Dear User,
We care about your privacy and want you to feel comfortable when using our services. Therefore, below we present the most important information about the rules of processing your personal data. This information has been prepared with consideration of the GDPR, i.e., the General Data Protection Regulation.
Personal Data Controller
HRnest Sp. z o.o., based in Gdynia, al. Zwycięstwa 96/98, 81-451 Gdynia, registered in the Register of Entrepreneurs of the National Court Register by the District Court Gdańsk-North in Gdańsk, KRS No.: 0000723806, NIP: 5833293000, REGON: 369734182, with share capital of: PLN 40,000.
If you want to contact us regarding the processing of your personal data, write to us at: biuro@hrnest.pl or pomoc@hrnest.pl.
Your Rights
You have the right to request:
- access to your personal data, including obtaining a copy of your data (Art. 15 GDPR, or if applicable, Art. 13(1)(f) GDPR),
- rectification of your data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability to another controller (Art. 20 GDPR).
You also have the right to object at any time to the processing of your data:
- for reasons related to your particular situation – against the processing of your personal data based on Art. 6(1)(f) GDPR (i.e., our legitimate interests) (Art. 21(1) GDPR).
Contact us if you wish to exercise your rights.
If you believe your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office.
Personal Data and Privacy
Below you will find detailed information on the processing of your data depending on the actions you take.
1. Using the Application
Purpose: execution of the service agreement for electronic services via the Application
Legal basis: service agreement (Art. 6(1)(b) GDPR)
Storage period: until termination of the service agreement. Additionally, your data will be processed until the expiry of the limitation period for claims – by you or by us (see the last table in this section for more details).
If data not provided: you will not be able to use the Application.
2. Contacting us (e.g., to ask a question)
Purpose: handling your inquiries or requests
Legal basis:
- Agreement or steps taken at your request to conclude it (Art. 6(1)(b) GDPR) – if your inquiry relates to an agreement of which we are or may be a party.
- Our legitimate interest in processing your data for the purpose of communicating with you (Art. 6(1)(f) GDPR) – if your inquiry is not related to an agreement.
Storage period: - for the duration of the agreement binding us, or – if no agreement is concluded – until the expiry of the limitation period for claims;
- for 12 months – or until we consider your objection to processing, whichever occurs first.
Additionally, your data will be processed until the expiry of the limitation period for claims.
If data not provided: we will not be able to respond to your inquiry or request.
3. Actions or omissions that may result in claims related to the Application or our services
Purpose: establishing, pursuing, or defending potential claims related to the agreement or services provided
Legal basis: our legitimate interest in processing data for the purpose stated above (Art. 6(1)(f) GDPR)
Storage period: until the expiry of the limitation period for claims or until we consider your objection to processing, whichever occurs first.
If data not provided: we may be unable to establish, pursue, or defend claims.
External Services / Data Recipients
We use the services of an external entity that supports us in running our business. We entrust it with processing your data – this entity processes data solely on our documented instructions.
This recipient is:
- Hosting provider – in connection with the Application (data is not transferred outside the European Union).
Additionally, your data may be disclosed to:
- relevant public authorities, to the extent we are obliged to provide them with data.