Privacy Policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
With reference to Article 13 GDPR, i.e. the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (GDPR), we provide information on the processing of personal data for specific categories of persons.
DATA CONTROLLER AND CONTACT DETAILS
The data administrator is VSF Sp. z o.o. (Polish limited liability company) located in Warsaw (00-032), Przeskok 2 Str., Astoria Business Link, In order to contact us please send an email to data[at]vuestorefront.io
DATA PROTECTION OFFICER
We have appointed a Data Protection Inspector, who is Mr Krzysztof Łoś. To contact him, please send an email to klos@vuestorefront.io.
CANDIDATES
Purpose | Legal basis | Retention period |
to recruit an employee | Article 6(1)(c) GDPR - for the purpose of fulfilling the employer's legal obligations under generally applicable legislation. | up to 3 months after termination of employment, and if you agree to participate in future recruitments; |
to recruit an employee | Article 6(1)(c) GDPR - for the purpose of fulfilling the employer's legal obligations under generally applicable legislation. | up to 1 year after submission of documents - after this time we will ask you again for your consent.
|
to recruit an employee | Article 6(1)(a) or Article 9(2)(a) GDPR - for purposes arising from your consent to the processing of your personal data, if processed on that basis (applies to data such as, for example, your image) - for data you provide us with in addition in your application documents or other documents. | up to 1 year after submission of documents - after this time we will ask you again for your consent.
|
CONTRACTORS
Purpose | Legal basis | Retention period |
establishing business relations (offering) | Article 6(1)(f) GDPR - the legitimate interest of the controller | until an effective objection is made |
concluding and executing a contract | Until the expiration of the statute of limitations for any claims | until the expiration of the statute of limitations for potential claims |
filing of complaints, claims and requests | Article 6(1)(f) GDPR - the legitimate interest of the controller | one year from the end of the complaint procedure or investigation of the complaint or request |
maintaining accounting and tax records | Article 6(1)(c) GDPR – compliance with a legal obligation | 6 years |
asserting and defending against claims | Article 6(1)(f) GDPR - the legitimate interest of the controller | until the expiration of the statute of limitations for potential claims |
CLIENTS
Purpose | Legal basis | Retention period |
establishing business relationship (sales) | Article 6(1)(f) GDPR - the legitimate interest of the controller | until an effective objection is made |
concluding and executing a contract | Article 6(1)(b) GDPR - in order to conclude and perform a contract | until the expiration of the statute of limitations for potential claims |
filing of complaints, claims and requests | Article 6(1)(f) GDPR - the legitimate interest of the controller | one year from the end of the complaint procedure or investigation of the complaint or request |
maintaining accounting and tax records | Article 6(1)(c) GDPR – compliance with a legal obligation | 6 years |
asserting and defending against claims | Article 6(1)(f) GDPR - the legitimate interest of the controller | until the expiration of the statute of limitations for potential claims |
marketing of own services and products | Article 6(1)(f) GDPR - the legitimate interest of the controller | until an effective objection is made |
marketing our partners' services and products | Article 6(1)(f) GDPR - the legitimate interest of the controller | until an effective objection is made |
CLIENT’S REPRESENTATIVES
Purpose | Legal basis | Retention Period |
establishing business relationship (sales) | Article 6(1)(f) GDPR - the legitimate interest of the controller | until an effective objection is made |
concluding and executing a contract | Article 6(1)(b) GDPR - in order to conclude and perform a contract | until the expiration of the statute of limitations for potential claims |
filing of complaints, claims and requests | Article 6(1)(f) GDPR - the legitimate interest of the controller | one year from the end of the complaint procedure or investigation of the complaint or request |
maintaining accounting and tax records | Article 6(1)(c) GDPR – compliance with a legal obligation | 6 years |
asserting and defending against claims | Article 6(1)(f) GDPR - the legitimate interest of the controller | until the expiration of the statute of limitations for potential claims |
clearance of accounts receivable | Article 6(1)(f) GDPR - the legitimate interest of the controller | until entire settlement |
MAILERS
Purpose | Legal basis | Retention Period |
recording mail and responding to it | Article 6(1)(f) GDPR - the legitimate interest of the controller | maximum of 6 years from receipt or posting of mail |
asserting and defending against claims | Article 6(1)(f) GDPR - the legitimate interest of the controller | until the expiration of the statute of limitations for potential claims |
WEBSITE USERS
Purpose | Legal basis | Retention period |
ensuring proper operation of the website | Article 6(1)(f) GDPR - the legitimate interest of the controller | session |
statistics | Article 6(1)(f) GDPR - the legitimate interest of the controller | up to 2 years, depending on cookie |
asserting and defending against claims | Article 6(1)(f) GDPR - the legitimate interest of the controller | until the expiration of the statute of limitations for potential claims |
RECIPIENTS
Recipients of your personal data will be: email and server hosting provider, external IT, as well as HR and accounting services, external payroll and HR software providers, external training providers, administrator's contractors.
YOUR RIGHTS
You are entitled to:
- access to your data, rectification, restriction of processing, the right to erasure of your data if we are not obliged to process it under applicable law, and if the basis for processing of your personal data was consent, which you have withdrawn,
- to file a complaint to the Office for Personal Data Protection,
- to transfer to another controller the data processed on the basis of the consent given, if technically possible, and the right to receive a copy of this data in a structured format, whereby this right can only be exercised if the processing is carried out by automated means,
- to withdraw consent to the processing of personal data, if given, where the withdrawal of consent does not affect the lawfulness of the existing processing of such data,
- to object to the processing of personal data pursuant to Article 6(1)(f) GDPR.
IS THE PROVISION OF DATA VOLUNTARY (AND CONSEQUENCES)?
The provision of personal data processed under:
- Article 6(1)(c) and Article 9(2)(b) GDPR - is a legal obligation (in particular labour law), and failure to provide it will prevent the conclusion of a contract and the performance of employment.
- Article 6(1)(f) GDPR - is voluntary and stems from legitimate purposes, and failure to provide such data will prevent the realization of the specified purpose, as well as raising a justified objection to the processing of such data.
- Article 6(1)(a GDPR - is voluntary, and failure to provide such data will only prevent the realization of the stated purpose of consent.
COOKIES
We use cookies as listed here:
Cookie | Domain | Type | Description | Duration |
test_cookie | .doubleclick.net | Advertisement | This cookie is set by doubleclick.net. The purpose of the cookie is to determine if the user's browser supports cookies. | 15 minutes |
_fbp | .vuestorefront.io | Advertisement | This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website. | 3 months |
bscookie | .www.linkedin.com | Advertisement | This cookie is a browser ID cookie set by Linked share Buttons and ad tags. | 2 years |
personalization_id | .twitter.com | Advertisement | This cookie is set by twitter.com. It is used integrate the sharing features of this social media. It also stores information about how the user uses the website for tracking and targeting. | 2 years |
UserMatchHistory | .ads.linkedin.com | Advertisement | Linkedin - Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences. | 1 month |
AnalyticsSyncHistory | .ads.linkedin.com | Advertisement | Used to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries | 1 month |
li_gc | .ads.linkedin.com | Advertisement | Used to store consent of guests regarding the use of cookies for non-essential purposes | 2 years |
_gcl_au | .vuestorefront.io | Analytics | This cookie is used by Google Analytics to understand user interaction with the website. | 3 months |
_ga | .vuestorefront.io | Analytics | This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors. | 2 years |
_gid | .vuestorefront.io | Analytics | This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visted in an anonymous form. | 1 day |
_gat_UA-108235765-1 | .vuestorefront.io | Analytics | This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites. | 1 minute |
_hjTLDTest | .vuestorefront.io | Analytics | When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed. | session |
_hjid | .vuestorefront.io | Analytics | This cookie is set by Hotjar. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID. | 1 year |
_hjFirstSeen | .vuestorefront.io | Analytics | This is set by Hotjar to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions. | Session |
_hjIncludedInPageviewSample | .vuestorefront.io | Analytics | This cookie is set to let Hotjar know whether that user is included in the data sampling defined by your site's pageview limit. | 30 minutes |
_hjAbsoluteSessionInProgress | .vuestorefront.io | Analytics | This cookie is used to detect the first pageview session of a user. This is a True/False flag set by the cookie. | 30 minutes |
__hstc | .vuestorefront.io | Analytics | This cookie is set by Hubspot and is used for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). | 1 year 24 days |
hubspotutk | .vuestorefront.io | Analytics | This cookie is used by HubSpot to keep track of the visitors to the website. This cookie is passed to Hubspot on form submission and used when deduplicating contacts. | 1 year 24 days |
lang | .ads.linkedin.com | Functional | This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website. | session |
bcookie | .www.linkedin.com | Functional | This cookie is set by LinkedIn. The purpose of the cookie is to enable LinkedIn functionalities on the page. | 2 years |
lidc | .www.linkedin.com | Functional | To facilitate data center selection. | 1 day |
lang | .www.linkedin.com | Functional | This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website. | session |
__hssc | .vuestorefront.io | Functional | This cookie is set by HubSpot. The purpose of the cookie is to keep track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. | 30 minutes |
__hssrc | .vuestorefront.io | Necessary | This cookie is set by Hubspot. According to their documentation, whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. | session |
cookieyesID | .vuestorefront.io | Necessary | Unique identifier for visitors used by CookieYes with respect to the consent | 1 year |
cky-consent | .vuestorefront.io | Necessary | The cookie is set by CookieYes to remember the user's consent to the use of cookies on the website. | 1 year |
cookieyes-necessary | .vuestorefront.io | Necessary | This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Necessary' category. | 1 year |
cookieyes-functional | .vuestorefront.io | Necessary | This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Functional' category | 1 year |
cookieyes-analytics | .vuestorefront.io | Necessary | This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Analytics' category. | 1 year |
cookieyes-performance | .vuestorefront.io | Necessary | This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Performance' category | 1 year |
cookieyes-advertisement | .vuestorefront.io | Necessary | This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Advertisement' category | 1 year |
cookieyes-other | .vuestorefront.io | Necessary | This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies categorized as 'Other' | 1 year |
pageviewCount | .vuestorefront.io | Necessary | This cookie counts a number of pageviews and is used to display cookie consent banner. | 30 days |
pa_a | .vuestorefront.io | Necessary | Used to provide a sign-in functionality on our websites. | 60 minutes |
pa_ae | .vuestorefront.io | Necessary | Used to provide a sign-in functionality on our websites. | 60 minutes |