Privacy Policy

This Privacy and Personal Data Protection Policy (hereinafter referred to as the "Policy") applies to all information posted on the website at https://eurotruckjobs.com/ (hereinafter referred to as the "Website").

FRIEDMANN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (hereinafter referred to as the "Service Provider") respects the confidentiality of personal information of all visitors to the Website https://eurotruckjobs.com/, as well as those who use the services provided through the Website; therefore, the Service Provider strives to protect the privacy of personal data, thus creating and ensuring the most comfortable conditions for using the Website's services for every user.

I. Data Controller

The controller of personal data contained on the website https://eurotruckjobs.com/ is FRIEDMANN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Warsaw, entered into the National Court Register under the numbers NIP 5213956191 and KRS 0000953966.

II. Purpose of personal data processing

We process users' personal data in systematised databases, which we divide according to the purposes of their processing. We process this data to the extent necessary to achieve the intended purpose. The following list presents the databases, scope and purposes of data processing.

We always inform about the purposes of personal data processing before or during the collection of such data.

III. Legal basis and retention period for personal data processing

When collecting personal data, we always inform about the legal basis for their processing. When we inform about the application of:

• Article 6 paragraph 1 point a) GDPR — this means that we process personal data on the basis of consent obtained;
• Article 6 paragraph 1 point b) GDPR — this means that we process personal data because they are necessary for the performance of a contract or for taking steps prior to entering into a contract, at the User's request;
• Article 6 paragraph 1 point c) GDPR — this means that we process personal data to comply with legal obligations to which the Controller is subject;
• Article 6 paragraph 1 point f) GDPR — this means that we process personal data for the purposes of the legitimate interests pursued by the Controller, about which we always inform.

We may also process personal data on the basis of other specific provisions, such as the Act on the Provision of Electronic Services.

The retention period for personal data depends on the basis and purpose of their processing. We always inform about this before or during the collection of personal data. Examples of personal data retention periods:

• Personal data processed in connection with marketing activities will be processed until we receive an objection to the processing of such data.
• Personal data processed on the basis of consent to the processing of such data will be processed until the consent is withdrawn.
• Personal data processed using cookies and similar technologies will be processed until such files are deleted using browser or device settings, or until an objection to their processing is received.
• Personal data processed in connection with the fulfilment of legal obligations (e.g., for invoicing) will be processed for the period required under generally applicable accounting and tax laws.
• Personal data related to the provision of services, including sales, will be kept until possible legal claims against us or by us.

IV. User rights

The data subject has the right to access their personal data. The ability to exercise the following rights depends on the legal basis for processing personal data.

• Right of access to data. The data subject has the right to obtain confirmation from us as to whether or not personal data concerning him or her are being processed. In that case, he or she has the right to obtain access to them and additional information (e.g., purposes, categories, recipients, permissions, source). Upon receipt of such a request, we are obliged to provide a copy of the personal data being processed.
• Right to rectification of data. The data subject has the right to ask us to rectify any personal data relating to that data subject that are incorrect. Taking into account the purposes of processing, he or she has the right to request that incomplete personal data be completed, including by means of a supplementary statement.
• Right to be forgotten. The data subject has the right to ask us to immediately delete personal data relating to him or her. We are then obliged to delete personal data without undue delay if one of the following circumstances applies: the consent to processing personal data has been withdrawn and there is no other legal basis for processing; the data subject has objected to the processing; the personal data have been unlawfully processed; the personal data must be deleted in order to comply with legal obligations; the personal data were collected in connection with the offer of information society services.
• Right to restriction of processing. The data subject has the right to ask us to restrict processing in the following cases: the data subject contests the accuracy of the personal data — for a period enabling us to verify the accuracy of such data; the processing is unlawful and the data subject opposes the deletion of personal data, requesting instead the restriction of their use; we no longer need the personal data for the purposes of processing, but they are needed by the data subject to establish, assert or defend legal claims; the data subject has objected to processing pursuant to Article 21 paragraph 1 GDPR — pending the verification whether the legitimate grounds on our side as the Controller override the grounds for objection by the data subject.
• Right to object. The data subject has the right at any time — for reasons related to his or her particular situation — to object to the processing of personal data concerning him or her on the basis of Article 6 paragraph 1 point f) (legitimate interest of the Controller), including profiling. In such a case, we are no longer allowed to process these personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or grounds for the establishment, pursuit or defence of claims.

Furthermore, if the data are processed for direct marketing purposes (including profiling for marketing purposes), the personal data may no longer be processed for such purposes.

Automated decision-making, including profiling. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

The law does not apply if the decision: is necessary for entering into or performing a contract between the data subject and us; is authorised by Union law or the law of the Republic of Poland and provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or is based on the explicit consent of the data subject.

Users have the right to control the processing of their data contained in the Service Provider's data sets. This includes, in particular, the right to access and correct your data, as well as to request supplementation, updating, correction of personal data, temporary or permanent suspension of their processing or deletion, if they are incomplete, outdated, incorrect, or were collected in violation of the law, or are no longer necessary for the achievement of the purpose for which they were collected.

V. System logs

These are internal server event logs of the Service, automatically recording page requests sent when Users visit its display. System logs contain the page request sent by the user, IP address, browser type, browser language, date and time of the request, and at least one "cookie" that can uniquely identify the user's browser.

Details of the use of cookies by the Website are set out on the "Cookie Policy" page.

VI. Transfer of data outside the EEA

The level of protection of personal data outside the European Economic Area (EEA) differs from that provided for by European law. For this reason, the Controller transfers personal data outside the EEA only when necessary and with an adequate level of protection, mainly through:

• cooperation with organisations processing personal data in countries for which an appropriate decision of the European Commission has been adopted;
• use of standard contractual clauses issued by the European Commission;
• application of binding corporate rules approved by the competent supervisory authority;
• in the case of data transfer to the USA — cooperation with organisations participating in the Privacy Shield program, approved by the European Commission decision.

The Controller always informs about the intention to transfer personal data outside the EEA at the stage of their collection.

VII. Copyright

The content of the Website pages is the property of FRIEDMANN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ. All personal and property copyrights to any elements of the Website (text, graphics, page layout, etc.) are protected.

The Website and all its elements are protected by law, in particular by the Act of 4 February 1994 on Copyright and Related Rights (consolidated text, Journal of Laws No. 00.80.904 as amended) and the Act of 16 April 1993 on Combating Unfair Competition (consolidated text OJ 03.153.1503 as amended).

VIII. Other

The Website may contain links to other websites. We are not responsible for the privacy policies applied on those pages. We recommend that you read the privacy policies of those pages when you visit them. The Service Provider reserves the right to change the Privacy and Cookie Policy.

IX. Terminology and abbreviations

The terminology used in this Policy means the following:

1. Controller — FRIEDMANN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ;
2. GDPR — the General Data Protection Regulation adopted by the European Union on 27 April 2016 and effective from 25 May 2018;
3. Personal data — means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
4. Database — means any structured set of personal data which is accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis;
5. Processing of personal data — any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
6. Website — the online service provided by the Controller, available at https://eurotruckjobs.com/;
7. User — a person who has access to the Website via the Internet and uses it.