Beskidus privacy policy as of 11.09.2018
By using our website through: contact form, requests for quotations, applying for jobs available on the website and agreeing to send sms or emails with commercial offers (a service available at the Vehicle Inspection Station) and cooperating with us through all kinds of contracts, transport, forwarding, hiring, deliveries, purchases, sales, etc. you are providing us with your personal data. We make every effort to ensure that the principles governing the processing of any information of a personal data nature are understood by you. Please read this document to find out on what principles we process your data and what rights you have in this connection.
I. Data of the Administrator
The administrator of your personal data is BESKIDUS Spółka z ograniczoną odpowiedzialnością with its registered seat in Zembrzyce 663, 34-210 Zembrzyce entered in the National Court Register by the District Court for Kraków-Śródmieście in Kraków, XII Economic Division of the National Court Register under number: 0000218304; share capital 2,400,000 NIP: 552-158-63-76; REGON: 356879255 (hereinafter: “Beskidus”).
Beskidus has appointed a personal data inspector: Izabela Międzybrodzka, contact tel. 516 004 958, e-mail address: iod@beskidus.eu.
II. Purpose, legal basis and duration of personal data processing
Recruitment process
The personal data you provide in your CV when applying for a job position stated in the job offer will be processed for the purpose of recruitment for the position stated in the job offer.
The legal basis for the processing of the data in the form of the submitted CV to the extent indicated by Article 22[1] § 1 of the Labour Code is Article 6 6(1) (C) of the RODO for the duration of the current recruitment process – but no longer than 1 month, after which it will be destroyed.
If you include additional personal data in your CV that are not indicated in Article 22 [1] § 1 of the Labour Code (i.e. data additional to: name(s) and surname, date of birth, place of residence (correspondence address), education and history of previous employment)), e.g. image, interests, etc., we will be able to process them – i.e. accept your CV only if you include in your CV your consent for us to process the additional personal data as well. The content of such consent could look like “I consent to the processing of my personal data to the extent that it includes additional data – additional to the data contained in Article 22[1]§1. of the Labour Code”. We will then process your data based on your consent (Article 6(1a) RODO).
The additional consent is voluntary, however, if you do not give your consent and include additional information in your CV – we will have to destroy such CV – without consideration.
Submitting your CV with is a prerequisite for us to consider you as part of the recruitment process for the position advertised.
Access to your submitted CV will be granted to authorised Beskidus employees, entities to whom personal data must be made available in order to comply with a legal obligation, as well as entities to whom data will be entrusted in order to fulfil the purposes of processing.
Contact forms (available on the website www.beskidus.eu)
The personal data you provide in the contact form, i.e. name, surname, contact phone, e-mail, will be processed for the purpose of contacting you once, in the form indicated and in relation to the request made.
The provision of data is necessary in order to respond to your application or enquiry.
Only the Beskidus department to which the enquiry has been submitted has access to your data.
Enquiry form (available at www.beskidus.eu)
Personal data you provide in the enquiry form, i.e. name, surname, e-mail, contact telephone number, address, name of the company, will be processed in order to present a fair offer and are necessary to prepare and present the offer.
Only the Beskidus department, to which the enquiry has reached, has access to the data provided.
Sending an sms/e-mail from the system to the Beskidus District Vehicle Inspection Station
The personal data you provide (i.e. telephone number, e-mail address, vehicle registration number) will be processed in order to provide the service of sending sms, e-mails with a reminder about the date of the technical inspection of the car and to send commercial information.
The legal basis for the processing of the data is Article 6(1a) RODO of 27 April 2016 (i.e. consent to process the data subject’s data).
Personal data will be stored indefinitely until consent is withdrawn.
Access to the personal data is granted to the employees of the Beskidus vehicle inspection station and to the Company operating the system enabling the handling of automatic sms notifications.
The provision of personal data for the sending of sms/e-mail is voluntary – it is not a statutory or contractual requirement, nor is it a condition for conducting a technical inspection. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Surveillance on the Company’s facilities and premises
Personal data will be processed to ensure the security of persons and property in the area covered by the monitoring (entrances to buildings, car parks, yards, District Vehicle Control Station).
The legal basis for the processing of the data is Article 6(1f) RODO, i.e. i.e. the necessity to fulfil the Company’s legitimate interest (increasing security).
The personal data will be stored for a period not exceeding 2 months from the recording, and in the case where the image recordings constitute evidence in a proceeding conducted on the basis of legal regulations or may constitute evidence in a proceeding, the above-mentioned period shall be extended until the legal conclusion of the proceeding.
Personal data will be processed by Beskidus employees managing the monitoring system as well as the entity operating the system on an ad hoc basis. Personal data may be made available to entities related to the Company or third parties on the basis of legal regulations.
Business partners, contractors, customers, co-workers
Your personal data (provided e.g. in a contract, order, invoice, contract-related correspondence, complaint process) will be processed exclusively for the purpose of fulfilling the contract binding the parties and the requirements of tax and financial regulations. They may also be processed in the fulfilment of the Company’s legitimate interest as the pursuit of claims arising from its business activity – debt collection.
The legal basis for the processing of the data is Article 6(1)(b) RODO of 27 April 2016 – i.e. necessity for the performance of a contract to which the data subject is a party, Article 6 (1)(c) RODO i.e. necessity for the fulfilment of a legal obligation related to the maintenance of documentation required by tax law, and Article 6 6(1)(f) RODO i.e. necessity for the fulfilment of the Company’s legitimate interest as the pursuit of claims on account of its business activity.
Your personal data will be stored until the statute of limitations for claims under the contract or until the legal obligation to store data, in particular the obligation to keep accounting documents, has expired. Where the Company processes your personal data based on a legitimate interest, your personal data will not be processed for a specific purpose if you object to such processing.
Your personal data will be processed by Beskidus employees and may also be shared with the Company’s affiliates or third parties; these include accounting firms, legal entities, etc. However, such entities will process data on the basis of a contract with Beskidus and only in accordance with its instructions.
The provision of data is voluntary, but it is a necessary condition for the performance of the contract concluded between you and Beskidus and for compliance with tax and financial regulations.
Additional information
We will also process the following data based on Beskidus’ legitimate interest (Art. 6(1)(f) RODO:
Ø Your data provided in your question, complaint or suggestion for the purpose of responding to your questions, complaints or suggestions (our legitimate interest includes being able to respond to customers’ questions, complaints and suggestions);
Ø Your data, as well as the data of others in order to ensure the security of the services provided by us electronically, including the prevention of possible fraud or abuse (our legitimate interest includes ensuring the security of the services, including the prevention of fraud and abuse).
We will not transfer your personal data to third countries (i.e. outside the European Economic Area). An exception to this may be cooperation on transport orders with countries outside the EEA: We will then store the collected personal data within the EEA but we do not exclude the possibility of sending the data to a country outside the EEA. However, any transfer of personal data will be carried out in accordance with applicable law and only if necessary. We will use standard contractual clauses and the Privacy Shield as safeguards for countries where the Commission has not found an adequate level of data protection.
We do not use methods involving automated decision-making, including profiling, in the processing of personal data.
III. Your rights in relation to the processing of your personal data
In relation to Beskidus’ processing of your personal data, you have:
Ø the right to obtain confirmation as to whether we are processing your personal data, access to that data and a copy of it.
Ø the right to request rectification i.e. correction, completion of your personal data if it is incomplete or incorrect.
Ø The right to request the restriction of the processing of your personal data (if, for example, you question the accuracy of the personal data we process about you, we no longer need your personal data to fulfil our purposes but you need it to establish, assert or defend a claim, or you have objected to our processing of your personal data because of your particular situation – in which case you can request that we restrict our processing of your personal data until we determine whether our legitimate interests override the grounds for your objection).
Ø The right to request the erasure of your personal data (if, for example, your personal data is no longer necessary for the purposes for which it was collected and processed).
Ø Right to data portability – you have the right to receive from us your data that you have provided to us on the basis of consent or contract.
Ø The right to object at any time to the processing of this data on grounds relating to your particular situation, indicating at the same time the particular situation which in your opinion justifies the cessation of our processing of your objected data.
Ø Withdrawal of consent to data processing: To the extent that your data will be processed on the basis of your consent, you have the right to withdraw it at any time, whereby the withdrawal of consent does not affect the processing activities carried out by us on the basis of consent prior to its withdrawal.
To exercise your rights, we ask you to Contact our Data Protection Officer – contact details at the beginning of this document.
You also have the right to lodge a complaint with the data protection authority (President of the Data Protection Authority) if you consider that the processing of personal data concerning you is in breach of the Data Protection Regulation. Authority’s website (https://uodo.gov.pl).
IV. Security of information processing and storage
Beskidus Sp. z o.o. has administrative, technical and physical safeguards in place to protect your personal data against loss, misuse or unauthorised access, disclosure, alteration or destruction.
V. Rules for the processing of personal data provided by the parties (business partners, contractors, carriers, principals)
The business partner (carrier, principal, forwarder) and Beskidus, as parties to the contract for the provision of transport or forwarding services (hereinafter the “Contract”), act as individual controllers of personal data and, to the extent necessary for the performance of the parties’ obligations under the Contract, will transfer to each other the personal data of the consignees or shippers of the goods, their customers or subcontractors and the personal data of their employees or associates.
Both parties warrant that the personal data transferred will be processed in accordance with the applicable data protection legislation and will implement appropriate technical and organisational measures to implement the requirements of Article 32 of the RODO concerning the security of personal data. The Business Partner may only process the personal data provided to it by Beskidus to the extent and for the purpose necessary for the performance of the Agreement.
The Trading Partner is obliged to report any breaches of the protection of the personal data entrusted to it – immediately, to the best of its ability within 48 hours of the discovery of the breach.
The Trading Partner is obliged to allow Beskidus to carry out audits for compliance with the protection of personal data entrusted for processing.
The Business Partner is obliged to immediately provide, on behalf of Beskidus, any of its employees or associates with access to read Beskidus’ privacy policy available at www.beskidus.eu under “Privacy Policy”.
VI. Technical information – cookies
Cookies (so-called “cookies”) are small text files which are stored on the Website User’s terminal equipment and are intended for use on the Website. Cookies usually contain the name of the website they come from, the time they are stored on the terminal equipment and a unique number.
Cookies are used for:
Ø adapting the content of the Website pages to the User’s preferences and optimising the use of the websites; in particular, these files allow the Website User’s device to be recognised and the website to be properly displayed, adapted to his/her individual needs;
Ø creation of statistics which help to understand how users of the Website use the websites, which makes it possible to improve their structure and content;
Ø maintaining a session of a User of the Website (after logging in), thanks to which a User does not have to re-enter his/her login and password on each sub-page of the Website;
Two main types of cookies are used within the Website:
(a) “Session” cookies are temporary files that are stored in the User’s terminal equipment until the User logs out, leaves the website or switches off the software (web browser).
b) “Permanent” cookies are stored on the User’s terminal equipment for the time specified in the parameters of the cookies or until they are deleted by the User.
The following types of cookies are used within the Service:
a) “necessary” cookies to enable the use of services available within the Service, e.g. authentication cookies used for services requiring authentication within the Service;
b) cookies used to ensure security, e.g. used to detect misuse of the Service’s authentication;
c) “performance” cookies, enabling the collection of information on how the Website’s pages are used;
d) “functional” cookies which make it possible to “remember” the User’s selected settings and to personalize the User’s interface, e.g. with regard to the chosen language or region of origin of the User, the font size, the appearance of the website, etc;
e) “advertising” cookies, which make it possible to provide Users with advertising content that is more tailored to their interests.
In many cases, web browsing software allows cookies to be stored on the User’s terminal equipment by default. Users of the Website can make changes to their cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of a web browser or inform on their each time placing in the equipment of a User of the Service. Detailed information on the possibility and methods of using cookies is available in the settings of your software.
The Operator of the Website informs that restrictions on the use of cookies may affect some of the functionality available on the Website.
Cookies placed on the terminal equipment of a User of the Website and may also be used by advertisers and partners cooperating with the Operator of the Website.
VI. Final provisions
This privacy policy is effective as of 25 May 2018.
