skip to Main Content

Privacy Policy

[effective date: 03.02.2021]

 

Contents:

I. Introduction
II. Administrator
III. Processing of personal data
IV. Electronic delivery of services (newsletter)
V. Concluding provisions

 

I. Introduction

This Privacy Policy describes the general rules for processing of personal data in connection with our business and operation of the website www.krgroup.eu.

Detailed information about:

If you navigate to another website via a link you may find on our site, the other site will be governed by a different privacy policy and cookie policy. We encourage you to review the policies in force on the websites you visit.

II. Administrator

The administrator of the website www.krgroup.pl and the controller of personal data of users of our site is KR Group sp. z o.o. with its registered office in Warsaw, ul. Skaryszewska 7, 03-802 Warsaw, Poland, entered in the commercial register of the National Court Register by the Warsaw District Court, 13th Commercial Division of the National Court Register, under KRS no. 0000252229, tax no. (NIP) 1132602742.

In matters involving protection of personal data, you may contact our Data Protection Officer at rodo@krgroup.pl. Our Data Protection Office is Łukasz Motyl.

III. Processing of personal data

We process personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016 no. 119, p. 1) (GDPR), the Personal Data Protection Act of 10 May 2018 (Journal of Laws 2018 item 1000, as amended) (Personal Data Protection Act), and other normative acts of national and EU law.

With concern for the transparency of processing of personal data and respect for the informational autonomy of data subjects, pursuant to Art. 13(1)–(2) GDPR, we present below information on the processing of data in the following order:

1) Aims and legal bases for processing of personal data
2) Period for retention of personal data
3) Recipients of personal data
4) Transfer of personal data outside the European Economic Area
5) Rights connected with processing of personal data
6) Consequences of failure to provide personal data.

1) Aims and legal bases for processing of personal data

Persons whose data we processLegal basis for processing*Aims of processing
When you view our website• Your consent
• Our legitimate interests
We use cookie files to facilitate the transmission of data via internet, ensure the operation of tools available on the site such as surveys, and collect and analyse information on traffic on our site. For more information see our Cookie Policy.
When you contact us through contact details provided on the site, to the office or directly to our staff• Our legitimate interestsYou provide us your data so that we can answer questions submitted to us, and also, if necessary, act on your request.
When you complete a form for evaluation of the service or an offer inquiry• Our legitimate interests
• Conclusion and performance of contract
You provide us your data so that we can answer your questions, evaluate our services, and present you with our preliminary offer and take further steps aimed at conclusion of a contract to deliver services or maintain business relations.
When you complete an online survey for evaluation of our services• Our legitimate interests
• Conclusion and performance of contract
You provide us your data so that we can answer your questions, evaluate our services, and present you with our preliminary offer and take further steps aimed at conclusion of a contract to deliver services or maintain business relations.
When you subscribe to our newsletter• Your consent
• Our legitimate interests
You consent to our transmission of marketing and informational content, including commercial information about the business of our firm, our offers, products and services, by means of electronic communications.
*Legal bases for processing:
• Your consent—Art. 6(1)(a) GDPR
• Conclusion and performance of contract—Art. 6(1)(b) GDPR
• Our legitimate interests—Art. 6(1)(f) GDPR

 

2) Period for retention of personal data

We will retain your personal data for the time necessary to achieve the aims for which they are gathered, in particular until we have provided you exhaustive answers or taken action at your request, completion of the contract, or unsubscribing from the newsletter service. After that time we may continue to process your personal data with the aim of pursuing or defending against any potential legal claims, but no longer than the time when the claims become time-barred.

3) Recipients of personal data

• Our employees and associates who must have access to your data to properly perform official tasks assigned to them. We will issue relevant authorization to each person involved in processing personal data.
• Processors cooperating with us on a permanent basis, whose services we use to perform our tasks more efficiently:

a. Use and maintenance of IT resources, including email and website (home.pl)
b. Internet tools we use to deliver the newsletter service, conduct online surveys, and gather and analyse information on traffic on our site (Typeform, Mailchimp, Monday.com, Google Analytics).

In such case, your personal data will be transferred on the basis of signed contracts for personal data processing, in which we require our suppliers to ensure an adequate level of protection and to apply appropriate legal instruments which are subject to the law of the European Union.

4) Transfer of personal data outside the European Economic Area

As a rule, we do not transfer your personal data to third countries, i.e. outside the European Economic Area. However, we do use internet tools whose providers have servers in the United States. We will transfer your data outside the European Economic Area when you subscribe to the newsletter service, complete an online survey for evaluation of our services, or consent to the use of internet analytical tools for gathering and analysing information on the traffic on our website. In such case we will ensure adequate protection of your personal data using the legal instruments specified in the GDPR, which are subject to the law of the European Union, including among other things standard contractual clauses.

5) Rights connected with processing of personal data

In connection with the processing of personal data, the persons whose data we process have the following rights:

RightLegal basis of processing
Your consentConclusion and performance of contractOur legitimate interests
(Art. 6(1)(a) GDPR)(Art. 6(1)(a) GDPR)(Art. 6(1)(a) GDPR)
Right to withdraw consentYESNONO
Right to access your personal dataYESYESYES
Right to rectify, erase or restrict processing of personal dataYESYESYES
Right of portability of personal dataYESYESNO
Right to object to processing of personal dataNONOYES
Right to lodge a complaint with the President of the Personal Data Protection OfficeYESYESYES

The right to withdraw consent may be exercised at any time, but withdrawal of consent does not affect the lawfulness of processing by us based on consent prior to withdrawal of consent.

To exercise these rights, we invite you to contact us through the contact details provided in point V below.

6) Consequences of failure to provide personal data

Legal basis for processingConsequences of failure to provide personal data
Your consent
(Art. 6(1)(a) GDPR)
Submission of data is voluntary, but necessary to achieve the aims of the processing; failure to provide data prevents achievement of these aims.
Conclusion and performance of contract
(Art. 6(1)(b) GDPR)
Submission of data is voluntary, but necessary to conclude a contract; failure to provide data prevents conclusion of the contract.
Our legitimate interests
(Art. 6(1)(f) GDPR)
Submission of data is voluntary, but necessary to achieve the aims of the processing; failure to provide data prevents achievement of these aims.

 

IV. Electronic delivery of services (newsletter)

Pursuant to Art. 10(2) of the Electronic Delivery of Services Act of 18 July 2002 (consolidated text: Journal of Laws Dz.U. 2020 item 344, as amended) (Electronic Delivery of Services Act), transmission of marketing content, including commercial information, by electronic means requires the consent of the person interested in receiving it. Such person must also consent to the use of end-user telecommunications devices and automated calling systems, a requirement imposed by the Telecommunications Law (act of 16 July 2004, consolidated text: Journal of Laws Dz.U. 2019 item 2460, as amended) (Telecommunications Law).

For this reason as well, in order to deliver the newsletter service, we require the user to provide both consents, which occurs by submission of the user’s email address at the designated place and acceptance of the terms of the Terms & Conditions for Electronic Delivery of Services.

Such consent may be withdrawn by the user at any time. This can be done by contacting us at through the contact details provided below. Withdrawal of any consent shall not affect the lawfulness of the processing we have conducted on the basis of the consents prior to withdrawal, but will prevent us from further delivery of the newsletter service.

V. Concluding provisions

The provisions of this Privacy Policy are subject to change. New rules for protection or privacy will be published on our website along with their effective date.

Matters not addressed by this Privacy Policy shall be governed as relevant by the GDPR, the Personal Data Protection Act, the Electronic Delivery of Services Act, the Telecommunications Law, and the Civil Code (act of 23 April 1964, consolidated text: Journal of Laws Dz.U. 2020 item 1740, as amended).

Any questions or doubts concerning this Privacy Policy should be submitted by email to office@krgroup.pl, by telephone to +48 22 262 81 00, or by post to our registered address.

Back To Top