Privacy Policy

Information policy on the protection of personal data for potential contractor, contractors, and their representatives

EonD-Expertise on Demand sp. z o. o. 

1. The Controller, within the meaning of Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR“), with regard to personal data of individuals acting as:
   a) potential contractors of EonD-Expertise on Demand sp. z o.o. (natural persons conducting business activity as sole proprietorship, natural persons conducting business activity within a civil partnership),
   b) contractors who are the party to agreements concluded with EonD-Expertise on Demand sp. z o.o. (natural persons conducting business activity as sole proprietorship, natural persons conducting business activity within a civil partnership),
   c) individuals representing potential institutional contractors,
   d) individuals representing institutional contractors,
   e) individuals appointed by potential contractors or contractors to be points of contact and to fulfil subject matters of agreements executed with EonD-Expertise on Demand sp. z o.o.  shall be EonD-Expertise on Demand sp. z o.o., Aleja Jana Chrystiana Szucha 16/25, 00-582 Warszawa (hereinafter the “Company“). 
2. In matters relating to the protection of personal data, you can contact us by e-mail to the address contact@eond.eu, as well as by traditional mail to the address of the Company registered seat.
3. Personal data of individuals indicated in paragraph 1 may be processed for the following purposes and based on the below provided lawful bases, depending on their role:
   a) conclusion and execution of the subject of an agreement (data processing lawful basis: Article 6(1)(b) of the GDPR),
   b) exchange of correspondence, including ongoing communication related to establishing a cooperation, conclusion and fulfilment of the subject matter of the agreement, which constitutes a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR),
   c) handling complaints related to the concluded agreements (Article 6(1)(b) of the GDPR),
   d) handling and pursuing claims, defence against claims, as well as for the purposes of execution of the out-of-court methods of settling disputes, which constitutes a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR),
   e) performance of statistical analyses, which constitutes a legitimate interest of the Company (data processing legal basis: Article 6(1)(f) of the GDPR),
   f) implementation of legal requirements in the scope of tax and accounting regulations, in particular those specified by provisions of the Act of 11 March 2004 on tax on goods and services (VAT), the Act of 15 February 1992 on the corporate income tax, and the Act of 29 September 1994 on accounting (data processing legal basis: Article 6(1)(c) of the GDPR),
   g) storing data for archiving purposes and to demonstrate correctness of fulfilling legal obligations incumbent upon the Company, which constitutes its legitimate interest (data processing legal basis: Article 6(1)(f) of the GDPR);
   h) conducting direct marketing through a selected channel of communication (to an e-mail address or with the use of telecommunications terminal equipment and automated calling systems) – if a person has given separate consent to receive commercial information (data processing legal basis: Article 6(1)(a) of the GDPR).
4. Personal data can be transferred to the following entities: 
   a) entities supporting the Company in the field of technical and information technology services (including provision, implementation, and software servicing, hardware servicing, hosting, and the like),
   b) law firms providing services for the Company as well as entities providing debt collection services,
   c) consulting, audit, and counselling entities in the scope of services provided by these entities for the Company.

5. Personal data will be stored by the Company for a period of time necessary to establish cooperation, fulfil the concluded agreements, and until they are settled in an appropriate manner, moreover:
   a) until expiry of potential claims resulting from the above indicated agreements,
   b) for a period of time necessary to pursue specific claims resulting from the concluded agreements referred to hereinabove,
   c) for the duration of the obligations arising from the provisions of law, including in particular tax and accounting regulations, e.g. an obligation to store documents in accordance with requirements stipulated in art. 74 of the Act of 29 September 1994 on accounting,
   d) for a period of time necessary for the Company to document before public administration bodies, including the personal data protection supervisory body, the correctness of compliance with legal obligations incumbent on it,
   e) for archiving purposes if they concern the history of correspondence and replies to inquiries for a period of time not longer than 3 years from the data acquisition,
   f) for direct marketing purposes, until such time as consent to this purpose is withdrawn or data is found to be out of date.

6. The Company ensures the right to exercise the rights provided in the GDPR, i.e. the right to request access to one’s personal data, the right to rectify them, erase or restrict of processing, the right to transfer the data, as well as the right to object to the processing on the grounds and in cases foreseen in the GDPR.
7. In the event where the Company processes personal data for the purpose of legitimate interests (referred to hereinabove), we would like to inform you about the right to object to the processing of your data for reasons connected with a particular situation, furthermore, the right to object at any time if the data are processed for direct marketing purposes.
8. Where personal data are processed based on a given consent, we would like to inform you about the right to withdraw your consent at any time without providing any reasons for such withdrawal. This, however, will not have influence on the compliance of the data processing that took place prior to the withdrawal of the consent.
9. We would like to inform you about the right to lodge a complaint concerning the processing of personal data with a supervisory body that is the President of the Personal Data Protection Office.
10. Providing personal data in order to:
    a) fulfil the subject of an agreement shall constitute a condition for the agreement to be concluded, and failure to provide data may result in impossibility for the agreement to be concluded or impossibility of its proper fulfilment,
    b) consider complaints, pursue possible claims is necessary for the Company to consider and pursue a possible claim in an appropriate manner,
    c) fulfil purposes resulting from provisions of law is obligatory in view of the cited provisions of law,
    d) fulfil other cases is voluntary.
11. Privacy policy – principles of processing data by other service providers.
    Hotjar. Data collected and stored on this site are used for purposes related to the optimization of its operation. This is done using technologies provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141 Malta (https://www.hotjar.com) on the terms set out in the privacy policy (https://www.hotjar.com/legal/policies/privacy/). These data may be used to generate profiles of users using a pseudonym. Cookies can also be used for this purpose. Data collected using the Hotjar technology is not used to identify the identity of the user visiting this site and will not be combined with the personal data of the user using a pseudonym, unless he agrees to do so. The user may at any time withdraw the consent for Hotjar to collect user’s data from sites that support this technology. To do this, go to https://www.hotjar.com/legal/compliance/opt-out and click “Disable Hotjar” or turn on “Do not Track” in your browser.