Privacy Policy - FIG Polska

Dear Sirs,
As of May 25, 2018. current data protection laws have changed. As a result, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 became effective. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (hereinafter "RODO"). Below you will find information on how your personal data is processed.

Data controller

The administrator of your personal data is Francuski Instytut Gospodarki Polska Sp. z o.o., ul. Filtrowa 75/5, 02-032 Warsaw, NIP: 5251562318 KRS: 0000159975 REGON: 012323640

Obtain information about the processing of personal data

You can contact us about data protection issues:

in writing by sending inquiries to French Institute of Economy Poland Sp. z o.o., ul. Filtrowa 75/5, 02-032 Warsaw, NIP: 5251562318, KRS: 0000159975, REGON: 012323640, marked "Personal Data Protection".
by sending inquiries to the e-mail address biuro@figpolska.pl and contacting at (+48) 22 823 42 83

What data do we process?

According to Art. 4 paragraph. 1 point 1 of the RODO personal data ".are any information about an identified or identifiable natural person ("data subject"). An identifiable natural person is a person who can be directly or indirectly identified, in particular by an identifier such as a name, an identification number, location data, an Internet identifier or one or more specific factors that determine the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person."

The moment you enter our website, we start processing your IP address. When you contact us via email or telephone, you decide for yourself what personal information you want to give us. If you enter into a contract with us, the scope, subject matter of the personal data provided is governed by the content of the contract. By taking part in the process of recruiting new employees, interns, trainees you provide us with data on your place of residence, telephone number, e-mail address, previous jobs (work experience), education, skills.

Acquisition of data and the purpose of its processing

Purpose of processing: To conclude and execute the Agreement, including contacting the Customer in connection with the execution of the Agreement and shipping materials necessary for the execution of the Agreement.
Legal basis: art. 6 paragraph. 1(b) of the DPA "processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract".
Legally legitimate purpose, if any: -

Purpose of processing: To pursue claims related to the concluded Agreement
Legal basis: art. 6 paragraph. 1(f) of the RODO "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party."
Legally legitimate purpose, if any: Collecting debts and conducting litigation and subsequent enforcement proceedings

Purpose of processing: Archiving of documentation, i.e. contracts and billing documents
Legal basis: art. 6 paragraph. 1(c) of the DPA "processing is necessary for the fulfillment of a legal obligation incumbent on the controller."
Legally legitimate purpose, if any: -

Purpose of processing: To conduct marketing activities of our own products and services without the use of electronic communications.
Legal basis: art. 6 paragraph. 1(f) of the RODO "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party."
Legitimate purpose, if any: Conducting marketing activities to promote the business being conducted

Purpose of processing: To carry out marketing activities of our own products and services using electronic communication means
Legal basis: art. 6 paragraph. 1(f) of the RODO, while these activities, due to other applicable regulations, in particular the Telecommunications Law and the Law on Provision of Electronic Services, are carried out only on the basis of the consents held
Legitimate purpose, if any: Conducting marketing activities to promote the business being conducted

Purpose of processing: Handling requests, other requests via email, including ensuring accountability
Legal basis: art. 6 paragraph. 1(f) of the RODO "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party."
Legally legitimate purpose, if any: Responding to requests and inquiries, including storing sensitive requests and responses provided to maintain accountability

Purpose of processing: To carry out the recruitment process for new employees, interns, trainees
Legal basis: art. 6 paragraph. 1(a) of the RODO "the data subject has consented to the processing of his or her personal data for one or more specified purposes."
Legally legitimate purpose, if any: -

Recipients of personal data:

Recipients of personal data are entities engaged in postal or courier services, banks, in case of the need to conduct settlements, state authorities or other entities authorized under the law, in order to perform the obligations incumbent on us (Tax Office, PIP, Social Security), entities that enable us to perform remote payment operations, entities supporting us in our operations on the basis of concluded agreements, in particular, contracts of mandate, provision of services.

Recipients of data outside the European Union:

Due to the fact that websites provided by the Administrator use Cookies, data collected via Cookies may be transferred to third countries - that is, to countries outside the European Union (e.g. USA), in connection with:

actions taken by you on social networks and the use of plug-ins and other tools from these sites, i.e. Facebook's "Like" button and social widgets,
The use of analytical tools and tools to learn about user behavior anonymously, in particular, such as Google Analytics and Google Analytics with anonymized IP address, Facebook ad conversion tracking,
remarketing and behavioral activities using services such as remarketing through the Google Analytics service to display image ads,
displaying content from external platforms using services such as the Google Maps widget.

According to Art. 45 RODO transfers of personal data to a third country may take place if the European Commission determines that the third country, territory or specific sector(s) within that third country, or the international organization in question, provide an adequate level of protection. In relations between the European Union and the United States of America (US) on the subject of personal data protection, a Privacy Shield system has been introduced. Privacy Shield is a program based on self-certification of participating entities. Participating entities should commit to a set of privacy principles, including the Privacy Shield Framework and supplementary principles issued by the US Department of Commerce. At the same time, the accession of a specific entity to the Privacy Shield has the effect that the transfer of data to that entity becomes permissible.

Google LLC - according to its data at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, is an active participant in the Privacy Shield program. The authorized contact for data protection on behalf of Google LLC is Keith Enright, Director, Privacy Legal, Google LLC, Google Data Protection Office, address: 1600 Amphitheatre Pkwy, Mountain View, California 94043, e-mail address: privacy-shield-google@google.com, phone no: 650-253-0000, fax no.: 650-618-1806,
Facebook, Inc. according to the data contained on the https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active, is an active participant in the Privacy Shield program. The Privacy Shield contact on behalf of Facebook, Inc. is Leah Perry, Associate General Counsel, Privacy, Facebook, Inc. address: 1601 Willow Road Menlo Park, California 94025, email address: privacyshield@support.facebook.com, phone number: (650) 543-4800

Period of storage of personal data:

As an Administrator, we are obliged to keep documents containing data for the periods indicated by law or when necessary for the proper operation of our company and to maintain accountability.

Processing periods for personal data

data related to the performance of the concluded contract - up to 6 months after the expiration of the statute of limitations for claims arising from the contract concluded between the Administrator and the Contractor,
Settlement documents - up to 6 months after the expiration of the statute of limitations on tax liability, unless otherwise provided by tax laws,
data for marketing purposes - in the case of consent, then until revoked, and in the case of a legitimate purpose, until you object,
data processed for marketing purposes - in the case of consent, then until revoked, and in the case of a legitimate purpose, until you object,
data provided for the purpose of participation in the recruitment process of new employees, interns, trainees are processed until the end of the recruitment process, each time until the revocation of consent.

Right to revoke consent:

You have the right to revoke your consent at any time without affecting the legality of the processing that was carried out on the basis of consent before revocation.

Consequences of failure to provide data when it is a statutory or contractual requirement to enter into a contract:

In situations where the provision of personal data is a statutory or contractual requirement or a condition for entering into a contract, you are required to provide such data. The consequence of failure to provide the required data is failure to conclude a contract.

Right of access to personal data:

If your personal data is processed by the Administrator, you have the following rights:

access to personal data, including the right to obtain a copy of such data;
To request rectification (amendment) of personal data - in case the data is incorrect or incomplete;
to request the erasure of personal data (the so-called right to be forgotten), in the event that: the data are no longer necessary for the purposes for which they were collected or otherwise processed, an objection has been raised to the processing of personal data, the consent to process personal data that is the basis for processing has been withdrawn and there is no other legal basis for processing, the personal data are processed unlawfully, the personal data must be deleted in order to comply with an obligation under the law;
to request restriction of processing of personal data - in case the correctness of personal data is questioned, the processing of data is unlawful, and the data subject objects to the erasure of data, requesting the restriction of data instead, the data are unnecessary for the Controller, but the data subject needs them to establish, defend or assert claims, an objection to the processing of data has been lodged, until it is determined whether the legitimate grounds on the part of the Controller override the grounds for the objection;
to data portability - where the processing is carried out on the basis of a contract concluded with the data subject or on the basis of his/her consent and the processing is carried out by automated means,
object to data processing - in the case of data processing for direct marketing purposes and when the processing is carried out for the purposes of legitimate interests pursued by the Controller or a third party.

The right to file a complaint with the supervisory authority:

You have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection.

Automated data processing:

Personal Data will not be processed by automated means (including profiling) in such a way that any decisions could be made as a result of such automated processing, any other legal effects would be produced, or would otherwise materially affect our Users. As part of our activities, we use cookies in such a way that we observe and analyze traffic on our website, however, apart from the IP address, we do not process personal data within the meaning of the RODO as part of these activities.

The Administrator's website uses:

Cookies allow storing information or accessing information already stored in the telecommunications end device of a subscriber or end user. This means that Cookies small files, saved and stored on your computer, tablet or smartphone while you visit various sites on the Internet. A cookie usually contains the name of the website from which it originated, the "lifespan" of the cookie (that is, how long it has existed), and a randomly generated unique number used to identify the browser used to connect to the website.
The Administrator's website uses the following types of cookies:
1. Session cookies - "Cookies" placed for the duration of use of the browser (session), and are deleted when you close it or log out of the website.
2. Persistent cookies - are not deleted when the browser is closed and remain on the user's device for a specified period of time or without an expiration period, depending on the settings of the website owner.
3. Own cookies (first party cookies) - "Cookies" placed on the websites directly by the Administrator.
4. External cookies (third-party cookies) - "Cookies" placed on websites by entities other than the Administrator.
User data is collected to enable the Administrator to achieve the following purposes: website configuration, website security and reliability, ensuring the smooth operation of the website.
Najczęściej przeglądarka internetowa domyślnie zezwala na przechowywanie plików Cookies w urządzeniu końcowym użytkownika. Użytkownicy serwisu mogą dokonać w każdym czasie zmiany ustawień dotyczących plików Cookies. Ustawienia te mogą zostać zmienione w szczególności w taki sposób, aby blokować automatyczną obsługę plików Cookies w ustawieniach przeglądarki internetowej bądź informować o ich każdorazowym zamieszczeniu w urządzeniu użytkownika serwisu internetowego. Poniżej znajdują się odnośniki do stron, które wyjaśniają, jak usunąć pliki Cookies:
Disabling the storage of cookies in the browser's memory may cause difficulties in the use of the site, i.e. may restrict access to the content of the site by not displaying certain elements, limiting the functionality of the site.
The processing of personal data by means of cookies requires the User's consent.