ul. Chwaszczyńska 133A, 81-571 Gdynia, Poland +48 58 340 02 60

Privacy policy

We publish this document to explain the reasons why we collect and process personal data as part of our business operations.

  1. What is personal data?
  2. It is any information that allows you to distinguish one person from others without much effort. It can refer directly to this person (such as her name and surname, identification number, and sometimes even an e-mail address or internet account) but might also not describe her directly. For example, relating to her features, health status, views, place of residence, addictions, race or religion.
  3. What personal data do we speak about in our case?
  4. This is the data provided to us by our clients, contractors, co-workers and employees with regard to using our services, cooperation with us or employment. We process this data.
  5. What does data processing mean?
  6. Data processing means all the activities we can do with personal data - related to both their active use, such as collection, retrieval, consolidation, merging, modification or sharing, as well as passive operation, such as storage, limiting, deleting or destroying.
  7. Who is Data Administrator (i.e. who affects its processing and security)?
  8. The administrator of your data is STESAR Sp. z o.o. Sp. k., with headquarters in Gdynia 81-571, ul. Chwaszczynska 133A represented by Dr.-Ing. Bronisław Wojciech Sarzynski.
  9. On what legal basis and for what purpose we process your data?
  10. Every processing of your data must be based on a proper legal basis, in accordance with applicable law. This basis may be your consent to data processing or other legal provisions allowing it, contained in the Act of 10 May 2018 on the protection of personal data and Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (referred to as the ‘GDPR’). Your data may be processed by us for several purposes, for example:
    • If you are our customer or a person interested in using the services or products we provide, we process your data in connection with the contract concluded with you or in preparation for the conclusion of such a contract. This is always done with your knowledge and will. Expressing the intention to conclude a contract, you know what personal data will be needed to sign it, and after signing it you have the knowledge of what data for this purpose you have already given or you will give in the future,
    • If you are a user or customer of the services or products we offer, e.g. services related to the design, assembly and commissioning of industrial control and automation systems - your data is processed based on your consent or the appropriate data entrustment agreement (processing on your behalf). Your consent it is voluntary - remember that you can withdraw it at any time. In this case, we will cease providing you with the service and we will immediately delete all data provided by you.
    • We can also process your data in connection with the need to ensure the safety of people and facilities or the security of networks and information. This is our legitimate interest. If video monitoring is used for this purpose, you will be informed in form of appropriate information plates or pictograms.
    • If you are interested in being employed at our company, your data is processed in the form of an application or CV submitted by you. This is done with your knowledge and written consent which you can withdraw at any time. In this case, your application will not be processed by us and we will immediately delete all data you provided. However, upon employment with us, the further rules of data processing and the mandatory scope of data to be transferred and to be processed are set out in the labour law.
  11. Who do we transfer your data to?
  12. In accordance with applicable law, we may provide your data to entities that process it on our behalf, e.g. subcontractors of our services. We also have an obligation to provide it upon request to entities authorized to do so under other law, e.g. courts or law enforcement agencies. However, the data will be provided only if they request it, indicating the law that allows them to do so. We do not expect the transfer of our clients' data to third countries or international organizations, i.e. outside the economic territory of the European Union. Within the European Union, thanks to the GDPR, the text of which is available at:
    http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC, your data is being protected in the very same way in all member states of the union.
  13. How long will we process your data?
  14. We pay a lot of attention to minimizing the scope of data collected by us as well as its processing time. For this purpose, we perform systematic reviews of paper and electronic documents, removing unnecessary ones whose expiration time has passed. The processing time of your data, depending on the basis on which we obtained the data, might be affected by various, independent from us legal provisions that may impose on us the obligation to store your data, regardless of your will or willingness. An example can be labour law, social security law or accounting regulations.
    If the data we have had would be used for a different purpose than the one for which it was obtained, we will keep you informed and you will be able to raise an objection.
  15. What rights do you have in relation to your data?
  16. If we process your personal data, you always have the right to:
    • request access to the data
    • request its rectification
    • request its removal
    • request to restrict processing operations
    • raise objections to data processing
    • transfer the data, including obtaining copies
    All these laws are discussed in detail in art. 15 to 21 of GDPR, the text of which is available at: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC.You can also withdraw your consent to the processing of your personal data. In this case we will immediately delete your personal data, as long as there is no legal obligation to proceed with further processing. For example, if you request the liquidation of your data in the staff documentation, we will immediately delete your data from the database. However, if you have purchased a good or service with us in accordance with the accounting regulations, we will continue to keep it in your financial and accounting records and process it for a period of 5 consecutive calendar years from the date of purchase. If you feel that in any way - which we obviously do not want - we have violated your rights or did not ensure security of your personal data, you have the right to lodge a complaint to the supervisory authority, which is the Personal Data Protection Office.
  17. Automated decision making and profiling information.
  18. Based on your data, we do not make any decisions that would be automated, that is, without human intervention. We also do not take any action to profile your person.
  19. How do we protect your data?
  20. In order to ensure the security of your data, we use organizational and technical means required by law. We have installed the necessary physical protection elements at our headquarters to prevent unauthorized access to data. Our employees have the required authorizations and may process data in a limited way, i.e. only to the extent that is necessary for the proper performance of their duties. Our associates have appropriate contracts for entrusting processed data and may process data in a limited way, i.e. only to the extent that is necessary for the proper performance of their duties.
  21. Contact details to the person responsible for the protection of personal data
  22. In all matters regarding the protection of personal data, we are represented by the Information Security Manager MSc. Edward Dybowski, with whom we concluded a contract in this matter. Contact with him is possible at the following e-mail address: biuro@zsubhp.pl.