This document consists of two parts:

Part I – rules governing the processing of personal data
Part II – Cookie Policy


PART I. Rules governing the processing of personal data

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation, hereinafter the “GDPR”), we hereby provide the following information:


Data Controller

The Controller of your personal data, i.e. the entity determining the purposes and means of its pro-cessing, is Kriomedpol spółka z ograniczoną odpowiedzialnością, with its registered office in Stare Babice at ul. Warszawska 272, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Divi-sion of the National Court Register, under KRS number 0000178183, NIP: 5270201308, REGON: 010113251.
For matters concerning the processing of personal data, please contact us electronically by sending an email to: This email address is being protected from spambots. You need JavaScript enabled to view it.


Contact regarding personal data

 

The Controller has not appointed a Data Protection Officer (DPO).
You may contact us directly in matters relating to the processing of your personal data and the exercise of your rights in connection with such processing using the following details:

email: This email address is being protected from spambots. You need JavaScript enabled to view it.
address: Kriomedpol sp. z o.o., ul Warszawska 272, 05-082 Stare Babice
Telephone: (+48) 22 752 93 21


How we process personal data

The detailed rules governing the processing of your personal data may vary depending on the stage and nature of your relationship with the Controller. To make this information easier to understand, we describe below the circumstances applicable to the individual groups of persons whose data we process:

  • Persons interested in entering into a business relationship with the Controller


We process your personal data for the following purposes:

  • to provide you with an offer for our services in response to your enquiry, pursuant to Article 6(1)(b) GDPR (processing is necessary in order to take steps at the request of the Data Subject prior to entering into a contract);
  • to pursue our Legitimate Interests pursuant to Article 6(1)(f) GDPR, consisting of:
    • direct marketing and promotion of our services, including by email and telephone, where you have given the relevant consent(s) required under separate legislation;
    • the establishment, exercise or defence of legal claims;
    • handling correspondence and responding to commercial or technical enquiries, on the basis of the Controller’s Legitimate Interests.


Who we disclose your data to:

  • entities that operate our IT or telecommunications systems or provide us with IT and tele-communications tools;
  • entities providing legal assistance or accounting and tax services;
  • postal or courier service providers (for correspondence purposes).


How long we retain your personal data:

  • until any potential claims become time-barred;
  • until you object to the processing or withdraw your consent, where the processing of your personal data is based on the Controller’s Legitimate Interests or your voluntary Consent.


Is the provision of personal data mandatory?
The provision of your personal data is voluntary; however, without it, we will not be able to provide you with an offer for our services.

  • Persons who have entered into a contract with the Controller, as well as their representatives,
    authorised agents and persons designated as contacts under the contract


We process your personal data for the following purposes:

  • to perform the contract entered into with the Controller, pursuant to Article 6(1)(b) GDPR where you are a party to the contract, or pursuant to Article 6(1)(f) GDPR, i.e. for the pur-poses of the Controller’s Legitimate Interests, where you are a representative, contact person or authorised agent designated by a party to the contract for the purpose of entering into or performing that contract;to issue invoices, carry out accounting settlements and pay taxes, pursuant to Article 6(1)(c) GDPR, i.e. where processing is necessary for compliance with a legal obligation to which we are subject;
  • to pursue the Controller’s Legitimate Interests pursuant to Article 6(1)(f) GDPR, consisting of:
    • direct marketing and promotion of our services, including by email and telephone, where you have given the relevant consent(s) required under separate legislation;
    • the establishment, exercise or defence of legal claims.


Who we disclose your data to:

  • entities providing us with accounting, audit, legal, tax or bookkeeping services;
  • entities that operate our IT or telecommunications systems or provide us with IT and tele-communications tools;
  • postal or courier service providers (for correspondence purposes).


How long we retain your personal data:

  • for the duration of the contract and for the period during which the Controller is required un-der generally applicable law to retain documents and information;
  • until any potential claims become time-barred and, where complaint, court, tax or administra-tive proceedings are initiated, also for the duration of those proceedings;
  • until you raise a justified objection or withdraw your consent, where the processing of your personal data is based on the Controller’s Legitimate Interests or your voluntary Consent.



Is the provision of personal data mandatory?
The provision of data is necessary in order to enter into and perform the contract. In all other re-spects, the provision of data is voluntary. If you do not provide personal data required by law or data necessary for the performance of the contract, we will be unable to enter into the contract or provide services to you.


If you are a representative of our client or a person designated by the client to perform the contract with the Controller:
We also inform you that we process your personal data to the extent disclosed by the client. This most commonly includes your first name, surname, telephone number and/or email address. The source of this data is the Controller’s client whom you represent.

  • Persons contacting the Controller (e.g. through the contact form)

If you contact us by telephone, post, email or through the contact form, your personal data is processed in order to respond to your enquiry. This constitutes our Legitimate Interest pursuant to Article 6(1)(f) GDPR.
Depending on the subject matter of your enquiry, your personal data may be disclosed to entities providing services or IT solutions to the Controller, or to entities providing legal services.
Your data will be processed for the period necessary to deal with your matter (no longer than 30 days for the purpose of answering your question), or until you raise a justified objection or withdraw your consent.
The provision of your personal data is voluntary; however, without it, we will not be able to answer your question.

  • Persons participating in recruitment processes conducted by the Controller



We process your personal data for the following purposes:

  • to conduct the recruitment process, to the extent required by law (in the case of an offer of employment under an employment contract, pursuant to Article 221 § 1 of the Labour Code), on the basis of Article 6(1)(c) GDPR;
  • to take steps necessary to enter into an employment or cooperation contract, pursuant to Article 6(1)(b) GDPR;
  • to pursue the Controller’s Legitimate Interest in the establishment, exercise or defence of legal claims, pursuant to Article 6(1)(f) GDPR;
  • where you provide data other than that required by law, on the basis of your Consent, for the purpose of conducting the recruitment process, pursuant to Article 6(1)(a) GDPR.


Who we disclose your data to:

  • entities providing us with HR services and recruitment agencies;
  • entities that operate our IT or telecommunications systems or provide us with IT and telecommunications tools;
  • postal or courier service providers (for correspondence purposes);
  • entities providing us with advisory or legal services;
  • medical facilities carrying out occupational health examinations, where employment is based on an employment contract.


How long we retain your personal data:
Your personal data will be processed for the duration of the recruitment process (no longer than 3 months).  Where there is justified information indicating that claims may arise, the personal data will also be retained until the applicable limitation periods expire.


Is the provision of personal data mandatory?
The provision of personal data required by law is mandatory, while the provision of any other data is voluntary. If you do not provide personal data required by law, your application will be rejected.

  • Exercise of the rights of the Data Subject under the GDPR


We process your personal data for the following purposes:

  • to exercise a right available to you under the GDPR or to respond to your request, in connection with our legal obligation, pursuant to Article 6(1)(c) GDPR;
  • to pursue the Controller’s Legitimate Interest in the establishment, exercise or defence of legal claims, pursuant to Article 6(1)(f) GDPR.


Who we disclose your data to:

  • entities that operate our IT or telecommunications systems or provide us with IT and telecommunications tools;
  • postal or courier service providers (for correspondence purposes);
  • entities providing us with advisory, audit or legal services;
  • public authorities authorised under applicable law to request disclosure of your data.


How long we retain your personal data:
We process your personal data for the period necessary to respond to your request and, thereafter, until claims relating to your request become time-barred.


Is the provision of personal data mandatory?
The provision of data is a statutory requirement. Without it, we will be unable to fulfil your request.


Your rights regarding the protection of personal data

Under the GDPR, you have the following rights in connection with the processing of your personal data:

  • Right of Access – you may obtain information concerning the processing of your personal data and a copy of that personal data;
  • Right to Rectification (e.g. correction or updating of data);
  • Right to Erasure;
  • Right to Data Portability (where processing is carried out by automated means and is based on Consent or on a contract);
  • Right to Restriction of Processing (e.g. suspending specific operations involving the data or retaining the data until its accuracy has been verified or a dispute resolved);
  • Right to Object – you may object to the processing of your personal data in the fol-lowing circumstances:
    • Where your data is processed on the basis of our Legitimate Interests or for the per-formance of a task carried out in the public interest, you may object on grounds relat-ing to your particular situation. In such a case, we will no longer process the personal data covered by the objection on that basis, unless we demonstrate compelling legit-imate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims.
    • Where your data is processed for direct marketing purposes, you may object to such processing without stating any reason. In such a case, we will no longer process your personal data for direct marketing purposes.

Where your data is processed on the basis of Consent, you also have the right to:

  • withdraw Consent – you may withdraw any Consent you have given us at any time. This will not affect the lawfulness of the use of your data before the Consent was withdrawn.

To exercise the above rights, please contact the Controller using the contact details provided above. To ensure that you are authorised to submit the request, we may ask you to provide additional information enabling us to verify your identity.


Right to lodge a complaint


Irrespective of the above rights, you have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that your personal data is being processed unlawfully. However, we kindly ask you to contact us first so that we may seek to resolve your matter amicably before you refer it to the Supervisory Authority.


Automated decision-making


Personal data will not be used for automated decision-making, including profiling, in a manner that could produce legal effects or similarly significantly affect clients, suppliers, their employees or contractors, as well as employees, contractors or job applicants.


Will your data be transferred outside the European Economic Area (EEA)?

As a rule, your personal data will not be transferred outside the European Economic Area (hereinafter the “EEA”).

 

PART II. COOKIE POLICY

  1. We use information stored through cookies and similar technologies for advertising and statisti-cal purposes and to tailor the Website to users’ individual needs. If you consent to the use of cookies, they will be stored in your browser.
  2. The Website uses two types of cookies: session cookies and persistent cookies.
    a) Session Cookies are temporary files stored on the User’s terminal device until the User logs out, leaves the website or closes the software (web browser).
    b) Persistent Cookies are stored on the User’s terminal device for the period specified in the cookie parameters or until they are deleted by the User.
  3. We use the following categories of Cookies on the Website:
    a) Strictly Necessary Cookies – enable the use of services available through the Website, for example cookies used to support user authentication;
    b) Security Cookies – help ensure security, for example by detecting misuse of the services available through the Website;
    c) Performance Cookies – enable information to be collected about how the Website is used;
    d) Functional Cookies – enable the Website to remember settings selected by the User and personalise the User interface, for example the selected language or region, font size, ap-pearance of the Website, etc.;
    e) Marketing Cookies – enable advertising content to be delivered to Users in a manner more closely tailored to their interests;
    f) Integration Cookies – relate to third-party services used on the Website, such as Google Analytics.
  4. Third-party websites whose content we display may also use cookies that enable users to log in and that are used to deliver advertising tailored to users’ preferences and behaviour.
  5. When you visit our website, a banner will be displayed informing you that the website uses cookies. If you select “Allow all”, this will mean that you accept all cookies placed on our website and confirm that you have read the information about cookies, the purposes for which they are used, and the circumstances in which data collected through cookies is dis-closed to our partners.
  6. Please note that your Consent is not required for Strictly Necessary Cookies, as these cookies ensure the full and uninterrupted operation of our website.
  7. If you do not want our cookies to be stored on your device, you may select “Reject”. By se-lecting this option, you will reject all cookies used on our website except those that are tech-nically necessary.
  8. You may manage your cookie preferences in detail by selecting individual cookie categories (“Functional”, “Statistical”, “Marketing”) on the cookie banner displayed to you, or by se-lecting “Show details”. The “Show details” option contains a list of all cookies used on the website and allows you to accept or reject each of them individually.
  9. As some of the cookies we use constitute personal data, we want you to be aware of the rights available to you under the GDPR:
    a) The Controller of your personal data, i.e. the entity determining the purposes and means of processing, is Kriomedpol spółka z ograniczoną odpowiedzialnością, with its registered of-fice in Stare Babice at ul. Warszawska 272, entered in the register of entrepreneurs of the Na-tional Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under KRS number 0000178183, NIP: 5270201308, REGON: 010113251.
    b) Your personal data will be processed in order to provide the basic functions of our website (Article 6(1)(f) GDPR). If you have given the relevant voluntary Consent, your data will also be processed in order to provide you with services, offers and communications tailored to your preferences, to analyse website traffic and to provide social media features, depending on the preferences you have selected (Article 6(1)(a) GDPR).
    c) Further information on the rules governing the processing of personal data and your rights is provided above in our Privacy Policy.
  10. Please note that you may change the Consents you have given at any time through the cookie Consent Management Platform or by contacting us:
    - by post at: Kriomedpol sp. z o.o., ul Warszawska 272, 05-082 Stare Babice
    - by email at: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Withdrawal of Consent does not affect the lawfulness of processing carried out before its withdrawal.

Please contact us if you have any questions or concerns.
Thank you for the trust you have placed in us.

back to top