PRIVACY POLICY ENSIS TECHNOLOGY SP. Z O.O.

As part of this privacy policy we present the most important information regarding the processing of personal data by us on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such and the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter: "GDPR").

Ensis Technology Sp. z o.o. with its registered office in Warsaw processes personal data for various purposes and detailed information on this subject can be found below.

This Policy may be modified from time to time. The modifications are intended to take into account changes in Ensis Technology's practices regarding the processing of personal data. Significant changes to the Policy will be signaled by means of clearly visible messages placed on www.ensis.technology or additionally through other channels.

GDPR contact:
Data Protection Officer
Tomasz Ochocki
dpo@ensis.technology

INFORMATION CLAUSE FOR USERS OF THE WWW.ENSIS.TECHNOLOGY WEBSITE

What are cookies?

Cookies (cookies) are small text files that can be used by websites so that users can use them as smoothly as possible. The law states that we may store cookies on the user's device if it is necessary for the functioning of our website (Article 173.3. of the Telecommunications Law). For all other types of cookies, we need your consent which can be expressed through the settings of your web browser. The website saves a cookie on the user's computer or mobile device.

Administrator cookies (Ensis Technology) are files belonging to the visited website (www.ensis.technology). Only this website can read them.

Third party cookies

The www.ensis.technology website also uses external websites that have their own cookies - these are third party cookies, such as:
- Google Analytics cookies (these are files used by Google to analyze how the user uses the website to creating statistics and reports on the functioning of the website). Detailed information on the scope and principles of data collection in connection with this service can be found at the link www.google.com/intl/pl/policies/privacy/partners

Wykaz plików cookie

FILE NAME	PURPOSE OF APPLICATION	PROCESSING PERIOD
	Statistics cookies
_ga	Registers a unique identifier that is used to generate statistical data about how the visitor uses the website.	399 days
_ga_#	Used by Google Analitycs to collect data on the number of user visits to the website and the dates of the first and last visit.	399 days
_gat	Used by Google Analytics to limit the number of requests.	1 day
_gid	Registers a unique identifier that is used to generate statistical data about how the visitor uses the website.	1 day
	Marketing cookies
ads/ga-audiences	Pixel Used by Google AdWords to re-engage users who are likely to become customers based on the user's online behavior across different sites. Provider: google.com	session

Is data from cookies personal data?

While it is not always possible to assign data from cookies to an individual, taking into account the jurisprudence of the CJEU (in particular the judgment in Case C-673/17 on Planet49) we treat cookies "as personal data" and we provide information on the processing below data from cookies.

[ADMINISTRATOR] The administrator, i.e. the entity deciding on the purposes and methods of personal data processing is Ensis Technology Sp. z o.o. with its registered office in Warsaw (00-105 Warsaw, ul. Twarda 18), KRS 0000762524.
[DPO] Ensis Technology has appointed a Data Protection Officer whom you can contact at dpo@ensis.technology.
[PURPOSE OF PERSONAL DATA PROCESSING AND LEGAL BASIS] We process data for the following purposes:
a. marketing of own products and services which is the implementation of the legitimate interest of Ensis Technology (Article 6.1.f. of the GDPR),
b. other purposes indicated in the content of consents to the processing of personal data - if such consents were expressed (Article 6.1.a. of the GDPR),
c. performance of obligations under the law, in particular the Telecommunications Law and the Act on the provision of electronic services (Article 6.1.c. GDPR).
[DATA STORAGE PERIOD] Your personal data obtained from cookies will be stored until you withdraw your consent or object to processing.
[DATA RECIPIENTS] Ensis Technology may disclose data to the following entities:
a. state authorities or other entities authorized under the provisions - if it is necessary to fulfill legal obligations,
b. suppliers of external ICT systems, subcontractors,
c. entities auditing our activities,
d. entities providing legal services,
e. companies conducting marketing activities.
[DATA TRANSFER TO THIRD COUNTRIES] Your data may be transferred to the USA in the context of the Google Analytics service used by the Administrator. A copy of the security measures used for the transfer of data referred to in Art. 46.2.c. GDPR, i.e. standard contractual clauses can be found at https://business.safety.google/adsprocessorterms/sccs/c2p/.
[RIGHTS OF PERSONS] Each person whose data is processed by Ensis Technology has the right to request from Ensis Technology:
a. access to their personal data - within the limits of art. 15 of the GDPR,
b. rectification of your personal data - within the limits of art. 16 of the GDPR,
c. deletion of your personal data - within the limits of art. 17 of the GDPR,
d. limiting the processing of your personal data - within the limits of art. 18 of the GDPR,
e. to object to the processing of your personal data - within the limits of art. 21 of the GDPR,
f. transferring your personal data - within the limits of art. 20 GDPR.
[RIGHT OF COMPLAINT] You also have the right to lodge a complaint with the President of the Office for Personal Data Protection.
[DATA PROVISION REQUIREMENT] Providing data is voluntary.
[AUTOMATED DECISION MAKING] Your data will not be subject to automated decision making.

INFORMATION CLAUSE FOR JOB CANDIDATES (COOPERATION)

[ADMINISTRATOR] The administrator, i.e. the entity deciding on the purposes and methods of personal data processing is Ensis Technology Sp. z o.o. with its registered office in Warsaw (00-105 Warsaw, ul. Twarda 18), KRS 0000762524.
[DPO] Ensis Technology has appointed a Data Protection Officer whom you can contact at dpo@ensis.technology.
[PURPOSE OF PERSONAL DATA PROCESSING AND LEGAL BASIS] We process data for the following purposes:
a. to carry out the recruitment process, where the legal basis for data processing is:
1) taking steps necessary to conclude a contract, at your request (Article 6.1.b. of the GDPR),
2) performance of the obligations incumbent on the Administrator, resulting from art. 22(1) § 1 of the Labor Code (Article 6.1.c. of the GDPR),
3) in the scope of data other than necessary for the conclusion of the contract or performance of the obligations indicated in the Labor Code - art. 6.1a. of the GDPR,
b. in order to implement the Administrator's legitimate interest in determining, investigating or defending against such claims related to the recruitment process (Article 6.1.f. of the GDPR).
c. conducting future recruitment processes - if you give your additional consent (Article 6.1.a. of the GDPR).
[DATA STORAGE PERIOD] Data storage period:
a. As a rule, your data will be stored no later than 3 months from the end of recruitment for the position you applied for.
b. When you consent to the processing of data for the purposes of future recruitment processes, the data will be stored for a period of 3 years from giving such consent, unless you withdraw your consent earlier.
c. When the basis for data processing is art. 6.1.f. of the GDPR (in the case of pursuing or defending claims related to the recruitment process), the data will be processed until the end of the procedure.
[DATA RECIPIENTS] Ensis Technology may disclose data to the following entities:
a. state authorities or other entities authorized under the provisions - if it is necessary to fulfill legal obligations,
b. entities supporting us in our business, in particular: suppliers of external systems ICT, subcontractors, entities auditing our activities,
c. entities providing legal services - to the extent necessary to ensure the fulfillment of legal obligations or to establish, pursue and defend claims.
[RIGHTS OF PERSONS] Each person whose data is processed by Ensis Technology has the right to request from Ensis Technology:
a. access to their personal data - within the limits of art. 15 of the GDPR,
b. rectification of your personal data - within the limits of art. 16 of the GDPR,
c. deletion of your personal data - within the limits of art. 17 of the GDPR,
d. limiting the processing of your personal data - within the limits of art. 18 of the GDPR,
e. to object to the processing of your personal data - within the limits of art. 21 of the GDPR,
f. transferring your personal data - within the limits of art. 20 GDPR.
[RIGHT OF COMPLAINT] You also have the right to lodge a complaint with the President of the Office for Personal Data Protection.
[DATA PROVISION REQUIREMENT] Providing data is voluntary, but necessary for the recruitment process.
[AUTOMATED DECISION MAKING] Your data will not be subject to automated decision making.

INFORMATION CLAUSE FOR PERSONS CONTACTING HELLO@ENSIS.TECHNOLOGY

[ADMINISTRATOR] The administrator, i.e. the entity deciding on the purposes and methods of personal data processing is Ensis Technology Sp. z o.o. with its registered office in Warsaw (00-105 Warsaw, ul. Twarda 18), KRS 0000762524.
[DPO] Ensis Technology has appointed a Data Protection Officer whom you can contact at dpo@ensis.technology.
[PERSONAL DATA PROCESSING PURPOSES AND LEGAL BASIS] We process data for the following purposes:
a. handling inquiries submitted by e-mail, which constitutes the implementation of the legitimate interest of Ensis Technology (Article 6.1.f. of the GDPR),
b. conducting activities aimed at concluding a contract - in the event of interest in the offer (Article 6.1.f. of the GDPR - applies to data of persons acting on behalf of potential customers - companies and institutions),
c. determination, investigation and defense of claims, which constitutes the implementation of Ensis Technology's legitimate interests (Article 6.1.f. of the GDPR).
[DATA STORAGE PERIOD] Your personal data will be stored for a period of 3 months from the response to the inquiry or until a justified objection to data processing is raised, if earlier.
[DATA RECIPIENTS] Ensis Technology may disclose data to the following entities:
a. state authorities or other entities authorized under the provisions - if it is necessary to fulfill legal obligations,
b. suppliers of external ICT systems, subcontractors,
c. entities auditing our activities,
d. entities providing legal services - to the extent necessary to ensure the fulfillment of legal obligations or to establish, pursue and defend claims,
e. companies providing courier and postal services.
[RIGHTS OF PERSONS] Each person whose data is processed by Ensis Technology has the right to request from Ensis Technology:
a. access to their personal data - within the limits of art. 15 of the GDPR,
b. rectification of your personal data - within the limits of art. 16 of the GDPR,
c. deletion of your personal data - within the limits of art. 17 of the GDPR,
d. limiting the processing of your personal data - within the limits of art. 18 of the GDPR,
e. to object to the processing of your personal data - within the limits of art. 21 of the GDPR,
f. transferring your personal data - within the limits of art. 20 GDPR.
[RIGHT OF COMPLAINT] You also have the right to lodge a complaint with the President of the Office for Personal Data Protection.
[DATA PROVISION REQUIREMENT] Providing data is voluntary.
[AUTOMATED DECISION MAKING] Your data will not be subject to automated decision making.

INFORMATION CLAUSE FOR CONTRACTORS (INCLUDING SUPPLIERS OF PRODUCTS AND SERVICES TO ENSIS TECHNOLOGY) AND PERSONS DESIGNED TO IMPLEMENT THE AGREEMENT

[ADMINISTRATOR] The administrator, i.e. the entity deciding on the purposes and methods of personal data processing, is Ensis Technology Sp. z o.o. with its registered office in Warsaw (00-105 Warsaw, ul. Twarda 18), KRS 0000762524.
[DPO] Ensis Technology has appointed a Data Protection Officer whom you can contact at dpo@ensis.technology.
[PURPOSE OF PERSONAL DATA PROCESSING AND LEGAL BASIS] We process data for the following purposes:
a. performance of the contract with the counterparty or taking action before concluding the contract, at the request of the counterparty (Article 6.1.b. of the GDPR - if you are a contractor; Art. 6.1.f. of the GDPR - if you are a person acting on behalf of or for the counterparty),
b. performance of obligations arising from legal provisions, in particular accounting and tax (Article 6.1.c. of the GDPR),
c. purposes indicated in the content of consents to the processing of personal data - if such consents were expressed (Article 6.1.a. of the GDPR),
d. determining, pursuing and defending claims, which constitutes the implementation of the legally justified interests of Ensis Technology (Article 6.1.f. of the GDPR).
[DATA STORAGE PERIOD] Data storage period:
a. When the legal basis for processing is art. 6.1.b. of the GDPR, the data will be processed until the expiry of the limitation periods for claims arising from the contract concluded with the contractor.
b. When the basis for data processing is art. 6.1.f. GDPR, the data will be processed until a justified objection is raised.
c. When the basis for data processing is art. 6.1.a. GDPR, the data will be processed until the consent to processing is withdrawn.
d. When the basis for data processing is art. 6.1.c. GDPR, the data will be processed for the period indicated in the specific provisions.
[DATA RECIPIENTS] Ensis Technology may disclose data to the following entities:
a. state authorities or other entities authorized under the provisions - if it is necessary to fulfill legal obligations,
b. entities supporting us in our business, in particular: suppliers of external systems ICT, subcontractors, entities auditing our activities or experts,
c. entities providing accounting, HR, debt collection or legal services - to the extent necessary to ensure the fulfillment of legal obligations or determining, investigating and defending claims,
d. companies providing courier and postal services - in in the case of correspondence,
e. banks, insurance companies and other financial and payment institutions - if it is necessary to conduct settlements,
f. intermediaries, agents and proxies acting on behalf of the organization,
g. companies conducting marketing activities.
[RIGHTS OF PERSONS] Each person whose data is processed by Ensis Technology has the right to request from Ensis Technology:
a. access to their personal data - within the limits of art. 15 of the GDPR,
b. rectification of your personal data - within the limits of art. 16 of the GDPR,
c. deletion of your personal data - within the limits of art. 17 of the GDPR,
d. limiting the processing of your personal data - within the limits of art. 18 of the GDPR,
e. to object to the processing of your personal data - within the limits of art. 21 of the GDPR,
f. transferring your personal data - within the limits of art. 20 GDPR.
[RIGHT OF COMPLAINT] You also have the right to lodge a complaint with the President of the Office for Personal Data Protection.
[DATA PROVISION REQUIREMENT] Providing data is necessary for the conclusion of contracts and settlement of the business activity and for Ensis Technology to comply with the legal requirements. In the remaining scope (in particular for the purpose of data processing by Ensis Technology for marketing purposes), providing data is voluntary.
[AUTOMATED DECISION MAKING] Your data will not be subject to automated decision making.
[SOURCE OF DATA AND CATEGORIES OF RELATED DATA] In the case of collecting data in a different way than from you - the source of their origin and categories of personal data:
a. As a rule, we process data provided by you. If you did not provide us with your data, we obtained it from our contractor or from a person acting on behalf of or for our contractor.
b. We obtain personal data to the extent necessary to conclude and perform the contract, most often they are: name, surname, e-mail address, telephone number.