Privacy policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

MOST IMPORTANT INFORMATION

Below we have provided the most important and elementary information regarding to processing of your personal data. This part of the Privacy Policy is as short as realistically possible – more detailed information on how our role of Data Controller is performed can be found further below.

The Data Controller is: VESLOG GROUP spółką z ograniczoną odpowiedzialnością with its seat located in Poznań, address: Józefa Chociszewskiego 39, 60-256 Poznań.

Your personal data is processed on basis of Regulation (EU) 2016/679 from 27 April 2016, that is, GDPR.

The legal bases for processing of your personal data will be:

if you visit our website and social media profiles – Article 6(1)(f) of GDPR, that is, legitimate interests pursued by the Data Controller – in this case, the legitimate interest is ensuring that the website works correctly, obtaining statistics on the operation of the website, preventing fraud and violations of the law, and conducting marketing activities,
if you use the contact form or contact us directly – Article 6(1)(f) of GDPR, that is, legitimate interests pursued by the Data Controller – in this case, the legitimate interest is contacting you and providing answers to your questions,
where you are our client or a contractor:
1. Article 6(1)(b) of GDPR, that is, processing for the purpose of concluding and performing an agreement,
2. Article 6(1)(f) of GDPR, that is, processing on basis of a legal obligation – especially in regard to obligations related with taxes,
3. Article 6(1)(f) of GDPR, that is, Data Controller’s legitimate interest – this interest is pursuing claims and defending from claims,
if you act on behalf of our client or contractor – Article 6(1)(f) of GDPR, that is, Data Controller’s legitimate interest – this interest is performing concluded agreements and contacting representatives,
if you subscribe to out newsletter – Article 6(1)(f) of GDPR, that is, Data Controller’s legitimate interest – this interest is our marketing activities,
if you partake in our recruitment activities:
1. Article 6(1)(b) of GDPR, that is, processing for the purpose of concluding and performing an agreement,
2. Article 6(1)(a) of GDPR, that is, your consent – in case where you provide personal data not indicated within Labor Code or agree to participate in future recruitment.

Contacting us is possible:

via letter: sent to VESLOG Group sp. z o.o., Józefa Chociszewskiego 39, 60-256 Poznań
via e-mail: gdpr@veslog.com

Data transfers:

Your data may be shared with our providers of IT services. We can also share this data with other companies from our group of companies and entities maintaining social media platforms that we use.

DETAILED INFORMATION

We act in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR). Therefore, we have created this privacy policy, in which we have described the most important principles related to the processing of your personal data.

Who is the Data Controller of your personal data?
The Data Controller of your personal data is VESLOG GROUP spółką z ograniczoną odpowiedzialnością with its seat located in Poznań, address: Józefa Chociszewskiego 39, 60-256 Poznań, entered into the register of entrepreneurs of the National Court Register by the District Court for “Poznań Nowe Miasto i Wilda” in Poznań, VIII Commercial Division of the National Court Register, under KRS No.: 0000984000, NIP No.: 5562757952, REGON No.: 360345415, share capital: 500.000,00 PLN.
How can you contact the Data Controller? A contact with a Data Controller is possible via:
mail, by sending a letter to the Data Controller’s address mentioned above,
an e-mail, by sending a message to the address: gdpr@veslog.com
What are legal bases for processing your personal data?

The specific legal basis and purposes for processing of your personal data are as follows:

Scope of processing	Purpose of processing	Legal basis
If you visit our website https://veslog.com/	We process your personal data in order to ensure the proper operation of the website, to collect statistics and possibly to prevent activities that do not comply with generally applicable laws. In particular, we store this data within logs regarding website visits and cookie files.	The legal basis for the processing of data in this regard is the provision of Article 6(1)(f) of the GDPR, allowing the processing of data when it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The controller’s legitimate interests in this case is to ensure the correct operation of the website, to obtain statistics on the operation of the website, to prevent fraud and violations of the law.
If you use the contact form located on the website or send us a message to the email address provided within the website or contact us by letter	We process your personal data in order to contact you and exchange messages.	The legal basis for the processing of data in this regard is the provision of Article 6(1)(f) of the GDPR, which allows for the processing of data when it is necessary for the purposes of legitimate interests pursued by the controller or by a third party. The controller’s legitimate interest in this case is the need to process data in order to contact a person and answer their questions.
If you are contacting us for the purpose of establishing cooperation with us or you are already our Customer, Supplier, Service Provider or you cooperate with us on the basis of a civil law contract	We process your personal data for the purpose of entering or performing a contract between us and you – our Customer, Supplier or Service Provider. If you are contacting us for the purpose of establishing a business relationship with us, then we process your personal data in order to take action at your request before entering into a contract. If you are already our Contractor, we process your personal data in order to perform our contract. In addition, in this case we process your data in order to fulfill our legal obligations in connection with the conclusion and performance of contracts, in particular accounting and tax obligations. Additionally, in some cases, we may process your personal data in order to pursue claims or defend from claims, what constitutes our legitimate interest.	The legal basis for the processing of personal data is the provision of Article 6(1)(b) of the GDPR, allowing the processing of data when it is necessary to conclude and perform a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract. To the extent that the processing of the data relates to the performance of our tax and accounting obligations, we process the data on the basis of the provision of Article 6(1)(c) of the GDPR, enabling the processing of the data in a situation where it is necessary to fulfill a legal obligation incumbent on the controller. If we process your personal data in order to pursue claims or defend from claims, we process the data basing on Article 6(1)(f) of GDPR, that is, Data Controller’s legitimate interest – this interest connected with is pursuing claims and defending from claims.
If you are a person who acts on behalf of our Customer, Supplier or Service Provider (i.e., an entity that has entered into a contract with us) and, in connection with this, you contact us, acting as a representative of the Customer, Supplier or Service Provider (e.g., as an member of the board, employee or contractor).	We process your personal data for the purpose of entering into or performing a contract between us and our Customer, Supplier or Service Provider.	The legal basis for processing your personal data is the provision of Article 6(1)(f) of the GDPR, which indicates that processing is permitted when it is necessary for the purposes of legitimate interests pursued by the controller or by a third party. The legitimate interest of the data controller in this case is precisely the performance of the contract between us and our Client, Supplier or Service Provider which requires contacting representatives of the Client, Supplier or Service Provider.
Subscribing to our mailing list (newsletter)	If you subscribe to our mailing list (newsletter), we process your personal data for the purpose of providing you with marketing and promotional materials related to VESLOG.	The legal basis for processing personal data in this regard is our legitimate interest. Consequently, we process your personal data on the basis of Article 6(1)(f) of the GDPR, which states that the processing of personal data is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the controller. The legitimate interest in this case is carrying out marketing activities. What is more, specific legal provisions arising from the Polish Telecommunication Act require us to obtain prior consent before sending marketing messages. Therefore, we will not send any e-mails if such a consent has not been given by you.
If you are contacting us to participate in a recruitment process, complete our recruitment form or send us your resume.	We process your personal data to conduct the recruitment process. Additionally, if you give us your consent, we process your personal data for the purpose of contacting you for future recruitment processes.	The legal basis for processing your personal data as part of the ongoing recruitment process is Article 6(1)(b) of the GDPR, which allows for the processing of personal data when it is necessary to conclude a contract with the data subject. The scope of the processed data is based on the provisions of the Polish Labor Code, which indicates the basic data that an employer may obtain during the recruitment process. In the situation where you provide other data not covered by the Labor Code, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR, which allows for the processing of personal data on the basis of the data subject’s consent. If you express a wish to participate in future recruitments, the legal basis for processing personal data is also your consent.
Visiting our social media profiles or (LinkedIn, YouTube, Twitter, Instagram, TikTok)	We process your personal data in order to enable you to visit our accounts in social media. Personal data are processed in order to monitor traffic, carry out marketing activities regarding our services and communicate with you. These social media platforms enable us to send marketing messages to you (e.g., by showing you promoted posts) in accordance with terms of these platforms.	Personal data are processed in connection with usingArticle 6(1)(f) of the GDPR, which states that the processing of personal data is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the controller. The legitimate interests in this case is allowing users to use these platforms, maintaining statistics or carrying out marketing activities.
If you register and participate in webinars and other online events we organize	We process your personal data in order to enable you to register for and partake in the webinars and online events we organize. You can also declare that you wish to be informed about future online events and webinar we organize – if you make this declaration, we will process your personal data for this purpose as well.	The legal basis for processing personal data in this regard is our legitimate interest. Consequently, we process your personal data on the basis of Article 6(1)(f) of the GDPR, which states that the processing of personal data is lawful if the processing is necessary for the purposes of the legitimate interests pursued by the controller. The legitimate interest in this case organising and carrying out webinars, online events.

Who can we share your personal data with?

In order to provide you with the ability to view the Website, contact us, and use services provided by us, we use support of some external companies. Therefore, personal data that we process may be transferred to:

a provider of hosting services: cyber_Folks spółka akcyjna with its seat in Poznań, Poland,
other companies in our group – namely VESLOG spółka z ograniczoną odpowiedzialnością with its seat in Poznań, Poland, VESLOG GmbH with its seat in Walldorf, Germany, VESLOG SRL with its seat in Brussels, Belgium, and VESLOG GmbH Switzerland with its seat in Baar, Switzerland,
entity providing us with cloud services – Microsoft Ireland Operations Limited with its seat in Dublin, Ireland,
a provider of analytics services (Google Analytics): Google Ireland Limited with its seat in Dublin, Ireland. This entity is a subsidiary of Google LLC with seat in Mountain View, California, USA,
provider of newsletter services – MailerLite Limited with its seat in Dublin Ireland. This entity is a subsidiary of MailerLite, Inc. with its seat in San Francisco, California, USA,
entity providing us with software via which we carry out webinars and online events we organize.

If you visit our fanpages on various social media platforms, your personal data can be processed by:

an entity managing and maintaining social media platforms Instagram, Facebook, and Messenger – Meta Platforms Ireland Limited with its seat in Dublin, Ireland. This entity is a subsidiary of Meta Platforms, Inc. with seat in Mountain View, California, USA
an entity managing and maintaining social media platform YouTube – Google Ireland Limited. This entity is a subsidiary of Google LLC with seat in Mountain View, California, USA,
an entity managing and maintaining social media platform LinkedIn – LinkedIn Ireland Unlimited Company (Dublin, Ireland), This entity is a subsidiary of LinkedIn Corporation with its seat in San Francisco, California, USA,
an entity managing and maintaining social media platform Twitter – Twitter International Unlimited Company (Dublin, Ireland). This entity is a subsidiary of X, Corp. with its seat in San Francisco, California, USA,
an entity managing social media platform TikTok – TikTok Ireland Limited with its seat in Dublin, Ireland.

Due to possible processing of your personal data by entities like MailerLite, Google or Meta Platforms your personal data can be transferred outside of European Union/European Economic Area, mainly to USA. Any such transfer of personal data may take place on the basis of Data Privacy Framework, a special agreement between the European Union and the United States of America, approved by the European Commission. In case of LinkedIn or Twitter your data may be transferred basing on the Standard Contractual Clauses, also approved by the European Commission.

Duration of personal data processing

We store your personal data for only as long as we actually need it, and after that we delete it. Therefore, we can inform you that:

if you are a visitor to the Website, we process your personal data for as long as you use the Website and for up to 14 months after your last visit,
if you are our client, contractor, or representative of an organization that we cooperate with, we process your personal data as long as we conduct business cooperation with you and up to 2 years after end of such operation. Data processed for purposes of fulfilling accountancy and tax obligations shall be processed for period of 5 years from the end of calendar year in which the deadline for payment of tax obligation has lapsed,
if you are a person who contacted us by e-mail or by a contact form available on the Website – we process your personal data for as long as the contact between you and us lasts. After it ends and 3 months have passed, we delete the personal data we have collected in this way,
if you are a person who has visited our social media profile (on Youtube, Twitter, LinkedIn), liked or commented on a social media post, we will process your data for as long as my profile exists on such social media site, however, no longer than for the time that you are a user of such site,
if you are a person who subscribed to our mailing list (newsletter), or want to be informed about webinars we organize, we process your personal data until unsubscribe from our mailing list or after termination of marketing activities, based on such a mailing list
if you are participating in the recruitment process, in the case of processing as part of the ongoing recruitment, we will process your data until the recruitment process is completed. However, if you have agreed to participate in future recruitment – we process your data for a period of up to 1 year from the moment of submission of recruitment documents,
if you participate in online events and webinars we organize, we process your data from moment of registration or joining the event/webinar until the event/webinar ends.

What rights do you have regarding the processing of your personal data?

You have the right to:

Request access to your personal data	You can request a confirmation from us that your personal data are processed and request appropriate information in this regard, including information on what types of personal data are processed and for which purposes.
Request rectification of your personal data	You have the right to request immediate rectification of incorrect personal data and supplement incomplete personal data.
Request erasure of your personal data	You have the right to request immediate erasure of your personal data if any of the following criteria apply: ® personal data are no longer necessary to realize purposes for which they were collected or are otherwise processed, ® you have revoked consent (assuming it is the basis of processing) and there are no other legal bases for personal data processing, ® you have filed an objection regarding processing of your personal data and there are no other legally justified legal bases for personal data processing which override the objection, ® personal data have been processed illegally, ® personal data have to be erased in order to fulfil a legal obligation, ® personal data have been collected in connection with providing information society services to a child.
Request restriction of processing your personal data	You have the right to restrict the processing of your personal data if: ® you object the correctness of personal data, ® processing of personal data is illegal but you object erasure of your personal data, requesting a restriction of processing instead, ® we do not need your personal data for processing purposes, but you need them to establish, pursue claims or defend from claims, ® you have filed an objection regarding processing of your personal data.
Request transferring your personal data	You have the right to receive the personal data concerning you, which you provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller. Such request can be fulfilled only where your personal data are processed on basis of consent or an agreement and are processed by automated means. You also have the right to request from us sending of your personal data directly to another controller, assuming that it is technically possible.
Right to file a complaint to a competent authority	You have the right to file a complaint to an authority competent in matters related to personal data processing – in Poland it is the President of Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – PUODO), address: Urząd Ochrony Danych Osobowych, Stawki 2, 00-193 Warsaw.
Object to the processing of your personal data	You have the right to object personal data processing in scenarios where the legal basis for processing is our legitimate interest.
Withdraw your consent for processing	If your personal data are processed on basis of consent, you have the right to withdraw such consent, without any effect on processing done before such consent was withdrawn. The ability to withdraw consent is also present in scenarios where specific provisions of law require consent, understood in manner corresponding to data protection regulations, namely GDPR (e.g., in case of sending marketing communication, on basis of Polish Telecommunications Act – Ustawa Prawo Telekomunikacyjne).

Additional information

Your personal data will not be used for the purpose of automated decision-making, including profiling as referred to in Article 22 (1) and (4) of the GDPR.

Providing personal data is voluntary, but in the case of processing data for the purpose of entering into or performing a contract with us, failure to provide data may result in our inability to provide services. In the case of participation in recruitment, failure to provide the personal data indicated in the contents of the Polish Labor Code (Kodeks Pracy) may result in the inability to consider the candidate as part of the recruitment process..

Cookie files

Cookies are small files that enable or facilitate the use of certain website features. They may be stored on your device directly by us or by third parties with whom we cooperate. As part of our use of cookies, we may process personal data, in particular, such as your IP address, website usage history, or information about the device or software you are using. The cookies we use are related to the operation of our website, and are used to control traffic on the website, to create statistics on the use of the website by its users, to undertake marketing activities, to prevent errors and technical faults, to ensure the security of the website, or to prevent abuse and violations of the law.

We may use two types of cookies:

Session cookies: cookies that are stored on your device during the time you use the Website (they are deleted when you close your web browser). Session cookies enable the correct use of the Website. Blocking them may result in encountering errors or prevent you from using the Website.
Persistent cookies: they are stored on your device until they are deleted. They are used to analyse the traffic on the Website. we strive to use only the services of such entities that guarantee the security of your device, software, and your data. This also applies to cookies used by these entities.

Using cookie files may be related to:

Ensuring proper functioning of the website and preventing errors (technical cookies),
Collecting data how our website is being used and how many people visits it (statistical cookies),
Allowing you to use additional functionalities of the website (functional cookies),
Undertaking marketing activities, advertising our products or services, what also includes using cookies for remarketing purposes, via social media fanpages that we use.

Our usage of cookie files is based on your consent, granted in accordance with appropriate regulations. We indicate that lack of such consent or subsequent deletion of appropriate cookies files might render usage of certain aspects of the Website impossible.

You have the option of:

Accepting all cookie files that we use and may store on your device,
Selecting specific types of cookie files which may be stored on your device, while limiting using other cookies,
limiting or disabling storage of all cookies (except technical cookies required for proper functioning of our website) from our website on your device.

Please be aware that if you will block storing cookies on your device, the use of specific services provided by us may be limited, and in some cases may not be possible.

Regardless of the above, managing the use of cookies is also possible via settings of your web browser. Web browsers allow you to disable all cookies or certain groups of cookies (e.g., from third parties). If you disable cookies just partly, cookies used within the Website may be saved on your device, enabling the Website to function properly. In this case, however, the cookies of the entities with whom we cooperate will not be saved.

Privacy policy

Newsletter