This Privacy Policy contains information regarding the processing of personal data of persons using or representing entities using the services provided by VERSEO sp. z o. o., persons visiting websites, in particular the website in the verseo.pl domain or social media profiles, and persons contacting us.

I. Personal data controller

The Controller of personal data is Verseo spółka z ograniczoną odpowiedzialnością with its registered office in Poznań (60 – 122), at 1/3 Węglowa Street, entered into the register of entrepreneurs maintained by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under number 0000910174, Tax Identification Number (NIP): 7773257986 (hereinafter referred to as the "Controller").
The Administrator can be contacted in writing at the address indicated in the preceding sentence or by e-mail to the following address: ochronadanych@verseo.pl.

II. General conditions for the processing of personal data

The processing of personal data by the Administrator is carried out in accordance with the law, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR").
Processing applies to individuals and personal data depending on the purpose for which they are processed (the precise purposes of processing are specified in Section III of the Privacy Policy). Data is provided voluntarily, and failure to provide it may result in the inability to fulfill a specific purpose, e.g., respond to a query. If personal data is required, the Administrator will notify you directly.
The Administrator places great importance on protecting the privacy and confidentiality of personal data and carefully selects and implements appropriate technical and organizational measures to ensure the protection of processed personal data. Only individuals duly authorized by the Administrator have full access to the databases. The Administrator secures personal data against unauthorized disclosure and against processing in violation of applicable law.

III. Basis and period of personal data processing

Any processing of personal data takes place for specific, explicit and legally defined purposes, and the Administrator ensures that it does not collect or process personal data incompatible with the purposes indicated below.

  1. The activities related to the conclusion and performance of the contract are carried out on the basis of Article 6 paragraph 1 letter b of the GDPR and in particular concern:
    • providing the service to the extent consistent with the concluded contract;
    • contacting you within the scope related to the service provided;
    • taking action before concluding a contract, in particular providing an offer at the request of the data subject.

    The period of data processing for this purpose applies to the duration of the contract.

  2. The provision of the Newsletter service under the terms and conditions set out in the Newsletter Terms and Conditions is based on Article 6 paragraph 1 letter b of the GDPR, and in the case of additional personal data, the basis will be the consent of the data subject (Article 6 paragraph 1 letter a of the GDPR). The period of data processing for this purpose applies to the duration of the contract, and in the case of data processed on the basis of consent, until its withdrawal, but no longer than the duration of the contract.
  3. The Controller's websites are displayed pursuant to Article 6(1)(f) of the GDPR in connection with the Controller's legitimate interests in operating the website, ensuring its security, and ensuring its proper use by users. The period of personal data processing for this purpose varies and depends on the cookie or other similar technology (essential cookies – more in VII. Cookie Policy) that is used, and the exact duration for individual cookies is specified in the cookie banner displayed on the Controller's website.
    Cookies that are not deemed necessary are used based on the user's consent (Article 6, paragraph 1, letter a of the GDPR), which is given before their use. Consent can be withdrawn at any time.
    The Administrator uses IP addresses collected during internet connections only for technical purposes related to server administration. Furthermore, IP addresses are used to collect general, statistical demographic information (e.g., about the region from which the connection originates).
  4. Establishing business relationships, including responding to inquiries in connection with contact between data subjects, is based on Article 6(1)(f) of the GDPR in connection with the Controller's legitimate interests in responding to inquiries. Personal data will be processed until an effective objection to data processing is expressed, but no longer than until the last day of the calendar year following the expiry of three years from the date the Controller provides the response.
  5. Establishing or maintaining a collaborative relationship with a contractor/client whom the data subject represents or on whose behalf they are contacting under a concluded contract, pursuant to Article 6(1)(f) of the GDPR, in connection with the Controller's legitimate interests in the proper performance of the contract. The scope of personal data processed includes the data specified in the contract, and the retention period is until an effective objection to data processing is filed, but no longer than for the duration of the contract or the termination of the relationship with the client/contractor.
  6. The pursuit or securing of any claims and the handling of complaints are carried out pursuant to Article 6(1)(f) of the GDPR in connection with the pursuit of the Controller's legally justified interests in protecting the rights of the Controller and persons whose rights they concern, and the retention period refers to the limitation period for a given claim.
  7. Marketing activities related to our own services or those of third parties are carried out pursuant to Article 6(1)(f) of the GDPR in connection with the Controller's legitimate interests in promoting our services and seeking cooperation. The processing period for personal data for marketing activities is until you withdraw your consent to receive communications or information pursuant to the provisions of the Act on the Provision of Electronic Services or the Telecommunications Law, or until you effectively object to data processing. If you do not object, your data will not be processed after a maximum of 3 months from the date of your last communication.
    For some marketing activities, personal data may be obtained from publicly available sources. In such cases, the activities undertaken relate to the contact information collected.
  8. Tax and accounting obligations are met pursuant to Article 6(1)(c) of the GDPR in conjunction with applicable tax and accounting regulations. The retention period for data processed for this purpose is equal to the duration of the legal obligation, where this period is specified by applicable law.
  9. Analytical and statistical activities are carried out pursuant to Article 6(1)(f) of the GDPR, i.e., the Controller's legitimate interest in analyzing activity, optimizing the Controller's websites, and assessing interests. Personal data will be processed until the end of the use of a specific service/functionality or until the effective objection to data processing is expressed, but no longer than until the last day of the calendar year following the expiry of three years from the date the Controller obtained the data.
  10. Maintaining social media profiles and providing information through them about the Controller's activities, promoting and advertising organized events, promoting the brand, products, and services, building and maintaining a community associated with the Controller, and for the purpose of communicating through available functionalities – is carried out pursuant to Article 6 paragraph 1 letter f of the GDPR in connection with the Controller's legitimate interests consisting in protecting the Controller's interests and promoting services within social media. The period of personal data processing, within the scope of social media profiles, lasts until the social media profile linked to the Controller's profile is used or until the effective objection to data processing is expressed.
  11. The conduct of competitions/promotional campaigns, in particular the selection of winners and the awarding of prizes, is based on Article 6(1)(f) of the GDPR as part of the Controller's legitimate interest in conducting the competition/promotional campaign. Personal data will be processed until the end of the competition and completion of all related activities. In the case of competition winners, personal data will be processed for one month following the end of the competition.
  12. Recording of conversations for the purpose of analysing and improving the quality of services provided, pursuant to Article 6 paragraph 1 letter f of the GDPR, in connection with the pursuit of the Controller's legally justified interests consisting in the proper performance of the Agreement - processing until an effective objection to data processing is filed, but no longer than until the duration of the Agreement or termination of cooperation with the CUSTOMER.

IV. Rights of data subjects

The person whose personal data is processed by the Administrator, if the legally specified conditions are met, has the right to:

  1. access to the content of your data and obtain a copy,
  2. the right to rectification,
  3. the right to request deletion,
  4. processing restrictions,
  5. data transfer,
  6. to object for reasons related to his/her particular situation to the processing of data based on the legitimate interest of the Controller,
  7. object to processing based on the legitimate interest of the Administrator for marketing purposes,
  8. lodge a complaint with the supervisory authority if it considers that the processing of personal data by VERSEO violates the provisions of applicable law (address: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).
  9. withdrawal of consent if the processing is based on consent (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal).

These rights may be exercised in any way, including by sending an appropriate request to the email address: ochronadanych@verseo.pl . If the person submitting the request cannot be identified, the Controller may request additional data.

V. Recipients of personal data

Personal data may be transferred to entities authorized to receive it under applicable law, including relevant judicial authorities. Personal data may also be transferred to trusted recipients such as: carriers and postal service providers, accounting providers, legal service providers, partners providing technical services (development and maintenance of IT systems and websites), software or IT system providers, and debt collection agencies.

The Controller transfers personal data outside the European Economic Area (EEA) or to international organizations only in justified cases, where necessary for a specific purpose and with due regard for an adequate level of protection. Transfers outside the EEA are based on an adequacy decision issued by the European Commission or on the basis of standard contractual clauses in accordance with the European Commission's decision, or on another legal basis, for example, the express consent of the data subject. Detailed information on the basis of transfer for individual providers is available from the Controller, who can be contacted by email at: ochronadanych@verseo.pl.

VI. Other information regarding data processing

The Administrator may process personal data by automated means, including profiling. However, automated processing will not lead to decisions having legal effects or similarly significantly impact the data subject. This processing may affect the selection of advertisements displayed or the selection of products and services offered.

VII. Cookies

VII.I. General Information

The Administrator uses cookies or similar technologies (hereinafter collectively referred to as "cookies"), which are IT data, particularly text files, intended for use with the Administrator's websites and stored on the end devices of website visitors. Information collected using cookies allows us to tailor services and content to individual needs and user preferences, and is also used to compile general statistics regarding user use of the websites. Data collected using cookies is collected solely to perform specific functions for customers and is encrypted to prevent unauthorized access.

As part of the use of cookies, the Administrator may process data about the user's device, its location, activities performed on the website (e.g., time of visit), and other data depending on the cookie used (e.g., interest in a selected advertisement). Cookies, as a rule, are not personal data, but by combining them with other information, they may, to some extent, create personal data.

VII.II. Files used on the verseo.pl website

  1. The Administrator uses cookies – based on their storage duration – "session" and "persistent." Session cookies are temporary files that remain on the user's device until logging out, leaving the website, or disabling the software (web browser). Persistent cookies are files that remain on the user's device for the period specified in the cookie parameters or until manually deleted by the user.
  2. The Administrator – due to the purpose of their use – uses cookies:
    • Essential – Cookies and similar technologies that enable the website to function. This category cannot be disabled for the website to function properly.
    • Statistical cookies – Cookies that allow the website owner to monitor user traffic on the site and verify user choices, including visitor counts. Statistical cookies allow for the creation of anonymous statistics that help develop and improve the website.
    • Marketing – Cookies used to display advertisements and tailor them to user preferences. This customization is achieved by analyzing individual user behavior on the website. This analysis may also be linked to behavior on other websites, depending on the cookie provider.
    • Functional – Cookies that enable remembering choices made on the website, for example: preferred website language, content layout and the region in which the user is located.
  3. The Administrator uses cookies—due to the owner—both its own and those of third parties. First-party cookies are sent directly by the website, while third-party cookies are created and administered by external entities.

The third parties referred to above are:

  1. Google Inc. 1600 Amphitheater Pkwy, Mountain View, CA 94043, United States, via:
    1. Google Ads (marketing cookies that run and evaluate advertising campaigns);
    2. Google Analytics (statistical files that analyze user behavior).
      For more information: https://support.google.com/analytics/topic/2919631?hl=pl&ref_topic=1008008;
    3. Google Tag Manager (advertising files that control advertising campaigns).
      For more information: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
    4. reCAPTCHA (cookies required for security purposes, for example to prevent mass posting of comments);
    5. YouTube, whose widgets are embedded on the website and allow for the playback of a specific video. This information is communicated to Google, which allows for the analysis, optimization, and proper functioning of the YouTube website and the widget, as well as for the personalization of ads. If the user is logged in to their Google account, information about the playback of a specific video on the website is linked to the logged in account. More information: https://policies.google.com/privacy and https://www.youtube.com/t/terms
      More information about Google LLC: https://policies.google.com/privacy?hl.
  2. Wistia, Inc., 120 Brookline Street, Cambridge, Massachusetts, 02139 USA, whose widgets are embedded on the website and allow the playback of videos posted on the website by the Administrator. As part of the video playback, the IP address and viewing time are identified. The Administrator can use the tool to combine the collected data with data already held.
    More information: https://wistia.com/privacy
  3. SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany, whose widgets are embedded on the website and which allow the playback of recordings contained on the SoundCloud service directly from the Controller's website.
    For more information: https://soundcloud.com/pages/privacy#who-controlls-your-data
  4. Meta Platforms Inc. 1 Hacker Way, Menlo Park, CA 94025, United States (marketing cookies to run and evaluate advertising campaigns and Facebook pixels).
    For more information: https://www.facebook.com/help/443357099140264?helpref=about_content
  5. Synerise SA, ul. Zabłocie 43B, 30-701 Kraków (statistical files collecting information on user behavior)
    For more information: https://synerise.com/legal/privacy-policy
  6. HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, United States, which provides tools to verify how users use the website, in particular with regard to forms placed on the website.
    For more information: https://legal.hubspot.com/privacy-policy
  7. Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States (marketing cookies), which provides Bing Ads technology, which enables the display of specific advertisements based on analyzed user behavior, including from other websites. Cookies from this provider also analyze conversions within the scope of displayed advertisements (statistical cookies).
    For more information: https://privacy.microsoft.com/de-de/privacystatement
  8. LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (statistical and marketing cookies).
    For more information: https://pl.linkedin.com/legal/privacy-policy
  9. Icon Digital LLC, 1409 Coachman Drive, Waxhaw, NC 28173 (statistical and marketing cookies).
    For more information: https://www.whatconverts.com/privacy-policy
  10. Social media tools. The website also uses social plugins from other services, such as Instagram, TikTok, LinkedIn, YouTube, and Facebook. When you visit our website, the provider of the respective social plugin receives information about your visit, your user ID, and browser information. The website operator may also use this information for its own purposes, such as analyzing, optimizing, and tailoring advertising based on your visit to our website. If you log in to one of these services, the information can be linked directly to your logged-in profile.
    For more information:

 

VII.III. Cookie management

All cookies, except essential cookies, require user consent before they are used. The user selects which cookies to use (the exception being essential cookies), and until explicit consent is provided—accepted and selected via the button—cookies are blocked. Users can change their cookie settings on the Administrator's website at any time by withdrawing consent or objecting to non-essential cookies.
Cookie settings can also be changed directly in the web browser used. Users can manage cookies at the browser level by setting notifications each time a cookie is placed on their device or by blocking their automatic storage. Depending on the browser, configuration can be performed as follows:

  1. Microsoft Edge https://privacy.microsoft.com/pl-pl/privacystatement 
  2. Chrome https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl
  3. Opera https://www.opera.com/help/tutorials/security/cookie/ 
  4. Mozilla Firefox https://support.mozilla.org/pl/kb/blokowanie-ciasteczek 
  5. safari https://support.apple.com/pl-pl/HT201265 

If you restrict cookies, some functionalities may not function properly.

Old Privacy Policy (valid until December 6, 2023)