The administrator of your personal data is Nesperta Europe sp. o.o. with headquarter in 62-002 Jelonek, ul. Obornicka 7.

Contact with the Data Protection Officer – iod@nesperta.com,

Source of data:
We have received your personal data directly and voluntarily from you due to sending by you the whistleblowing notification.
We received your personal data directly and voluntarily from you when sending information via our contact form or to the email addresses indicated on the website for the purpose of cooperation, recruitment or other contact purpose, including reporting any improprieties.

Scope for the processing of personal data:
Nesperta Europe sp. z o.o. processes personal data only voluntarily provided by you to the extent specified in the contact forms for general inquiries or cooperation, in particular: name and surname, email address, telephone number, company name. In the case of sending information to the e-mail addresses indicated on the website (secretariat, recruitment, for the media), we process the personal data sent to us only to the extent and time necessary to achieve the purpose of contact.

Purposes, legal basis and time of personal data processing:

• for the purpose of handling messages via the contact form (Article 6(1)(a) of the GDPR). The administrator processes the following data: name and surname, e-mail address, telephone number and any other personal data listed in correspondence to us, for the period necessary to perform the response and tasks related to the functioning of the company or withdrawal of consent,

• for the purpose of handling messages sent to the email addresses indicated on the website (Article 6(1)(a) of the GDPR). The administrator processes the following data: name and surname, e-mail address, telephone number and any other personal data listed in correspondence to us, for the period necessary to perform the response and tasks related to the functioning of the company or withdrawal of consent,

• for the purpose to carry out the recruitment process, i.e. to take action before concluding the contract as part of the exercise of rights under the law (Article 6(1)(b) of the GDPR in connection with Article 22¹ §1 of the Labor Code); In the case of providing personal data in a wider scope, including data specified in art. 9 sec. 1 of the GDPR, they are processed only when necessary to exercise the right or fulfill the obligation resulting from the law (Article 6(1)(a) and Article 9(2)(a) of the GDPR in conjunction with Article 22¹ §4 of the Code work),

• for the purpose to conduct future recruitment processes, in the event of consent to the processing of data for this purpose (Article 6(1)(a) of the GDPR),

• for the purpose to determination or pursuit of possible claims or defense against such claims by Nesperta Europe sp. z o.o. (Article 6(1)(f) of the GDPR),

• to provide marketing services for own products (Article 6 (1) point f) of the GDPR), including: customer satisfaction and opinion surveys, displaying to the Buyer marketing content not adapted to his preferences (contextual advertising), displaying marketing content to the Buyer in accordance with his interests (behavioral advertising), sending e-mail notifications about interesting offers or content containing commercial information, conducting other activities in connection with direct marketing of goods and services, and sending commercial information by e-mail, SMS, MMS, phone and other advertising and telemarketing activities, including the provision of a newsletter service with the consent of the person concerned (Article 6 (1) point a) of the GDPR). For this purpose, the Controller processes the following data: name, e-mail address, telephone number, until an objection is raised or in the case of a newsletter until the consent is withdrawn,

• for analytical and statistical purposes for the improve the services and for security, including information technology and the prevention and fight against fraud attempts (Article 6 (1) point f) of the GDPR), the Controller processes the following data: IP address or other identifiers and information collected through cookies or other similar technologies. This data will be processed for the period necessary to carry out tasks related to the functioning of the online store or to clarify incidents.

• for the purpose to comply with the obligations imposed on the entrepreneur by the relevant provisions (Article 6 (1) point a) and c) of the GDPR). The Controller processes the following data: name, company name, e-mail address, telephone number, address of residence or registered office, delivery address, if different from the private address or business address and tax identification number, order number and bank account number. The data will be processed for the period indicated by law.

Consequences of not providing personal data:

Providing your data is voluntary, but necessary to use the selected form and purpose of contact. We guarantee special security and anonymity to people who report possible abuses.

Automatic processing:

Your personal data will not be processed in an automated manner, including in the form of profiling.

Recipients of data:

Your personal data may be transferred to entities to which we commission the provision of services that require data processing, such as: trusted IT service providers (hosting, websites), operators providing postal/courier services, required to send documents or products, entities providing archiving services and destruction of documentation and entities supporting us in marketing in the case of subscribing to the newsletter. Such entities process personal data on the basis of a written agreement with us and only in accordance with our instructions. Personal data may also be made available to authorized public authorities in cases strictly defined by law, e.g. inspection or in the event of a violation of the law.

Rights of the data subject:

You have the right to access your data, request rectification, restriction of processing, transfer to another administrator, raise objections, as well as the right to withdraw consent and complain to the supervisory authority if it is found that the processing of personal data violates the provisions of the GDPR.
The above rights can be exercised by sending a written application to the address mentioned in point 1 or 2, i.e. iod@nesperta.com

Detailed information on the processing of personal data is contained in the Privacy Policy at: https://www.nesperta.com/en/privacy-policy/