Privacy Policy

PRIVACY POLICY

The policy describes the rules for processing personal data in the processes carried out through the www.ancy.pl website, with care for personal data, including the security of its use.

1. Who is the controller of your personal data? 

The controller, i.e. the entity deciding on the purposes and means of processing personal data, is Ancymony Schulz spółka z ograniczoną odpowiedzialnością with its registered office in Krakow at the address: ul. Na Zjeździe 11, 30-527 Kraków, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 11th Commercial Division of the National Court Register under KRS number: 0000181178, NIP: 945-172-18-41, REGON: 351324593 (hereinafter referred to as: "Controller"). 

The Controller is not obliged to appoint a personal data protection officer.  

In matters related to the processing of your personal data by the Controller, you can contact us via: 

• e-mail: biuro@ancy.pl 

• by phone at: 690-033-446 

• or in writing at: ul. Na Zjeździe 11, 30-527 Kraków 

2. Where do we get your personal data from? 

We received it from you during your visit to the www.ancy.pl website, in particular when sending a message through the contact form, signing up for the newsletter, as well as when you express and share opinions / reviews about the services provided by the Controller.   

3. What is the purpose, scope, legal basis, and period of processing your personal data? 

a) Ensuring access to the ancy.pl website and its proper functioning (cookies); Website management;

Scope of data: IP address; technical data of the device; data regarding activity on the Website

Legal basis: Art. 6(1)(f) of the GDPR – legitimate interest of the controller consisting in running a website;

Processing period: until an effective objection to the data processing is submitted; this period may be extended if the processing is necessary to establish and pursue potential claims or defend against them; data from cookies in accordance with the browser settings or consent management tool;

b) Preparation of an offer, Conclusion of an agreement;

Scope of data: name and surname; e-mail address, telephone number; job position; details of the entity you represent; any other personal data provided in connection with the provision of services under the agreement

Legal basis: Art. 6(1)(b) of the GDPR – processing is necessary to take steps at the request of the data subject prior to entering into a contract, and Art. 6(1)(f) of the GDPR – legitimate interest of the controller;

Processing period: for the duration of the agreement, and after its completion, up to the limitation period for claims resulting from the service agreement;

c) Contact - replying to an inquiry from the contact form;

Scope of data: name and surname; e-mail address, telephone number; message content

Legal basis: Art. 6(1)(b) of the GDPR – processing is necessary to take steps at the request of the data subject prior to entering into a contract – if the contact leads to the conclusion of an agreement; Art. 6(1)(f) of the GDPR – legitimate interest of the Controller consisting in conducting communication with Users, handling inquiries, and maintaining contact

Processing period: until an effective objection is raised or the purpose of processing is achieved;

d) Marketing - sending newsletters, reports, and other materials;

Scope of data: name and surname; e-mail address, telephone number

Legal basis: Art. 6(1)(a) of the GDPR and Art. 398 of the Act of July 12, 2024 – Electronic Communications Law – consent of the data subject expressed within the Website or otherwise (e.g. when downloading reports); Art. 6(1)(f) of the GDPR – legitimate interest of the controller consisting in sending materials to former and current clients;

Processing period: until the withdrawal of previously granted consent (provided that the processing of personal data takes place on the basis of Art. 6(1)(a) of the GDPR); until the data loses its usefulness in terms of sending the Newsletter; until an objection is submitted by the data subject (provided that the processing of personal data takes place on the basis of Art. 6(1)(f) of the GDPR);

e) Organization of the event (on-site or online) and enabling participation in it;

Scope of data: name and surname; e-mail address; optionally other contact details; employment organization details

Legal basis: Art. 6(1)(b) of the GDPR (processing is necessary for the performance of an agreement for participation in the event concluded with the data subject or to take steps to conclude it);

Processing period: until the limitation period for claims resulting from the agreement for participation in the event;

f) Posting opinions / testimonials / references on services provided by the Controller;

Scope of data: name and surname; job position; details of the entity you represent

Legal basis: Art. 6(1)(a) of the GDPR – consent of the data subject;

Processing period: until the withdrawal of previously granted consent;

g) Recruitment;

Scope of data: name and surname; date of birth; contact details provided by the candidate (e-mail address, phone number, residential address); education; professional qualifications; history of previous employment

Legal basis: - in the case of recruitment of employees: Art. 6(1)(c) of the GDPR (processing is necessary to fulfill a legal obligation incumbent on the Controller, in this case obligations related to recruitment, specified in Art. 22(1) § 1 of the Labor Code) as well as Art. 6(1)(a) of the GDPR (processing of personal data takes place on the basis of granted consent); - in the case of recruitment of associates: Art. 6(1)(f) of the GDPR (processing is necessary to perform the legitimate interest of the Controller, in this case the correct conduct of the recruitment process).

Processing period: until the recruitment process is completed or the candidate withdraws from applying for employment, unless the candidate consents to the processing of their personal data also for the purposes of future recruitments.

-

When we process your personal data based on a legitimate interest, we mean: 

• monitoring activity including, for example, searching for keywords; 

• analysis of data collected automatically when using the website; 

• conducting marketing activities towards you, including direct marketing in accordance with the provisions of applicable law; 

• contacting you, including for purposes related to permitted marketing activities, through available communication channels, in particular by e-mail or telephone; 

• ensuring the security of the services we provide electronically, including enforcing compliance with internal rules and preventing fraud and abuse; 

• pursuing claims or defending against potential claims, including conducting court, arbitration, mediation, and enforcement proceedings; 

• storing data for archiving purposes and ensuring accountability (demonstrating our fulfillment of obligations resulting from legal provisions). 

If your data is processed by us on the basis of our legitimate interest – you have the right to object to the use of the data – which means the right to object at any time to our use of your personal data. 

If you consent, we process your personal data in order to: 

• save data in cookies, collect data from websites and mobile applications (more information about cookies, Google Analytics, Google AdWords below); 

• send the newsletter and other marketing content,  

• place opinions / testimonials / references on the website. 

If the legal basis for processing your data is consent, you have the right to withdraw this consent at any time. This right may be exercised by sending an appropriate request to the Controller to the details provided above. 

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. 

4. Who do we share your personal data with? 

We may share your personal data with the following categories of entities: 

• entities that support us in providing services as part of ongoing operations, including employees, associates, contractors, subcontractors; 

• entities that provide us with accounting (financial - accounting - tax) services, legal services, technical support, administration, advisory, and consulting services; 

• entities that provide us with IT services, e.g. hosting providers, software providers necessary to run the website; 

• as well as other entities to which the Controller shares data on the basis of an obligation resulting from the law or on the basis of an agreement for entrustment of personal data processing (so-called processors). 

We ensure that in the event of further transfer of your personal data, it takes place only within legally permitted limits, on the basis of personal data processing entrustment agreements concluded by the Controller with third parties or under an authorization to process data. 

5. What are your rights regarding the processed personal data? 

If the relevant legal conditions are met, in addition to the right to withdraw the consents granted to us, you also have the following rights: 

1. the right to obtain information about your personal data stored by us in accordance with Article 15 of the GDPR; 

2. the right to rectify incorrect or complete incomplete data in accordance with Article 16 of the GDPR; 

3. the right to delete your data stored with us in accordance with Article 17 of the GDPR; 

4. the right to restrict the processing of your data in accordance with Article 18 of the GDPR; 

5. the right to data portability in accordance with Article 20 of the GDPR. 

You have the right to lodge a complaint in connection with our processing of your personal data to the supervisory authority, which is the President of the Personal Data Protection Office (address: ul. Stawki 2, 00-193 Warsaw). 

6. Do we transfer your data to countries outside the European Economic Area? 

The types of personal data processing described above may result in the transfer of data to the servers of information technology providers operating on our behalf. Some of these servers are located in the USA, e.g. Google, Facebook, Instagram – data transfer takes place in accordance with the rules set out in the standard contractual clauses of the European Commission or under a decision establishing an adequate level of data protection. 

7. Do we process your personal data automatically (including through profiling)? 

The Controller may profile personal data using automation to process it, however, it does not use the User's data for automated decision-making that could affect the User's legal status or cause other similarly significant effects on the User.   

The Controller analyzes data of an anonymous nature (age, interests), unless the User consents to the operation of tools collecting other data (i.e. consents to the operation of individual cookies). 

8. Cookies 

Our website uses cookies. 

Cookies are small text-numerical files that are saved and stored by the web server when browsing the website and allow for identification when reconnecting to the website from the device (e.g. computer, phone) on which they were saved. Cookies therefore facilitate the use of previously visited websites. 

The Controller uses cookies to manage the website and improve the quality of the content provided. Cookies are necessary for the correct display and operation of the website. The Controller may process the data contained in cookies also for the purpose of conducting anonymous statistics and analyses showing the method of using the website, the average duration of a visit to the website. Cookies are not used to determine the identity of website users. 

When displaying the website, the browser establishes a direct connection with the servers of the administrators of the aforementioned social networking sites. Thanks to this, social media administrators receive information that this website has been displayed. Information about displaying the website along with the IP address is sent to the servers of social media administrators. 

Cookies are used with your consent, which is expressed through the appropriate settings of the software, in particular the web browser, installed on the telecommunication device used to view the content on the website. 

On the website, we use: 

• session cookies, which are automatically deleted after leaving the website or turning off the web browser; 

• persistent cookies, which are stored on the device for a specified period of time or until deleted by the User;  

Based on cookies, both session and persistent, it is not possible to establish your identity.  

The Controller uses Meta Business Pixel, Google Tag Manager, Google Analytics, Marketizer, Cookie Bot tools to create statistics, analyze the functioning of the website, and improve the quality of using the website (on the basis of a legitimate interest). 

You can independently change or delete the settings regarding Cookies at any time, specifying the conditions for their storage, through the web browser settings, as well as by using the website's functionality. In this case, it may happen that you will not have access to some content on the page. 

The scope of Cookies used by the Controller depends on the consents expressed. The Controller uses Cookies for the following purposes: authentication, maintaining a session; configuration; analysis and research of audience size, number of clicks, and paths of navigation through the Website to improve the design and organization of content within the Website, time spent on the page, number and frequency of visits to the Website. Each query addressed to the server is saved in server logs, which include, among others, your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server. Server logs are only auxiliary material used to administer the website and create anonymous statistics allowing for the optimization of usability, and their content is not disclosed to anyone other than persons authorized to administer the server. 

Detailed information about the support of Cookies is available in the settings of the web browser you are using.