vsf_logo.svg

Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

With reference to Article 13 GDPR, i.e. the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (GDPR), we provide information on the processing of personal data for specific categories of persons.

DATA CONTROLLER AND CONTACT DETAILS

The Controller of your personal data is VSF Sp. z o.o. (Polish limited liability company) located in Warsaw (00-032), Przeskok 2 Str. entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000870326, NIP (tax ID) 5272942049, with the share capital of PLN 2.550.680,00 zł (“Controller”). In order to contact us please send an e-mail to data[at]vuestorefront.io 

DATA PROTECTION OFFICER

We have appointed a Data Protection Inspector, who is Mr Krzysztof Łoś. To contact him, please send an email to klos[at]vuestorefront.io.

PERSONAL DATA

We collect and process your data in following fields:

I. Usage of the Website

  1. The Controller processes personal data of users of the website:

    1. for analytical and statistical purposes - in which case the legal basis for processing is a legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR), consisting in conducting analyses of the activity and preferences of Users in order to improve the functionalities used and services provided;

    2. for the purpose of possibly establishing, investigating or defending against claims - the legal basis of the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of their rights.

  2. Recipients of your personal data will be: server hosting provider, employees, associates of the Controller and providers of legal services.

  3. Your personal data will be processed for the duration of the controller's legitimate interest, no longer than until you object.

II. Contact form

  1. The contact form allows you to a sent inquiry about out services.

  2. For the purpose of answering your inquiry, we collect following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) company name, vi) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform, viii) annual revenue selected by options from the dropdown menu. Optionally, you may provide country, shop URL and additional message.

  3. This data is used to answer your inquiry, provide you our services, but also to marketing purposes e.g. receive emails about personalized offers and new products.

  4. The legal basis for the processing is the legitimate interest of the Administrator in marketing its services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given in accordance with the Act on Provision of Electronic Services and the Telecommunications Law. 

  5. Recipients of your personal data will be: email and server hosting provider, employees and associates of the Controller and, where reasonable, may be legal service providers.

  6. Your personal data will be processed for the duration of the controller's legitimate interest, no longer than until you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

III. Demo request

  1. The demo request form allows you to send a request for a demo of the services we provide.

  2. For the purpose of answering your inquiry, we collect following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) country, vi) company name, vii) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform type selected by options from the dropdown menu, viii) annual revenue selected by options from the dropdown menu.

  3. This data is used to answer your request and offer you a demo version of our service, but also to marketing purposes e.g. receive emails about personalized offers and new products.

  4. The legal basis for the processing is the legitimate interest of the Administrator in marketing its services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given in accordance with the Act on Provision of Electronic Services and the Telecommunications Law. 

  5. Recipients of your personal data will be: email and server hosting provider, employees and associates of the Controller and, where reasonable, may be legal service providers.

  6. Your personal data will be processed for the duration of the controller's legitimate interest, no longer than until you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

IV. Newsletter

  1. We share knowledge and experience in our newsletter “#VSF Monthly newsletter”. You can sign up for it by providing your details in the form of an email address, first name and consent to receive emails about personalized offers and new products.

  2. By sending a request you confirm that you have read and understood our Privacy Policy and you consent to the processing of the data you have provided.

  3. The processing of your personal data is necessary for the legitimate interest of the controller (Article 6 item 1 letter f of the GDPR) in connection with your permission to provide the services of the online contact form

  4. Your personal data will be stored in our database for the indefinite period of time.

  5. Recipients of your personal data will be: email and server hosting provider and, where reasonable, may be legal service providers.

  6. Your personal data will be processed for the duration of the controller's legitimate interest, no longer than until you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

V. Careers

Information clause

We would like to kindly inform you that the Controller of your personal data contained in the submitted application documents is VSF Sp. z o.o. (Polish limited liability company) located in Warsaw (00-032), Przeskok 2 Str., Astoria Business Link, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000870326, NIP (tax ID) 5272942049, with the share capital of PLN 2.550.680,00 zł.

  1. Data obtained during the recruitment Controller processes for the purpose of conducting the current recruitment procedure:

  1. if you prefer employment based upon an employment contract - the data will be processed on the basis of Article 6 item 1 letter c of the GDPR, i.e. in order to perform obligations arising from legal provisions related to the recruitment process, including in particular Article 22(1) of the Labor Code. In order to carry out the recruitment process in the field of data not required by law – the legal basis for processing is consent (Article 6 item 1 letter a of the GDPR);

  2. if you prefer employment based upon a civil law contract, the legal basis for processing data contained in the application documents is the conclusion of an agreement with VSF Sp. z o.o. (Article 6 item 1 letter b of the GDPR);

  3. in order to determine or assert any claims or defend against such claims by VSF Sp. z o.o. - the legal basis for data processing is the legitimate interest of the controller (Article 6 item 1 letter f of the GDPR).

  1. To contact Controller, you can send a message to the e-mail address data@vuestorefront.io. You can contact with Controller also in writing to the address VSF Sp. z o.o., Przeskok 2 Str., Astoria Business Link, 00-032 Warsaw.

  2. Controller has appointed a Data Protection Officer. You can contact him by sending an email to klos[at]vuestorefront.io.

  3. Your personal data may be provided to subcontractors of VSF Sp. z o.o., such as suppliers of IT systems and IT services, as well as entities providing accounting services and, where reasonable, may be legal service providers.

  4. Your data will be stored for the time necessary to complete the recruitment process and for VSF Sp. z o.o. selecting a candidate or candidates. The processing period may be each time extended by the limitation period for claims if the processing of your personal data will be necessary for the determination or assertion of possible claims or defence against such claims by the Controller.

  5. You are entitled to withdraw any of your consents at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.

  6. You have the right to access your data, rectify, delete, limit processing, the right to transfer data, the right to object to data processed on the basis of the legitimate interest of the controller, as well as the right to lodge a complaint to the supervisory authority.

  7. You have the right to object to data processed on the basis of a legitimate interest of the controller.

  8. Providing personal data by you is required:

  1. by law, including primarily the Labor Code - if you prefer employment based upon an employment contract;

  2. for the purposes of recruitment - if you prefer employment based upon a civil law contract;

  3. the consequence of not providing data is the inability to consider your candidacy in the recruitment process. In respect of other data, providing data is voluntary.

  1. The consequence of failing to provide data is that your application cannot be considered in the recruitment process. As far as other data is concerned, the provision of such data is voluntary.

  2. More information on the processing of personal data by Controller is available on the website https://vuestorefront.io/privacy-policy .

  3. If you voluntarily agree to participate in future recruitments, we will ask for your consent again after one year.

  4. If you have sent us application documents beyond the recruitment procedure, then after a year we will ask you again for your consent, and the lack of it will mean the immediate deletion of your data from our IT systems.

  5. Your data might be processed outside of the European Economic Area in case any of our Recruiters are staying in so-called “third countries”. Should this ever occur, we have put in place rigorous procedures and precautions, both organizational and technological, to ensure the security of your data.

Klauzula informacyjna

Uprzejmie informujemy, że administratorem Twoich danych osobowych zawartych w przesłanych dokumentach aplikacyjnych jest VSF Spółka z ograniczoną odpowiedzialnością z siedzibą w Warszawie (00-032) przy ul. Przeskok 2, Astoria Business Link, zarejestrowana w Rejestrze Przedsiębiorców przez Sąd Rejonowy dla m. st. Warszawy w Warszawie, XIII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem KRS 0000870326, NIP 5272942049, o kapitale zakładowym 2.550.680,00 zł.

  1. Dane pozyskane w toku rekrutacji przetwarzamy w celu przeprowadzenia obecnego postępowania rekrutacyjnego:

  1. w sytuacji preferowania przez Ciebie zatrudnienia na podstawie umowy o pracę – dane będą przetwarzane na podstawie art. 6 ust. 1 lit. c RODO tj. w celu wykonania obowiązków wynikających z przepisów prawa, związanych z procesem rekrutacji, w tym przede wszystkim art. 22(1) Kodeksu Pracy. W celu przeprowadzenia procesu rekrutacji w zakresie danych niewymaganych przepisami prawa – podstawą prawną przetwarzania jest zgoda (art. 6 ust. 1 lit. a RODO, a w zakresie danych dotyczących danych szczególnych jak np. stan zdrowia – art. 9 ust. 2 lit a RODO);

  2. w sytuacji preferowania przez Ciebie zatrudnienia na podstawie umowy cywilnoprawnej podstawą prawną przetwarzania danych zawartych w dokumentach aplikacyjnych jest zawarcie umowy z VSF Sp. z o.o. (art. 6 ust. 1 lit. b RODO);

  3. w celu ustalenia lub dochodzenia ewentualnych roszczeń lub obrony przed takimi roszczeniami przez Administratora – podstawą prawną przetwarzania danych jest prawnie uzasadniony interes Administratora (art. 6 ust. 1 lit. f RODO).

  1. Aby skontaktować się z nami, możesz wysłać wiadomość na adres e-mail data[at]vuestorefront.io lub wysyłając list na adres: VSF Sp. z o.o., ul. Przeskok 2, Astoria Business Link, 00-032 Warszawa.

  2. Wyznaczyliśmy Inspektora Ochrony Danych, którym jest Krzysztof Łoś. Możesz skontaktować się z nim, wysyłając wiadomość na adres e-mail: klos[at]vuestorefront.io.

  3. Twoje dane osobowe mogą być przekazane naszym podwykonawcom, takim jak dostawcy systemów informatycznych i usług IT oraz podmiotom świadczącym obsługę księgową i kadrową oraz w uzasadnionych przypadkach mogą być podmioty świadczące usługi prawne. 

  4. Twoje dane będą przechowywane w czasie niezbędnym do zakończenia procesu rekrutacji i dokonania przez nas wyboru kandydata lub kandydatów, czyli po zatrudnieniu na umowę o pracę lub do podpisania umowy cywilnoprawnej. Okres przetwarzania może zostać każdorazowo przedłużony o okres przedawnienia roszczeń, jeżeli przetwarzanie Pani/Pana danych osobowych będzie niezbędne dla ustalenia lub dochodzenia ewentualnych roszczeń lub obrony przed takimi roszczeniami przez administratora.

  5. Każdą z wyrażonych zgód możesz wycofać w dowolnym momencie. Wycofanie zgody nie wpływa na zgodność z prawem przetwarzania dokonanego przed jej wycofaniem. 

  6. Przysługuje Tobie prawo dostępu do swoich danych, ich sprostowania, usunięcia, ograniczenia przetwarzania, prawo do przenoszenia danych, a także prawo wniesienia skargi do organu nadzorczego. 

  7. Masz prawo do wniesienia sprzeciwu wobec danych przetwarzanych na podstawie uzasadnionego interesu administratora.

  8. Podanie przez Ciebie danych osobowych jest wymagane:

  1. przez przepisy prawa, w tym przede wszystkim przez Kodeks Pracy – w przypadku, kiedy preferujesz zatrudnienie w oparciu o umowę o pracę;

  2. dla celów prowadzenia rekrutacji – w przypadku, kiedy preferujesz zatrudnienie w oparciu o umowę cywilnoprawną.

  1. Konsekwencją niepodania danych jest brak możliwości rozpatrzenia Twojej kandydatury w procesie rekrutacyjnym. W zakresie pozostałych danych, podanie ich jest dobrowolne.

  2. Więcej informacji na temat przetwarzania danych osobowych przez nas dostępnych jest na stronie internetowej https://vuestorefront.io/privacy-policy . 

  3. Jeśli wyrażasz dodatkowo zgodę na udział w przyszłych rekrutacjach, to po roku ponowimy zapytanie o Twoją zgodę. 

  4. Jeśli prześlesz nam dokumenty aplikacyjne bez związku z rekrutacją, to po roku zapytamy Cię ponownie o zgodę, a jej brak oznaczać będzie niezwłoczne usunięcie Twoich danych.

  5. Twoje dane mogą być przetwarzane poza Europejskim Obszarem Gospodarczym, jeśli któryś z naszych rekruterów przebywa w tzw. państwie trzecim. Stosujemy w takim wypadku rygorystyczne zabezpieczenia i techniczne, i organizacyjne, aby zapewnić Twoim danym bezpieczeństwo.

TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

The Controller transfers personal data to third countries, outside the European Economic Area, i.e.:

  1. VUE STOREFRONT INC., located in California, USA – an entity belonging to the VUE STOREFRONT Group, which is a shareholder of VSF Sp. z o. o. and applies similar principles of personal data protection as those adopted in our Privacy Policy;

  2. Google LLC, located in California, USA - a processor only of data allowing Website traffic analysis; Privacy standards information: https://policies.google.com/privacy?hl=en-US . Google has stated that it has implemented new standard contractual clauses, which you can read about here:

    1. https://business.safety.google/adscontrollerterms/ ,

    2. https://business.safety.google/adsprocessorterms/ .

The Controller transfers personal data outside the European Economic Area to other entities only if expressly indicated in this Privacy Policy.

YOUR RIGHTS

  1. In relation to the processing of your personal data by the Controller, you have the right to: 

  1. access to your personal data;

  2. correction of your personal data;

  3. erasure of your personal data;

  4. restriction of processing;

  5. data portability.

  1. To perform any of your rights please email us at data[at]vuestorefront.io

  2. Your request will be resolved in a timely and effective manner. We might contact you to arrange details of your request.

  3. Withdrawal of your personal data will not affect the lawfulness of processing based on consent before its withdrawal.

  4. You have the right to object at any time to the processing of your data for direct marketing purposes, including profiling, if the processing is carried out for the legitimate interest of the Controller. 

  5. You may also object at any time to the processing of your data on grounds relating to your particular situation in cases where the legal basis for the processing is the legitimate interest of the Controller.

  6. The complaint can be also lodged to a competent supervisory authority. For Poland the supervisory authority is The Bureau of the Inspector General for the Protection of Personal Data in Poland ( https://www.giodo.gov.pl/ ).

COOKIES

  1. We use various cookies listed below which may include personal data from your browser (like IP-address, unique cookie identifier; unique device identifier and device type; domain, browser type and language, operating system and system settings; country and time zone; previously visited websites; information about your interaction with our website; and access times and referring URLs). 

  2. By using our website without changing your browser's privacy settings, you consent to the processing of your personal data collected in the form of cookies. You can change your cookie settings at any time. Detailed information on the possibility and handling of cookies is available in the settings of your software (web browser).

  3. The website does not collect any information automatically, except for the information contained in cookies.

  4. We use cookies to track your usage of the website and to understand your preferences; to determine whether an email has been opened and acted upon; and to present you with advertising relevant to your interests.

  5. We also may receive reports based on the use of these technologies by our service/analytics providers (like Google Analytics). We use those reports to obtain statistics about traffic and site interaction, so that we can improve our website and your experience.

  6. We do not link the information we store in cookies to any personal data you submit on our site.

  7. Third parties may also collect information via our website through cookies, third party plug-ins and widgets. These third parties collect data directly from your web browser and the processing of this data is subject to their own privacy policies.

  8. Some of the cookies will only be used if you use certain features or select certain preferences, and some cookies are essential to the website and will always be used.

Cookie

Domain

Type

Description

Duration

test_cookie

.doubleclick.net

Advertisement

This cookie is set by doubleclick.net. The purpose of the cookie is to determine if the user's browser supports cookies.

15 minutes

_fbp

.vuestorefront.io

Advertisement

This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.

3 months

bscookie

.www.linkedin.com

Advertisement

This cookie is a browser ID cookie set by Linked share Buttons and ad tags.

2 years

personalization_id

.twitter.com

Advertisement

This cookie is set by twitter.com. It is used integrate the sharing features of this social media. It also stores information about how the user uses the website for tracking and targeting.

2 years

UserMatchHistory

.ads.linkedin.com

Advertisement

Linkedin - Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences.

1 month

AnalyticsSyncHistory

.ads.linkedin.com

Advertisement

Used to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries

1 month

li_gc

.ads.linkedin.com

Advertisement

Used to store consent of guests regarding the use of cookies for non-essential purposes

2 years

_gcl_au

.vuestorefront.io

Analytics

This cookie is used by Google Analytics to understand user interaction with the website.

3 months

_ga

.vuestorefront.io

Analytics

This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors.

2 years

_gid

.vuestorefront.io

Analytics

This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visted in an anonymous form.

1 day

_gat_UA-108235765-1

.vuestorefront.io

Analytics

This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.

1 minute

_hjTLDTest

.vuestorefront.io

Analytics

When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.

session

_hjid

.vuestorefront.io

Analytics

This cookie is set by Hotjar. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.

1 year

_hjFirstSeen

.vuestorefront.io

Analytics

This is set by Hotjar to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.

Session

_hjIncludedInPageviewSample

.vuestorefront.io

Analytics

This cookie is set to let Hotjar know whether that user is included in the data sampling defined by your site's pageview limit.

30 minutes

_hjAbsoluteSessionInProgress

.vuestorefront.io

Analytics

This cookie is used to detect the first pageview session of a user. This is a True/False flag set by the cookie.

30 minutes

__hstc

.vuestorefront.io

Analytics

This cookie is set by Hubspot and is used for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

1 year 24 days

hubspotutk

.vuestorefront.io

Analytics

This cookie is used by HubSpot to keep track of the visitors to the website. This cookie is passed to Hubspot on form submission and used when deduplicating contacts.

1 year 24 days

lang

.ads.linkedin.com

Functional

This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.

session

bcookie

.www.linkedin.com

Functional

This cookie is set by LinkedIn. The purpose of the cookie is to enable LinkedIn functionalities on the page.

2 years

lidc

.www.linkedin.com

Functional

To facilitate data center selection.

1 day

lang

.www.linkedin.com

Functional

This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.

session

__hssc

.vuestorefront.io

Functional

This cookie is set by HubSpot. The purpose of the cookie is to keep track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp.

30 minutes

__hssrc

.vuestorefront.io

Necessary

This cookie is set by Hubspot. According to their documentation, whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.

session

cookieyesID

.vuestorefront.io

Necessary

Unique identifier for visitors used by CookieYes with respect to the consent

1 year

cky-consent

.vuestorefront.io

Necessary

The cookie is set by CookieYes to remember the user's consent to the use of cookies on the website.

1 year

cookieyes-necessary

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Necessary' category.

1 year

cookieyes-functional

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Functional' category

1 year

cookieyes-analytics

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Analytics' category.

1 year

cookieyes-performance

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Performance' category

1 year

cookieyes-advertisement

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Advertisement' category

1 year

cookieyes-other

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies categorized as 'Other'

1 year

pageviewCount

.vuestorefront.io

Necessary

This cookie counts a number of pageviews and is used to display cookie consent banner.

30 days

pa_a

.vuestorefront.io

Necessary

Used to provide a sign-in functionality on our websites.

60 minutes

pa_ae 

.vuestorefront.io

Necessary

Used to provide a sign-in functionality on our websites.

60 minutes

SECURITY OF PERSONAL DATA

The Controller carries out a risk analysis on an ongoing basis to ensure that personal data is processed by the Controller in a secure manner, ensuring in particular that only authorised persons have access to the data and only to the extent necessary for their tasks. The Controller shall ensure that all operations on personal data are recorded and carried out only by authorised employees and associates.

The Controller shall take all necessary measures to ensure that also his subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on behalf of the Controller.

CHANGES OF PRIVACY POLICY

We may periodically update our Privacy Policy. We will inform you about most significant changes, but some changes will be made without a notice. By using vuestorefront.io you agree to be bound by the current version of our Privacy Policy published at https://vuestorefront.io/privacy-policy . We encourage you to review this Privacy Policy periodically.

GOVERNING LAW

Any claim relating to our Privacy Policy shall be governed by the laws of the State of Poland without regard to its conflict of law provisions.

QUESTIONS & CONTACT

Contact us with any and all issues regarding processing of personal data or use of cookies by email data[at]vuestorefront.io.