VIDIS Joint Stock Company, with its registered office in Kobierzyce, ul. Logistyczna 4, 55-040 Bielany Wrocławskie, fulfilling the obligations resulting from applicable laws on personal data protection, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR), wishes to provide you with information regarding the processing and protection of your personal data.

The information contained in the Privacy Policy will help you understand what personal data VIDIS SA collects and processes, for what purpose it is used, and what rights you have in connection with the protection of personal data.

Who collects and processes your personal data, i.e., who is the controller of your personal data?

VIDIS Joint Stock Company, with its registered office in Kobierzyce, ul. Logistyczna 4, 55-040 Bielany Wrocławskie (hereinafter referred to as VIDIS SA or ADO - personal data controller).

How can you contact VIDIS SA?

You can contact us:

  1. by email: rodo@vidis.pl
  2. by phone: (+48) 71 33 880 00,
  3. by mail: ul. Logistyczna 4, 55-040 Bielany Wrocławskie, Kobierzyce

When and what personal data does VIDIS SA collect and process?

VIDIS SA collects and processes personal data in connection with:

  1. providing service services;
  2. selling products and services through the B2B system, including order fulfillment and customer contact;
  3. undertaking marketing activities;
  4. establishing contact through contact forms available on websites;
  5. established business relationships;
  6. conducted recruitment processes.

What personal data does VIDIS SA collect and process?

VIDIS SA collects and processes personal data to the extent necessary to achieve the purpose for which it was collected.
Depending on the purpose and legal basis for collecting and processing personal data, VIDIS SA may collect and process, among others, the following data:

  1. identifying data, including, among others: name, surname,
  2. contact details, including, among others: address, phone number, email address;
  3. company identifying data, including, among others: company name, business address, NIP (tax identification number), REGON (statistical number).

For what purpose and on what legal basis does VIDIS SA process your personal data and how long is it stored?

1. If you use service services

Purpose of data processing Legal basis for data processing Period of storage/processing of personal data
Implementation of the service agreement or taking requested actions before concluding the agreement Art. 6(1)(b) GDPR Period necessary to implement the agreement (service delivery)
Keeping accounting books and tax documentation Art. 6(1)(c) GDPR in connection with Art. 74(2) of the Accounting Act and other specific regulations Period of storage of accounting and tax documentation resulting from legal provisions
Ensuring the safety of persons and property using video monitoring, recording images at the VIDIS SA headquarters, which constitutes a legitimate interest in data processing by the ADO Art. 6(1)(f) GDPR 1 month

2. If you are customers of VIDIS SA, including customers of the B2B system operated by VIDIS SA:

Purpose of data processing Legal basis for data processing Period of storage/processing of personal data
Implementation of the sales agreement, including delivery of goods or services, contact regarding order fulfillment Art. 6(1)(b) GDPR Period necessary to implement the sales agreement (from order placement to fulfillment)
Pursuing claims and defense against claims related to the conducted business activity, which constitutes a legitimate interest in data processing by the ADO Art. 6(1)(f) GDPR Period of limitation of claims resulting from legal provisions
Keeping accounting books and tax documentation Art. 6(1)(c) GDPR in connection with Art. 74(2) of the Accounting Act and other specific regulations Period of storage of accounting and tax documentation resulting from legal provisions
Ensuring the safety of persons and property using video monitoring, recording images at the VIDIS SA headquarters, which constitutes a legitimate interest in data processing by the ADO Art. 6(1)(f) GDPR 1 month

3. If you use contact forms available on websites operated by the ADO:

Purpose of data processing Legal basis for data processing Period of storage/processing of personal data
Contact regarding the question/submission made through the contact form, based on the consent given for data processing Art. 6(1)(a) GDPR For the period necessary to respond to the submission and conduct correspondence/conversations related to the submission, but no longer than until you withdraw your consent for personal data processing
Pursuing claims and defense against claims related to the business activity conducted by the ADO, which constitutes a legitimate legal interest of the ADO, when your submission may justify processing data for this purpose (e.g., when the submission concerns a complaint) Art. 6(1)(f) GDPR For the period of limitation of claims specified in legal provisions

4. If marketing activities are undertaken towards you by VIDIS SA / a newsletter is sent:

Purpose of data processing Legal basis for data processing Period of storage/processing of personal data
Conducting marketing activities related to VIDIS SA's operations, including establishing business relationships, sending offers, information about goods, services, promotions, newsletters - as part of the legitimate interest of the ADO or your expressed consent Art. 6(1)(f) GDPR, which constitutes a legitimate interest of the ADO, which is marketing of products and services
Art. 6(1)(a) GDPR, Art. 10(2) of the Act on Providing Services by Electronic Means, Art. 172 of the Telecommunications Law
For the period necessary to achieve the purpose, but no longer than until:
1) you object to the processing of personal data for this purpose or
2) if you have given marketing consents - until you withdraw the given consent

5. If you are applying for a job at VIDIS SA

Purpose of data processing Legal basis for data processing Period of storage/processing of personal data
Conducting the current recruitment process Art. 221 of the Labor Code, Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR, which constitutes a legitimate interest of the ADO, which is the need to ensure an appropriate level of employee employment For a period of 3 months from the start of the recruitment process

Where does VIDIS SA obtain your data?

Customers: Data is obtained directly from you before concluding the agreement or during its implementation.
Contractors:
Establishing business relationships
Data is obtained directly from you before concluding the agreement or during its implementation.
Contractor representatives, contact persons Data is obtained from the entity on whose behalf you act or directly from you. When personal data is provided by the entity on whose behalf you act, the ADO collects your data: name, surname, phone number, email address, job position.
Potential contractors Data is obtained directly from you or from publicly available sources. When personal data is collected from publicly available sources, the ADO collects your personal data: name, surname, company name, phone number, email address, job position.
Users of contact forms Data is obtained directly from you in the contact form or during contact conducted to respond to the submission made via the contact form.
Recipients of marketing activities Data may be obtained:
1) directly from you;
2) from the entity on whose behalf you act (name, surname, phone number, email address, job position);

Is providing your data necessary?

Customers: Providing data necessary for the implementation of the agreement is a condition for concluding the agreement. Refusal to provide it will result in the inability to use the service or issue an invoice.
Contractors: Providing data necessary to submit an offer, and then sign and implement the agreement, is a condition for concluding the agreement. Refusal to provide it will result in the inability to submit an offer and conclude the agreement.
Contractor representatives, contact persons If you provide personal data directly to the ADO, providing it is voluntary but necessary for the ADO to implement the agreement on behalf of the entity you represent. In case of not providing the data, the implementation of the agreement may be difficult.
Potential contractors If you provide data directly to the ADO, providing it is voluntary but necessary to take actions aimed at establishing business relationships, including submitting an offer and concluding an agreement.
Users of contact forms Providing data necessary to provide and respond to the submission/questions is a condition for obtaining a response. Failure to provide data will result in the inability to respond to the submission/question.
Recipients of marketing activities Providing your data is voluntary.
Job candidates Providing the data mentioned in Art. 221 of the Labor Code is necessary to conduct the recruitment process. Any data beyond this scope is provided by you voluntarily.

To whom can VIDIS SA transfer your personal data?

Access to your personal data may be granted to:

  1. employees and associates of the ADO authorized to process your personal data on the ADO's instructions;
  2. entities to whom the ADO has entrusted the processing of personal data, including:
    1. providers of technical and organizational services (in particular providers of IT services, entities providing postal and courier services);
    2. providers of legal and advisory services, including in the case of pursuing claims related to the business activity conducted by VIDIS SA and defense against claims;
    3. other entities, persons or bodies - to the extent and on the terms specified by law, with the proviso that the disclosure of your data to the above-mentioned entities takes place in accordance with applicable law and with full observance of the principles related to their security.

Will your data be transferred to countries outside the European Economic Area (to countries other than European Union countries and Iceland, Norway and Liechtenstein)?

Your data will not be transferred to countries outside the European Economic Area.

What rights do you have in connection with the processing of data by VIDIS SA?

In connection with the processing of your personal data by VIDIS SA, you have:

  1. the right to access your personal data (Art. 15 GDPR);
  2. the right to rectify your personal data (Art. 16 GDPR);
  3. the right to request deletion of data in cases specified in Art. 17(1), taking into account the exceptions specified in the provision of Art. 17(3) GDPR;
  4. the right to request restriction of data processing in cases specified in Art. 18 GDPR;
  5. the right to data portability in cases specified in the provisions of Art. 20 GDPR.

If you want to exercise any of these rights, VIDIS SA enables contact:

  1. by email: rodo@vidis.pl
  2. by mail: ul. Logistyczna 4, 55-040 Bielany Wrocławskie

You also have the right to lodge a complaint with the supervisory authority dealing with personal data protection if VIDIS SA violates personal data protection regulations when processing your personal data.

Right to withdraw consent for personal data processing

If the ADO processes your personal data based on consent, you have the right to withdraw consent at any time, without affecting the validity of processing that was done based on consent before its withdrawal.

You can withdraw consent:

  1. by email: rodo@vidis.pl
  2. at the reception of the VIDIS SA branch, ul. Logistyczna 4, 55-040 Bielany Wrocławskie
  3. by mail: VIDIS SA, ul. Logistyczna 4, 55-040 Bielany Wrocławskie
  4. regarding receiving the newsletter - by following the instructions in the email message.

Will automated decisions be made regarding your data (decisions without human involvement)?

Automated decisions (decisions without human involvement) will not be made regarding your personal data, including your data will not be subject to automated profiling.

Right to object

Additionally, VIDIS SA informs that for reasons related to your particular situation, you have the right to object to the processing of your personal data, including profiling, in the event that the basis for data processing by the ADO is:

  1. necessity of processing to perform a task carried out in the public interest or in the exercise of official authority vested in the data controller (Art. 6(1)(e) GDPR),
  2. legitimate legal interest of the ADO (Art. 6(1)(f) GDPR).

After submitting an objection, VIDIS SA will not be able to process personal data based on the above-mentioned processing bases, unless it demonstrates the existence of valid legally justified grounds for data processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing or defending claims.

If VIDIS SA processes your data for direct marketing purposes, you have the right to object to the processing of your data by VIDIS SA for direct marketing purposes.

Personal data security

VIDIS SA applies appropriate technical and organizational measures to ensure that your personal data is secure, including protecting personal data against unauthorized access, loss or destruction. In order to ensure the security of your personal data, VIDIS SA has implemented appropriate personnel, organizational, technical (IT) and physical safeguards.