Who processes your data

The controller is Auraco spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw (00-382), ul. Solec 81B/73A, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 12th Commercial Division, under KRS number 0000516759, NIP 7010432590, REGON 147331088, share capital PLN 80,000.00.

For all data protection matters please write to gdpr@auraco.pl or to our registered address.

What data we process

The e-mail address you provided. A first name is optional and is used solely to address you by name in the message.

In addition, and solely as evidence that consent was given, we record the date and time of sign-up, the date the subscription was confirmed, the IP address, browser information, and the wording of the consent as it stood at that moment.

Purpose and legal basis

We process the data in order to send the AURACO Newsletter, a monthly review covering personal data protection, cybersecurity and regulation.

The basis is your consent: Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Article 10(2) of the Polish Act on Providing Services by Electronic Means, and Article 398 of the Polish Electronic Communications Law.

Evidence of consent and of its withdrawal is kept under Article 6(1)(c) GDPR in connection with Article 7(1) GDPR, which requires the controller to demonstrate that consent was given.

What we do not do

We do not measure whether a message was opened or which links were clicked. Our newsletter contains no tracking pixels.

We do not profile recipients and we take no decisions concerning them based solely on automated processing within the meaning of Article 22 GDPR.

We never sell, trade or disclose the address to third parties for marketing purposes.

Recipients of the data

The only recipients are our hosting and mail delivery providers, bound by processing agreements compliant with Article 28 GDPR. Data remains within the European Economic Area and is not transferred to third countries or international organisations.

Retention

We process the address until you withdraw your consent. After you unsubscribe, the address is retained only as a cryptographic hash on a suppression list, so that an accidental import cannot place you back on the mailing list; the address in readable form is deleted.

A sign-up that is not confirmed by clicking the confirmation link within seven days is deleted automatically.

Evidence of consent and of its withdrawal is retained for five years from withdrawal. This matches the period after which proceedings concerning an infringement of data protection law can no longer be initiated, under Article 105 of the Polish Data Protection Act.

Your rights

You have the right to access your data and obtain a copy of it, to rectification, erasure, restriction of processing, and to data portability.

You may withdraw your consent at any time. Simply click the link in the footer of any message or write to gdpr@auraco.pl. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-193 Warsaw, Poland.

Is providing the data mandatory

Providing your e-mail address is entirely voluntary, and withholding it means only that you will not receive the newsletter. We do not make access to any other service, or to content published on our websites, conditional upon it.

1. Who is the administrator of your personal data? AURACO Limited Liability

Company with its registered office in Warsaw (00-382), at Solec 81B/73A (We, the Company).

2. Who can you contact regarding the processing of your personal data? 

Contact us at: gdpr@auraco.pl.

3. What information do we have about you?

4. Where did we get your personal data from? 

We obtained data about you from you or your employer, superior, or colleague.

5. For what purposes do we process your personal data? 

The purpose of processing your personal data is to enable us to grant you appropriate access rights to resources in the cloud space rented by us from Microsoft Corporation. This process includes the following activities:

Your personal data is processed solely to ensure and manage access to cloud resources and to ensure their security and customization to your needs. This processing is in line with the applicable personal data protection regulations.

6. How long will we keep your personal data? 

We will store your data no longer than three months after the termination of the contract with your employer or contractor, who was our client, supplier, or with whom we cooperated on another basis. After this period, our IT services will delete your data from our database in Microsoft's cloud, unless their processing is carried out for another purpose on an appropriate data processing basis.

7. Who are the recipients of your personal data? 

Your personal data is transferred to the cloud computing service provider, which is currently Microsoft Corporation for us.

8. Do we transfer your data to third countries or international organizations? 

Data will be processed exclusively within the European Economic Area, including our cloud computing service providers.

9. Do we use profiling? 

Do we make automated decisions based on your personal data? We do not make decisions based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

10. What rights do you have in connection with the processing of your personal data? 

The rules related to the implementation of the above rights are described in detail in Articles 16 – 21 of the GDPR. The above rights are not absolute and will not apply to you in relation to all activities of processing your personal data.

We emphasize that one of the rights indicated above always applies to you - if you believe that we have violated the personal data protection regulations while processing your personal data, you have the option to file a complaint with the supervisory authority (President of the Personal Data Protection Office ul. Stanisława Moniuszki 1A, 00-193 Warszawa).

You can always contact us with a request to provide you with information about what data we have about you and for what purposes we process it. Just send a message to gdpr@auraco.pl. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The above email address can also be used for any questions related to the processing of your personal data.

The purpose of the Bookings Service is to integrate with the Microsoft 365 calendar to help customers quickly find available hours and avoid double booking a meeting with an AURACO employee.

1.     Who is the administrator of your personal data? 

AURACO Limited Liability Company based in Warsaw (00-382), at Solec Street 81B/73A (We, the Company).

2.     Who can you contact regarding the processing of your personal data? 

With us via the email address: gdpr@auraco.pl.

3.     What information do we have about you? 

4.     Where did we get your personal data from? 

We obtained your data from you or your employer, supervisor, or colleague.

5.     For what purposes do we process your personal data? 

The purpose of processing your personal data is to enable us to book a meeting with you at a time you choose and in the way you want to meet. Your data will be saved in our employee's calendar and used to communicate with you. If you propose a meeting in MS Teams, we will use your data to generate a link to the meeting on this platform and send confirmation to the email address or mobile phone number you provided, if you have given one.

6.     How long will we store your personal data? 

We will store your data no longer than two months after the termination of the contract with your employer or contractor, who was our client, supplier, or with whom we cooperated on another basis. After this period, our IT services will delete your data from our database in Microsoft's cloud computing.

7.     Who are the recipients of your personal data? 

Your personal data goes to the cloud computing service provider, which is currently Microsoft Corporation for us.

8.     Do we transfer your data to third countries or international organizations? 

Data will be processed exclusively in the European Economic Area, which also applies to our cloud computing service providers.

9.     Do we use profiling? Do we make automated decisions based on your personal data? 

We do not make decisions about you based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

10.  What rights do you have in connection with the processing of your personal data? 

The GDPR grants you the following potential rights related to the processing of your personal data: 

The rules related to the implementation of the rights indicated above have been described in detail in Articles 16 - 21 of the GDPR. The rights indicated above are not absolute and will not apply to you in relation to all activities of processing your personal data. 

We emphasize that one of the rights indicated above is always available to you - if you believe that we have violated the regulations on personal data protection when processing your personal data, you have the opportunity to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection ul. Stanisława Moniuszki 1A, 00-193 Warszawa). 

You can also contact us with a request to provide you with information about what data we have about you and for what purposes we process it. Just send a message to gdpr@auraco.pl. However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The above email address can also be used for any questions related to the processing of your personal data.

Information clause for representatives of AURACO's contractors and persons assigned to perform contracts concluded by AURACO with a contractor

1. Who is the administrator of your personal data?

AURACO Sp. z o.o., based in Warsaw, address: Solec 81B/73A, 00-382 Warsaw (the Company, AURACO).

2. What data do we process?

We process personal data of persons representing and contact persons of AURACO's contractor, including:

• names and surnames,
• positions,
• workplaces,
• official phone numbers,
• official email addresses, and
• other data provided voluntarily and necessary for the performance of a specific activity related to the conclusion and performance of the contract between AURACO and AURACO's contractor.

3. For what purpose do we process data?

Personal data of persons representing AURACO's contractor will be processed for the purpose of identifying persons authorized to conclude this Agreement, performing tasks specified by the Agreement, including providing information about the status of their implementation, based on the legally justified interests of AURACO (Article 6 (1) (f) of the GDPR). In case, after concluding the Agreement, claims arise between AURACO and its contractor, the data may also be used for the purpose of their pursuit or defense.

We process the contact persons' data from AURACO's contractor side for the purpose of performing the contract concluded with AURACO's contractor. Performance of the contract is a legally justified interest of AURACO (Article 6 (1) (f) of the GDPR).

4. How long do we store your data?

Personal data of persons representing AURACO's contractor will be stored for the period resulting from generally applicable legal provisions, in particular provisions regulating the period of storing documentation constituting evidence of activities affecting the tax base or for making entries in accounting documentation and for the period specified by regulations, in which obligations resulting from the Agreement can be effectively pursued before the court (limitation period for claims).

5. Who may have access to your data?

AURACO may disclose personal data of persons representing and contact persons from AURACO's contractor side to entities authorized under the law, e.g., tax control authorities, and also entrust the processing of personal data to service providers acting on its behalf, in particular entities providing IT, accounting, legal, or consulting services. In accordance with agreements with such entities for entrusting the processing of personal data, AURACO requires these service providers to comply with legal provisions, ensuring a high degree of privacy and security of personal data processed on behalf of the Party.

6. What are your rights in relation to your data?

GDPR grants you the following potential rights related to the processing of your personal data:

• the right to access your data and receive a copy of the personal data being processed,
• the right to rectify (correct) your data,
• the right to delete data (if you think there is no basis for us to process your data, you can request that we delete them),
• the right to restrict data processing (you can request that we limit the processing of data only to their storage or performing actions agreed with you, if in your opinion we have incorrect data or process them groundlessly),
• the right to object to data processing (you have the right to object to data processing based on the legally justified interest; you should indicate a specific situation which, in your opinion, justifies the cessation of processing covered by the objection by us; we will stop processing your data for these purposes unless we demonstrate that the basis for processing by us is superior to your rights or that your data is necessary for us to establish, pursue or defend claims),
• the right to lodge a complaint with the supervisory authority (if you find that we process data contrary to the law, you can file a complaint on this matter to the President of the Office for Personal Data Protection or another competent supervisory authority).

The rules related to the implementation of the above rights are described in detail in Articles 16 - 21 of the GDPR. The above rights are not absolute and will not apply to you in relation to all data processing activities.

We emphasize that one of the rights indicated above always applies to you - if you believe that we have violated the provisions on personal data protection while processing your personal data, you have the opportunity to lodge a complaint with the supervisory authority (the President of the Office for Personal Data Protection).

7. How can you contact us regarding personal data?

You can contact us about your personal data by email: gdpr@auraco.pl.

8. Do we transfer data outside the EEA?

We do not transfer personal data outside the European Economic Area.

9. Do we use automated decisions?

We do not make decisions based solely on automated data processing that significantly affects you.

Additional information

All questions related to the processing of personal data can be directed to gdpr@auraco.pl. Details regarding data processing and rights arising from the GDPR are included in this clause.

The administrator of your personal data is AURACO Sp. z o.o. with its registered office at Solec 81B/73A, 00-382 Warsaw, hereinafter referred to as the "Company". Contact with the Data Administrator is possible through the contact details or by phone: (22) 207 21 87 and via email at: kontakt@auraco.pl.

Why and on what basis will the Company process your personal data?

Your personal data will be processed for the purpose of conducting business communication, responding to inquiries, and for purposes related to the internal organization of work in the Company based on the legitimate interest of the administrator in accordance with Art. 6 para. 1 lit. f GDPR. Data may also be processed for the purpose of defense, determination, and pursuit of claims based on Art. 6 para. 1 lit. f GDPR.

Providing personal data is voluntary.

Where did your personal data come from?

If the personal data was not provided directly by you, it could have been provided by an entity cooperating with the Company, e.g., your employer or client.

To whom will your personal data be disclosed?

The Company will transfer your personal data to other entities entrusted with the processing of personal data on behalf of and for the Company based on an appropriate data processing agreement in accordance with Art. 28 GDPR. The Company will disclose personal data to other recipients, including public administration bodies, if such an obligation results from legal provisions.

Your data will not be transferred to third countries or international organizations.

How long will the Company process your personal data?

Personal data will be processed for the period necessary to achieve the processing objectives, the expiration of the claim period, or until effective objection to the processing of personal data is raised.

What rights do you have?

In connection with the processing of your personal data, you have the following rights:

1. the right to access your personal data and receive a copy of the personal data being processed under Art. 15 GDPR;
2. the right to request rectification of incorrect data in cases indicated in Art. 16 GDPR;
3. the right to request deletion of personal data (the right to be forgotten) in the event of circumstances specified in Art. 17 GDPR;
4. the right to request restriction of personal data processing in cases specified in Art. 18 GDPR;
5. the right to object to data processing in cases indicated in Art. 21 GDPR.
6. If you believe that personal data is being processed unlawfully, you can file a complaint with the supervisory authority (UODO, ul. Stanisława Moniuszki 1A, 00-193 Warsaw).

Administrator

We hereby inform you that the administrator of your data collected in connection with completing the survey is AURACO sp. z o.o. (hereinafter referred to as AURACO), with its registered office in Warsaw, located at ul. Solec 81B/73A, 00-382 Warsaw.

Purpose of Data Processing

Your data will be processed for the purpose of assessing the satisfaction with the services provided by AURACO.

Legal Basis for Data Processing

The legal basis for processing your data is Article 6(1)(f) of the GDPR, i.e. AURACO’s legitimate interest, which is the assessment and improvement of the quality of the services provided.

Obligation to Provide Data

Providing your data is not mandatory, but it is necessary for the verification and achievement of the above purpose.

Scope of Data

The scope of your data includes the following categories: first name, last name, company, and email address.

Data Recipients

AURACO will transfer your personal data to other entities that have been entrusted with processing personal data on behalf of and for the benefit of AURACO. In addition, AURACO will provide your personal data to other entities if required by law.

Your data will not be transferred to third countries or international organizations.

Data Retention Period

Your data will be processed for a period of 6 months from the date of collection.

Rights of Data Subjects in Relation to the Processing of Their Data

You have the right to:

1. Access your personal data and obtain a copy of the personal data being processed;
2. Rectify your inaccurate data;
3. Request the deletion of your data (the right to be forgotten) in cases provided for in Article 17 of the GDPR;
4. Request the restriction of data processing in cases specified in Article 18 of the GDPR;
5. Object to the processing of your data (you have the right to object to the processing of your data based on legitimate interest; you should indicate the particular circumstance which, in your opinion, justifies our ceasing to process the data in question; we will cease processing your data for those purposes unless we demonstrate that our processing grounds prevail over your rights or that your data are essential for establishing, pursuing, or defending claims);
6. Request data portability on the terms set out in Article 20 of the GDPR.

Right to Lodge a Complaint Regarding Data Processing

If you believe that your data are being processed unlawfully, you may lodge a complaint (Article 77 of the GDPR) with the President of the Personal Data Protection Office, ul. Stawki 2, Warsaw.

Additional Information on the Protection of Personal Data

If you require additional information related to data protection or wish to exercise your rights, please contact us at:

tel.: +48 22 211 18 60,

email: gdpr@auraco.pl.

Who is the administrator of your personal data?

AURACO Spółka z ograniczoną odpowiedzialnością, headquartered in Warsaw (00-382) at ul. Solec 81B/73A (we, the Company).

Who can you contact regarding the processing of your personal data?

You may contact us at: gdpr@auraco.pl.

What information do we have about you?

1. Your first name and last name
2. Your email address
3. Information about the source from which we received your data (the name of your employer, client, or any other entity with whom we engage in business activities)

Where did we obtain your personal data?

We obtained your data either directly from you or from your employer, supervisor, or coworker.

For what purposes do we process your personal data?

The purpose of processing your personal data is to enable us to grant you the appropriate access rights on the e-learning platform managed by the Company, in particular for the following purposes:

1. User identification and authentication: We use your personal data, such as your email address, to identify and verify your identity. This is essential to ensure that access to resources is granted only to authorized persons.
2. Access configuration: Based on the information provided by your employer, supervisor, or coworker, we configure the appropriate access levels for the courses available on our e-learning platform.
3. Security assurance: The processing of personal data also helps us ensure the security of our resources, including maintaining an appropriate level of data security. Through access control and monitoring user activity on the platform, we can protect these resources from unauthorized access and other security threats.
4. Customization to user needs: The information we collect about you enables us to tailor the available resources to your individual needs and preferences, thereby increasing the efficiency and convenience of using cloud services.

Your personal data is processed solely for the purpose of providing and managing access to the e-learning platform, as well as ensuring its security and customization to your needs. This processing is carried out in accordance with the applicable data protection regulations.

How long will we retain your personal data?

We will retain your personal data for no longer than two months after the termination of the contract with your employer or client, who was our customer, supplier, or with whom we cooperated on another basis. After this period, our IT department will delete your data from our Microsoft cloud database.

Who are the recipients of your personal data?

Your personal data is transferred to our cloud service provider, which at present is Microsoft Corporation.

Do we transfer your data to third countries or international organizations?

The data will be processed exclusively within the territory of the European Economic Area, which also applies to the providers of our cloud services.

Do we use profiling? Do we make automated decisions based solely on your personal data?

We do not make decisions about you based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

What rights do you have in relation to the processing of your personal data?

The GDPR grants you the following potential rights related to the processing of your personal data:

1. The right to access your data and receive a copy of the personal data being processed;
2. The right to rectify (correct) your data;
3. The right to request the deletion of your data (if you believe that there is no basis for us to process your data, you may request that we delete it);
4. The right to request a restriction of data processing (you may request that we limit the processing of your data solely to storage or the performance of actions agreed upon with you, if in your opinion we have incorrect data or process it without justification);
5. The right to object to the processing of your data (you have the right to object to the processing of your data based on a legitimate interest; you should indicate the particular circumstance which, in your opinion, justifies our ceasing to process the data in question; we will cease processing your data for those purposes unless we demonstrate that our processing basis prevails over your rights or that your data are necessary for the establishment, pursuit, or defense of claims);
6. The right to lodge a complaint with the supervisory authority (if you believe that we are processing your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office or another competent supervisory authority).

The rules regarding the exercise of the above rights are detailed in Articles 16–21 of the GDPR. The rights mentioned above are not absolute and will not apply to all processing activities of your personal data.

We emphasize that one of the rights mentioned above is always available to you – if you believe that we have violated data protection regulations in processing your personal data, you have the right to file a complaint with the supervisory authority (the President of the Personal Data Protection Office ul. Stanisława Moniuszki 1A, 00-193 Warszawa).

You may also contact us at any time to request information about which data we have about you and for what purposes we process it. Simply send an email to gdpr@auraco.pl. We have made every effort to present the information of interest comprehensively in this privacy policy. The email address provided above may also be used for any questions related to the processing of your personal data.

Recipients of the Clause

Participants of meetings conducted using the Microsoft Teams service, which is utilized by AURACO for organizing meetings, videoconferences, calls, and recording sessions to facilitate communication and collaboration with contractors.

1. Who is the controller of your personal data?

AURACO Limited Liability Company with its registered office in Warsaw (00-382), at Solec Street 81B/73A (We, the Company).

2. Who can you contact regarding the processing of your personal data?

You can contact us via email: gdpr@auraco.pl.

3. What information do we have about you?

1. name and surname
2. email address
3. preferred language
4. information on where we obtained your data (name of your employer, client, or other entity with which we have a business relationship)
5. recorded audio and video from meetings on Microsoft Teams
6. chat messages and other communications sent during meetings

4. Where do we obtain your personal data from?

We obtained your data from you, your employer, supervisor, or colleague, as well as from your activity during meetings and videoconferences on the Microsoft Teams platform.

5. For what purposes do we process your personal data?

We process your personal data for the following purposes:

1. organizing meetings, videoconferences, and calls in Microsoft Teams
2. communication and coordination of work and project activities
3. recording sessions in Microsoft Teams for documentation, training, and quality improvement purposes
4. archiving and analyzing meeting and call content for internal purposes and compliance with legal regulations

6. How long will we store your personal data?

We will store your data no longer than two months after the termination of the contract with your employer or client who was our customer, supplier, or with whom we cooperated on another basis. After this period, our IT services will delete your data from our cloud computing database, unless there are other grounds for data processing that would allow or obligate the Company to continue processing your data.

7. Who are the recipients of your personal data?

Your personal data is provided to the cloud computing service provider, which currently is Microsoft Corporation.

8. Do we transfer your data to third countries or international organizations?

The data will be processed exclusively within the territory of the European Economic Area, including our cloud computing service providers.

9. Do we use profiling? Do we make automated decisions based on your personal data?

We do not make decisions based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

10. What rights do you have in connection with the processing of your personal data?

GDPR grants you the following potential rights related to the processing of your personal data:

1. The right to access your data and receive a copy,
2. The right to rectify (correct) your data,
3. The right to delete data (if you believe there are no grounds for us to process your data, you can request that we delete it),
4. The right to restrict data processing (you can request that we limit data processing solely to storage or actions agreed upon with you if you believe we have incorrect data or are processing it without basis),
5. The right to object to data processing (you have the right to object to data processing based on a legitimate interest; you should indicate a particular situation that, in your opinion, justifies stopping the processing subject to the objection; we will stop processing your data for these purposes unless we demonstrate that the processing grounds are overriding your rights or that your data is necessary for establishing, pursuing, or defending claims),
6. The right to lodge a complaint with a supervisory authority (if you believe we are processing data unlawfully, you can file a complaint with the President of the Personal Data Protection Office or another relevant supervisory authority).

The rules related to the exercise of the above rights are detailed in Articles 16-21 of GDPR. The aforementioned rights are not absolute and will not apply to all processing activities of your personal data.

We emphasize that one of the rights mentioned above always applies to you – if you believe that we have violated data protection regulations in processing your personal data, you have the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).

You can always request information about what data we hold about you and for what purposes we process it. Simply send an email to gdpr@auraco.pl. We have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the above email address for any questions related to the processing of your personal data.

Polityka Prywatności AURACO spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie odnośnie do danych przetwarzanych w usłudze Microsoft Teams.

The administrator of your personal data is Auraco Sp. z o.o., located at ul. Solec 81B/73A, 00-382 Warsaw, hereinafter referred to as the "Company". Contact with the Data Administrator is possible through the contact details provided or by phone: (22) 207 21 87 and via email at kontakt@auraco.pl.

For what purpose and on what basis will the Company process your personal data?

Your personal data provided in the application documents will be processed for the purpose of conducting the recruitment process. The basis for processing your personal data is:

1. To the extent necessary to fulfill legal obligations related to conducting recruitment imposed on the Company, the basis for processing is Art. 6(1)(c) of the GDPR in conjunction with Art. 221 § 1 of the Act of June 26, 1974 - Labor Code, hereinafter referred to as the Labor Code;
2. To take actions at the request of the person the data concerns, before entering into a contract, the basis for processing is Art. 6(1)(b) GDPR;
3. If the recruitment documents contain data beyond the scope specified in the aforementioned Labor Code provisions, the data will be processed based on consent expressed by voluntarily and knowingly sending application documents in accordance with Art. 6(1)(a) GDPR;
4. If consent is given to participate in future recruitments, data for this purpose will be processed based on voluntary and informed consent in accordance with Art. 6(1)(a) GDPR;
5. Your personal data may also be processed for the purpose of defense, determination, or pursuing claims related to the recruitment process based on the legitimate interest of the Administrator in accordance with Art. 6(1)(f) GDPR.

Providing personal data within the scope specified in Art. 221 § 1 of the Labor Code is necessary to participate in the recruitment process. Providing personal data beyond the scope required by Art. 221 § 1 of the Labor Code and consent to participate in future recruitments is entirely voluntary.

To whom will your personal data be disclosed?

The Company will disclose your personal data to other entities that have been entrusted with processing personal data on behalf of and for the Company based on an appropriate data processing agreement in accordance with Art. 28 GDPR. The Company will also disclose personal data to other recipients, including public administration bodies, if such an obligation arises from legal provisions. Your data will not be transferred to third countries or international organizations.

How long will the Company process your personal data?

If you participate in the current recruitment process, your personal data will be processed for the duration of this recruitment and will be deleted no later than 3 months after its conclusion. If you consent to participate in future recruitment processes conducted by the Company, personal data will be processed until this consent is withdrawn, but no longer than 12 months from the date of sending the application documents to the Company.

What rights do you have?

In relation to the processing of your personal data, you have the following rights:

1. the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, send an appropriate statement to the email address: kontakt@auraco.pl
2. the right to access your personal data and receive a copy of the personal data being processed under Art. 15 GDPR;
3. the right to request rectification of incorrect data in cases specified in Art. 16 GDPR;
4. the right to request the deletion of personal data (right to be forgotten) in the event of circumstances provided for in Art. 17 GDPR;
5. the right to request restriction of data processing in cases specified in Art. 18 GDPR;
6. the right to data portability processed in an automated manner in cases indicated in Art. 20 GDPR;
7. the right to object to data processing in cases indicated in Art. 21 GDPR.

If you believe that your personal data is being processed unlawfully, you can lodge a complaint with the supervisory authority (UODO, ul. Stawki 2, Warsaw).

Recipients of the Clause

Participants of meetings conducted using the Microsoft Teams service, which is utilized by AURACO for organizing meetings, videoconferences, calls, and recording sessions to facilitate communication and collaboration with contractors.

1. Who is the controller of your personal data?

AURACO Limited Liability Company with its registered office in Warsaw (00-382), at Solec Street 81B/73A (We, the Company).

2. Who can you contact regarding the processing of your personal data?

You can contact us via email: gdpr@auraco.pl.

3. What information do we have about you?

1. name and surname
2. email address
3. preferred language
4. information on where we obtained your data (name of your employer, client, or other entity with which we have a business relationship)
5. recorded audio and video from meetings on Microsoft Teams
6. chat messages and other communications sent during meetings

4. Where do we obtain your personal data from?

We obtained your data from you, your employer, supervisor, or colleague, as well as from your activity during meetings and videoconferences on the Microsoft Teams platform.

5. For what purposes do we process your personal data?

We process your personal data for the following purposes:

1. organizing meetings, videoconferences, and calls in Microsoft Teams
2. communication and coordination of work and project activities
3. recording sessions in Microsoft Teams for documentation, training, and quality improvement purposes
4. archiving and analyzing meeting and call content for internal purposes and compliance with legal regulations

6. How long will we store your personal data?

We will store your data no longer than two months after the termination of the contract with your employer or client who was our customer, supplier, or with whom we cooperated on another basis. After this period, our IT services will delete your data from our cloud computing database, unless there are other grounds for data processing that would allow or obligate the Company to continue processing your data.

7. Who are the recipients of your personal data?

Your personal data is provided to the cloud computing service provider, which currently is Microsoft Corporation.

8. Do we transfer your data to third countries or international organizations?

The data will be processed exclusively within the territory of the European Economic Area, including our cloud computing service providers.

9. Do we use profiling? Do we make automated decisions based on your personal data?

We do not make decisions based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

10. What rights do you have in connection with the processing of your personal data?

GDPR grants you the following potential rights related to the processing of your personal data:

1. The right to access your data and receive a copy,
2. The right to rectify (correct) your data,
3. The right to delete data (if you believe there are no grounds for us to process your data, you can request that we delete it),
4. The right to restrict data processing (you can request that we limit data processing solely to storage or actions agreed upon with you if you believe we have incorrect data or are processing it without basis),
5. The right to object to data processing (you have the right to object to data processing based on a legitimate interest; you should indicate a particular situation that, in your opinion, justifies stopping the processing subject to the objection; we will stop processing your data for these purposes unless we demonstrate that the processing grounds are overriding your rights or that your data is necessary for establishing, pursuing, or defending claims),
6. The right to lodge a complaint with a supervisory authority (if you believe we are processing data unlawfully, you can file a complaint with the President of the Personal Data Protection Office or another relevant supervisory authority).

The rules related to the exercise of the above rights are detailed in Articles 16-21 of GDPR. The aforementioned rights are not absolute and will not apply to all processing activities of your personal data.

We emphasize that one of the rights mentioned above always applies to you – if you believe that we have violated data protection regulations in processing your personal data, you have the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).

You can always request information about what data we hold about you and for what purposes we process it. Simply send an email to gdpr@auraco.pl. We have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the above email address for any questions related to the processing of your personal data.

Polityka Prywatności AURACO spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie odnośnie do danych przetwarzanych w usłudze Microsoft Teams.

Recipients of the clause

Individuals whose personal data will be processed by AURACO for AURACO's marketing purposes, AURACO sp. z o.o.

Data Controller

We inform you that the controller of your data collected for marketing purposes is AURACO sp. z o.o. (hereinafter AURACO), located in Warsaw, address: ul. Solec 81B/73A, 00-382 Warsaw.

Purpose of data processing

Your data will be processed for AURACO's marketing purposes, including presenting offers and informing about AURACO's services and products.

Legal basis for data processing

The legal basis depends on the capacity in which you receive information from us. If you are a contact person, an employee or an associate of an entity to which AURACO addresses its offer – the legal basis is Article 6(1)(f) of the GDPR, that is AURACO's legitimate interest consisting in conducting direct marketing towards the entity you represent and in maintaining business relations. The offer is addressed to that entity, and we process your data solely to the extent necessary to establish contact with it. If you receive information from us as a natural person to whom we address the offer directly – the legal basis is Article 6(1)(a) of the GDPR, that is your consent.

Obligation to provide data

Providing data is not mandatory. If you provide us with your data yourself, it is necessary for verification and realization of the above purpose.

Data scope

The scope of your data includes the following data categories: first name, last name, company, email address, telephone number, and position.

Data source

We obtained your data directly from you or from the entity you represent, in particular from your employer, principal, superior or co-worker, or from publicly available sources, including that entity's website and public registers.

Data recipients

AURACO will transfer your personal data to other entities that have been entrusted with processing personal data on behalf of and for AURACO. In addition, AURACO will share your personal data with other entities if such obligation arises from legal provisions.

Your data will not be transferred to third countries and international organizations.

Data retention period

Your data will be processed until the consent is withdrawn or an objection is raised against the processing of personal data for marketing purposes.

Rights of the individuals regarding the processing of their data

You have the right to:

- access your personal data and receive a copy of the personal data being processed;

- correct your inaccurate data;

- request deletion of data (right to be forgotten) in cases provided for in Article 17 of the GDPR;

- request restriction of data processing in cases indicated in Article 18 of the GDPR;

- withdraw consent at any time, however, withdrawing consent does not affect the legality of processing carried out on the basis of consent before its withdrawal;

- object to the processing of personal data for direct marketing purposes (Article 21(2) of the GDPR);

- transfer provided data on the terms set out in Article 20 of the GDPR.

Right to lodge a complaint regarding data processing

If you believe that your data is processed unlawfully, you can file a complaint (Article 77 of the GDPR) to the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-193 Warsaw.

Additional information regarding personal data protection

If you need additional information related to data protection or wish to exercise your rights, please contact us: tel.: +48 22 207 21 87, email: gdpr@auraco.pl.

Recipients of the Clause

Participants of meetings conducted using the Microsoft Teams service, which is utilized by AURACO for organizing meetings, videoconferences, calls, and recording sessions to facilitate communication and collaboration with contractors.

1. Who is the controller of your personal data?

AURACO Limited Liability Company with its registered office in Warsaw (00-382), at Solec Street 81B/73A (We, the Company).

2. Who can you contact regarding the processing of your personal data?

You can contact us via email: gdpr@auraco.pl.

3. What information do we have about you?

1. name and surname
2. email address
3. preferred language
4. information on where we obtained your data (name of your employer, client, or other entity with which we have a business relationship)
5. recorded audio and video from meetings on Microsoft Teams
6. chat messages and other communications sent during meetings

4. Where do we obtain your personal data from?

We obtained your data from you, your employer, supervisor, or colleague, as well as from your activity during meetings and videoconferences on the Microsoft Teams platform.

5. For what purposes do we process your personal data?

We process your personal data for the following purposes:

1. organizing meetings, videoconferences, and calls in Microsoft Teams
2. communication and coordination of work and project activities
3. recording sessions in Microsoft Teams for documentation, training, and quality improvement purposes
4. archiving and analyzing meeting and call content for internal purposes and compliance with legal regulations

6. How long will we store your personal data?

We will store your data no longer than two months after the termination of the contract with your employer or client who was our customer, supplier, or with whom we cooperated on another basis. After this period, our IT services will delete your data from our cloud computing database, unless there are other grounds for data processing that would allow or obligate the Company to continue processing your data.

7. Who are the recipients of your personal data?

Your personal data is provided to the cloud computing service provider, which currently is Microsoft Corporation.

8. Do we transfer your data to third countries or international organizations?

The data will be processed exclusively within the territory of the European Economic Area, including our cloud computing service providers.

9. Do we use profiling? Do we make automated decisions based on your personal data?

We do not make decisions based solely on automated processing, including profiling, that would have legal effects on you or similarly significantly affect you.

10. What rights do you have in connection with the processing of your personal data?

GDPR grants you the following potential rights related to the processing of your personal data:

1. The right to access your data and receive a copy,
2. The right to rectify (correct) your data,
3. The right to delete data (if you believe there are no grounds for us to process your data, you can request that we delete it),
4. The right to restrict data processing (you can request that we limit data processing solely to storage or actions agreed upon with you if you believe we have incorrect data or are processing it without basis),
5. The right to object to data processing (you have the right to object to data processing based on a legitimate interest; you should indicate a particular situation that, in your opinion, justifies stopping the processing subject to the objection; we will stop processing your data for these purposes unless we demonstrate that the processing grounds are overriding your rights or that your data is necessary for establishing, pursuing, or defending claims),
6. The right to lodge a complaint with a supervisory authority (if you believe we are processing data unlawfully, you can file a complaint with the President of the Personal Data Protection Office or another relevant supervisory authority).

The rules related to the exercise of the above rights are detailed in Articles 16-21 of GDPR. The aforementioned rights are not absolute and will not apply to all processing activities of your personal data.

We emphasize that one of the rights mentioned above always applies to you – if you believe that we have violated data protection regulations in processing your personal data, you have the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office).

You can always request information about what data we hold about you and for what purposes we process it. Simply send an email to gdpr@auraco.pl. We have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the above email address for any questions related to the processing of your personal data.

Polityka Prywatności AURACO spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie odnośnie do danych przetwarzanych w usłudze Microsoft Teams.

Controller

The controller of your personal data is Auraco spółka z ograniczoną odpowiedzialnością, established in Warsaw (00-382), Solec 81B/73A, Poland, entered in the register of entrepreneurs of the National Court Register under KRS number 0000516759, VAT number PL7010432590, REGON 147331088.

Data protection contact

Email gdpr@auraco.pl or written correspondence to our registered address.

What data we process when you use the site

You browse our sites without providing identifying details. We nevertheless process technical data your browser sends automatically: IP address, date and time of the request, the address of the page visited, browser and operating system type, and the address of the page you came from.

Purposes and legal bases

1. Making the site available and keeping it working correctly – Article 6(1)(f) GDPR, our legitimate interest in operating a website.
2. Ensuring security, including detecting abuse and preventing attacks – Article 6(1)(f) GDPR, our legitimate interest in protecting our infrastructure.
3. Compiling visit statistics, where you consent to non-essential cookies – Article 6(1)(a) GDPR, consent.

Cookies

We use cookies strictly necessary for the site to function, which cannot be switched off, and – subject to your consent – analytics cookies. Consent is not given by default and may be withdrawn at any time through the "Privacy settings" link in the footer. Withdrawal does not affect the lawfulness of earlier processing.

The site sends no data to third-party providers before consent is given. Fonts and icons are served from our own server.

Retention period

Server logs are kept for as long as security requires, no longer than twelve months. Cookies are kept for the period stated in the privacy settings for each category.

Recipients

Our hosting provider, bound by a processing agreement compliant with Article 28 GDPR. We do not transfer data outside the European Economic Area.

Your rights

You have the right of access, rectification, erasure, restriction of processing and withdrawal of consent. Where processing rests on legitimate interest, you have the right to object. You may also lodge a complaint with the President of the Personal Data Protection Office (ul. Stanisława Moniuszki 1A, 00-193 Warsaw, Poland).

Where your matter concerns data processed on behalf of a client

When acting as a Data Protection Officer or providing services to our clients, we process personal data on their behalf and they remain the controllers. If you contact us about such data – in particular with a request for access, rectification or erasure – we will pass the matter to the relevant controller and let you know that we have done so.

Automated decision-making

We do not use the data for profiling or for decisions based solely on automated processing.

Controller

The controller of your personal data is Auraco spółka z ograniczoną odpowiedzialnością, established in Warsaw (00-382), Solec 81B/73A, Poland, entered in the register of entrepreneurs of the National Court Register under KRS number 0000516759, VAT number PL7010432590, REGON 147331088.

Data protection contact

Email gdpr@auraco.pl or written correspondence to our registered address.

Purposes and legal bases

1. Sending the requested material to the email address you provide – Article 6(1)(b) GDPR, steps taken at your request prior to entering into a contract.
2. Sending information about AURACO services and publications, where you give separate consent – Article 6(1)(a) GDPR, consent; for individuals representing business entities, Article 6(1)(f) GDPR, our legitimate interest in direct marketing.
3. Establishing, exercising or defending legal claims – Article 6(1)(f) GDPR, our legitimate interest.

Scope of data

Your email address. Providing any other data, including the name of your organisation, is optional and serves only to tailor the content to your needs.

Voluntary nature and consequences of not providing data

Providing an email address is voluntary but necessary for us to send the material. Consent to receive information about our services is separate and entirely optional – withholding it does not restrict access to the material. Consent may be withdrawn at any time by writing to gdpr@auraco.pl or using the link at the bottom of any message. Withdrawal does not affect the lawfulness of processing carried out before it.

Recipients

Providers of IT and email services bound by processing agreements compliant with Article 28 GDPR. We do not transfer the data outside the European Economic Area.

Retention period

Until the material has been sent, and where you gave marketing consent, until that consent is withdrawn or you object effectively. Regardless of the above, we retain the data until any claims become time-barred.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and withdrawal of consent. Where processing rests on legitimate interest you have the right to object, including to direct marketing – once you exercise it, we stop processing the data for that purpose.

You may also lodge a complaint with the President of the Personal Data Protection Office (ul. Stanisława Moniuszki 1A, 00-193 Warsaw, Poland).

Automated decision-making

We do not use the data for profiling or for decisions based solely on automated processing.

Who processes your data

The controller is Auraco spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw (00-382), ul. Solec 81B/73A, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 12th Commercial Division, under KRS number 0000516759, NIP 7010432590, REGON 147331088, share capital PLN 80,000.00.

For all data protection matters please write to gdpr@auraco.pl or to our registered address.

What data we process

The e-mail address you provided. A first name is optional and is used solely to address you by name in the message.

In addition, and solely as evidence that consent was given, we record the date and time of sign-up, the date the subscription was confirmed, the IP address, browser information, and the wording of the consent as it stood at that moment.

Purpose and legal basis

We process the data in order to send the AURACO Newsletter, a monthly review covering personal data protection, cybersecurity and regulation.

The basis is your consent: Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Article 10(2) of the Polish Act on Providing Services by Electronic Means, and Article 398 of the Polish Electronic Communications Law.

Evidence of consent and of its withdrawal is kept under Article 6(1)(c) GDPR in connection with Article 7(1) GDPR, which requires the controller to demonstrate that consent was given.

What we do not do

We do not measure whether a message was opened or which links were clicked. Our newsletter contains no tracking pixels.

We do not profile recipients and we take no decisions concerning them based solely on automated processing within the meaning of Article 22 GDPR.

We never sell, trade or disclose the address to third parties for marketing purposes.

Recipients of the data

The only recipients are our hosting and mail delivery providers, bound by processing agreements compliant with Article 28 GDPR. Data remains within the European Economic Area and is not transferred to third countries or international organisations.

Retention

We process the address until you withdraw your consent. After you unsubscribe, the address is retained only as a cryptographic hash on a suppression list, so that an accidental import cannot place you back on the mailing list; the address in readable form is deleted.

A sign-up that is not confirmed by clicking the confirmation link within seven days is deleted automatically.

Evidence of consent and of its withdrawal is retained for five years from withdrawal. This matches the period after which proceedings concerning an infringement of data protection law can no longer be initiated, under Article 105 of the Polish Data Protection Act.

Your rights

You have the right to access your data and obtain a copy of it, to rectification, erasure, restriction of processing, and to data portability.

You may withdraw your consent at any time. Simply click the link in the footer of any message or write to gdpr@auraco.pl. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-193 Warsaw, Poland.

Is providing the data mandatory

Providing your e-mail address is entirely voluntary, and withholding it means only that you will not receive the newsletter. We do not make access to any other service, or to content published on our websites, conditional upon it.