Privacy Policy

Last updated: 2024-12-02

1. Privacy Policy

This privacy policy has been implemented pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”).

This policy concerns the processing of personal data by Responsappility sp. z o.o. in organization of the following individuals:

  • visitors to the company's website available at https://responsappility.com (hereinafter referred to as the “Website”);
  • individuals who contact the company through the contact form available on the Website and/or company email address and/or LinkedIn portal;
  • recipients of marketing communications (subject to prior consent);
  • visitors to the company's LinkedIn profile.

2. Who is the controller of your personal data?

The controller of your personal data is Responsappility sp. z o.o. in organization, with its registered office in Gdynia (hereinafter referred to as the “Controller”).

You can contact the Controller via email at [email protected] or by mail at the address specified above.

3. What are the purposes and methods of processing your personal data?

We process your personal data for the following purposes:

  1. To respond to your messages sent through: the contact form available on the Website, the Controller's email address, or LinkedIn – in this case, the legal basis for data processing is the Controller's legitimate interest in conducting correspondence related to its business activities (Article 6(1)(f) GDPR) or taking steps at your request prior to entering into a contract (Article 6(1)(c) GDPR);
  2. For marketing the Controller's own products or services – the legal basis is the Controller's legitimate interest in promoting its business activities (Article 6(1)(f) GDPR);
  3. Regarding personal data of visitors to the Controller's LinkedIn profile, for the purpose of informing visitors about the Controller's activities and services – the legal basis for processing is the Controller's legitimate interest in promoting its business activities (Article 6(1)(f) GDPR);
  4. For website usage analysis and statistics – the basis is the Controller's legitimate interest in improving the Website's operation and service quality (Article 6(1)(f) GDPR);
  5. For establishing, pursuing, or defending against claims – based on the Controller's legitimate interest in securing its legal position.

4. How long will my personal data be processed?

Your personal data will be processed until:

  1. The completion of our correspondence with you, and for 1 year thereafter (in the case of the purpose and basis indicated in point 2(a));
  2. You object to processing or withdraw your marketing consent, but no longer than 1 year from giving marketing consent or the emergence of the Controller's legitimate interest (in the case of the purpose and basis indicated in point 2(b));
  3. The fulfillment of the Controller's legitimate interest (in the case of the purpose and basis indicated in points 2(c) and (d));
  4. The expiration of claims limitation period (in the case of the purpose and basis indicated in point 2(d)).

5. How long will my personal data be processed?

Your personal data will be processed until:

  1. The completion of our correspondence with you, and for 2 years thereafter (in the case of the purpose and basis indicated in point 2(a));
  2. You object to processing or withdraw your marketing consent, but no longer than 1 year from giving marketing consent or the emergence of the Controller's legitimate interest (in the case of the purpose and basis indicated in point 2(b));
  3. The fulfillment of the Controller's legitimate interest (in the case of the purpose and basis indicated in points 2(c) and (d));
  4. The expiration of claims limitation period (in the case of the purpose and basis indicated in point 2(d)).

6. Who may receive my personal data?

We only share your personal data within and in accordance with the purposes indicated above and based on the legal grounds specified.

The recipients of your personal data may include:

  1. authorized employees and associates of the Controller;
  2. entities providing IT systems delivery and maintenance services to the Controller, including hosting providers, email system providers, and project management system providers;
  3. entities providing marketing services to the Controller;
  4. entities providing legal services in relation to proceedings before common courts and public administration bodies.

7. What rights do I have?

In connection with the processing of your personal data by the Controller, you have the following rights:

  1. The right to access your personal data;
  2. The right to request correction of your personal data;
  3. The right to request deletion of your personal data;
  4. The right to request restriction of processing of your personal data;
  5. The right to data portability;
  6. The right to object to processing of your data where the legal basis for processing is the Controller's legitimate interest under Article 6(1)(f) GDPR;
  7. The right to file a complaint with the President of the Office for Personal Data Protection (address: ul. Stawki 2, 00-193 Warsaw, more information available at: https://uodo.gov.pl/pl/p/kontakt).

8. Is my data subject to profiling?

No.

9. Is providing my data voluntary?

Yes, providing personal data is voluntary. However, if you do not provide your personal data, we will be unable to contact you (for example, to respond to your inquiry).

10. Will my data be transferred outside the European Economic Area?

Since the Controller uses IT service providers based outside the European Economic Area (EEA), your data may be transferred outside the EEA. In every case where we transfer data outside the EEA, we assure you that your data will only be transferred when necessary and with appropriate safeguards in place. Such transfers, when they occur, are carried out on the basis of either:

  • a European Commission adequacy decision concerning the level of protection in the country to which the data is being transferred, or
  • Standard Contractual Clauses approved by the European Commission.

If you would like to receive a copy of the Standard Contractual Clauses concluded between the Controller and the recipients, or the European Commission's adequacy decision regarding the country to which the data is being transferred, please contact us at the email address provided in Section 1 of this policy.

11. Cookies and Analytics Tools

The Controller uses cookies and other similar technologies, as well as analytical tools to customize the Website content to user preferences and optimize Website usage.

The Website uses Google Analytics, a website statistics analysis tool provided by Google LLC. Google Analytics collects anonymous statistics about Website usage, including:

  • number of Website visits
  • time spent on the Website
  • type of device and browser used by the visitor
  • approximate user location (at country level)
  • navigation patterns on the Website

Google Analytics stores the collected data for a period of 14 months. The data is processed in an anonymized way (using IP anonymization), which means it cannot be linked to any specific user.

You can change your cookie settings in your browser or delete them at any time. Please note that disabling cookies may affect the Website's functionality.