1. General information

The controller of the personal data of users of the staltechglobal.com website is CORDIVIA Sp. z o.o.

Contact with the Controller is possible via:

The Controller exercises due diligence to protect the personal data of website users, in particular against access by unauthorised persons, loss, destruction, unauthorised modification or unlawful processing.

2. Scope of data processed

When using the website, personal data provided voluntarily by the user may be processed, in particular through the contact form, recruitment form, e-mail message, telephone contact, offer documents, tender documents, contract documents or recruitment documents.

Depending on the purpose of contact, the Controller may process the following categories of data:

• first name and surname,
• e-mail address,
• telephone number,
• company name or details of the represented entity,
• job title or business function, if provided,
• content of the message sent via the form or by e-mail,
• data contained in tender, offer, contract or recruitment documents,
• technical data related to the use of the website, such as IP address, browser type, device type, operating system and information stored in necessary cookies.

As a rule, the Controller processes non-sensitive data. In the case of recruitment documents, the user should provide only the data necessary to participate in the recruitment process.

3. Purposes of personal data processing

Personal data may be processed for the following purposes:

• responding to an enquiry sent via the contact form, by e-mail or by telephone,
• conducting correspondence with clients, contractors, candidates and persons interested in cooperation,
• preparing an offer, taking steps before entering into a contract or performing a contract,
• carrying out tasks, tenders, orders and business cooperation,
• conducting recruitment processes and handling candidate applications,
• fulfilling legal obligations imposed on the Controller, including accounting, tax or archiving obligations,
• establishing, pursuing or defending against possible claims,
• ensuring the proper operation, security and administration of the website.

4. Legal bases for data processing

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, i.e. the GDPR, in particular on the basis of:

• Article 6(1)(a) GDPR — consent of the data subject, e.g. in the case of voluntary submission of data, consent to participate in future recruitment processes or provision of additional information not required for the performance of the primary purpose,
• Article 6(1)(b) GDPR — the need to take steps prior to entering into a contract or to perform a contract to which the data subject is party,
• Article 6(1)(c) GDPR — the need to comply with a legal obligation imposed on the Controller,
• Article 6(1)(f) GDPR — the legitimate interest of the Controller, including in particular handling correspondence, contacting clients and contractors, organising cooperation, protecting the Controller’s rights, pursuing claims and ensuring the security of the website.

5. Source of data collection

Personal data is obtained primarily directly from the persons to whom the data relates, in particular through:

• the contact form available on the website,
• a recruitment form or application,
• e-mail messages,
• telephone contact,
• tender, offer, contract or recruitment documents,
• other forms of contact with the Controller.

Voluntary provision of data

Providing personal data is voluntary, but it may be necessary to respond to an enquiry, prepare an offer, enter into or perform a contract, participate in a recruitment process or fulfil obligations arising from legal provisions.

Failure to provide data may make it impossible to carry out the above purposes.

6. Recruitment

If the user provides personal data for the purpose of participating in a recruitment process, such data will be processed only to the extent necessary to conduct the recruitment process, assess qualifications, contact the candidate and make a decision regarding possible cooperation or employment.

Recruitment data may include, in particular, identification data, contact details, information about education, professional experience, qualifications, authorisations, previous employment history and other information provided by the candidate in application documents.

If the candidate gives consent to participate in future recruitment processes, their data may also be stored for the purposes of subsequent recruitment processes, until the consent is withdrawn or for the period specified in the consent.

7. Recipients of personal data

Personal data may be transferred only to entities authorised to receive it on the basis of legal provisions or concluded agreements.

Recipients of data may include in particular:

• entities providing hosting services,
• e-mail service providers,
• entities operating and maintaining the website,
• IT and technical companies supporting the Controller,
• entities providing accounting, legal, HR or advisory services,
• contractors or partners, if this is necessary for the performance of a contract, tender, order or cooperation process,
• public authorities, courts or other institutions, if the obligation to provide data results from legal provisions.

Personal data is not sold to third parties.

8. Data retention period

Personal data will be stored for the period necessary to achieve the purpose for which it was collected, and subsequently for the period required by legal provisions or the period necessary to secure possible claims.

• data sent via the contact form or by e-mail will be stored for the time necessary to handle the enquiry and any further correspondence,
• data related to an offer, tender, order or contract will be stored for the duration of cooperation and for the period required by legal provisions or the limitation period for claims,
• data processed on the basis of consent will be stored until the consent is withdrawn, unless there is another legal basis for further processing,
• recruitment data will be stored for the duration of the recruitment process, and in the case of consent to future recruitment processes — until the consent is withdrawn or for the period specified in the consent,
• technical data and necessary cookies will be stored in accordance with the website configuration and the user’s browser settings.

9. Rights of data subjects

The data subject has the right to:

• access their personal data,
• rectify incorrect data,
• erase data, if the grounds provided for in the GDPR apply,
• restrict the processing of data,
• object to the processing of data,
• data portability, where applicable,
• withdraw consent at any time, if the data is processed on the basis of consent,
• lodge a complaint with the supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

10. Transfer of data outside the European Economic Area

As a rule, the Controller does not transfer personal data outside the European Economic Area.

If tools or services provided by suppliers that may involve the transfer of data outside the European Economic Area are implemented in the future, processing will be carried out in accordance with the requirements of the GDPR, in particular using appropriate legal safeguards.

11. Automated decision-making and profiling

Users’ personal data is not used for automated decision-making, including profiling, which would produce legal effects concerning the user or similarly significantly affect them.

12. Cookie Policy

What are cookies?

Cookies, also known as cookie files, are small text files stored on the user’s device when using a website.

Cookies may be used to ensure the proper operation of the website, maintain sessions, remember technical information, handle forms, improve security and remember whether the cookie notice has been displayed or accepted.

Cookies used on the website

The website uses only necessary cookies, which are required for the proper operation of the website, handling forms, ensuring security and remembering information about closing the cookie notice.

• Necessary cookies — required for the proper operation of the website and its basic functions.
• Cookie notice cookie — used to remember that the user has read the cookie notice, so that the notice is not displayed on every visit.
• Technical WordPress or form cookies — may be used to operate the website, ensure security, handle technical sessions or ensure the correct operation of forms.

As of the date of preparation of this Policy, the website does not use Google Analytics, Google Tag Manager, advertising pixels, remarketing or marketing cookies.

Managing cookies

The user can manage cookies independently from their web browser settings. In the browser settings, it is possible to block the storage of cookies, delete stored files, set notifications about attempts to store cookies or restrict their operation for selected websites.

Restricting or disabling some cookies may affect the proper operation of the website, in particular forms, security or technical functions of the website.

Consent to cookies

Cookies necessary for the operation of the website may be used without additional user consent, as they are necessary for the proper functioning of the website.

If analytical, advertising, remarketing or other cookies that are not technically necessary are implemented on the website in the future, their use will require appropriate information and, where required by law, the user’s consent.

13. Data security

The Controller applies appropriate technical and organisational measures aimed at protecting personal data against:

• unauthorised access,
• accidental loss,
• destruction,
• unauthorised alteration,
• unlawful disclosure,
• unauthorised processing.

14. Changes to the Privacy and Cookie Policy

The Controller reserves the right to update this Privacy and Cookie Policy, in particular in the event of changes in legal provisions, changes in the operation of the website, implementation of new functionalities, changes to the technical tools used or changes in the method of personal data processing.

The current version of the Privacy and Cookie Policy is always available on the website.

15. Contact regarding personal data

In matters concerning the processing of personal data, you may contact the Controller: