Privacy Policy
T&P ADVISORY Sp. z o.o.
This Privacy Policy sets out the principles governing the collection and processing by T&P ADVISORY Sp. z o.o. of personal data relating to:
- website users;
- business partners and their employees;
- individuals using registration forms for training courses and webinars;
- and individuals applying for employment as part of recruitment processes.
In order to ensure a clear and transparent approach to personal data protection, we provide below detailed information on how we use the personal data we collect and how we protect it.
The Controller, i.e. the entity determining the purposes and means of processing personal data, is T&P ADVISORY Sp. z o.o., with its registered office in Warsaw at ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, entered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 570600, NIP (Tax Identification Number): 5253065920, with a share capital of PLN 150,000 (hereinafter referred to as “T&P ADVISORY Sp. z o.o.”). The Controller can be contacted by e-mail at biuro@thedy.pl or by post at: T&P ADVISORY Sp. z o.o., ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland.
This Privacy Policy reflects the principles of personal data protection arising from applicable laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
The personal data processed by the Controller, together with the applicable legal basis, is set out below:
- e-mail and traditional correspondence
Personal data contained in correspondence sent to the Controller is processed solely for communication purposes. The legal basis for processing correspondence is the Controller’s legitimate interest (Article 6(1)(f) GDPR). All correspondence is stored in accordance with applicable personal data security requirements.
- telephone contact:
Personal data may also be obtained where it is necessary to handle a matter by telephone. The legal basis for processing information obtained by telephone is the Controller’s legitimate interest consisting in the need to take actions in connection with the services provided (Article 6(1)(f) GDPR).
- recruitment:
The personal data required by the Controller during recruitment processes is limited to data specified by labour law and other applicable legislation. Where personal data is provided beyond the scope required by the Controller, i.e. where a candidate voluntarily provides additional information, it will be assumed that the candidate has consented to the processing of such personal data for recruitment purposes. Personal data is processed in order to comply with legal obligations relating to the employment process (Article 6(1)(c) GDPR in conjunction with the Labour Code), to conduct the recruitment process with respect to data not required by the Controller (Article 6(1)(a) GDPR), and for the establishment, exercise or defence of potential legal claims (Article 6(1)(f) GDPR). The Controller may retain the personal data of candidates participating in a recruitment process for up to 6 months following completion of the recruitment process without obtaining additional consent, where justified by the Controller’s legitimate interest, for example in the event that the selected candidate withdraws or the employment relationship is terminated (Article 6(1)(f) GDPR).
- data obtained in connection with the conclusion and performance of a contract:
In connection with the conclusion and performance of a contract, the Controller may contact employees or associates of a client or business partner in order to obtain the information required to provide its services. The legal basis for such processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
- data obtained in the course of business relationships:
As part of its business activities, the Controller may also collect personal data for purposes unrelated directly to the conclusion or performance of a contract, for example through the exchange of business cards for the purpose of establishing or maintaining business relationships. The legal basis for such processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
- processing of data in IT systems:
Personal data is processed in IT systems using tools designed to ensure an appropriate level of security, including tools for detecting irregularities and protecting against unauthorised access to or acquisition of personal data.
- archiving of documents, including contracts and other documents:
Contracts and other materials related to the Controller’s business activities will be archived for the period required under applicable law. The legal basis for such processing is compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) GDPR).
Your personal data will be processed by the Controller only for as long as necessary to fulfil the purpose for which it was collected, taking into account the personal data retention periods required by law and the Controller’s legitimate interests.
Individuals whose personal data is processed by T&P ADVISORY Sp. z o.o. have the right to:
- access their personal data;
- rectify their personal data;
- request the erasure of their personal data;
- request restriction of the processing of their personal data;
- object to the processing of their personal data;
- request the transfer of their personal data to another controller.
You may exercise any of the above rights by contacting the Controller using the e-mail address or postal address provided above.
Your personal data may be disclosed by the Controller to:
- entities authorised to receive such data under applicable law;
- trusted partners of the Controller on the basis of cooperation agreements concluded in connection with the Controller’s business activities, including, among others, T & P sp. z o.o. sp.k. with its registered office in Warsaw.
The Controller reserves the right to disclose personal data in its possession to competent authorities or third parties that submit a request for information and indicate an appropriate legal basis for such request. In such cases, following an analysis of the applicable legal provisions, the Controller will either disclose the relevant personal data or refuse to provide the requested information.
When using the website, certain information relating to the user may be collected automatically, including the IP address, domain name and browser type. Such information may be collected through cookies.
The cookies we use may be temporary or persistent. Temporary cookies are deleted when the browser is closed, whereas persistent cookies remain stored after the user has finished using the businessinbalance.pl website and may be used to store information such as login details or passwords, thereby making it quicker and easier to use the website.
The following types of cookies may be used:
- strictly necessary cookies, which enable users to use available services, including authentication cookies used for services requiring authentication;
- security cookies, which are used, for example, to detect abuse in connection with registration processes;
- performance cookies, which enable information to be collected about how the website is used;
- functional cookies, which enable the website to “remember” settings selected by the user and personalise the user interface;
- advertising cookies, which enable advertising content to be tailored to users’ interests.
Cookies placed on the user’s device may also be used by our cooperating partners.
Users may at any time block the installation of cookies or delete persistent cookies using the appropriate settings in their web browser. More useful information about cookies is available at:
www.wszystkoociasteczkach.pl
In addition to cookies, data may also be collected through logs or log files. Information contained in logs may include, among other things, the IP address, platform and web browser type, Internet service provider and website address. Certain subpages and other forms of communication may contain so-called Web Beacons, which make it possible to obtain information such as the IP address of the computer, the URL of the page, page load time and browser type.
The website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter referred to as “Google”). Google Analytics uses cookies to collect information concerning website traffic and the user’s system profile, including the user’s IP address. This information is transmitted to Google and stored on servers in the United States. Google uses this information to evaluate users’ use of the website, compile reports on website activity for website operators and provide other services relating to website activity and Internet usage. Users’ IP addresses are not combined with any other data held by Google. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate the user’s IP address with other data held by Google. Users may prevent the use of cookies by selecting the appropriate settings in their web browser; however, doing so may result in certain website functions becoming unavailable.
The website uses Usability tools, a web analytics service that uses cookies to store information about how anonymous, randomly selected users navigate from one page to another, including tracking mouse movements. Users may prevent the use of cookies by selecting the appropriate settings in their web browser. Please note that deleting or disabling cookies may affect the ability to use certain features of the website.
8. NEWSLETTER AND MATERIALS AVAILABLE FOR DOWNLOAD
Through the www.businessinbalance.pl website, the Controller may provide users with free materials, including in particular reports, expert articles, studies, webinar recordings and other informational materials related to the Controller’s activities.
In order to access such materials, users may be asked to provide their e-mail address. Providing an e-mail address is voluntary, but necessary in order to receive the requested material.
The e-mail address provided by the user is stored in the Controller’s database and transferred to the MailerLite mailing system, which is used to manage the subscriber database and distribute e-mail communications.
Providing an e-mail address constitutes consent to:
- the processing of personal data by the Controller for the purpose of providing the requested material;
- the storage of the e-mail address in the Controller’s mailing database;
- receiving e-mails containing informational and expert materials, newsletters and information concerning the Controller’s activities.
The legal basis for processing personal data is the data subject’s consent (Article 6(1)(a) GDPR).
Personal data processed in connection with the newsletter may be entrusted to IT service providers supporting the Controller in conducting electronic communications, in particular the provider of the MailerLite mailing system.
Subscribers may withdraw their consent to receive e-mail communications at any time. They may do so by using the unsubscribe link included in each e-mail or by contacting the Controller using the e-mail address specified in this Privacy Policy.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
- CONSENT TO TELEPHONE CONTACT FOR MARKETING PURPOSES
Where you provide your telephone number and give the relevant consent, the Controller may contact you by telephone for the purpose of providing information about events, services and the activities of Thedy & Partners Group, including commercial and marketing information.
The legal basis for the processing of personal data for this purpose is the consent of the data subject (Article 6(1)(a) GDPR).
Providing your telephone number and consenting to telephone contact is voluntary. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Consent may be withdrawn by contacting the Controller using the e-mail address or postal address specified in this Privacy Policy.
“I consent to being contacted by telephone at the telephone number I have provided by T&P ADVISORY Sp. z o.o. for the purpose of receiving information about events, services and the activities of Thedy & Partners Group, including commercial and marketing information. Providing personal data and giving the above consent is voluntary. Consent may be withdrawn at any time, without affecting the lawfulness of any processing carried out before its withdrawal. Detailed information on the processing of personal data, including the rights available to data subjects, can be found in the Privacy Policy available at businessinbalance.pl.”