Privacy policy

I. PERSONAL DATA CONTROLLER

The Controller of the data is Sileman Sp. z o.o. headquartered in Ruda Śląska, ul. Dąbrowskiego 35, 41-710 Ruda Śląska, entered into the Register of Entrepreneurs maintained by the District Court in Gliwice, X Commercial Division of the National Court Register under KRS number 0000207875, NIP 6412315845, REGON 278244726, share capital PLN 1,261,000.00, contact details: 32 789 08 54, e-mail: sekretariat@sileman.pl

This entity has determined the purposes and means of personal data processing in connection with providing telecommunications services and additional/related services, in particular delivered via the public Internet.

vices, including via the Internet.

This Privacy Policy sets out the actions taken by the Controller with regard to personal data collected through electronic correspondence and the website.

The Controller has appointed a Data Protection Officer – Paulina Rataj, to whom you can send any questions, comments or requests regarding your personal data by e-mail: iod@sileman.pl

In order to exercise your rights, express or withdraw your consent, or raise objections, please visit the registered office of Sileman Sp. z o.o. or use the following means of contact:

  • e-mail address: iod@sileman.pl,
  • postal address: Sileman Sp. z o.o. Dąbrowskiego 35, 41-710 Ruda Śląska,
  • phone number: 32 789 08 54 (call charges according to your operator’s tariff).

     

II. PURPOSES AND LAWFUL GROUNDS FOR DATA PROCESSING


eBOK

  1. The Controller processes eBOK user data for the following purposes:
    1. to enable users to view and correct their account data (Article 6(1)(b) of the GDPR),
    2. to provide users with means to review the services provided (Article 6(1)(b) of the GDPR),
    3. to facilitate access to call logs and invoices issued (Article 6(1)(b) of the GDPR),
    4. to handle user inquiries (Article 6(1)(b) of the GDPR),
    5. to adapt and improve eBOK on the basis of the legitimate interest of the Controller (Article 6(1)(f) of the GDPR),
  2. eBOK collects information provided voluntarily by the user in the form of a login and password. Failure to provide these credentials may prevent the use of the services available in eBOK.
  3. Personal data is stored until consent is withdrawn, without affecting the lawfulness of processing prior to withdrawal or objection.
  4. The recipients of personal data shall be entities with which cooperation agreements and personal data processing agreements have been concluded, in particular entities handling payments and providing technical support for the website, as well as entities authorized under specific provisions of law.


Contact form

  1. Personal data of users contacting the Controller consisting of name, surname, telephone number, e-mail address and message content are processed on the basis of the subject’s consent to the processing of data for marketing purposes and for the purpose of communication and responding to questions asked via the contact forms available on the Controller’s website (Article 6(1)(a) of the GDPR).
  2. Providing personal data is voluntary, but necessary to provide and send a response or marketing content.
  3. Personal data is stored until consent is withdrawn, without affecting the lawfulness of processing prior to withdrawal or objection.
  4. The recipients of personal data shall be entities with which cooperation agreements and personal data processing agreements have been concluded, in particular entities providing technical support for the website, as well as entities authorized under specific provisions of law.


Job application form

  1. The personal data of job applicants who contact the Controller, in the form of their first name, last name, telephone number, email address, and the content of their message, CV, and cover letter, are processed for the purpose of conducting the recruitment process for the position to which the applicant is applying for the period necessary to conduct the recruitment process in accordance with the provisions of the Labor Code (Article 6(1)(c) of the GDPR).
  2. If the candidate gives separate, voluntary consent to the processing of their personal data for future recruitment purposes by including an appropriate statement in their application (Article 6(1)(a) of the GDPR), their data will also be processed in future recruitment processes for a period of 12 months. The consent given may be withdrawn at any time without affecting the lawfulness of the data processing prior to its withdrawal.
  3. Providing personal data is voluntary, but necessary for the recruitment process.
  4. The recipients of personal data shall be entities with which cooperation agreements and personal data processing agreements have been concluded, in particular entities providing technical support for the website, as well as entities authorized under specific provisions of law.


Call recording

  1. The personal data of persons contacting the Controller, in the form of telephone numbers and recordings of conversations, are processed on the basis of the Controller’s legitimate interest for the purposes of documentation and evidence relating to contacts with customers, potential customers and other persons contacting us by telephone, as well as for the quality control of customer service, its continuous improvement and defense against claims (Article 6(1)(f) of the GDPR).
  2. Providing personal data is voluntary, but necessary to conduct a telephone conversation and provide a response.
  3. Call recordings are processed for a period of 13 months from the date of the call.
  4. The recipients of personal data shall be entities with which cooperation agreements and personal data processing agreements have been concluded, in particular entities providing technical services, as well as entities authorized under specific provisions of law.


Video surveillance

  1. Personal data of persons subject to video surveillance, in the form of an image recorded using electronic means of image recording, are processed on the basis of the legitimate interest of the Controller in order to ensure the safety of individuals and the protection of property (Article 6(1)(f) of the GDPR).
  2. Video surveillance covers office premises, the entrance area to the building facing the street – the main entrance, the area adjacent to the building, the side entrance and the adjacent parking lot.
  3. Providing personal data is voluntary, but necessary to enter the area covered by video surveillance.
  4. The recorded image is stored for 14 days from the date of recording, and for a longer period if required by applicable law.
  5. The recipients of personal data shall be entities with which cooperation agreements and personal data processing agreements have been concluded, in particular entities providing technical services, as well as entities authorized under specific provisions of law.

     

III. RIGHTS OF DATA SUBJECTS

In accordance with applicable regulations, you have the right to:

  • request access to all your personal data in our possession and obtain information from us on how it is processed,
  • request that your personal data be updated – corrected if it is incorrect, and request that it be supplemented if it is incomplete,
  • request that we restrict the processing of your data,
  • request a copy of your data,
  • receive your personal data that we hold in a commonly used format. In addition, as far as technically feasible, you have the right to request that we transfer your personal data directly to another Data Controller,
  • request that we delete your data if it is no longer necessary for the purposes for which it was collected or if the processing of this data was based on your consent and you have withdrawn your consent or if the personal data has been processed unlawfully,
  • withdraw your consent at any time, provided that the processing was based on your consent. Your revocation of consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its revocation,
  • to object to the processing of your personal data,
  • to file a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016.119.1) – GDPR.

To exercise the above rights, the data subject should contact the Controller using the contact details provided and inform him of which right he wishes to exercise and to what extent.

IV. COOKIES

  1. This website and eBOK use cookies.
  2. Cookies are text files stored on the user’s endpoint device (e.g., smartphone, computer).
  3. The entity placing cookies on the end device of the user of the Controller’s website and eBOK and obtaining access to them is the Controller, who uses cookies to collect the following information:
    1. IP address,
    2. domain name,
    3. browser type,
    4. operating system type,
    5. information about the user’s navigation route and the time spent on specific subpages.
  4. Through cookies, which are retrieved during the user’s next visit to the Controller’s website and eBOK, it is possible to:
    1. determine the profile of information that the user is interested in, in order to display tailored content on advertising networks, in particular the Google network,
    2. store information such as preferences and settings of the user’s smartphone, computer or other device,
    3. create statistics that help understand how users use websites, which allows improving their structure and content,
    4. maintain the eBOK user session (after logging in), so that the user does not have to re-enter their login and password on every eBOK subpage.
  5. Two types of cookies may be used on our websites – session cookies and persistent cookies. The former remain on the user’s device only while visiting our websites. Persistent cookies remain on the user’s device for as long as they are set to remain there or until the user deletes them.
  6. Cookies placed on the endpoint device of the user of the Controller’s website and eBOK may also be used by third parties cooperating with the Controller, i.e. Google LLC.
  7. Google LLC (hereinafter “Google”):
    1. when the User uses Google’s browser, for marketing, analytics and statistical purposes, the Controller, pursuant to the consent given by the User when entering the website (Article 6(1)(a) of the GDPR), uses the tools provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, with whom the Controller has concluded a personal data processing agreement and who, to the extent that it determines the purposes and means of processing the data contained in cookies, is also their controller, i.e. Google Analytics and Google Maps.
    2. For more information about how Google processes this data, check out Google’s privacy policy: https://policies.google.com/privacy?hl=pl and https://support.google.com/analytics/answer/6004245?hl=pl
    3. Due to Google’s infrastructure being located in the United States, it is possible that data collected by Google may be transferred to a third country based on a decision by the European Commission confirming an adequate level of protection in accordance with Article 45 of the GDPR (the Commission’s decision of July 10, 2023 available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/eu-us-data-transfers_en) and Google’s entry in the Data Privacy Framework, available at: https://www.dataprivacyframework.gov/list
    4. Google Analytics cookies are used for statistical analysis of website traffic and are stored for 14 months.
    5. As part of Google Analytics, the Controller also collects demographic data that enables the creation of reports based on data obtained from Google ads, i.e., age, gender, interests.
    6. You can disable the use of your data in Google Analytics at any time in your browser settings or by installing a browser add-on available at https://tools.google.com/dlpage/gaoptout?hl=pl
    7. when the User uses Google Signals, additional cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way the user uses the Controller’s website. For this purpose, session data from websites and applications may be stored.
    8. You can view and edit information collected by the Google advertising network about your preferences using the following tool: https://www.google.com/ads/preferences/.
    9. Google Maps collects IP address data to make it easier for website users to find places based on the Controller’s legitimate interest (Article 6(1)(f) of the GDPR).
  8. You can change your browser settings if you don’t want to receive cookies:
    1. Google Chrome https://support.google.com/accounts/answer/61416?hl=pl
    2. Firefox https://support.mozilla.org/pl/kb/usuwanie-ciasteczek-i-danych-stron-firefox
    3. Safari https://support.apple.com/pl-pl/guide/safari/sfri11471/mac
    4. Opera https://help.opera.com/pl/latest/web-preferences/#cookies
    5. Edge https://support.microsoft.com/pl-pl/microsoft-edge/usuwanie-plik%C3%B3w-cookie-w- przegl%C4%85darce-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

       

V. BASIC SECURITY MEASURES

The Controller uses technical and organizational measures to protect data against loss, destruction, disclosure, and access by unauthorized and unauthorized persons:

  • personal data collected by the Controller is accessible only to persons authorized to process data, and persons who have been granted appropriate authorizations,
  • in order to ensure adequate protection of services provided electronically, a high level of security is applied, including cryptographic protection of personal data transmission (SSL protocol).

     

VI. ADDITIONAL INFORMATION

  1. The terms and conditions set out in the Privacy Policy are governed by Polish law.
  2. The Controller reserves the right to introduce changes, withdraw or modify the functions or properties of the Controller’s websites, as well as to cease operations, transfer rights and perform other activities in accordance with applicable law.