PRIVACY POLICY AT MEDIA SP. Z O.O.

 

This Privacy Policy and its Information Clauses describe the handling of personal data and the use of cookies and other technologies on the mediarecovery.pl website.

 I. Personal Data Controller

The controller of personal data is MEDIA Sp. z o.o. with its registered office in Katowice at ul. Kościuszki 65, 40-047 Katowice, NIP [tax identification number:] 634-23-41-032, KRS: 0000232909. Contact e-mail: biuro@mediarecovery.pl.

II. Information Clauses

1A. General Information

  • The controller of your personal data is MEDIA Sp. z o.o. with its registered office in Katowice at ul. Kościuszki 65, 40-047 Katowice, NIP [tax identification number:] 634-23-41-032, KRS: 0000232909. You can contact your personal data controller by e-mail at: biuro@mediarecovery.pl.
  • In matters related to the processing of your personal data, you can contact the Data Protection Officer at: biuro@mediarecovery.pl.
  • Your data is processed by service providers acting on our behalf, providing such services as hosting services for the website on which the contact and inquiry forms are made available, or as e-mail services. We do not transfer your data to any international organisation or outside the EEA, except in cases in which we use IT tools, whose providers use data centres located outside the EEA, in which case such processing takes place under conditions that ensure an adequate level of security of your data, including in particular on the basis of standard contractual clauses approved by the European Commission. In addition, our infrastructure is secured according to the best practices, and our website and web forms have SSL certificates.
  • We protect all the data obtained against any unauthorised access to it. In relation to computer files, we use methods for protecting logins, access levels and passwords, and also encryption. Documentation containing personal data may only be accessed by authorised persons.
  • In keeping with the provisions of the GDPR, you can access your personal data, rectify it, erase it, restrict the processing of your data and transfer it to another controller, as well as object to such processing.
  • If you believe that we process your data in violation of law, you may lodge a complaint to the supervisory authority, i.e. to the President of the Personal Data Protection Authority, in writing to the address: ul. Stawki 2, 00-193 Warsaw, or via the ePUAP platform.
  • To the extent that (in the events described below) we process your data on the basis of your consent, you have the right to withdraw the consent given at any time. However, this will have no effect on the processing of your data until the consent given is withdrawn.

1B. Information Clause – Contact Form (https://mediarecovery.pl/kontakt/)

  • Your personal data is processed on the basis of your consent for the purpose of handling your inquiries made via the contact form, under Article 6 para. 1 pt. a) of the GDPR, or via the inquiry form, under Article 6 para. 1 pt. b) of the GDPR. If you contact us as a representative of an organisation interested in using our services, your data is then processed under Article 6 para. 1 pt. f) of the GDPR, i.e. on the basis of our legitimate legal interest in engaging and implementing cooperation with your organisation.
  • Your data is stored for the purpose of proper handling of inquiries for 90 days of making an inquiry via the form. It will be erased upon the expiry of this period.
  • If, as a result of your inquiry, you (or the organisation you represent) make use of our services and enter into cooperation with us, your data is processed for the term of cooperation and for any further period stipulated by the generally applicable provisions of law.
  • We reserve ourselves the right to process your personal data collected in connection with the use of our services for a longer period than that indicated in pt. 2 and 3 above, in keeping with Article 6 para. 1 pt. f) of the GDPR, in order to pursue our legitimate interests in bringing claims concerning the use of the services against you and third parties, or to protect us against such claims, until they expire or are time-barred.
  • The provision of personal data is voluntary, but failure to provide it will result in us being unable to provide you with helpful information. Your personal data will not be used for the purposes of automated decision-making, including profiling.

1C. Information Clause – Registration for Events organised by Mediarecovery

  • Your personal data is processed for the purposes of ensuring your proper registration and participation in the events organised by MEDIA Sp. z o.o., under Article 6 para. 1 pt. b) of the GDPR, and, if you are registered to participate in an event by the organisation you represent, under Article 6 para. 1 pt. f) of the GDPR, i.e. our legitimate legal interest in providing services to a given organisation.
  • Regardless of the foregoing, we may process your personal data to the extent necessary for the purposes of establishing, securing and pursuing claims relating to the performance and settlement of the event for which you are registered, or for the purposes of protecting us against them, which constitutes our legitimate interest within the meaning of Article 6 para. 1 pt. f) of the GDPR.
  • We obtain your data through your direct enrolment in the events we organise or from other entities, especially organisations that enrol you in our events. The data you provide to us may include your identification data, contact data and information regarding your place of employment.
  • Your data is processed for the period of registration and participation in the event, and after the event only to the extent necessary to support the event concerned. To the same extent, your data is processed for periods stipulated by the generally applicable provisions of law, including accounting and tax regulations, as well as for the period of limitation of claims concerning the performance of the event concerned.
  • Should you give your consent to receipt of marketing information, your data will be processed under Article 6 para. 1 pt. a) of the GDPR.
  • Your data will be processed until you withdraw the consent given. Your data will be processed for the purposes of providing you with information on our products, services, training, workshops and other marketing activities in the field of IT security and for the purposes of computer forensics.
  • The provision of data is voluntary, but necessary to receive marketing information.
  • Your personal data will not be used for the purposes of automated decision-making, including profiling.

1D. Information Clause – Marketing Activities of Mediarecovery

  • Your personal data is obtained by MEDIA Sp. z o.o. either directly from you or from third parties (we have emailed you the detailed information in this scope).
  • If you have given us your marketing consent, your personal data will be processed under Article 6 para. 1 pt. a) of the GDPR, for the purposes of advertising by us our products and services and products and services of our business partners.
  • If your data is obtained in other way than directly from you, the data will be processed under Article 6 para. 1 pt. f) of the GDPR, in order to pursue our legitimate interests in marketing our products and services and those of our business partners.
  • We process the following categories of your personal data: identification data, contact data, data concerning your place of employment. In the event referred to in pt. 2), your personal data will be processed until you effectively withdraw your consent.
  • In the event referred to in pt. 3), your personal data will be processed during our marketing campaign, but no longer than for three months, or until you successfully object to the processing of your data.
  • Without prejudice to the provisions of pt. 4 and 5, we reserve ourselves the right to process your personal data for periods longer than those indicated above, under Article 6 para. 1 pt. f) of the GDPR, in order to pursue our legitimate interests of establishing, securing and pursuing claims concerning our marketing activities, or protecting us against such claims, until they expire or are time-barred.
  • Your personal data will not be used for the purposes of automated decision-making, including profiling.

1E. Information Clause – Personal Data provided by the Controller’s Contractors

  • We may obtain your personal data from our relevant contractor, with whom you have an employment or civil law relationship as a result of the conclusion or performance of a contract concluded between MEDIA sp. z o.o. and such a contractor. The aforementioned data is processed for the purpose of pursuing our legitimate interests in concluding, performing and monitoring the implementation of the contract between us and the organisation you represent, which is our contractor, i.e. under Article 6 para. 1 pt. f) of the GDPR.
  • Your personal data is processed during the term of the contract concluded between us and the organisation you represent, and after its termination, for the period stipulated by the generally applicable provisions of law.
  • Without prejudice to the provisions of pt. 3, we reserve ourselves the right to process your personal data, under Article 6 para. 1 pt. f) of the GDPR, in order to pursue our legitimate interests of establishing, securing and pursuing claims concerning the conclusion and implementation of the contract between us and the organisation you represent, or to protect us against such claims, until they expire or are time-barred.
  • We process the following categories of your personal data: identification data, contact data and data concerning your place of employment.
  • Your personal data will not be used for the purposes of automated decision-making, including profiling.

III. User Data Collection

  • For statistical, marketing, and UX purposes, we use the following technologies that track activities of the User on our website:
  • Facebook Pixel – for the purpose of managing Facebook ads, checking your activities between the target page and our Facebook company profile, and conducting marketing activities.
  • Google Analytics tracking code – for the purpose of analysing site statistics, content readability and collection of anonymized data on the User visiting the website.
  • Google AdWords code – for the purpose of implementing and optimising the advertising activities on the Internet.
  • Google LLC – YouTube files that are embedded within the website contain embedded Google LLC code that counts the User’s interactions with the embedded content.
  • Hotjar code – for the purpose of improving the performance of the website, including better matching of the searched content to the User’s preferences.
  • The aforementioned data is processed under Article 6 para. 1 pt. f) of the GDPR, for the purpose of meeting our legitimate interest, i.e. for statistical, marketing and UX purposes.
  • The data collected is kept for a maximum of 5 years.

IV. Cookies

  • We automatically collect information contained in cookies. Cookies are text files that are stored on the User’s end device. They are necessary for the use of our website. First of all, they contain the name of the website/page, its unique number, the time it is accessed to on the end device.
  • We store cookies on your end device and then access the information contained in them for statistical and marketing (remarketing) purposes, as well as for the purpose of ensuring proper operation of our website.
  • Most browsers are set by default to accept the storage of cookies on the end device. However, it is possible to configure the web browser in such a way that it prevents cookies from being stored on the User’s end device. Failure to configure such settings is tantamount to the acceptance of the cookie collection policy we use on this website (website with currently available Google Analytics blocking tools (https://tools.google.com/dlpage/gaoptout/)). If you block cookies, you may find it difficult to use the website.
  • Cookies can be deleted by the User. To do this, please enter your browser settings and clear your browsing data, including cookies.
  • The data collected using the aforementioned cookies is processed upon the consent given, under Article 6 para. 1 pt. a) of the GDPR. The consent given by the User may be withdrawn at any time, provided that this has no effect on the processing of data before making the withdrawal.
  • The data collected is kept for a maximum of 5 years.

V. Server Logs

  • The use of the www.mediarecovery.pl website involves making requests to the server on which this website is stored.
  • Each request is recorded in server logs. Logs include, among other things, the User’s IP address, the date and time of the server, information about the Internet browser and the operating system used by the User.
  • Logs are saved and stored on the server.
  • The data recorded in the server logs is not associated with specific individuals who use the website and are not used by us in order to identify the User.
  • The server logs are only of an auxiliary nature and they help us manage the website, and their contents are not disclosed to any person, except for persons authorised to manage the server.
  • The aforementioned data is processed by us in relation to the log data under Article 6 para. 1 pt. f) of the GDPR, i.e. in order to fulfil our legitimate interest in managing services and maintaining statistics.
  • The logs collected are kept for a maximum of 5 years.