Privacy and Cookies Policy

§ 1

Definitions

Administrator:

Alteris S.A., a company with its registered office in Katowice, at 54 Wrocławska Street, 40-217 Katowice, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for Katowice – Wschód in Katowice, 8th Commercial Division of the National Court Register, under KRS number: 0000391749, Tax Identification Number (NIP): 6312421111, with share capital of PLN 1,053,843.00, fully paid up (hereinafter also referred to as: ‘Alteris’ or ‘the Controller’). The Controller is the owner of the Website.

Cookies:

Information relating to an identified natural person or a natural person who can be identified, either directly or indirectly, for example on the basis of an identifier such as: first name and surname, an identification number, location data, an online identifier, or one or more specific factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person.

Policy:

This Privacy and Cookies Policy describes how Alteris handles personal data received from visitors to the Alteris website at: https://www.alteris.pl/

RODO:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Service:

A website operated by the Controller https://www.alteris.pl/.

User:

Any individual who visits the Website or uses one or more of the Website’s services or features described in the Policy.

§ 2

General provisions

• 1. As a general rule, the User may use the Website without having to disclose their Personal Data. An exception to this rule applies where the User makes use of services available via the Website which require the User to provide Personal Data and which, amongst other things, enable the Controller to contact the User.
• 2. The Website may collect certain technical information for the purpose of improving the Website’s usability. Where possible, this data will not be collected in a way that allows the User to be identified, nor will it be identified during the data analysis process. The Controller does not rule out the possibility that this information, when combined with other information, may make it possible to identify a natural person.
• 3. To use the Website, the User must have a device with software installed that enables web browsing and access to the Internet. The Website may be accessed using currently supported web browsers.
• 4. The Website may contain links to third-party websites; when leaving the Website, the User enters an area where this Policy does not apply. The Controller accepts no responsibility for the privacy practices of third-party websites, even if links to their websites are provided on the Website.

§ 3

Contact the Data Controller

The Controller has appointed a Data Protection Officer. For any matters relating to the processing of personal data by the Controller, please contact the Controller’s registered office at the following address: Alteris Spółka Akcyjna, ul. Wrocławska 54, 40-217 Katowice, or by email at:iod@alteris.pl.

§ 4

Users’ personal data

• 1. When using the Website, the User may contact the Controller via the contact form. To do so, the User is required to provide details such as: first name and surname, telephone number and email address. Alteris is the Controller of the data provided by the User for this purpose and processes it on the following legal grounds:
• 2. The provision by the User of the data referred to in paragraph 1 is voluntary; however, if such data is not provided, it will not be possible to respond to the User’s enquiry.
• 3. Users of the Website may apply to take part in the recruitment process for a position specified by the Administrator and/or in future recruitment processes. To this end, the User may use the ‘APPLY’ form, providing details such as: first name and surname, telephone number, email address, and the information contained in the CV submitted by the User to the Controller via the form. Alteris is the Controller of the data provided by the User for this purpose and processes it on the following legal bases:
  • a) Article 22(1) § 1 of the Labour Code – in respect of the following personal data: full name, date of birth, contact details, education, professional qualifications, employment history,
  • b) Article 6(1)(a) of the GDPR – consent of the data subject – in respect of data provided by the User in addition to that described in point (a) above,
  • c) Article 6(1)(f) of the GDPR – the Controller’s legitimate interests,
• 4. Where a User has, of their own accord, provided the Controller with Personal Data other than that described in paragraph 3(a) above, the Controller may process such data solely on the basis of the User’s consent. Consequently, in such cases, it is essential that the User includes, in the CV they submit, explicit consent to the processing of personal data for the purposes of the recruitment process conducted by Alteris and/or for future recruitment processes, should the User also be interested in future recruitment opportunities.
• 5. Users’ data may also be processed by the Controller for the following purposes:
  • a) for analytical and statistical purposes, involving the analysis of Users’ activity and preferences with a view to improving the features
  • and services provided – in such cases, the legal basis for the processing of personal data is the Controller’s legitimate interest or the User’s consent,
  • b) for the purpose of potentially establishing and pursuing claims or defending against claims – the basis for the processing of Personal Data in such cases is the Controller’s legitimate interest in protecting its rights,
• 6. The Data Controller carries out ongoing risk assessments to ensure that Personal Data is processed securely, guaranteeing that access to the Data is restricted to authorised persons and only to the extent necessary for the performance of their duties.
• 7. The User’s activity on the Website or within its individual components is recorded by the Administrator in system logs. The information collected in the system logs is processed for technical and administrative purposes, to ensure the security of the IT system and to manage that system, as well as for analytical and statistical purposes – the basis for the processing of personal data in such cases is the Controller’s legitimate interest.
• 8. The Data Controller hereby informs you that, in relation to the processing of personal data and the rights granted under the GDPR, you may request access to your personal data, the rectification or completion of such data, as well as the restriction of its processing. The data subject also has the right to request the erasure of personal data if it is no longer necessary for the purposes for which it was collected. The User may also exercise the right to object to the processing of their personal data by the Controller and the right to data portability to another controller. To exercise these rights, please contact the Controller as specified in § 3. The user also has the right to lodge a complaint with the supervisory authority responsible for ensuring compliance with data protection legislation.
• 9. Users’ personal data may be disclosed to external parties, including IT service providers and entities responsible for the operation of IT systems, as well as entities providing consultancy, legal and financial services, and entities affiliated with the Controller, including companies within the VOXEL Group. Where the User’s consent has been obtained, their personal data may also be made available to other entities for their own purposes, including marketing purposes.
• 10. The Administrator reserves the right to disclose selected information concerning the User to the relevant authorities or third parties who submit a request for such information, on an appropriate legal basis and in accordance with the provisions of applicable law.
• 11. The User’s personal data is not transferred to a third country or to an international organisation, nor will it be processed by automated means, including profiling.

§ 5

Period for which personal data is processed

• 1. The period for which the Controller processes personal data is 12 months.
• 2. The period for which personal data is processed may be extended where such processing is necessary to establish and pursue any claims or to defend against claims, or where required by law.

§ 6

Cookies

• 1. The administrator uses cookies on the website.
• 2. The Controller uses cookies primarily to provide the User with electronic services and to improve the quality of those services. Accordingly, the Controller and other entities providing analytical and statistical services to the Controller use cookies to store information or access information already stored on the User’s telecommunications terminal equipment. The cookies used for these purposes are:
  • a) Cookies that remain on the User’s telecommunications terminal equipment for the period specified in the cookie settings or until they are manually deleted by the User,
  • b) Session cookies, which remain on the User’s device until they log out of the Website or close their web browser,
  • c) Analytics tools used by integrated services, in particular Google Analytics, subject to paragraph 4 below.
• 3. The cookies used by the Controller are not intended to collect information constituting personal data, although some of the information processed may be regarded as personal data.
• 4. As part of the Website, the Controller may use Google Analytics – a popular analytics service provided by Google. Google Analytics uses cookies to analyse the number of users visiting the Website. Further information on the use of cookies can be found in Google’s privacy policy, available at link.
• 5. The use of cookies to collect data through them, including data stored on the User’s device, subject to paragraph 7, requires the User’s consent. The User may withdraw their previously given consent at any time via their browser settings. Further information on this subject can be found via the links below:
  • Chrome – Enabling and disabling cookies..
  • Firefox – Enabling and disabling cookies..
  • Edge – Enabling and disabling cookies..
  • Safari – Deleting cookies in Safari on a Mac.
• 6. Restricting the use of cookies may affect certain features of the Website.
• 7. The User’s consent referred to in paragraph 5 is not required in the case of cookies whose use is necessary for authentication, security and ensuring access to the services provided via the Website, as this information is collected on the basis of the Controller’s legitimate interest (Article 6(1)(f) of the GDPR) . Consequently, the User’s failure to consent to the collection of the cookies described in the previous sentence, or the withdrawal of consent previously given by the User, has no effect on these cookies.

§ 7

Final provisions

• 1. Alteris is solely responsible for its own content published on the Website.
• 2. Alteris makes every effort to ensure that the Website functions correctly; however, it does not guarantee that the Website will operate without faults or interruptions.
• 3. The content published by Alteris on the Website is prepared and updated by Alteris with due care and on an ongoing basis; however, Alteris does not guarantee that it is complete or up to date. Alteris also does not guarantee that the content published on the Website is suitable for the User and their purposes.
• 4. The content of the Website is protected by Polish and international copyright law. The rights to all materials published on the Website are reserved by Alteris or entities cooperating with Alteris. The content of the Website, or any part thereof, may not be reproduced or distributed in any manner or in any form without the written consent of Alteris, and any infringement of copyright by the User shall result in liability as provided for by generally applicable law.
• 5. Alteris shall not be liable for any acts or omissions on the part of Users which result in the Administrator processing the Personal Data they have provided in a manner not specified in this Policy.
• 6. Alteris reserves the right to amend this Policy if required by law or due to changes made to the functionality of the Website.