Privacy and Cookies Policy of the www.ivn.pl Website

A. PRIVACY POLICY

I. Subject of the Privacy Policy

1. This document constitutes the fulfillment of our obligations arising from the provisions on the protection of personal data, in particular from the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

2. This document will tell you how and on what principles we process your personal data when you contact us, use our social media or enter into a agreement with us.

You will learn, among other things:

why we can process your data;
for what purpose we process it;
whether you are obliged to provide us with your data;
how long we store your data;
whether there are other recipients of your personal data;
whether we process your data outside the European Economic Area; and
whether we process your data in an automated manner, including profiling.

3. This Policy consists of the following parts:

The first part of the Privacy Policy contains information that we must provide to everyone, regardless of the purpose of data processing..

The second part contains information for the person who uses our Website.

The third part contains information for the person who communicates with us directly via the forms available on our website or by e-mail.

The fourth part contains information for the person who uses our free consultation service.

The fifth part contains information for the person who enters into an agreement with us, including an agreement for the provision of services.

The sixth part contains information for the person who takes part in the recruitment process for our Company.

The seventh part contains information for the person who is interested in our offer due to the marketing activities conducted, also based on the use of social media and as part of the sending of our Marketing Newsletter.

Part I. General information for all Users Contact details of the Controller of your personal data

The controller of your personal data is IVN sp. z o.o. with its office at Henryka Wieniawskiego 66/2, 31-436 Kraków, NIP 0000762071.

In all matters concerning our services, but also the processing of your personal data, you can contact us by e-mail by sending a message to the address office@ivn.pl and by phone at the phone number +48 12 44 55 840.

Where do we obtain your personal data from?

The personal data we collect through our website comes directly from you. This happens when: You browse our website. You send us inquiries, requests for an offer, questions about our services. You contact us to participate in our free consultation. You visit our accounts in social media and contact us using these portals. You enter into a cooperation agreement or a service agreement with us. Your personal data may also come from your employer – in a situation where you contact us in connection with the performance of a contract concluded between us and your employer. You send us your CV to take part in our recruitment process. You agree to receive the Marketing Newsletter.

What rights do you have in connection with the processing of personal data?

Below we present your rights related to the protection of personal data and the fact of processing your data. The rights that you have in a specific situation depend on the purpose and basis for which we process your personal data.

Right of access to data

You have the right to obtain information regarding the personal data stored by us about you. By submitting a request for access to your data, you will receive information about the processing of personal data, including in particular the purposes and legal basis of processing, the scope of the data held, the entities to whom the personal data is disclosed and the planned date of their deletion.

Right to rectification

You have the right to immediate rectification and/or supplementation of the personal data stored about you. It is our obligation to ensure that our mutual communication is based on true, complete and up-to- date data.

Right to restriction of processing

You have the right to ask us to limit the processing of your personal data if you dispute the accuracy of the data stored about you, if the processing is carried out without a legal basis or if you have presented your objection to their processing.

Right to erasure

You have the right to request the erasure of your personal data stored by us, unless maintaining the data is necessary to ensure freedom of speech, freedom of access to information, fulfillment of an obligation arising from legal provisions, for reasons of public interest, in order to file or defend against claims or to pursue rights under the law.

Right to information

If you have exercised the right to rectification, erasure or restriction of data processing, we will notify all recipients of your personal data about the method of rectification, erasure or restriction of data processing or imposing restrictions on the processing of this data, unless this is impossible to carry out or involves disproportionate effort.

Right to data portability

You have the right to obtain a copy of the data provided to us, which will be sent to you or a third party in a structured, standard format that is machine-readable. If you request that this data be sent to another data controller, this will be done, provided that it is technically possible. This right applies only to situations where we process your data based on your consent or in connection with the performance of a contract.

Right to object

If your personal data is processed based on our legitimate interest, you have the right to object at any time to further processing. We will consider your request in accordance with the principles resulting from the legal provisions.

Right to withdraw consent

If your data is processed based on consent, you have the right to withdraw it at any time, with future effect. This will not affect the legality of the data processed so far.

The right to lodge a complaint with a supervisory authority

If the processing of your personal data violates data protection regulations or if your data protection rights have been violated in any other manner, you may file a complaint with a supervisory authority. The supervisory authority competent in Poland is the President of the Personal Data Protection Office in Warsaw (ul. Stawki 2). Before you exercise your right to file a complaint, we encourage you to contact us first so that we can clarify any doubts you may have.

Consideration of the application

If you submit an application to us for the implementation of a given right, a response to the application will be provided within one month of its receipt. If it is necessary to extend this period, we will inform you of the reasons for such extension. The response to your application will be provided to the e-mail address from which you send the application, and in the case of applications sent by post, by regular mail to the address indicated by you, unless the content of the letter indicates a desire to receive feedback to the e-mail address (in which case you should provide an e-mail address).

Links to other sites

Where we provide links to websites of other entities, this Privacy Policy does not apply and does not describe how that entity processes your personal data. We encourage you to familiarize yourself with the relevant privacy policies of those entities located on their websites.

Cookies

Like almost all websites, our website also uses cookies. Cookies that are used to ensure the functionality, security and availability of the website are necessary for the proper operation of the website. Thanks to these files, we know that you have accepted our Privacy Policy and Cookie Policy. We use these files based on our legitimate legal interest. We also use cookies for analytical purposes. Thanks to them, we can measure the effectiveness of our website based on the analysis of actions taken by users on the website. We use tools enabling such functionality based on your consent. You can read more about how we use cookies and how to change your cookie preferences in Part B of this document – Cookie Policy.

Google Analytics

On our website, we use tools from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google Analytics 4, which allow us to collect statistical information about your use of the website. We do this to know, among other things, the number of users using our website. This information is processed only in a manner that does not allow us to directly identify anyone. Google does not register or store IP addresses. Google Analytics 4 collects all data from devices located in the EU (based on IP address search by geolocation) in domains and on servers in the European Union. However, remember that Google may process your data on a server in the United States. In these cases, Google may process your personal data outside the European Economic Area, but this takes place on the basis of the so-called Data Privacy Framework, of which Google is a member, i.e. a decision confirming the adequate level of protection of your personal data in connection with the transfer of personal data. If you are interested in the details related to data processing within Google Analytics, we encourage you to read the explanations prepared by Google here.

Meta Piksel

As part of our activities, we also use the Meta Pixel, provided by Meta Platforms Ireland Limited, based at Merrion Road, Dublin 4, Ireland. The Meta Pixel is a short code placed on the website that allows us to measure the effectiveness of ads based on the analysis of actions taken by users on the website. The use of the Meta Pixel may involve the processing of your data outside the EEA by Meta Platforms Inc., based at 1 Hacker Wy, Menlo Park, CA 94025, United States. This processing takes place on the basis of an adequacy decision, the so-called Data Privacy Framework, which guarantees an adequate level of security in the processing of your personal data. You can read more about data processing by Meta here.

Microsoft Clarity

On our website, we use an analytical tool provided by Microsoft Corporation based in Redmond, USA, Microsoft Clarity. This tool allows us to understand how users interact with our site, and thus better tailor it to their needs. Microsoft Clarity does not allow us to identify individual users. The use of Microsoft Clarity may involve the processing of your data outside the EEA by Microsoft Corporation. This processing takes place on the basis of an adequacy decision, the Data Privacy Framework, which ensures an adequate level of security for the processing of your personal data. Please read the Microsoft Privacy Statement available here.

Changes to the Privacy Policy

he Privacy Policy is subject to periodic verification and update, if justified. Below you can read the changes to date, if any. 06.12.2024, we published this version of the Privacy Policy.

Part II. Data processing as part of using the www.ivn.pl Website

Below we present the principles of processing personal data (including IP address or other identifiers) and information collected via cookies or other similar technologies), which are used when you use the www.ivn.pl Website.

For what purpose do we process your data?

We process your personal data to provide services electronically in the scope of providing you with content collected on the Website, as well as for analytical and statistical purposes.

On what legal basis do we process your data?

The legal basis and purpose of processing your personal data is:

in order to provide services electronically in the scope of providing you with content presented on our Website- then the legal basis for processing is the necessity of processing to perform the contract (Article 6 paragraph 1 letter b of the GDPR);
for analytical and statistical purposes – then the legal basis for processing is your consent (Article 6 paragraph 1 letter a of the GDPR);
in order to possibly establish and pursue claims or defend against them and to ensure the security of your data – the legal basis for processing is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR) consisting in protecting our rights.

How long do we process your data?

We will process your personal data for as long as it is necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations. In the scope of data processing based on consent, we will process your personal data until it is withdrawn, which will not affect the legality of earlier processing.

Who is the recipient of your personal data?

The recipient of your personal data, i.e. an external entity that will be able to participate in the process of processing your data, will be our trusted subcontractors – IT service providers in the field of data hosting and business mail services and companies whose statistical and analytical tools we use, indicated in Part I of this Privacy Policy.

Nature of data provision

Your personal data – including IP address, other identifiers and other information, from the moment you connect to our website, are collected via cookies or other similar technologies. You can read more about how we use cookies and how to change your cookie preferences in Part B of this document- Cookies Policy.

Other important information

Your data may be processed outside the European Economic Area – Google, Meta and Microsoft may process your data on a server in the United States. You can find more about data processing by these entities in Part I of this Policy.

What rights do you have?

Your rights are set out in Part I of this Privacy Policy.

Part III. nformation for persons who communicate with us directly using the forms available on our website or by e-mail

Below we present to you the principles of personal data processing, which apply when you contact us directly using the forms available on our website or by e-mail.

For what purpose do we process your data?

We process your personal data to answer your inquiries regarding: – prices of our services, their specifications or other important information regarding our services; – details of initiating cooperation; – all other inquiries that are sent to us.

On what legal basis do we process your data?

The legal basis for the processing of your personal data is:

in order to respond to your inquiry, depending on the type of inquiry – the basis for the processing of data is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in providing information about our activities or the necessity of processing to perform the contract concluded between us or to take action before concluding the contract at the request of the data subject (Article 6, paragraph 1, letter b of the GDPR); • in order to determine and pursue claims or defend against them and to ensure the security of your data – the legal basis for the processing is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR) consisting in protecting our rights

How long do we process your data?

In the scope of data transferred in connection with the intention to conclude a contract, we will process your data for the period of performing the contract, as well as for the limitation period for claims and, within the scope of concluded contracts, for the time resulting from the provisions determining the period of storage of accounting documents.

Who is the recipient of your personal data?

Nature of providing data

Providing your data is voluntary, although the data indicated as necessary to conclude the contract is mandatory, and failure to provide it may be tantamount to the impossibility of concluding the contract. Providing the remaining data is optional.

Other important information

Your data will not be processed outside the European Economic Area.

What rights do you have?

Your rights are indicated in Part I of this Privacy Policy.

Part IV. Free consultations

Below we present the principles of personal data processing that apply when you participate in our free consultation service.

For what purpose do we process your data?

We process your personal data to enable you to take part in a free consultation with us, during which we will discuss our possible cooperation, assess your needs or advise on further actions.

On what legal basis do we process your data?

The legal basis for the processing of your personal data is:

in order to enable you to participate in a free consultation – the legal basis for processing is the necessity of processing to perform the contract (Article 6, paragraph 1, letter b of the GDPR);
if you are a person representing a Company that uses a free consultation – the legal basis for processing is the necessity of processing to perform the contract or taking steps at the request of the data subject in order to conclude the contract (Article 6, paragraph 1, letter b of the GDPR);
if you are an employee, associate, a person designated by the Company for contact in connection with participation in a free consultation with the Controller – the basis for processing your data is the legally justified purpose of the Company and the Controller consisting in the performance of the concluded Agreement by its Parties,
in order to consider complaints – then the legal basis for processing is our legitimate legal interest consisting in determining the validity or invalidity of complaint or warranty claims (Article 6, paragraph 1, letter f of the GDPR);
in order to determine and pursue claims or defend against them – the legal basis for processing is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in the protection of our rights.

How long do we process your data?

We will process your data for the duration of the contract, and after its execution for the limitation period for claims, as well as the period resulting from legal provisions determining the storage period of accounting documents.

Who is the recipient of your personal data?

The nature of providing data

Providing your data is voluntary, although some of the data indicated by us must be provided obligatorily in order to participate in the free consultation, and failure to provide them results in its non- implementation. Providing the remaining data is optional.

Other important information

Your data will not be processed outside the European Economic Area.

What rights do you have?

Your rights are indicated in Part I of this Privacy Policy.

Part V. nformation for the person who concludes cooperation agreement or the agreement for the provision of services with us

Below we present the principles of personal data processing that apply when you enter into an agreement with us on the basis of which we cooperate, including when we provide services to you.

For what purpose do we process your data?

We process your personal data to agree on individual terms of cooperation or provision of services and to enable the implementation of our cooperation.

On what legal basis do we process your data?

The legal basis for the processing of your personal data is:

in order to perform the Agreement concluded by us – the legal basis for processing is the necessity of processing to perform the agreement or taking steps at the request of the data subject in order to conclude the agreement (Article 6 paragraph 1 letter b of the GDPR);
if you are a person representing the Company – in order to conclude or perform an individual agreement – the legal basis for processing is the necessity of processing to perform the agreement or taking steps at the request of the data subject in order to conclude the agreement (Article 6 paragraph 1 letter b of the GDPR);
if you are an employee, associate, a person designated by the Company for contact in connection with the conclusion and performance of the agreement with the Administrator – the basis for processing your data is the legally justified purpose of the Company and the Controller consisting in the performance of the concluded Agreement by its Parties (Article 6, paragraph 1, letter f of the GDPR);
in order to fulfill the statutory obligations incumbent on us as the controller resulting in particular from tax regulations and accounting regulations – the legal basis for processing is the fulfillment of our legal obligation (Article 6 paragraph 1 letter c of the GDPR);
for the purpose of considering complaints – then the legal basis for processing is our legitimate interest in determining the validity or invalidity of complaint or warranty claims (Article 6, paragraph 1, letter f of the GDPR);
for the purpose of possibly establishing and pursuing claims or defending against them – the legal basis for processing is our legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in protecting our rights

How long do we process your data?

We will process your data for the duration of the contract, and after its termination for the limitation period for claims, as well as the period resulting from legal provisions determining the storage period of accounting documents.

Who is the recipient of your personal data?

The recipient of your personal data, i.e. an external entity that will be able to participate in the process of processing your data, will be our trusted subcontractors – providers of IT services in the field of data hosting and business mail services, as well as entities whose activities are ancillary to our activities, including in particular entities such as banks and payment operators, entities providing accounting, legal, auditing and consulting services.

The nature of providing data

Providing your data is voluntary, although some of the data indicated by us must be provided mandatory in order to perform the agreement, and failure to provide it results in the lack of its execution. Providing the remaining data is optional.

Other important information

Your data will not be processed outside the European Economic Area.

What rights do you have?

Your rights are indicated in Part I of this Privacy Policy.

Part VI. Data processing for the purpose of conducting the recruitment process

The following information applies to the person we contact using the data sent to us by e-mail or via a form, for recruitment purposes, aimed at starting cooperation. We collect information, including your personal data, so that we can establish communication with you and conduct the recruitment process.

For what purpose do we process your data?

We process contact data in order to consider your candidacy in the recruitment process we conduct.

On what legal basis do we process your data?

The legal basis for processing your personal data is:

in the event that the basis of our cooperation is to be an employment contract – the legal obligation to provide the data necessary to conduct the recruitment process, i.e. art. 6 sec. 1 letter c GDPR;
in the event that the basis of our cooperation is to be a civil law contract – the performance of the contract or taking steps to perform the contract, i.e. art. 6 sec. 1 letter b GDPR;
in the scope of personal data that were provided by the candidate on their own initiative and were not required to submit an application for a given position – consent, i.e. art. 6 sec. 1 letter a GDPR, expressed by providing the above data;
in regards to the future recruitment – consent, granted by checking the appropriate checkbox or submitting a declaration, i.e. art. 6 sec. 1 letter b GDPR

How long do we process your data?

We process the basic contact details obtained directly from you only for the period necessary to conduct the recruitment process and for a period of 3 months after the end of this process. In the case of consent to participate in future recruitment processes, we process your data for no longer than 1 year.

Who is the recipient of your personal data?

The recipient of your personal data, i.e. the external entity that participates in the processing of your data, are our subcontractors, IT service providers. The recipient of your personal data may also be a recruitment agency if we decide to use its services.

Nature of providing data

Providing data is voluntary. However, remember that if you do not provide us with your data, we will not be able to contact you for the purpose of conducting the recruitment process aimed at establishing cooperation.

What rights do you have?

Your rights are indicated in Part I of this Policy.

Part VII. Information for persons interested in our offer through marketing activities, including those based on the use of social media

Below we present to you the principles of personal data processing, which apply when you use and communicate with us using our profiles on social media sites (referred to as “fanpages” or “profiles”). On our fanpages, we publish and share content, offers and recommendations of our services on an ongoing basis. These principles also apply to sending you our Marketing Newsletter.

For what purpose is your data processed?

We process your data only in connection with maintaining our profiles on social media, including for the purpose of informing you about our activities and for the purpose of promoting various types of events and services, as well as for the purpose of communicating with you via the functionalities available on social media. We process your data to the extent that you make them available on these sites. Remember that social media administrators record your activity using cookies and other similar technologies every time you interact with our fan pages and other social media sites. Fan page administrators have access to general statistics regarding your (as a fan page visitor) interests and demographic data (such as age, gender, region). As part of using social media sites, the scope and purposes of data processing in social media sites have been determined by the administrators of these sites. Your data is also processed for the purpose of sending the Marketing Newsletter, through which we inform you about new products, interesting offers, or events that concern us.

On what legal basis do we process your data?

The legal basis for processing your personal data is:

our legitimate interest (Article 6, paragraph 1, letter f of the GDPR) in promoting our own brand and building and maintaining a community associated with the brand;
your consent to the creation of data for the purposes of website statistics in social media (Article 6, paragraph 1, letter a of the GDPR);
Your consent to receive our Marketing Newsletter (Article 6, paragraph 1, letter a of the GDPR).

How long do we process your data?

We will process your personal data for as long as it is necessary to achieve the purposes described in this Privacy Policy, in particular to fulfill our contractual and statutory obligations, unless you withdraw your consent to the processing of your data earlier. Withdrawal of consent does not affect the lawfulness of previous processing based on it. The services: TikTok and LinkedIn process your data when you use our fanpages for their own purposes, not covered by this Privacy Policy. We have no influence on the activities of these services related to the aforementioned data processing. In this matter, we refer to the privacy policies of the individual social media services:

Linkedin Data Policy.

TikTok Data Policy.

Who is the recipient of your personal data?

The recipient of your personal data, i.e. an external entity that will be able to participate in the process of processing your data when using our social media, will be our trusted subcontractors – IT service providers in the field of data hosting and business email services, as well as TikTok Technology Limited, an Irish company, and TikTok Information Technologies UK Limited, administering the TikTok service and LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, administering the LinkedIn service. The recipient of your personal data will also be the entity whose services we use to send you a marketing newsletter.

The nature of providing data

Your personal data – including the IP address, other identifiers and other information, from the moment you connect to our fan pages, are collected via cookies or other similar technologies. As part of the use of our fan pages, the scope and purposes of data processing in social networking sites are determined by the administrators of these sites. In this matter, we refer to the privacy policies of individual social networking sites:

Linkedin Data Policy

TikTok Data Policy

What rights do you have?

Your rights are indicated in Part I of this Privacy Policy.

Other important information

Using the TikTok service may involve the processing of your personal data outside the European Economic Area. The transfer of personal data is based on standard contractual clauses, i.e. a model contract approved by the European Commission, which ensures an adequate level of protection of personal data.

B: COOKIES POLICY

What are cookies and similar technologies?

A cookie is a text file saved by a web server on your computer or mobile device. Its content can only be downloaded and read by the server that created the file. Cookies are unique to the browser or mobile application you are using. The content of a cookie often consists of identifiers, website names, and sequences of numbers and letters.

Essentail cookies

What are essential cookies and can I decline them?

These cookies are necessary for the website to function and cannot be disabled without affecting the use of this website. These cookies are usually only placed in response to specific actions taken by the user on the website. We use these cookies because we believe it is in our legitimate interest and in order to allow this website to function properly.

Why do we use essential cookies?

We usually use these files to perform a specific function of the website, e.g. remembering the user’s acceptance of the content of the Privacy Policy.

What data is collected and used by essential cookies?

Essential cookies do not collect or use personal data.

How long do we keep this data?

Necessary Cookies are usually Session Cookies that only store data for the duration of the user’s visit to the site, but if the cookie supports remembering your acceptance of the Privacy Policy, the data is kept longer to remember you on subsequent visits.

Analytical Cookies

What are analytical cookies and can you refuse them?

These cookies, also known as “performance cookies”, “measurement cookies” or “statistical cookies”, allow us to count visits and traffic sources so that we can measure and improve the performance of our site. They help us know which pages are the most and least popular, and to see how users move around the site. We use cookies to understand how users interact with our site, for example to see if users leave certain pages or if they experience problems on them. We use cookies because we have a legitimate interest in monitoring the performance and operation of the site.

Why do we use analytical cookies?

We use analytical cookies to enable measurement and analysis. These cookies allow us to obtain information such as: – what websites users visit before reaching our site, for example whether a visitor came directly to our site. – which pages on our website are the most and least popular, how much time visitors spend on each page and on each part of a given page, what links and buttons they click. – what device the user uses to visit our website, e.g. information about the make and model, what browser and operating system the user uses.

What data is collected and used by analytical cookies?

As a rule, only a coded identifier is saved in cookies. We cannot identify you. In case of Google Analytics this identifier is a link to Google’s analytical servers, allowing Google to create a profile of how the user uses the website. Browser data is also processed as a result of reading the cookie, including technical data of the device used to access the page and its location. We do not collect any personal data via statistical cookies. Generally, we only receive aggregated data about visitors to our website. However, Google processes your personal data in order to provide us with these aggregated statistics. In addition, because other websites also use Google Analytics, Google not only has a profile of how you use our site, but also how you use many other websites that also use Google Analytics. Google can also link cookie information to your account information if you are logged into your Google account while browsing, to create an even more detailed profile about you. To learn more about how Google processes your personal data, please see the Google Privacy Policy. Cookies are also used by Microsoft Clarity to obtain user session data. A cookie tells us how a user accessed our Website, their location, user language preferences, and more. You can read more about what data Clarity collects with cookies here. The table below shows which files we use, how long they are saved and why we use them.

How can I change cookie settings?

You can find out more about how to manage cookies in individual browsers here:

If you do not want Google Analytics cookies to be installed on your device, please visit: http://tools.google.com/dlpage/gaoptout