The ABR SESTA Privacy Policy

 

This policy regulates the processing of personal data on npvo.eu Website and the data of business partners of ABR SESTA Sp. z o.o.

 

The policy is divided into two parts:

  • General information about the controller and about your rights – these apply to each processing process described in the second part.
  • Detailed information on the processing of your personal data.

 

General information

 

The administrator of your personal data is ABR SESTA Sp. z o.o. with its registered office at 86 Hoża Street, 00-682 Warsaw. This policy has been prepared by ABR SESTA based on the provisions of the General Data Protection Regulation (EU) 2016/679, which is hereinafter referred to as the “GDPR”. ABR SESTA has appointed a Data Protection Officer who may be contacted by e-mail at iod@abrsesta.com. You have the right to: revoke your consent at any time, access your data and demand their rectification, erasure, restriction of processing, the right to data portability and the right to object to the processing of your data. You also have the right to lodge a complaint with the President of the Office for Personal Data Protection. To exercise these rights, please contact office@abrsesta.com.

 

Details of the processing

 

1. Handling enquiries from the contact form

 

For what purpose does ABR SESTA process data?
The personal data you provide will be processed for the purpose of contacting you and handling your requests.

 

Is the provision of data mandatory?
Provision of personal data is required by ABR SESTA in order to handle enquiries, except for personal data marked as optional, the provision of which is voluntary. Failure to provide the required data will result in the impossibility to provide you with a response to your enquiry. Providing data in the optional fields and in the email address field implies your consent to their processing. You may revoke your consent at any time.

 

What is the legal basis for the processing of your data?
The personal data provided will be processed on the basis of Article 6(1)(b) of the GDPR, and to the extent that the provision of data is optional, the legal basis for processing is consent, in accordance with Article 6(1)(a) of the GDPR. Once you have responded, the legal basis is the legitimate interest of the controller (Article 6(1)(f) GDPR) consisting in the protection against possible claims.

 

Who may your data be transferred to?
Your personal data shall be forwarded to IT system and service providers and entities providing services to ABR SESTA. With regard to the Captcha mechanism for protection against robots and securing the website, your cookie ID shall be forwarded to Google LLC.

 

How long will ABR SESTA continue to process your data?
Personal data will be stored until the query submitted in the form is answered or a full offer is sent, and thereafter for a period of 3 years as protection against possible claims.

 

What categories of personal data does ABR SESTA process?
These are the data provided to ABR SESTA in the form and the history of previous contacts.

 

Where does ABR SESTA obtain personal data from?
From the forms placed on the npvo.eu website.

 

2. Execution of Contracts

 

For what purpose does ABR SESTA process data?
The personal data you provide will be processed for the following purposes:

  • Conclusion and execution of a contract between ABR SESTA and the Contractor, including the conduct of communication related to the conclusion and execution of the contract;
  • Fulfilment of obligations resulting from the regulations, i.a. the necessity to issue documents such as e.g. VAT invoice;
  • Establishing and asserting claims or defending against them.

 

Is the provision of data mandatory?
Provision of data is necessary for the conclusion and execution of a contract or for the cooperation between ABR SESTA and the Contractor.

 

What is the legal basis for the processing of your data?
The personal data provided shall be processed in pursuance of:

  • the legitimate interest of the administrator (Article 6(1)(f) of the GDPR) consisting in the conclusion and performance of a contract between ABR SESTA and the Contractor;
  • the fulfilment of legal obligation (Article 6(1)(c) of the GDPR);
  • the legitimate administrator’s interest (Article 6(1)(f) of the GDPR) consisting in the establishment, assertion and defence against claims.

 

Who may your data be transferred to?
Your personal data is transferred to IT systems and services providers and entities providing services to ABR SESTA, including legal, debt collection, auditing, postal services.

 

How long ABR SESTA will continue to process your data?
Personal data will be stored:

  • in the scope of conclusion and execution of the contract between ABR SESTA and the Contracting Party – until an objection is raised and positively considered;
  • in the scope of fulfilling a legal obligation – 5 years from the end of a calendar year, counting from the next year in which the event causing the legal obligation occurred;
  • in the scope of establishing and asserting claims – until the claims expire, not longer than 6 years from the end of a calendar year counting from the next year in which the event giving rise to the claims occurred.

 

Which categories of personal data are processed by ABR SESTA?
These are business data: email address, telephone, name, position, contact history.

 

Where does ABR SESTA obtain personal data?
ABR SESTA has received your data because you are a representative of, act on behalf of or on behalf of the Contracting Party with whom ABR SESTA has concluded or is negotiating a Contract, and the data ABR SESTA has received from you, have been provided by the aforementioned Contracting Party or have been collected from publicly available registers (e.g. data of persons representing the Contracting Party indicated in the recitals of the Contract).

 

3. Sending offers and newsletters

 

For what purpose does ABR SESTA process data?
The personal data provided by you will be processed for marketing purposes, consisting in sending you newsletters, information, incentives and offers by e-mail or communicating with you by telephone. ABR SESTA may analyse data on whether you read the content sent to you and which content you are most likely to read. On the basis of these analyses and on the basis of information about your history of cooperation with ABR SESTA we may also adjust the content of communication to your interests.

 

Is the provision of data mandatory?
Providing data is voluntary. Without providing them, you will not be able to subscribe to the newsletter and receive commercial information from ABR SESTA. Providing the data means giving your consent to their processing. The consent may be revoked at any time.

 

What is the legal basis for processing your data?

  • Article 6(1)(f) of the GDPR, i.e. ABR SESTA’s legitimate interest in direct marketing and in tailoring the offers presented to you to your interests.
  • If you agree to receiving marketing messages by e-mail, the legal basis is also Article 10 of the Act on Providing Services by Electronic Means and Article 172 of the Telecommunications Act. You may revoke your consent at any time. To do so, reply to the email containing the marketing message indicating “WITHDRAW CONSENT”, “I DENY CONSENT” or similar in the subject line of the email. You may also contact ABR SESTA at the e-mail address office@abrsesta.com.

 

Who may your data be transferred to?
Your personal data is passed on to mailing, IT and service providers and entities providing services to ABR SESTA.

 

How long will ABR SESTA continue to process your data?
Personal data will be stored until you object or withdraw your consent, and then as part of the process of “ensuring the exercise of rights”.

 

Which categories of personal data are processed by ABR SESTA?
ABR SESTA processes the following types of data:

  • email address,
  • name and last name,
  • company name (place of employment),
  • telephone number,
  • contact history.

 

Where does ABR SESTA obtain personal data?
We may obtain personal data from:

  • forms on the npvo.eu website,
  • publicly available sources, such as your company’s website or official business registers,
  • business cards which you have given to an ABR SESTA representative,
  • references and referrals,
  • persons and entities that gather databases of contacts to companies,
  • persons who forwarded your contacts to us as persons whom ABR SESTA should contact owing to your scope of competence.

 

You will be informed about the inclusion of your data in the ABR SESTA system in accordance with the requirements of the GDPR. In order to determine from which source ABR SESTA obtained data, please contact the e-mail address office@abrsesta.com.

 

4. Customer satisfaction surveys

 

For what purpose does ABR SESTA process data?
The personal data you provide will be processed for the purpose of carrying out customer satisfaction surveys.

 

Is the provision of data provision?
Providing personal data is voluntary. Failure to provide the required data will result in inability to participate in the satisfaction survey.

 

What is the legal basis for processing your data?
The personal data provided will be processed on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of the controller’s legitimate interest in improving customer service.

 

Who may your data be transferred to?
Your personal data will be transferred to suppliers of IT systems and services and to entities providing services to ABR SESTA.

 

How long will ABR SESTA continue to process your data?
Personal data will be kept for a period of 3 years after the last service has been provided to you.

 

Which categories of personal data are processed by ABR SESTA?
These include email address, company, history of contact and rendered services.

 

Where does ABR SESTA obtain personal data?
ABR SESTA has received your data because you are a representative of, act on behalf of or on behalf of a Contractor with whom ABR SESTA has concluded or is negotiating a Contract, and ABR SESTA has received the data from you, or it has been provided by the aforementioned Contractor or collected from publicly available registers (e.g. data of persons representing the Contractor indicated in the recitals of the Contract).

5. Ensuring the exercise of rights under the GDPR

 

For what purpose does ABR SESTA process your data?
The personal data you provide will be processed to ensure the exercise of your rights under the GDPR.

 

Is the provision of data mandatory?
Provision of personal data is required by ABR SESTA in order to exercise the rights provided for by the GDPR.

 

What is the legal basis for processing your data?
The personal data you provide will be processed on the basis of Article 6(1)(b) of the GDPR and, once your specific request has been fulfilled (or refused), the legal basis is the legitimate interest of the controller (Article 6(1)(f) of the GDPR) to protect against possible claims.

 

Who may your data be transferred to?
Your personal data is transferred to suppliers of IT systems and services and to entities providing services to ABR SESTA.

 

How long will ABR SESTA continue to process your data?
Personal data will be stored until the request is answered and then until a positively resolved objection is received, but for no less than 6 years for the purpose of protection against possible claims.

 

Which categories of personal data are processed by ABR SESTA?
The data includes an email address or other data – the extent of which has been minimised and is necessary to ensure the purpose of the processing, i.e. the exercise of your rights under the GDPR.

 

Where does ABR SESTA obtain personal data?
Directly from you, from correspondence with you.

 

6. Processing of cookies

 

This website uses cookies. Cookies are IT data, in particular text files, which are stored in the Service User’s terminal equipment and are intended for use in the Service’s websites.

 

For what purpose does ABR SESTA process data?
Cookies are used for the following purposes:

  • creation of statistics which help to understand how users of the Website use websites, which enables improvement of their structure and content; (analytical purpose)
  • maintaining a session of the Service User (after logging in), thanks to which a User does not have to re-enter his/her login and password on each subpage of the Service; (functional purpose)
  • in the case of using the Internet Shop, to remember items added to the basket in order to place an order and to optimise the use of the Shop’s websites; (functional purpose)
  • to define a user profile in order to display tailored material to the user on advertising networks, in particular the Google network; (advertising purpose)

 

Is the provision of data mandatory?
The use of cookies is voluntary. Restricting the use of cookies may affect some of the functionalities available on the Website.

 

What is the legal basis for processing your data?

  • With regard to cookies used for analytical and advertising purposes – the personal data provided will be processed on the basis of Article 6(1)(a) of the GDPR, i.e. on the basis of your consent given in accordance with Article 173 of the Telecommunications Law.
  • With regard to cookies used for functional purposes – the personal data provided will be processed on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of the Administrator’s legitimate interest in providing you with the appropriate quality of service and functionality of the website.

 

Who may your data be transferred to?
Service operator is the entity placing cookies on the Service User’s end device and accessing them.

 

Cookies placed in the Service User’s terminal device may also be used by advertisers and partners cooperating with the Service Operator.

 

Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to your use of the Website. For this purpose, information may be stored about the user’s navigation path or the time spent on a particular website.

 

How long will ABR SESTA continue to process your data?
There are two main types of cookies used on the Website: ‘session cookies’ and ‘persistent cookies’. ‘Session’ cookies are temporary files that are stored in the User’s terminal device until logging out, leaving the website or switching off software (web browser). ‘Persistent’ cookies are stored in the User’s terminal device for the time specified in the parameters of cookies or until they are deleted by the User.

 

Which categories of personal data are processed by ABR SESTA?
Cookies usually contain the name of the website they come from, the time they are stored on the terminal device and a unique number. They may also contain other types of information, depending on the purpose for which they are used. For example, they may be used by advertising networks, in particular the Google network, to display advertisements tailored to the user’s use of the Website. To this end, information may be stored about the user’s navigation path or the time spent on a particular page.

 

We recommend reading the privacy policies of these companies to understand the principles behind the use of cookies applied in statistics: Google Analytics Privacy Policy

 

With regard to the information about user’s preferences collected by the Google advertising network, the user may view and edit the information resulting from the cookies using the tool: https://www.google.com/ads/preferences/

 

Where does ABR SESTA obtain cookies?
Directly from you. Web browsing software (Internet browser) may allow the storage of cookies on the User’s terminal equipment by default. The Service User can always change his/her settings in this regard. The Internet browser also makes it possible to delete cookies, as well as to automatically block cookies. Detailed information on this subject may be found in the help section or documentation of the Internet browser.

 

7. Processing of npvo.eu web server logs

 

For what purpose does ABR SESTA process data?
Information about specific user behaviour is subject to logging at the server layer. This data is used exclusively for the administration of the website and to ensure the most efficient operation of the hosting services provided.

 

Is the provision of data mandatory?
The provision of data related to server logs is obligatory, it is a contractual requirement and the refusal to provide it means that the data cannot be processed and the requested service cannot be rendered.

 

What is the legal basis for processing your data?
The personal data provided will be processed on the basis of Article 6(1)(b) of the GDPR, i.e. on the basis that it is necessary to provide it in order to fulfil the user’s request.

 

Who may your data be transferred to?
Your personal data are forwarded to IT systems and services providers and entities rendering services to ABR SESTA.

 

How long will ABR SESTA process your data?
Personal data will be stored for a period of one year from the date the information is saved on the server.

 

Which categories of personal data does ABR SESTA process?
Viewed resources are identified by URL addresses. In addition, the following may be recorded:

  • time of receipt of enquiry,
  • time of sending the response,
  • name of the client station – identification via the HTTP protocol,
  • information about errors that occurred during the HTTP transaction,
  • the URL address of the page previously visited by the user (referrer link), in the case when the user accessed the Website via a link,
  • information about user’s browser,
  • information about the IP address.

 

The above data are not associated with specific persons browsing the ABR SESTA website.

 

Where does ABR SESTA obtain personal data?

ABR SESTA receives log data directly from your device.