your e-mail address and other data provided to fulfil your request. If you send your resume (CV) for online recruitment to one of the posts in EPRD, we will use the information provided to match it to one of the job offers in EPRD.

In some cases, if the user has registered to use selected services, his/her e-mail address may be temporarily stored by us until we have received the information sent to us by e-mail (sent from the address provided during registration to confirm it).

EPRD collects only personal data that is necessary to process the requests of the persons visiting our websites. If additional optional information is needed, the user is notified of this before acquiring such information.

EPRD does not deliberately collect “sensitive” personal data, unless such an obligation results from the law in force, for example for recruitment purposes. Sensitive information includes personal data regarding race, origin, political beliefs, trade union membership, religion, views, physical or mental health, intimate life or criminality of the user. We urge all users to be cautious when forwarding sensitive information to EPRD, and, under no circumstances, provide sensitive information to EPRD, unless they consent to the use of such information by EPRD in order for EPRD to legally operate, and unless they consent to entrust processing and storage of such data in EPRD databases. If you have any questions about whether the transfer of sensitive information to EPRD is or may be required in a specific case, please contact us at iod@eprd.pl

Automatic collection of personal data

Occasionally, EPRD and service providers use cookies and other technologies to automatically collect certain information during visits to our website or via e-mail addresses. Collecting this information will allow us to develop the website and improve its operation, as well as determine the effectiveness of our promotional activities.

IP addresses

An IP address is a number assigned to the user’s computer when connected to the Internet, which allows communication between the computer and the server. The IP addresses of the users visiting the website may be registered to ensure the security of the information system and for diagnostic purposes. This information may also be used in a collective form to analyse Internet trends and evaluate the operation of the website.

Cookies

Cookies are placed by our website on the user’s computer or device connected to the Internet during every visit to our site, which allows our website to remember the user’s computer or device and serves several purposes.

On some of our websites, a banner is displayed asking for permission to place cookies on the user’s computer. The second type of cookies, also known as session cookies, may be required to support selected functions. This type of cookies is not blocked if the user does not agree to their placement on his/her computer.

Although most web browsers automatically allow cookies to be placed on computers, the user may not consent to this by changing browser settings (in most cases, this option can be found under Tools or Preferences menu). The user can also delete cookies from their devices at any time. In this case, it must be noted that by not consenting to the placement of cookies, the user will not be able to take full advantage of all the functions of our website.

Additional information on cookies management can be found in a browser’s Help menu.

EPRD websites may use other third-party tools and widgets to offer additional functionalities to their users. Using these tools or widgets may result in collecting cookies on the users’ devices in order to facilitate the use of these sites and to ensure that the user interaction is displayed correctly on our sites (social networks, google analytics).

Cookies themselves do not contain information about the user’s e-mail address and his/her personal data. Our analytical reports may contain other identifiers, including IP addresses that are used to determine the number of unique visitors to our websites and to determine trends by country of origin, not to identify individual users.

Visiting our website or entering a login to access the part of the site intended only for the registered users is equivalent to agreeing to place cookies on the user’s computer or the device connected to the Internet.
EPRD uses Google Analytics tools. For more information on the use of Google Analytics by EPRD, please visit:

http://www.google.com/analytics/learn/privacy.html

Widgets and social applications

EPRD website may contain functions that enable content to be shared using third-party social media applications, such as the “Like” button on Facebook or the Twitter widget. All of these social media applications may collect and use data regarding the user’s activity on EPRD sites. All personal data provided by users through such social media applications may be collected and used by other users of these social media applications, and interactions taking place on them are subject to the privacy policies of companies that are the providers of these applications. We have no influence and take no responsibility for the these companies and their use of the user data.

Children

EPRD understands the importance of protecting children’s privacy, especially on the Internet. EPRD websites are not intended for children under the age of 13. One of the principles of EPRD policy in this regard is to refrain from conscious collection or storage of data on persons under the age of 13, except for situations in which such data is part of activities related to the provision of professional services.

Sharing and entrusting the processing of personal data

EPRD does not share personal data with unrelated parties, except for situations in which it is necessary in connection with the conduct of our business or in order to process the user requests, or in situations required or permitted by law.

EPRD may, in certain cases, provide information about the users to external firms or service providers to process their requests.

In addition, EPRD may entrust the processing of personal data outside geographic boundaries and transfer it to other external entities cooperating with EPRD or acting on our behalf.

EPRD may disclose personal data in connection with the sale, assignment or other transfer of the website ownership, to which this data relates, as well as at the request of law enforcement authorities, or if required by laws in force, court judgments or other state regulations. The need to disclose personal data may also be caused by audits of data privacy/security and/or when dealing with complaints or when performing actions related to security risks. EPRD does not sell personal data to third parties, neither does it entrust to third parties the processing of personal data provided by the users, which could be used by such third parties for their marketing purposes.

Options

During a standard visit to the EPRD website, providing personal data is not necessary, however, EPRD may require specific data to be sent if the user wishes to obtain additional information about our services or events. The user may also be asked by EPRD whether he/she agrees to the processing of their personal data in a particular manner, to which the user may consent or refuse. The user receiving certain information or services, such as an electronic newsletter, may at any time unsubscribe by following the instructions contained in each of such documents. In case of cancellation of subscription, EPRD attempts to immediately delete information about the user, however, it may be necessary to provide additional data in order to fulfil the user’s request.

As mentioned earlier, users have the possibility of configuring their web browsers to reject all cookies or notify them of installation of cookies. However, it must be noted that after rejecting cookies, some elements of EPRD website may not work properly.

Access

If users entrust us with their personal data, in most cases they has appropriate access to them, thanks to which they can modify or correct any possible errors contained therein. The user may also send to iod@eprd.pl a request to update or delete certain data, and EPRD will take all appropriate measures to comply with such a request, provided that it is in line with the law in force.

Detailed conditions for the processing of personal data by EPRD Sp. z o.o.

Detailed conditions for the processing of personal data by EPRD Sp. z o.o. in relation to personal data collected via registration and subscription forms as well as other types of forms and web applications placed on the EPRD website.
Additional terms for the following forms or applications are described below:

Newsletter / JobAlert / contact form

According to art. 13 of the General Data Protection Regulation (GDPR) of 27 April 2016 (OJ L 119, 4.5.2016), we inform that:

The data that is collected in the Jobalert form is:

The data collected in the Newsletter form is:

The data that is collected in the contact form is:

Data security and integrity

EPRD applies appropriate policies and procedures for the protection of personal data against unauthorized damage, misuse, alteration or destruction. However, even despite our best efforts, it is not possible to completely protect data from all threats. We make every effort to ensure that access to the users’ personal data is limited to the persons who need to know this information. Persons who have access to this data are obliged to keep it confidential. Additionally, one of the principles of EPRD policy in this regard is to store users’ personal data only for such a period in which it is necessary to process their requests or until they request the removal of such information.

Links to other websites

Please note that the links posted on the EPRD website may redirect users to other websites. These websites may have a different privacy policy whose provisions differ from ours. We encourage users to carefully read the privacy policy of each website visited before providing their personal data.

Changes to this Privacy Policy

EPRD may introduce changes to this document, which will reflect the up-to-date Privacy Policy. In the case of modifications, the date of the last update, which appears on the first page of the document, also changes. We encourage users to review this Privacy Policy on a regular basis to learn how EPRD protects personal data of its users.

Questions regarding the Privacy Policy and its implementation

EPRD makes every effort to ensure the protection of personal data of users. If you have questions or comments about how your personal data is managed, please contact us at iod@eprd.pl, where you can also report any comments regarding compliance with our Privacy Policy.