Privacy policy

1. This Privacy Policy (hereinafter referred to as the ‘Policy’) is addressed to Users using the website available on exlibro.pl (hereinafter referred to as the ‘Website’) and sets out the rules for the processing of personal data. This Policy is for information purposes only.

2. The controller of personal data obtained from persons using the Website is Ewa DEDO, a sole proprietor running business activity under the name Ewa Dedo – ExLibro, ul. Józefa Mehoffera 10, 31-322 Kraków, as recorded in the Central Registration and Information on Business Activity of the Republic of Poland, NIP (Taxpayer’s Identification Number): PL6782161311, REGON (Business Statistical Number) 122603540, contact phone +48 12 294 61 05, every weekday from 9 am to 5 pm (connection fee as per the tariff of the operator providing service to the user), e-mail: info@exlibro.pl (hereinafter also referred to as the ‘Personal Data Controller’ or ‘Controller’).

3. When contacting the Controller (by e-mail or telephone) and/or sending his/her CV, the user provides the Controller with his/her personal data (full name, address, e-mail address, telephone number, possibly company name, business address, Taxpayer’s Identification Number, IP address of the computer used by the user when using the Website).

4. Purposes and activities of personal data processing:

• Contact between the Website user and the Controller – when contacting the Controller by e-mail or phone, the user provides the Controller with his/her e-mail address as the address of the sender of the message, his/her full name, contact phone number and address, possibly the name of the company and its Taxpayer’s Identification Number. The provision of the data is voluntary but necessary for the Controller to contact the Website user. In this case, the user’s data are processed for the purpose of contact on the basis of activities requested and initiated by the Website user aimed at concluding/performing a contract for the provision of translation services offered by the Controller that are described in detail on the Website, and the legal basis for the processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the ‘GDPR’). The legal basis for data processing after the end of the contact is the legitimate purpose of archiving the correspondence for its future demonstration (Article 6(1)(f) of the GDPR). The content of the correspondence may be subject to archiving. The Controller is unable to determine unequivocally when the correspondence will be deleted. The Website user has the right to demand the presentation of the history of his/her correspondence with the Controller (if it has been archived) and to request its deletion, unless the archiving is justified due to the overriding interest of the Personal Data Controller, e.g. defence against potential claims by the Website user.
• Sending a CV to the e-mail address of the Personal Data Controller indicated on the Website – providing the data is voluntary but necessary to consider the application within the recruitment process concerning the scope of co-operation selected by the Website user, to consider the application within the recruitment processes concerning positions related to the user’s qualifications and professional experience (in the case of expressing additional consent) and for the purpose of establishing co-operation within the scope of the form of co-operation selected by the Website user. The legal basis for the processing is the necessity of data processing to fulfil the legal obligation specified in Article 22(1) § 1 and 2 of the Labour Code, and in the case of additional consents expressed by the user – the user’s consent.

5. The Controller may also use the personal data of the Website user in order to fulfil other obligations incumbent on him/her as the Personal Data Controller, e.g. in order to assert claims arising from contracts concluded with Website users, on the basis of Article 6(1)(f) and Article 9(2)(h) of the GDPR – for the periods of limitation of claims as specified in the law.

6. The Personal Data Controller informs that the Website user has, at any time, the right to data portability, access to the content of his/her personal data and the possibility to correct, rectify, erase and object to the processing of his/her data, and the consent of the Website user to data processing may be withdrawn by him/her at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. The Personal Data Controller may refuse to delete the user’s personal data if there are reasons arising from the law. The user also has the right to lodge a complaint regarding the processing of personal data to the President of the Personal Data Protection Office. The rules related to the exercise of the indicated rights are described in detail in Articles 16–21 of the GDPR.

7. The Website users’ data will not be subject to automated decision-making, including profiling. Your personal data will not be processed by entities operating outside the European Economic Area.

8. When performing a contract for translation service, the Controller transfers the user’s personal data to collaborators, subcontractors, translators and other entities co-operating with the Controller. The Controller hereby informs that it never transfers, sells or lends the collected personal data of the Website users to third parties other than those indicated herein, except with the express consent or at the request of the user or at the request of state authorities authorised by law in connection with ongoing proceedings (e.g. courts, law enforcement agencies).

9. The Personal Data Controller processes personal data provided by the Website user in a manner consistent with the scope of the permission granted by the user and the requirements of the law, including the provisions of the GDPR, and in particular it protects the users’ personal data against unauthorised access, loss or damage, also guaranteeing the confidentiality of any personal data provided to it.

10. The Personal Data Controller is entitled to amend this Policy for important reasons (e.g. change of the law, change of the rules of operation of the Website). If changes are made, the user will be notified at least 14 days in advance of the effective date of the changes – the relevant information about the changes to the Policy will be posted on the Website. If the Website user does not accept the amended Policy, it has the right to terminate the Policy and thus refuse to continue to leave his/her personal data.

11. The user is requested to notify the Personal Data Controller immediately about any breaches of security rules identified by him/her in connection with the use of the Website. In the case of any questions, comments, proposals or suggestions regarding this Policy, requests to provide information about the user, information on the user’s data held by the Personal Data Controller and the purposes for which the Personal Data Controller processes them, the Website user is requested to contact the Personal Data Controller by e-mail: info@exlibro.pl or by phone: +48 12 294 61 05.