Personal data policy

INFORMATION CLAUSE

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119/1 of 4.5.2016) (“GDPR”), I hereby inform that:

1. The controller of personal data is Astronika sp. z o.o., with its registered office in Raszyn, Poland (postal code: 05‑090), at ul. Słowikowskiego 81A, entered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw, under KRS number 0000457381, NIP: 5213646616, share capital: PLN 144 000,00 (the “Controller” or the “Company”).The Controller may be contacted by e‑mail at: office@astronika.pl, by telephone at +48 22 32 96 234, or by post at: ul. Słowikowskiego 81A, 05‑090 Raszyn, Poland.
2. This Privacy Policy applies to persons visiting the Controller’s website (the “User”) available under the domain www.astronika.pl (the “Website”).
3. While using the Website, the following personal data may be processed:
   a) First and last name,
   b) E-mail address,
   c) Telephone number,
   d) Information contained in the CV,
   e) specialisation / position,
   f) content of the message sent via the contact form.
4. The Company processes the User’s personal data for the following purposes:
   a) responding to the User’s enquiries,
   b) presenting an offer to the User in the event of a request for quotation,
   c) conducting recruitment processes,
   d) carrying out marketing activities,
   e) taking actions aimed at concluding an agreement with the User,
   f) establishing, pursuing or defending against claims of the User against the Company.
5. The legal bases for the processing of personal data by the Company are:
   a) Article 6(1)(a) GDPR – based on the User’s consent,
   b) Article 6(1)(b) GDPR – processing necessary for the performance of a contract concluded between the User and the Company,
   c) Article 6(1)(c) GDPR – processing necessary for compliance with legal and tax obligations,
   d) Article 6(1)(f) GDPR – processing necessary for the purposes of the legitimate interests pursued by the Company, of which the User is informed.
6. When the User uses the Website, server log data are collected automatically and include in particular: the User’s IP address, information contained in cookies or other similar technologies, data concerning the User’s session, web browser data and operating system information.
7. The Website may use cookies for the following purposes:
   a) ensuring the proper functioning of the Website,
   b) improving the functionality of the Website,
8. Cookies and other similar technologies are stored for the period indicated in the parameters of the given cookie or until they are deleted by the User. Session cookies are stored only for the duration of a given session and are deleted after it ends. Persistent cookies are stored for the period specified in their settings or until the User withdraws consent. The User may independently manage cookies, including deleting or blocking them, via appropriate settings of their web browser or consent management tools.
9. Recipients of the User’s personal data may include:
   a) entities processing personal data on the basis of data processing agreements,
   b) entities providing hosting services to the Controller,
   c) entities providing marketing services,
   d) entities providing survey and research services,
   e) legal advisers, financial advisers, auditors, experts, statutory auditors and debt collection companies,
   f) public administration authorities, including in particular supervisory authorities.
10. The Website is hosted on the server of an external hosting provider: www.home.pl.
11. Personal data are stored for no longer than is necessary to achieve the purposes for which they were collected, in accordance with the data storage limitation principle referred to in Article 5(1)(e) GDPR. In particular, personal data are stored:
    a) for the duration of the relationship with the User, e.g. in connection with the performance of a contract, recruitment processes, handling enquiries or correspondence,
    b) after the end of the relationship with the User – for the period required by generally applicable law, in particular with regard to tax, accounting, archival or regulatory obligations,
    c) for the period necessary to establish, pursue or defend claims, until the expiration of limitation periods. After the expiry of the above periods, personal data are deleted or anonymised, unless further storage is required by applicable law.
12. The User has the right to access the content of their data, as well as the right to rectification, erasure, restriction of processing, data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
13. The User has the right to lodge a complaint with the President of the Personal Data Protection Office in Poland if they consider that the processing of their personal data violates the GDPR.
14. Providing personal data by the User is voluntary; however, failure to provide such data will prevent the conclusion and performance of a contract with the Company.
15. The User’s personal data will not be transferred by the Company to third countries, i.e. countries outside the European Economic Area, without the User’s prior consent.
16. The User’s personal data will not be processed for purposes related to automated decision‑making, including profiling.
17. In matters concerning the processing of personal data, including the exercise of rights related to data protection, contact may be made with the Data Protection Officer (DPO) at the e‑mail address: iod@astronika.pl, by telephone at +48 453 266 440, or by post with the note “Data Protection Officer” at: ul. Słowikowskiego 81A, 05‑090 Raszyn.
18. The Privacy Policy may be amended and updated in accordance with the Controller’s current needs, in particular in the event of changes to the technologies used by the Controller to process personal data (where such changes affect the wording of the Privacy Policy), as well as in the event of changes to the methods, purposes or legal bases for the processing of personal data.
19. The Controller reserves the right to withdraw or amend the content presented on the Website at any time without prior notice. The Controller shall not be liable if, for any reasons beyond the Controller’s control, the Website is unavailable at any time or for any period.
20. The Controller reserves the right to temporarily restrict access to certain parts of the Website in connection with maintenance works or updates to the Website.