RODO

PRIVACY POLICY OF SIMPLITO SP. Z O.O.

We act in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: Regulation). Therefore, we have created this privacy policy, in which we have described the most important principles related to the processing of your personal data.

1. Who is the Data Controller of your personal data?

The data controller of your personal data is **Simplito limited liability company with registered office in Toruń**, address: 1-3 Grudziądzka, 87-100 Toruń, Poland, entered in the Register of Entrepreneurs of the National Court Register by the District Court in Toruń VII Commercial Division of the National Court Register under KRS: 0000305883, NIP: 9562217643, REGON: 340400555, share capital: PLN 176,508.50.

2. How can you contact the Data Controller?

Contacting the Data Controller is possible in the following ways:

by sending an e-mail to: office@simplito.com,
by mail, by sending a letter to the address: Simplito sp. z o.o., 1-3 Grudziądzka, 87-100 Toruń, Poland.

3. On what basis and for what purpose do we process your personal data?

We may process personal data under the following purposes and legal bases:

Scope of processing	Purpose of processing	Legal basis
If you visit https://simplito.com	We process your personal data in order to ensure the proper operation of the website, to collect statistics and possibly to prevent activities that do not comply with generally applicable laws. In particular, we store this data within logs regarding website visits and cookie files.	The legal basis for the processing of data in this regard is the provision of Article 6(1)(f) of the Regulation, allowing the processing of data when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The controller’s legitimate interests in this case is to ensure the correct operation of the website, to obtain statistics on the operation of the website, to prevent fraud and violations of the law.
If you use the contact form or chat located on the website or send us a message to the email address provided within the website or contact us by letter	We process your personal data in order to contact you and exchange messages.	The legal basis for the processing of data in this regard is the provision of Article 6(1)(f) of the Regulation, which allows for the processing of data when it is necessary for the purposes of legitimate interests pursued by the controller or by a third party. The controller’s legitimate interest in this case is the need to process data in order to contact a person and answer their questions.
If you are contacting us for the purpose of establishing cooperation with us or you are already our Customer, Supplier, Service Provider or you cooperate with us on the basis of a civil law contract	We process your personal data for the purpose of entering or performing a contract between us and you – our Customer, Supplier or Service Provider. If you are contacting us for the purpose of establishing a business relationship with us, then we process your personal data in order to take action at your request before entering into a contract. If you are already our Contractor, we process your personal data in order to perform our contract. In addition, in this case we process your data in order to fulfill our legal obligations in connection with the conclusion and performance of contracts, in particular accounting and tax obligations.	The legal basis for the processing of personal data is the provision of Article 6(1)(b) of the Regulation, allowing the processing of data when it is necessary to conclude and perform a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract. To the extent that the processing of the data relates to the performance of our tax and accounting obligations, we process the data on the basis of the provision of Article 6(1)(c) of the Regulation, enabling the processing of the data in a situation where it is necessary to fulfill a legal obligation incumbent on the controller.
If you are a person who acts on behalf of our Customer, Supplier or Service Provider (i.e., an entity that has entered into a contract with us) and, in connection with this, you contact us, acting as a representative of the Customer, Supplier or Service Provider (e.g., as an member of the board, employee or contractor).	We process your personal data for the purpose of entering into or performing a contract between us and a Customer, Supplier or Service Provider.	The legal basis for processing your personal data is the provision of Article 6(1)(f) of the Regulation, which indicates that processing is permitted when it is necessary for the purposes of legitimate interests pursued by the controller or by a third party. The legitimate interest of the data controller in this case is precisely the performance of the contract between us and our Client, Supplier or Service Provider which requires contacting representatives of the Client, Supplier or Service Provider.
If you are contacting us to participate in a recruitment process, complete our recruitment form or send us your resume.	We process your personal data to conduct the recruitment process. Additionally, if you give us your consent, we process your personal data for the purpose of contacting you for future recruitment.	The legal basis for processing your personal data as part of the ongoing recruitment process is Article 6(1)(b) of the Regulation, which allows for the processing of personal data when it is necessary to conclude a contract with the data subject. The scope of the processed data is based on the provisions of the Polish Labor Code, which indicates the basic data that an employer may obtain during the recruitment process. In the situation where you provide other data not covered by the Labor Code, the legal basis for the processing of personal data is Article 6(1)(a) of the Regulation, which allows for the processing of personal data on the basis of the data subject’s consent. If you express a wish to participate in future recruitments, the legal basis for processing personal data is also your consent.

4. With whom may your personal information be shared?

In order for us to properly provide our services, we cooperate with some third parties. Therefore, the personal data you provide may be transferred to:

to the entity providing hosting services to us – OVH sp. z o. o. based in Wrocław, Poland (Swobodna 1, 50-088 Wrocław),
to other companies in our group – PrivMX Polska sp. z o.o. with its registered office in Gdańsk, Poland (472 Grunwaldzka, 80-309 Gdańsk) and PrivMX B.V. with its registered office in Amsterdam (Beethovenstraat 170, 1077JX Amsterdam, the Netherlands).

5. How long do we store your personal information?

We make an effort to store your personal information only as long as it is actually necessary, after which time we delete it. The time we keep your personal information depends on the interaction you have with us:

f you are a visitor to our website, we process your personal data for as long as you use the website and for up to 6 months after you leave it,
If you contact us via a contact form, by phone, by email or by regular mail – we process your personal data for as long as the contact between us lasts and for a period of 2 consecutive months,
If you are our Customer, Supplier or Contractor (a person who has entered into a contract with us) or their representative, we process your personal data as long as the contract between us is in force and until the statute of limitations for claims (until the expiration of 3 years after the termination or expiration of the contract),
Data processed for the purpose of fulfilling accounting and tax obligations will be processed for a period of 5 years from the end of the tax year in which the tax liability expired,
If you are participating in the recruitment process, in the case of processing as part of the ongoing recruitment, we will process your data until the recruitment process is completed. However, if you have agreed to participate in future recruitment – we process your data for a period of up to 1 year from the moment of submission of recruitment documents.

6. What rights do you have in connection with the processing of personal data?

Right of access: You can request confirmation from us that your personal data is being processed and obtain relevant information about it, including what data is being processed and for what purpose.
Right to rectification: You have the right to request immediate rectification of incorrect personal data and completion of incomplete personal data.
Right to erasure: You have the right to request immediate erasure of personal data if one of the following circumstances applies:

your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you revoke your consent (if processing is based on it) and there is no other legal basis for processing;
you have objected to the processing and there are no overriding legitimate grounds for processing;
your personal data has been processed unlawfully;
the personal data must be erased in order to comply with a legal obligation
the personal data was collected in connection with offering information society services to the child.

Right to restrict processing: You have the right to request restriction of processing of personal data if:

you question the accuracy of your personal data;
the processing is unlawful, but you object to the deletion of your personal data, requesting instead a restriction on its use;
we no longer need your personal data for the purposes of processing, but you need them to establish, assert or defend your claims;
you have objected to the processing.

Right to request data portability: You have the right to receive in a structured, commonly used, machine-readable format the personal data concerning you and to send this personal data to another controller, if the processing is based on consent or under contract and by automated means. You also have the right to request that we send this data directly to another controller, if technically possible.
Right to lodge a complaint: You have the right to lodge a complaint about the unlawful processing of your personal data to the supervisory authority – the President of the Office for Personal Data Protection (at the address of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw, Poland).
Right to object: You have the right to object to the extent that the processing is based on our legitimate interest.
Right to withdraw consent: If your personal data is processed on the basis of consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing performed on the basis of consent before its withdrawal.

7. What else is worth knowing about?

Your personal data will not be used for the purpose of automated decision-making, including profiling as referred to in Article 22 (1) and (4) of the Regulation.

Providing personal data is voluntary, but in the case of processing data for the purpose of entering into or performing a contract with us, failure to provide data may result in our inability to provide services. In the case of participation in recruitment, failure to provide the personal data indicated in the contents of the Labor Code may result in the inability to consider the candidate as part of the recruitment process.

8. Cookies

Cookies are small files that enable or facilitate the use of certain website features. They may be stored on your device directly by us or by third parties with whom we cooperate. As part of our use of cookies, we may process personal data, in particular, such as your IP address, website usage history, or information about the device or software you are using. The cookies we use are related to the operation of our website, and are used to control traffic on the website, to create statistics on the use of the website by its users, to undertake marketing activities, to prevent errors and technical faults, to ensure the security of the website, or to prevent abuse and violations of the law.

The following cookies are distinguished:

Session cookies: they are stored on your device during the time you use our website (they are deleted when you close your browser). Session cookies enable proper use of our website. Blocking them may result in errors or prevent you from using the website.
Persistent cookies: they are stored on your device until they are deleted or until they expire.

Only technical cookies are used on our website – these cookies are necessary for the proper display and operation of the website. These cookies can also detect malfunctions of the site and help fix errors, as well as enable verification of the extent of your consent to other cookies. Blocking them may cause the website to malfunction.

Please be advised that it is possible to restrict or disable cookies within your device, using your browser settings. Web browsers allow you to disable all cookies or part of them (e.g. from third parties). If you disable cookies in part, cookies generated by our website may be stored on your device, enabling the website to function properly. However, if the use of cookies is restricted, the use of our particular services provided may be limited and in some cases may not be possible.