Privacy Policy
Respecting the privacy rights of individuals who have entrusted their personal data to Gren-en sp. z o.o., ul. Ryżowa 49, 02-495 Warsaw, NIP: 5223203168, including users of our services, our contractors and their employees, we declare that the acquired information is processed in accordance with national and EU law, in a manner ensuring their protection.
In accordance with Article 13(1) and (2) of the General Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”), we inform that:
Data Controller
- The controller of personal data, i.e., the entity deciding on the purposes and methods of their processing, is Gren-en sp. z o.o. For matters concerning personal data processing, we encourage contact by electronic means by sending a message to the email address: kontakt@green-en.pl.
Data Collection and Processing Purpose
- Personal data collected through the contact form, during phone calls, email correspondence, SMS, meetings will be processed for the purpose of: a) ongoing contact resulting from the concluded contract or conducting activities aimed at concluding and implementing a contract with a client or contractor, within the scope of the controller’s activities – Art. 6(1)(b) and (f) GDPR, b) fulfillment of obligations, including for the performance of the concluded contract – Art. 6(1)(b) GDPR, c) handling inquiries – Art. 6(1)(f) GDPR, d) conducting marketing activities to present the company’s service offerings and pursue legitimate interests, which include conventional direct marketing and other forms of marketing or advertising – Art. 6(1)(f) GDPR, e) providing responses to submitted questions, conducting correspondence – Art. 6(1)(f) GDPR, f) fulfilling legal obligations incumbent on the Controller, including conducting settlements, accounting and financial reporting – Art. 6(1)(c) GDPR, g) defense against claims and pursuit of claims in accordance with the legitimate interest of the Data Controller, until the expiry of the claims period – Art. 6(1)(f) GDPR, h) personnel management, including employees and collaborators, and organization of recruitment processes – Art. 6(1)(b), (c) and (f) GDPR.
- The Controller processes data in accordance with the law, collects it for specified, lawful purposes and does not subject it to further processing incompatible with these purposes. Data is collected only in an adequate, necessary and essential scope in relation to the purposes for which it is processed.
Data Recipients
- As part of our activities, your personal data may be shared with the following categories of recipients: a) individuals conducting business activities providing services to the Controller, b) entities entitled to receive them under mandatory legal provisions, c) external IT solution providers, d) in relation to job applicants – also recruitment portals.
Data Sharing with Gren-en Sp. Z O.O.
- Providing your data to Gren-en sp. z o.o. is necessary to establish cooperation and implement the concluded agreement, as well as to fulfill legal obligations. This applies to situations when using our services, and also in cases where you intend to join our team.
- In other cases (particularly for processing data for marketing purposes), providing data is voluntary.
Security of Processed Personal Data
- Gren-en sp. z o.o. makes every effort to protect customers’ and users’ personal data against unauthorized access by third parties and in this regard applies organizational and technical security measures corresponding to the given risk of personal data processing in accordance with Art. 32 GDPR. All our employees are obligated to comply with our Policies and procedures related to confidentiality, security, and privacy.
Personal Data Retention Period
- The Controller stores personal data for the period necessary to achieve the processing purposes, contract implementation, for data necessary to fulfill the legal obligation incumbent on the Controller no longer than for the time specified in the applicable law in this regard and no longer than necessary for purposes arising from legitimate interests pursued by the Controller. For example:
- a) handling any complaints, requests and claims processing will continue for the duration of the contract, as well as until the end of the warranty period or completion of the complaint process;
- b) personal data processed for the purpose of defense against claims and pursuit of claims in accordance with legitimate interests will be stored until the limitation period for any contractual claims, in accordance with legal provisions;
- c) accounting documents will be maintained for the time required by archiving laws, in particular regarding accounting documentation, which is generally kept for 5 years from the end of the year in which the event obligating the creation of the document took place;
- d) HR data will be stored in accordance with legal requirements for archiving employee documentation, such as personal files, for a period of 10 years depending on the length of employment;
- e) after the recruitment process is completed, data will be deleted without undue delay, and in case of consent for participation in future recruitment processes, until consent is withdrawn;
- f) data processed in connection with the Controller’s legal interest will be processed until the legitimate interests are realized, except in situations where interests or fundamental rights and freedoms of the person take precedence over these interests in the above case – until objection is expressed;
- g) other personal data will be processed until objection to their processing is raised.
Your Rights Regarding Personal Data Processing by Gren-en Sp. Z O.O.
- In connection with the processing of your personal data, you have the right to: a) access the processed data (Art. 15 GDPR), b) rectify the processed data (Art. 16 GDPR), c) delete the processed data (Art. 17 GDPR), d) restrict data processing (Art. 18 GDPR), e) transfer processed data (Art. 20 GDPR), f) object to data processing (Art. 21 GDPR), g) and file a complaint regarding personal data processing by the Controller to PUODO (Art. 77 GDPR).
Transfer of Data to Third Countries
- The Data Controller does not intend to transfer personal data to a third country or international organization.
Automated Personal Data Processing
- Personal data will not be used for automated decision-making, including profiling, in a way that could generate any legal effects or significantly affect customers, suppliers, their employees or collaborators, as well as employees or collaborators or job candidates.
Cookie Policy
- We use information stored through cookies and similar technologies for advertising, statistical purposes, and to adapt the service to individual user needs. If you consent to the use of cookies, they will be stored in your browser’s memory.
- Two types of cookies are used within the Service: “”session” cookies and “persistent” cookies. a) “Session “cookies are temporary files that are stored on the User’s end device until logging out, leaving the website, or closing the software (web browser). b) “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
- In the Service, we use the following types of Cookies: a) “”necessary” – enable the use of services available within the Service, e.g., used in user authorization; b)””security”“- serve to ensure security, e.g., used to detect abuse in the use of Service services; c) “performance” – enable collecting information about how the Service is used d) “functional “- enable remembering settings selected by the User and personalizing the User interface, e.g., in terms of selected language or region of origin, font size, Service appearance, etc.; e) “advertising” – enable delivering advertising content to Users that is more tailored to their interests. f) “”integration”” – related to third-party services used in the Service, e.g., Google Analytics.
- External services whose materials we present may also use cookies that enable logging in and serve to deliver advertisements corresponding to user preferences and behavior.
- You can change cookie settings in your web browser. Not changing these settings after previously giving consent means acceptance of the cookies used here.
