Privacy policy

Privacy policy


  • Controller

The controller of your personal data is HEM Sp. z o.o. with its registered office in Pruszków, Al. Jerozolimskie 475, 05-800 Warszawa, entered in the Register of Companies of the National Court Register kept by the District Court for the Capital City of Warszawa, 14th Business Division, under Court Register Number No: 0000775090, NIP [Tax Identification No]: 5342594809, REGON [National Official Business Register No]: 382771603. You can contact the Controller by e-mail: info@hem-e.com or by correspondence at the above-mentioned address.


  •  Purpose and legal basis for the processing of personal data


  • Do you want to create an account with us?

We collect the personal data required for registration directly from you.

Your personal data are processed in order to provide the service, provided electronically in the form of our internet account.

The legal basis for the processing of your personal data is the necessity to process them in order to conclude and perform the service, which is the internet account (Article 6 (1) (b) of the GDPR).

Providing personal data is voluntary, but providing them is necessary to create the internet account. Refusal to provide personal data will result in the inability to create the internet account.



  • Do you want to shop with us?

 

Your personal data are processed in order to fulfil your order.

The legal basis for the processing of your personal data is the necessity of their processing in order to perform the order (Article 6 (1) (b) of the GDPR), as well as for the fulfilment of our accounting, financial obligations (Article 6 (1) (c) of the GDPR) and the legitimate interest of the administrator (Article 6 (1) f of the GDPR) consisting in conducting customer satisfaction survey regarding your opinion on the quality of our services and opinions on individual products from our offer.

Providing personal data is voluntary, however, providing them is necessary to complete the order. Refusal to provide personal data will result in the inability to complete the order.


  • Are you interested in participating in our webinar, workshop or consultation?

We collect the personal data required in order to register for the above-mentioned events directly from you.

Your personal data are processed in order to enable you to participate in a webinar, workshop or consultation.

The legal basis for the processing of your personal data is the consent you have expressed by willing to participate (Article 6 (1) (a) of the GDPR). Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Providing personal data is voluntary, but providing them is necessary to participate in the webinar, workshop or consultation. Refusal to provide personal data will render such participation impossible.


  • Are you interested in our commercial information?

Your personal data are processed for the purpose of sending commercial information.

The legal basis for the processing of your personal data is your consent by providing your e-mail address and confirming your willingness to receive commercial information (Article 6 (1) (a) of the GDPR). Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Providing personal data is voluntary, but providing them is necessary for sending commercial information. Refusal to provide personal data will render such communication impossible.

Remember that if you have agreed to receive commercial information from our business partners, we have provided them with your e-mail address for this purpose.


  • Are you a party to a contract concluded with us?

If you are a party to a contract with us or you intend to conclude such a contract, the data that we process about you are contact details and other data necessary to conclude the contract. Those data was obtained directly from you.

Your personal data are processed for the purpose of:

  1. to conclude and perform the contract,
  2. compliance with legal obligations imposed upon us, including particularly accounting activities,
  3. implementation of a legitimate interest, consisting in ensuring the communication necessary to conclude and perform the contract and its ongoing service, providing you with answers to questions, maintaining business contacts, as well as for the establishment, exercise or defence of legal claims.

The legal basis for the processing of your personal data are:

  1. the necessity to process them in order to conclude and perform the contract (Article 6 (1) (b) of the GDPR),
  2. fulfilling our obligations imposed upon us (Article 6 (1) (c) of the GDPR),
  3. our legitimate interests (Article 6 (1) (f) of the GDPR) described above.

Providing personal data is voluntary, but it is necessary to establish cooperation and service the contract. Refusal to provide personal data will result in the inability to conclude and perform the contract, including answering the question you asked.


  • Do you represent our client or contractor?

If you represent our client, contractor or other entity in contacts with us (e.g. your employer, customer or contractor), the data we process about you are contact details related to your function or relationship with the entity on behalf of which you are acting. We have obtained this data directly from you or we have received them from this entity.

Your personal data are processed for the purpose of:

  1. compliance with legal obligations imposed upon us, including particularly accounting activities,
  2. Establishing cooperation and concluding and performing the contract concluded with the entity on behalf of which you are acting,
  3. implementation of a legitimate interest, consisting in ensuring the communication necessary to service and perform the contract concluded with the entity on behalf of which you are acting, providing you with answers to questions, maintaining business contacts, as well as for the establishment, exercise or defence of legal claims as well as establishing, investigating and defending against legal claims.

The legal basis for the processing of your personal data is:

  1. fulfilling our obligations imposed upon us (Article 6 (1) (c) of the GDPR),
  2. establishment and implementation of the contract (Article 6 (1) (b) of the GDPR),
  3. our legitimate interests (Article 6 (1) (f) of the GDPR) described above.

Providing personal data is voluntary, however, it is necessary for the cooperation with the entity you represent. Refusal to provide personal data will result in the inability to maintain contacts necessary for the performance of the contract or answer the question you have asked.


  • Are you contacting us to submit an application?

In such a case, personal data are processed in order to carry out the recruitment process for the position offered in our structures and to select the appropriate person for employment in the position specified in the job offer, including the assessment of qualifications, abilities and skills of the job candidate.

Depending on whether the recruitment process leads to the conclusion of a contract covered by the employment relationship and thus the provisions of the Labor Code, or leads to the conclusion of a civil law contract or a contract for the provision of services, there are different legal grounds for the processing of personal data:

 

  1. In the case of recruitment for positions for which contracts covered by the employment relationship are provided, and thus the provisions of the Labour Code bind, the legal basis for the processing of personal data is necessity of their processing in order to conclude a contract (Article 6 (1) b of the GDPR) in the remaining scope, the legal basis for data processing is consent (Article 6 (1) a of the GDPR)
  2. to the extent resulting from the Article 22 (1) of the Labour Code, the legal basis is the legal obligation imposed on the Controller (Article 6 (1) (c) of the GDPR). This applies to such data as: name(s) and surname, date of birth and contact details indicated by the job applicant. If it is necessary to perform work of a certain type or in a specific position, this also applies to information on education, professional qualifications and employment history. The legal obligation on the Controller also includes the data that are necessary to exercise the right or fulfil the obligation resulting from the law.
  3. in the case of providing personal data in a wider scope than specified in the provisions of the labour law, the legal basis for their processing in the above-mentioned purpose is consent (Article 6 (1) (a) of the GDPR). This applies to the provision of the results of competency tests, as well as any data contained in the curriculum vitae (CV), cover letter or made available during interviews. We do not require the above data, but we treat their provision as tantamount to consenting to their processing. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

 

We would like to point out that the provision of personal data indicated in point I lit. a) above is mandatory in the light of applicable labour law provisions. Failure to provide them will result in the inability to participate in the recruitment process. Providing by the job applicant personal data indicated in point I lit. b) above is voluntary. We declare that the failure to provide such data may not be the basis for unfavourable treatment of the job applicant, and may not cause any negative consequences for them, especially it may not be a reason justifying the refusal of employment.

 

  1. In the case of recruitment for positions for which there are envisaged civil law contracts or contracts for the provision of services, the legal basis for the processing of personal data is consent (Article 6 (1) (a) of the GDPR). This applies to all data contained in the curriculum vitae (CV), cover letter or made available during interviews.

 

We would like to point out that the provision of personal data by the job applicant for the purpose of concluding the indicated contracts is voluntary, as consent is required to do so. However, we would like to point out that consent to the processing of such personal data by us as: name(s) and surname, date of birth and contact details and – within certain positions – information about education, professional qualifications and the employment history, is necessary to the given application was taken into account within the recruitment process.



  • Above points do not apply to you and just want to contact us?

If you only want to contact us, the data we process about you are your contact details and data resulting from your message. We obtained those data directly from you.

 

Your personal data are processed in order to pursue a legitimate interest, consisting in ensuring the handling of your message and possibly answering questions arising from it.

 

The legal basis for the processing of your personal data is our legitimate interest (Article 6 (1) (f) of the GDPR) described above.

 

Providing personal data is voluntary, but it is necessary for us to deal with your message. Refusal to provide personal data will result in the inability to handle the message sent by you and thus its removal.


  • Recipients of personal data

Personal data will be transferred – depending on the need – to entities processing it on our behalf (in particular to entities operating and supplying IT systems, entities providing accounting services) and persons cooperating with us who must have access to the data in order to perform their duties. When it is necessary, your personal data may also be transferred to banks, couriers, entities handling payment transactions as well as authorized state authorities, in particular tax offices.


  • Your rights under the General Data Protection Regulation

You have the right to:

  1. request access to your personal data, rectification, erasure or limitation of processing, as well as data portability,
  2. if the basis for the processing of personal data is consent – you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal,
  3. if the basis for the processing of personal data is a legitimate interest – you have the right to object at any time to the processing of personal data for reasons related to your particular situation,
  4. lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.

You can exercise of your rights using the contact details provided at the beginning of the Privacy Policy.


  • Periods of personal data storage

Personal data will, depending on the purpose and legal basis of the processing indicated in Chapter II, points 1 to 8, be stored:

– until the consent is withdrawn,

– until a positively considered objection,

– for the duration of the contract, as well as until the expiry of the periods resulting from the relevant legal provisions, i.e. until the expiry of the limitation period for tax obligations related to the contracts, which may be extended, if appropriate, by the period of limitation of civil law claims,

– for the time specified by the provisions of law in the field of accounting and finance,

– for the duration of handling the message sent to us,

– for the duration of the recruitment process,

All personal data will be deleted after the purpose of their processing ceases to exist.


  • Use of personal data to make automated decisions, including profiling

Your personal data will not be used to make automated decisions, including profiling.

 

  • Do you wish to take part in our contest?

The rules of the processing of your personal data, including the purpose, legal grounds and the period of storage of your personal data are specific to each marketing action. Details can be found in the regulations of the action or other document specifying the rules for its implementation.