INFORMATION ON THE PROCESSING OF PERSONAL DATA

Concerning Article 13 GDPR, i.e., the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals about the processing of personal data (GDPR), this document contains all information on how we collect personal data, including information about how we store, use, transfer, and delete that data. It also explains how our website uses cookies.

DATA CONTROLLER AND CONTACT DETAILS

The Controller of your personal data is VSF Sp. z o.o. (Polish limited liability company) located in Warsaw (00-032), Przeskok 2 Str. entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000870326, NIP (tax ID) 5272942049, with the share capital of PLN 2.550.680,00 zł (“Controller”). To contact us, please send an e-mail to data@vuestorefront.io.

DATA PROTECTION OFFICER

We have appointed a Data Protection Inspector, Mr. Krzysztof Łoś. To contact him, please send an email to klos@vuestorefront.io.

PERSONAL DATA

We collect and process your data in the following fields:

I. Usage of the Website

1. The Controller processes the personal data of users of the website:
1. for analytical and statistical purposes - in which case the legal basis for processing is a legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR), consisting in conducting analyses of the activity and preferences of Users to improve the functionalities used and services provided;
2. to possibly establish, investigate, or defend against claims - the legal basis of the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of their rights.
2. Recipients of your personal data will be: server hosting providers, employees, associates of the Controller, and providers of legal services.
3. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

II. Contact form

1. The contact form allows you to send inquiries about our services.
2. To answer your inquiry, we collect the following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) company name, vi) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform, viii) annual revenue selected by options from the dropdown menu. Optionally, provide country, shop URL, and additional message.
3. This data is used to answer your inquiry, provide you with our services, and for marketing purposes, e.g., receive emails about personalized offers and new products.
4. The legal basis for the processing is the Controller's legitimate interest in marketing its services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law. 
5. Recipients of your personal data will be: email and server hosting providers, employees and associates of the Controller, and, where reasonable, legal service providers.
6. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

III. Demo Request

1. The demo request form allows you to send a request for a demo of the services we provide.
2. To answer your inquiry, we collect the following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) country, vi) company name, vii) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform type selected by options from the dropdown menu, viii) annual revenue selected by options from the dropdown menu.
3. This data is used to answer your request and offer you a demo version of our service, but also for marketing purposes, e.g., to receive emails about personalized offers and new products.
4. The legal basis for the processing is the Controller's legitimate interest in marketing its services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law. 
5. Recipients of your personal data will be: email and server hosting providers, employees and associates of the Controller, and, where reasonable, legal service providers.
6. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

IV. Newsletter

1. We share knowledge and experience in our “#VSF Monthly newsletter.” You can sign up for it by providing your details as an email address, first name, and consent to receive emails about personalized offers and new products.
2. By sending a request, you confirm that you have read and understood our Privacy Policy and consent to processing the data you have provided.
3. The processing of your personal data is necessary for the controller's legitimate interest (Article 6 item 1 letter f of the GDPR) in connection with your permission to provide the services of the online contact form.
4. Your personal data will be stored in our database for an indefinite period.
5. Recipients of your personal data will be email and server hosting providers and, where reasonable, legal service providers.
6. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

V. Careers

1. You can apply via the Careers site for the current recruitment processes of your choice by providing your name, email address, optional phone number, LinkedIn profile address, and/or website. You can also attach an external document containing your resume and/or cover letter.
2. By applying with LinkedIn, you consent to VSF acquiring your additional personal information publicly available on LinkedIn.
3. The data you provide, referred to in paragraph 1 above, will be processed by the Controller:
1. Suppose you prefer employment based on an employment contract. In that case, the data will be processed based on Article 6 item 1 letters b. and c. of the GDPR, i.e., to perform obligations arising from legal provisions related to the recruitment process, including in particular Article 22(1) of the Labour Code and to take steps at the request of the data subject before agreeing with VSF sp. z o.o. To carry out the recruitment process in the field of data not required – the legal basis for processing is consent (Article 6 item 1 letter an of the GDPR);
2. suppose you prefer employment based upon a civil law contract. In that case, the data will be processed on the legal basis of Article 6 item 1 letter b. of the GDPR, i.e., to take steps at the data subject's request before agreeing with VSF sp. z o.o. To carry out the recruitment process in the field of data not required – the legal basis for processing is consent (Article 6 item 1 letter a. of the GDPR);
3. suppose you have agreed to participate in future recruitments. In that case, the basis for processing your personal data after recruitment will be Article 6, item 1 letter a of the GDPR, i.e., your consent to processing your personal data to consider your candidacy in future recruitments.

4. To determine or assert any claims or defend against such claims by VSF Sp—z o.o. - the legal basis for data processing is the legitimate interest of the controller (Article 6 item 1 letter f of the GDPR). Your personal data may be provided to subcontractors of VSF Sp. z o.o., such as suppliers of IT systems and IT services, entities providing accounting services, and, where reasonable, legal service providers.

5. Your data will be stored for the time necessary to complete the recruitment process of  VSF Sp. z o.o. If you voluntarily agree to participate in future recruitments, your data will be stored for one year, and we will ask for your consent again.
6. The processing period may be extended each time by the limitation period for claims if processing your personal data will be necessary to determine or assert possible claims or defense against such claims by the Controller.
7. You are entitled to withdraw any of your consents at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.
8. You have the right to access your data, rectify, delete, limit processing, the right to transfer data, right to object to data processing based on the legitimate interest of the Controller, as well as the right to complain to the supervisory authority.
9. You have the right to object to data processing based on a legitimate interest of the Controller.
10. Providing personal data by you is required for recruitment, and if you prefer employment based upon employment contract is also required by law, in particular the Polish Labour Code. The consequence of not providing your name, surname, and e-mail address is that your application cannot be considered in the recruitment process. As far as other data is concerned, the provision of such data is voluntary.
11. Your data might be processed outside the European Economic Area if any of our Recruiters stay in so-called “third countries.” Should this ever occur, we have put in place rigorous procedures and precautions, both organizational and technological, to ensure the security of 

TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

The Controller transfers personal data to third countries outside the European Economic Area, i.e.:

1. VUE STOREFRONT INC., located in California, USA – is an entity belonging to the VUE STOREFRONT Group, a VSF Sp shareholder. z o. o. and applies similar principles of personal data protection as those adopted in our Privacy Policy;
2. Google LLC, located in California, USA - a processor only of data allowing Website traffic analysis; Privacy standards information: https://policies.google.com/privacy?hl=en-US . Google has stated that it has implemented new standard contractual clauses, which you can read about here:
1. https://business.safety.google/adscontrollerterms/,
2. https://business.safety.google/adsprocessorterms/.

The Controller transfers personal data outside the European Economic Area to other entities only if expressly indicated in this Privacy Policy.

YOUR RIGHTS

1. Concerning the processing of your personal data by the Controller, you have the right to: 
1. access to your personal data;
2. correction of your personal data;
3. erasure of your personal data;
4. restriction of processing;
5. data portability.

2. To perform any of your rights, please email us at data@vuestorefront.io

3. Your request will be resolved in a timely and effective manner. We might contact you to arrange details of your request.

4. Withdrawal of your personal data will not affect the lawfulness of processing based on consent before that fact.

5. You have the right to object at any time to processing your data for direct marketing purposes, including profiling, if the processing is for the Controller's legitimate interest. 

6. You may also object at any time to processing your data on grounds relating to your particular situation in cases where the legal basis for the processing is the Controller's legitimate interest.

7. The complaint can also be lodged with a competent supervisory authority. For Poland, the supervisory authority is the President of the Data Protection Authority (PUODO) in Poland (https://uodo.gov.pl/).

COOKIES

1. We use various cookies listed below, which may include personal data from your browser (like IP address, unique cookie identifier; unique device identifier and device type; domain, browser type and language, operating system, and system settings; country and time zone; previously visited websites; information about your interaction with our website; and access times and referring URLs). 
2. By using our website without changing your browser's privacy settings, you consent to process your personal data collected as cookies. You can change your cookie settings at any time. Detailed information on the possibility and handling of cookies is available in the settings of your software (web browser).
3. The website does not collect any information automatically except for the information contained in cookies.
4. We use cookies to track your website usage and understand your preferences, to determine whether an email has been opened and acted upon, and to present you with advertising relevant to your interests.
5. We also may receive reports based on the use of these technologies by our service/analytics providers (like Google Analytics). We use those reports to obtain statistics about traffic and site interaction so that we can improve our website and your experience.
6. We do not link the information we store in cookies to any personal data you submit on our site.
7. Third parties may also collect information via our website through cookies, third-party plug-ins, and widgets. These third parties collect data directly from your web browser, and the processing of this data is subject to their privacy policies.
8. Some cookies will only be used if you use certain features or select specific preferences, and some cookies are essential to the website and will always be used.

SECURITY OF PERSONAL DATA

The Controller conducts a risk analysis on an ongoing basis to ensure that personal data is securely processed by the Controller, ensuring that only authorized persons have access to the data and only to the extent necessary for their tasks. The Controller shall ensure that all operations on personal data are recorded and carried out only by authorized employees and associates.

The Controller shall take all necessary measures to ensure that his subcontractors and other cooperating entities also guarantee appropriate security measures when they process personal data on behalf of the Controller.

CHANGES IN PRIVACY POLICY

We may periodically update our Privacy Policy. We will inform you about the most significant changes, but some will be made without notice. By using vuestorefront.io , you agree to be bound by the current version of our Privacy Policy published at https://vuestorefront.io/privacy-policy . We encourage you to review this Privacy Policy periodically.

GOVERNING LAW

Any claim relating to our Privacy Policy shall be governed by the laws of the Republic of Poland without regard to its conflict of law provisions.

QUESTIONS & CONTACT

Contact us with any issues regarding the processing of personal data or the use of cookies by emailing data@vuestorefront.io.