Privacy policy
The privacy policy of the astir.opole.pl website sets out the principles for the collection, processing and use of your personal data which we obtain when you use the services of our website. We make the best efforts to ensure the security of the data we process, and our actions follow with particular respect for your right to privacy.
Personal data administrator
The personal data administrator of the astir.opole.pl website is ASTIR Spółka z ograniczoną odpowiedzialnością with its registered office in Opole, 2 Chłodnicza Street , NIP:7543356934, REGON: 524342002 (hereinafter referred to as: ASTIR or the Administrator), which you can contact by e-mail using the address biuro@astir.opole.pl.
Data Protection Officer
The Administrator has appointed a Data Protection Officer who can be contacted by e-mail using the address: iod@astir.opole.pl or by directing correspondence to the address of ASTIR’s registered office given above.
What data do we collect , for what purpose and on what legal basis, and where do we obtain it from?
We obtain personal data directly from you when you use the website for the following purposes and on the following legal basis:
Purpose of processing and scope
Legal basis
To enable you to contact ASTIR using the form available on the website under [CONTACT]. Scope of data processing: name, e-mail address, content of message, optional contact telephone number
Article 6(1)(f) of the RODO, i.e. the legitimate interest of the Controller in processing the data in order to deal with a matter reported via the contact form, to process a request or to reply to a question asked
to enable you to get in touch with ASTIR, using the form available on the website under the [CAREER] tab, and to apply for employment by attaching your application documents (CV, cover letter) to the message. The scope of the data processed: name, e-mail address, content of the message, optional contact telephone number, and documents attached to the message
Article 6(1)(a) of the RODO, i.e. the consent of the data subject, in relation to the expression of interest in employment at ASTIR and the submission of application documents
your separate consent for commercial offers to be sent to the e-mail address provided in the contact form and/or your consent to be contacted by telephone and to receive text messages with commercial offers to the telephone number provided in the form
Article 6(1)(a) of the RODO, i.e. consent of the data subject
We process your data for the purposes of claiming and defending against claims, in connection with your use of ASTIR’s services
Article 6(1)(f) RODO, i.e. legitimate interest of the Administrator
We may process data in order to comply with obligations imposed on us by law, including that we may be obliged to provide personal data, inter alia, for the purposes of proceedings before courts and law enforcement authorities
Article 6(1)(c) of the RODO, i.e. fulfilment of a legal obligation incumbent on the Controller
Transfer of data to a third country and international organisations
ASTIR does not transfer data to international organisations, or third countries, i.e. outside the European Economic Area of the EEA, however, the inclusion of links on the website to third-party online platforms, in this case the social networks Facebook and Instagram, may result in these platforms acquiring data such as the user’s IP address, browser information and data on the interaction with the link. When navigating via the links on astir.opole.pl to the Facebook and Instagram platforms, we urge you to familiarise yourself with the privacy policy established there. This privacy policy applies only to astir.opole.pl . We cannot be held responsible for the privacy policies of these pages.
Rights of data subjects
Individuals have certain rights regarding their personal data and ASTIR, as Data Controller, is responsible for the exercise of these rights in accordance with the applicable legislation. If you have any questions or requests regarding the scope and exercise of your rights, or if you wish to contact us specifically to exercise a specific data protection right, please contact us at the following email address: biuro@astir.opole.pl
We reserve the right to exercise the following rights upon positive verification of the identity of the person requesting the activity in question.
You have the right of access to the content of your personal data, and the right to rectify and amend it. You may also exercise the right to erasure of data, restriction of data processing, and to lodge an objection when the legal basis for data processing is Article 6(1)(f) RODO, i.e. the legitimate interest of ASTIR, as well as the right to data portability , when the processing of a person’s data takes place on the basis of the data subject’s consent or a concluded contract and when the processing is carried out in an automated manner.
Right to withdraw consent
In addition to the rights mentioned above, where personal data is processed on the basis of consent, you have the right to withdraw that consent at any time. We inform you of this right at any time when we collect consent and allow you to withdraw your consent as easily as you gave it. If you are not informed to the contrary, i.e. if you have not provided a different address or contact number for withdrawing your consent, please send us an email to biuro@astir.opole.pl.
The right to lodge a complaint to the supervisory authority
If you consider that your data is processed by ASTIR unlawfully, you also have the right to lodge a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection (address: ul. Stawki 2, 00-193 Warsaw).
Sharing data with third parties
We only transfer personal data to others if we are permitted to do so by law. In this case, we provide for provisions and security mechanisms in the relevant contract concluded with the third party in order to protect the data and maintain our standards of data protection, confidentiality and security. The agreements, referred to as entrustment agreements for the processing of personal data pursuant to Article 28 of the RODO, contain all the necessary provisions to optimally limit the risk of loss of confidentiality, availability and integrity of the personal data entrusted to these entities for processing
In relation to the above, we point out that the recipients of the personal data that the JPC processes as a personal data controller may be:
– entities providing hosting services to ASTIR, including entities responsible for maintaining the astir.opole.pl website
– entities providing IT hardware and software maintenance services
– entities providing advisory services, including a law firm
– law enforcement and regulatory bodies
ASTIR always keeps the sharing of personal data to the necessary minimum.
Data profiling
As a general rule, your data will not be subject to profiling and targeting.
How long do we process personal data?
The length of time for which we may process your personal data depends on the legal basis for ASTIR’s processing of your personal data . Guided by the principle of accountability, we never process data beyond the duration of the legal basis specified for the processing. Accordingly, we inform you that:
– where ASTIR processes personal data on the basis of consent, the processing period lasts until the user withdraws this consent, or until the purpose for which consent was received ceases to exist;
– when ASTIR processes personal data on the basis of a legitimate interest of the controller, the processing period lasts until the aforementioned interest ceases to exist (e.g. the limitation period for civil law claims) or until the data subject raises an objection – in situations where such an objection is entitled in accordance with the law;
– where ASTIR processes personal data because it is necessary to do so due to applicable legislation, the periods of processing for this purpose are determined by such legislation
Cookies mechanism on the website astir.opole.pl
Our website also uses data such as cookies, small text files. They all contain specific information related to your use of our website. Although these files may store the IP identification number of your device, this information does not allow direct identification of site users, nor does it allow the tracking of user navigation.
Web browsing software (web browser) usually allows cookies to be stored on the User’s terminal device by default. Website Users can change their settings in this respect – section Settings – Privacy section. The web browser makes it possible to delete cookies. It is also possible to automatically block cookies. For details, please refer to the help or documentation of your Internet browser. Two main types of cookies are used within the Website: “session” cookies and “permanent” cookies (persistent cookies). “Session” cookies are temporary files that are stored on the User’s terminal equipment until the User leaves the website or shuts down the software (web browser). “Persistent” cookies are stored on the User’s terminal equipment for the time specified in the parameters of the cookies or until they are deleted by the User.
We use the Google reCAPTCHA mechanism to investigate whether the behaviour of Users of our website when using contact forms bears the hallmarks of robotic behaviour. If this is the case, we may disclose your IP address to Google LLC.
We use the Google Maps map service on the website via an API interface. In order to use the Google Maps functions, it is necessary to store your IP address. This information is usually transmitted to a Google server in the United States and stored there. The provider of this Website has no influence on this data transfer. The use of Google Maps is intended to facilitate the search for the location of the ASTIR premises indicated on the website. This constitutes a legitimate interest of ASTIR within the meaning of Article 6(1)(f) of the DPA.
Amendments to the Privacy Policy
ASTIR undertakes to review this Privacy Policy on a regular basis and to amend it when this becomes necessary or desirable due to: new legislation, new guidelines from authorities responsible for overseeing data protection processes. We also reserve the right to amend this Privacy Policy in the event of changes in the technologies used by us to process personal data (to the extent that such a change affects the wording of this document), as well as in the event of a change in the methods, purposes or legal basis for the processing of personal data by ASTIR via the astir.opole.pl website.
This document was last updated on 19.02.2024.