Privacy Policy

Atteli sp. z o.o. Privacy Policy

Effective from May 5, 2018

This document contains our Privacy Policy, which outlines the principles we adhere to in the processes of personal data processing. This document also includes the mandatory information disclosures that must be presented to the individuals whose data is being processed, namely, you. Before we delve into the details, we would like to highlight some key principles of personal data protection. These are important to us because we know they are important to you.

The Privacy Policy has four objectives:

  1. To explain how we use the information you provide to better tailor our products and services to your expectations;
  2. To ensure that all information about the process of your data processing is presented clearly and transparently;
  3. To assure you that the personal data we process is secure against the threats that may arise in the processing procedures;
  4. To ensure transparency in our interactions with you, so that the right to privacy is always guaranteed.
All the information we collect is directly or indirectly related to our business activities, namely, the creation of comprehensive, customized software services using the latest technological solutions.
We are the controller of your personal data, which means we decide on the purposes and means of its processing. In practice, this means that Atteli Sp. z o.o., headquartered in Warsaw at ul. Szamocka 8, is the entity responsible for your personal data. For any questions or concerns related to your personal data, please contact the Data Protection Officer at: rodo@atteli.com.

All personal data we process is divided into processes, each based on the main purpose and the category of the individuals whose data is processed. These are as follows:

Recruitment
Personal data of job applicants is processed to efficiently conduct the selection process and ultimately choose the most suitable candidate for a specific position. Your personal data in this process is processed based on your consent. It is worth noting that consent can be given for the processing of personal data for a specific recruitment process as well as for potential future recruitment processes. We remain open to specialists who want to achieve success with us. We store your application documents for 2 years from the end of the recruitment process. After this period, your data (if we do not establish cooperation) will be completely deleted from our resources. Providing personal data is entirely voluntary, but certain information, particularly about your professional experience, is crucial for the purpose we want to achieve. Your personal data in this process may be entrusted to external entities participating in the recruitment process, but we emphasize that these entities remain under our constant supervision and provide at least the same level of personal data security as we do.

Marketing Process
Personal data of customers and potential customers (prospects) is processed to provide the possibility of presenting offers for our products and services, responding to inquiries, and conducting active marketing activities through selected communication channels or publishing images from industry events. Your personal data in this process is processed based on your consent (marketing through selected communication channels) or to enter into an agreement in the case of inquiries directed to the company, as well as to fulfill it as part of the Newsletter subscription. Additionally, your data is processed based on the so-called legitimate interest of the data controller when we recommend the company’s services in personal contacts or create marketing statistics and reports. Providing personal data in this process is voluntary, but failure to provide it will prevent us from responding to your inquiry or presenting our offer tailored to your individual needs. Your personal data in this process is stored for 3 years from the revocation of your consent if you have given it. Otherwise, it is also stored for 3 years from the end of the newsletter service or from your last active engagement with your personal data or the submission of an inquiry. After this period, your data (if we do not establish cooperation) will be completely deleted from the company’s resources. Your personal data in this process may be entrusted to external entities participating in the marketing process (e.g., mailing service providers), but we emphasize that these entities remain under the company’s constant supervision and provide at least the same level of personal data security.

Service Provision
Personal data, especially of sole proprietors, civil partnerships, and representatives of legal entities, is processed to fulfill the service provision agreement. Your personal data in this process is processed to comply with our legal obligations (mainly tax-related) and the so-called legitimate interest, which includes reporting and statistical activities. We store your personal data for 6 years from their archiving, i.e., from the last action related to issuing an accounting document on your behalf. Providing personal data is voluntary, but failure to provide it will prevent us from fulfilling the agreement or issuing an accounting document. Your personal data in this process may be entrusted to external entities participating in the process, but we emphasize that these entities remain under our constant supervision and provide at least the same level of personal data security as we do.

Contractors and Suppliers
Personal data of representatives of our contractors, both sole proprietors, civil partnerships, and representatives of legal entities, is processed to fulfill contractual obligations. Your personal data in this process is processed based on the agreement (even if it is not recorded in writing), to comply with our legal obligations (mainly tax-related), and the so-called legitimate interest, which includes fulfilling the agreement with the contractor (usually your employer). We store your personal data for 6 years from their archiving, i.e., from the last action related to fulfilling the agreement with the contractor. Providing personal data is voluntary, but failure to provide it will prevent us from fulfilling the agreement with the contractor. Your data may have been provided by the contractor (e.g., your employer). Your personal data in this process may be entrusted to external entities participating in the process, but we emphasize that these entities remain under our constant supervision and provide at least the same level of personal data security as we do.

Access Control
Personal data is also processed to ensure the safety of people and property in our locations. Your personal data in this process is processed based on the so-called legitimate interest, which includes the above-mentioned protection. We store your personal data for 3 months to 2 years from their archiving, depending on the location, e.g., recording your image on video surveillance. Providing personal data in this process is also voluntary, but failure to provide it will prevent entry to the protected area. Your personal data in this process may be entrusted to external entities participating in the access control process, but we emphasize that these entities remain under our constant supervision and provide at least the same level of personal data security as we do.

Rights
We would like to emphasize that we guarantee every individual whose data we process the following rights:

  1. Right to access data content – You can contact us to describe the processing of your personal data and to provide access to all personal data collected about you. However, we note that excessive use of this right may hinder our work, so we ask for discretion in using it.
  2. Right to rectify data – We make every effort to always process the most up-to-date data about you, but if it turns out that the data we process is incorrect, you can always contact us to correct it.
  3. Right to delete data – If you no longer want us to process your personal data, you can always contact us to delete it. However, we note that this right may not always be fulfilled, as some data must be retained due to binding legal regulations.
  4. Right to restrict processing – If you find that the data we process should not be deleted after the above-mentioned periods, you can contact us to continue storing it.
  5. Right to data portability – If it turns out that we process your personal data in IT systems, you can contact us to transfer it to another service provider. However, we note that this right applies only to data you provided to us.
  6. Right to object – You can always contact us with an objection to the processing of specific personal data for a specific purpose. In each case, the objection will be considered, and your remarks will be taken into account in future data processing processes.
  7. Right to withdraw consent – You can withdraw your consent to the processing of personal data at any time, but all actions we performed on your data before the withdrawal will remain valid.
  8. Right to file a complaint – If you believe we are violating your right to privacy, you can always contact the President of the Office for Personal Data Protection with a complaint. However, we encourage you to resolve your concerns with us before taking such a step.