Privacy and cookies policy
PRIVACY AND COOKIES POLICY
FIBERAX LIMITED LIABILITY COMPANY When, as a natural person, you contact us, use our services or act on behalf of our contractor
or client, or when we have obtained your Personal Data from other sources (e.g., from publicly available industry
websites
or when your data has been disclosed to us as contact details for the performance of contracts), we begin
processing your Personal Data. We treat all information about you responsibly and in accordance with
the law – in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
on the protection of natural persons with regard to the processing of personal data and on the free movement of such
data, and repealing Directive 95/46/EC (hereinafter: “GDPR”). The following information is intended to explain who we are, how we obtain information and what we do with it in
business, commercial, marketing relations and in connection with contacting us. If anything is unclear to you
or raises doubts, please contact us. I. WHO ARE WE? The controller of your Personal Data is Fiberax Sp. z o.o. with its registered office in Warsaw,
ul. Puławska 405a, unit 303, 02-801 Warsaw, NIP: 9512571325, REGON: 525646336, entered into the register of
entrepreneurs
of the National Court Register kept by the District Court for the capital city of Warsaw, 13th Commercial Division of
the
National Court Register under KRS number: 0001043360, with share capital of PLN 1,000,000.00 (hereinafter:
the “Controller”). The Controller has appointed a Data Protection Officer, attorney Grzegorz Leśniewski, who can be contacted at
the following e-mail address: gdpr@ucloud.eu II. BASIC DEFINITIONS Personal Data – all information that we process about you. This includes e.g. first name, last name,
e-mail, etc.; Processing – all operations we perform on your Personal Data. This includes e.g. collection,
storage, updating, deletion; Contractor – a consumer, a sole proprietor, a legal entity or other organizational unit with which
the Controller establishes business cooperation; Representative – a member of the governing body, representative or proxy of the Contractor with whom
the Controller has concluded an agreement in order to implement cooperation; Contact Person – any natural person who communicates with employees and representatives or
proxies of the Controller for the purpose of initiating or carrying out business cooperation,
in particular a Contact Person may be an employee of the Contractor or another person designated by the Contractor, or
acting on its behalf. Website – the Controller’s website available at https://ucloud.eu/. Cloud – an organized ICT system, consisting in particular of computer hardware,
software and telecommunications links, used to provide our services. III. PROCESSING OF PERSONAL DATA OF REPRESENTATIVES OR CONTACT
PERSONS OF THE CONTRACTOR – PURPOSES AND LEGAL BASES OF PROCESSING If you are our Contractor or Representative, we may process your identification, contact
and contract performance data, i.e., in particular your first and last name, the name of your employer,
contact telephone number, e-mail address, your position/authorizations, and our correspondence. If
you are a party to a contract concluded with us, we will also process your registration data or data relating to our
settlements. We process personal data for the proper performance of the contract concluded between us and the Contractor, including
documenting its conclusion and identifying persons authorized to carry out the tasks specified in the contract. This is
necessary to pursue the legitimate interest of the Controller (Art. 6(1)(f) GDPR), which is the performance of a
contract with our Contractor. If, as a natural person, you are a party to a contract with us, your Personal Data will be
processed by us for the purpose of performing that contract (Art. 6(1)(b) GDPR). Additionally, in case of processing your Personal Data for the purpose of:
- fulfilling the Controller’s legal obligations (e.g., tax, accounting), the legal basis for processing your data will be the fulfillment of legal obligations imposed on the Controller (Art. 6(1)(c) GDPR);
- statistical, analytical and marketing purposes, the legal basis for their processing is, in such cases, the legitimate interest of the Controller (Art. 6(1)(f) GDPR); in the case of processing data for marketing purposes, the legitimate interest arises from the consent you have given for contact for marketing purposes through a specified communication channel;
- establishing, pursuing or defending against potential claims, the legal basis for processing your data will be our legitimate interest (Art. 6(1)(f) GDPR).
- identification data, including first and last name;
- contact details, including correspondence address, phone number, e-mail address or other contact information.
- defending against potential claims, as well as for the purpose of pursuing claims, the legal basis for processing your Personal Data for this purpose will be our legitimate interest (Art. 6(1)(f) GDPR);
- fulfilling the Controller’s legal obligations (e.g., tax, accounting), the legal basis for processing your Personal Data for this purpose will be compliance with legal obligations imposed on the Controller (Art. 6(1)(c) GDPR).
- first name(s) and surname,
- date of birth,
- contact details,
- education,
- professional qualifications,
- employment history,
- other data, if necessary to exercise a right or fulfill an obligation arising from legal provisions.
- with respect to the categories of data required under Article 221 § 1, 2 and 4 of the Labour Code, compliance with legal obligations incumbent on us in connection with the recruitment process (Art. 6(1)(c) GDPR) and taking steps at your request prior to entering into an employment contract (Art. 6(1)(b) GDPR);
- with respect to other data – your consent expressed by including Personal Data in your application beyond what is required by law (Art. 6(1)(a) GDPR) as well as taking steps at your request prior to entering into an employment contract (Art. 6(1)(b) GDPR).
- to assess your application against the requirements for the position specified in the job advertisement for which you submitted your recruitment application, or, as appropriate, to conduct future recruitment for similar positions;
- if you meet the requirements for the position – to make you an offer of cooperation and to conclude an agreement;
- to demonstrate compliance of the recruitment process with legal provisions.
- first name(s) and surname,
- date of birth,
- contact details,
- education,
- professional qualifications,
- employment history,
- residential address,
- PESEL number, or in its absence – the type and number of an identity document,
- other Personal Data, including the Personal Data of your children and other close family members – if providing such data is necessary for you to exercise special rights provided under labour law,
- bank account number, unless you have requested salary payment in cash.
- the contract binding us (Art. 6(1)(b) GDPR), and
- compliance with legal obligations incumbent on us (Art. 6(1)(c) GDPR) – in relation to Personal Data the collection and storage of which is required by generally applicable law, e.g. tax, accounting, personnel records, or obligations towards the Social Insurance Institution (ZUS), in particular the Labour Code (unless our cooperation is based on another contract than an employment contract), implementing acts, tax laws, and social security laws (for “sensitive” data in this context, the legal basis is the necessity to fulfill obligations and exercise specific rights by us or by you – Art. 9(2)(b) GDPR).
- for the duration of employment,
- until consent is withdrawn (for processing based on consent) or until the purpose is achieved,
- until an effective objection is raised (for data processed on the basis of legitimate interest),
- an employment contract – we may process your Personal Data contained in employee records for up to 10 years from the end of the calendar year in which the employment relationship ended;
- another civil law contract, including B2B – we process your Personal Data for the duration of the contract and usually for about 7 years after termination/expiration of the contract, as required by tax/accounting regulations;
- employment contract, mandate contract, or other service contract (except B2B) – the retention period for Personal Data from payroll records, salary records, or other documents used to determine pension or disability entitlements may be approx. 10 years after the end of cooperation, in line with specific legal provisions.
- duly authorized employees or associates of the Controller, who are obliged to keep them confidential and not use them for purposes other than those for which the Controller obtained the data;
- entities supporting us in providing services, on the basis of appropriate data processing agreements, such as e-mail marketing platforms, IT service providers, or communication tool providers;
- providers of legal, advisory, accounting, and tax services;
- audit service providers;
- postal operators and couriers;
- archiving service providers;
- entities whose services you may use when using our services, e.g. payment operators;
- companies affiliated with the Controller, e.g. in connection with organizational support in the use of tools or provision of certain services to us.
- Necessary (technical) – include cookies necessary for the proper operation of the site and for enabling website functionality, but not related to tracking the user;
- Analytical – used to analyze user behavior within the site for statistical and analytical purposes (improving website performance). These cookies help provide information about visitor metrics, bounce rates, traffic sources, etc.
- Google Tag Manager, https://www.google.com/analytics/terms/tag-manager/
- Google Analytics, https://policies.google.com/technologies/partner-sites?hl=en
- Meta Platforms, Inc., https://www.meta.com/legal/privacy-policy/
- whether we process your Personal Data,
- for what purpose,
- what categories of data we process,
- who the recipients are,
- where possible – the planned storage period, or if not possible, the criteria for determining this period,
- if the Personal Data was not obtained from you – any available information about its source.
- Personal Data is no longer necessary for the purposes it was collected for,
- you withdraw your consent and there is no other legal basis for processing,
- you object to processing and there are no overriding legitimate grounds,
- you object to processing for marketing purposes,
- your data is processed unlawfully,
- erasure is required to comply with EU or Member State law applicable to the Controller.
- you contest the accuracy of the data – for a period enabling verification,
- processing is unlawful but you prefer restriction instead of erasure,
- we no longer need the data but you require it for legal claims,
- you objected to processing – pending resolution of the dispute.
- processing is based on consent or a contract, and
- processing is carried out by automated means.
- when processing is based on public interest tasks or official authority, for reasons related to your situation,
- when processing is based on legitimate interests, for reasons related to your situation,
- when processing is for direct marketing – at any time,
- when processing is for statistical purposes, for reasons related to your situation.