INFORMATION ON THE PROCESSING OF PERSONAL DATA

Concerning Article 13 GDPR, i.e., the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals about the processing of personal data (GDPR), this document contains all information on how we collect personal data, including information about how we store, use, transfer, and delete that data. It also explains how our website uses cookies.

DATA CONTROLLER AND CONTACT DETAILS

The Controller of your personal data is VSF Sp. z o.o. (Polish limited liability company) located in Warsaw (00-032), Przeskok 2 Str. entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000870326, NIP (tax ID) 5272942049, with the share capital of PLN 2.550.680,00 zł (“Controller”). To contact us, please send an e-mail to data@vuestorefront.io.

DATA PROTECTION OFFICER

We have appointed a Data Protection Inspector, Mr. Krzysztof Łoś. To contact him, please send an email to klos@vuestorefront.io.

PERSONAL DATA

We collect and process your data in the following fields:

I. Usage of the Website

  1. The Controller processes the personal data of users of the website:
    1. for analytical and statistical purposes - in which case the legal basis for processing is a legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR), consisting in conducting analyses of the activity and preferences of Users to improve the functionalities used and services provided;
    2. to possibly establish, investigate, or defend against claims - the legal basis of the processing is the legitimate interest of the Controller (Article 6 item 1 letter f of the GDPR) consisting in the protection of their rights.
  2. Recipients of your personal data will be: server hosting providers, employees, associates of the Controller, and providers of legal services.
  3. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

II. Contact form

    1. The contact form allows you to send inquiries about our services.
    2. To answer your inquiry, we collect the following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) company name, vi) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform, viii) annual revenue selected by options from the dropdown menu. Optionally, provide country, shop URL, and additional message.
    3. This data is used to answer your inquiry, provide you with our services, and for marketing purposes, e.g., receive emails about personalized offers and new products.
    4. The legal basis for the processing is the Controller's legitimate interest in marketing its services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law. 
    5. Recipients of your personal data will be: email and server hosting providers, employees and associates of the Controller, and, where reasonable, legal service providers.
    6. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

III. Demo Request

  1. The demo request form allows you to send a request for a demo of the services we provide.
  2. To answer your inquiry, we collect the following data: i) first name, ii) last name, iii) business e-mail address, iv) job function, v) country, vi) company name, vii) company type selected between merchant/technology vendor/solution integrator (Agency), vii) eCommerce platform type selected by options from the dropdown menu, viii) annual revenue selected by options from the dropdown menu.
  3. This data is used to answer your request and offer you a demo version of our service, but also for marketing purposes, e.g., to receive emails about personalized offers and new products.
  4. The legal basis for the processing is the Controller's legitimate interest in marketing its services (Article 6 item 1 letter f of the GDPR) in connection with the User's consent given by the Act on Provision of Electronic Services and the Telecommunications Law. 
  5. Recipients of your personal data will be: email and server hosting providers, employees and associates of the Controller, and, where reasonable, legal service providers.
  6. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

IV. Newsletter

  1. We share knowledge and experience in our “#VSF Monthly newsletter.” You can sign up for it by providing your details as an email address, first name, and consent to receive emails about personalized offers and new products.
  2. By sending a request, you confirm that you have read and understood our Privacy Policy and consent to processing the data you have provided.
  3. The processing of your personal data is necessary for the controller's legitimate interest (Article 6 item 1 letter f of the GDPR) in connection with your permission to provide the services of the online contact form.
  4. Your personal data will be stored in our database for an indefinite period.
  5. Recipients of your personal data will be email and server hosting providers and, where reasonable, legal service providers.
  6. Your personal data will be processed for the duration of the controller's legitimate interest once you object. You can object by sending us a message to data@vuestorefront.io. After that, all your data will be erased from our database.

V. Careers

  1. You can apply via the Careers site for the current recruitment processes of your choice by providing your name, email address, optional phone number, LinkedIn profile address, and/or website. You can also attach an external document containing your resume and/or cover letter.
  2. By applying with LinkedIn, you consent to VSF acquiring your additional personal information publicly available on LinkedIn.
  3. The data you provide, referred to in paragraph 1 above, will be processed by the Controller:
    1. Suppose you prefer employment based on an employment contract. In that case, the data will be processed based on Article 6 item 1 letters b. and c. of the GDPR, i.e., to perform obligations arising from legal provisions related to the recruitment process, including in particular Article 22(1) of the Labour Code and to take steps at the request of the data subject before agreeing with VSF sp. z o.o. To carry out the recruitment process in the field of data not required – the legal basis for processing is consent (Article 6 item 1 letter an of the GDPR);
    2. suppose you prefer employment based upon a civil law contract. In that case, the data will be processed on the legal basis of Article 6 item 1 letter b. of the GDPR, i.e., to take steps at the data subject's request before agreeing with VSF sp. z o.o. To carry out the recruitment process in the field of data not required – the legal basis for processing is consent (Article 6 item 1 letter a. of the GDPR);
    3. suppose you have agreed to participate in future recruitments. In that case, the basis for processing your personal data after recruitment will be Article 6, item 1 letter a of the GDPR, i.e., your consent to processing your personal data to consider your candidacy in future recruitments.
  4. To determine or assert any claims or defend against such claims by VSF Sp—z o.o. - the legal basis for data processing is the legitimate interest of the controller (Article 6 item 1 letter f of the GDPR). Your personal data may be provided to subcontractors of VSF Sp. z o.o., such as suppliers of IT systems and IT services, entities providing accounting services, and, where reasonable, legal service providers.

  5. Your data will be stored for the time necessary to complete the recruitment process of  VSF Sp. z o.o. If you voluntarily agree to participate in future recruitments, your data will be stored for one year, and we will ask for your consent again.
  6. The processing period may be extended each time by the limitation period for claims if processing your personal data will be necessary to determine or assert possible claims or defense against such claims by the Controller.
  7. You are entitled to withdraw any of your consents at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.
  8. You have the right to access your data, rectify, delete, limit processing, the right to transfer data, right to object to data processing based on the legitimate interest of the Controller, as well as the right to complain to the supervisory authority.
  9. You have the right to object to data processing based on a legitimate interest of the Controller.
  10. Providing personal data by you is required for recruitment, and if you prefer employment based upon employment contract is also required by law, in particular the Polish Labour Code. The consequence of not providing your name, surname, and e-mail address is that your application cannot be considered in the recruitment process. As far as other data is concerned, the provision of such data is voluntary.
  11. Your data might be processed outside the European Economic Area if any of our Recruiters stay in so-called “third countries.” Should this ever occur, we have put in place rigorous procedures and precautions, both organizational and technological, to ensure the security of 

TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)

The Controller transfers personal data to third countries outside the European Economic Area, i.e.:

  1. VUE STOREFRONT INC., located in California, USA – is an entity belonging to the VUE STOREFRONT Group, a VSF Sp shareholder. z o. o. and applies similar principles of personal data protection as those adopted in our Privacy Policy;
  2. Google LLC, located in California, USA - a processor only of data allowing Website traffic analysis; Privacy standards information: https://policies.google.com/privacy?hl=en-US . Google has stated that it has implemented new standard contractual clauses, which you can read about here:
    1. https://business.safety.google/adscontrollerterms/,
    2. https://business.safety.google/adsprocessorterms/.

The Controller transfers personal data outside the European Economic Area to other entities only if expressly indicated in this Privacy Policy.

YOUR RIGHTS

  1. Concerning the processing of your personal data by the Controller, you have the right to: 
    1. access to your personal data;
    2. correction of your personal data;
    3. erasure of your personal data;
    4. restriction of processing;
    5. data portability.
  2. To perform any of your rights, please email us at data@vuestorefront.io

  3. Your request will be resolved in a timely and effective manner. We might contact you to arrange details of your request.

  4. Withdrawal of your personal data will not affect the lawfulness of processing based on consent before that fact.

  5. You have the right to object at any time to processing your data for direct marketing purposes, including profiling, if the processing is for the Controller's legitimate interest. 

  6. You may also object at any time to processing your data on grounds relating to your particular situation in cases where the legal basis for the processing is the Controller's legitimate interest.

  7. The complaint can also be lodged with a competent supervisory authority. For Poland, the supervisory authority is the President of the Data Protection Authority (PUODO) in Poland (https://uodo.gov.pl/).

COOKIES

  1. We use various cookies listed below, which may include personal data from your browser (like IP address, unique cookie identifier; unique device identifier and device type; domain, browser type and language, operating system, and system settings; country and time zone; previously visited websites; information about your interaction with our website; and access times and referring URLs). 
  2. By using our website without changing your browser's privacy settings, you consent to process your personal data collected as cookies. You can change your cookie settings at any time. Detailed information on the possibility and handling of cookies is available in the settings of your software (web browser).
  3. The website does not collect any information automatically except for the information contained in cookies.
  4. We use cookies to track your website usage and understand your preferences, to determine whether an email has been opened and acted upon, and to present you with advertising relevant to your interests.
  5. We also may receive reports based on the use of these technologies by our service/analytics providers (like Google Analytics). We use those reports to obtain statistics about traffic and site interaction so that we can improve our website and your experience.
  6. We do not link the information we store in cookies to any personal data you submit on our site.
  7. Third parties may also collect information via our website through cookies, third-party plug-ins, and widgets. These third parties collect data directly from your web browser, and the processing of this data is subject to their privacy policies.
  8. Some cookies will only be used if you use certain features or select specific preferences, and some cookies are essential to the website and will always be used.

Cookie

Domain

Type

Description

Duration

test_cookie

.doubleclick.net

Advertisement

This cookie is set by doubleclick.net. The purpose of the cookie is to determine if the user's browser supports cookies.

15 minutes

_fbp

.vuestorefront.io

Advertisement

This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.

3 months

bscookie

.www.linkedin.com

Advertisement

This cookie is a browser ID cookie set by Linked share Buttons and ad tags.

2 years

personalization_id

.twitter.com

Advertisement

This cookie is set by twitter.com. It is used integrate the sharing features of this social media. It also stores information about how the user uses the website for tracking and targeting.

2 years

UserMatchHistory

.ads.linkedin.com

Advertisement

Linkedin - Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences.

1 month

AnalyticsSyncHistory

.ads.linkedin.com

Advertisement

Used to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries

1 month

li_gc

.ads.linkedin.com

Advertisement

Used to store consent of guests regarding the use of cookies for non-essential purposes

2 years

_gcl_au

.vuestorefront.io

Analytics

This cookie is used by Google Analytics to understand user interaction with the website.

3 months

_ga

.vuestorefront.io

Analytics

This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors.

2 years

_gid

.vuestorefront.io

Analytics

This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visted in an anonymous form.

1 day

_gat_UA-108235765-1

.vuestorefront.io

Analytics

This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.

1 minute

_hjTLDTest

.vuestorefront.io

Analytics

When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.

session

_hjid

.vuestorefront.io

Analytics

This cookie is set by Hotjar. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.

1 year

_hjFirstSeen

.vuestorefront.io

Analytics

This is set by Hotjar to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.

Session

_hjIncludedInPageviewSample

.vuestorefront.io

Analytics

This cookie is set to let Hotjar know whether that user is included in the data sampling defined by your site's pageview limit.

30 minutes

_hjAbsoluteSessionInProgress

.vuestorefront.io

Analytics

This cookie is used to detect the first pageview session of a user. This is a True/False flag set by the cookie.

30 minutes

__hstc

.vuestorefront.io

Analytics

This cookie is set by Hubspot and is used for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

1 year 24 days

hubspotutk

.vuestorefront.io

Analytics

This cookie is used by HubSpot to keep track of the visitors to the website. This cookie is passed to Hubspot on form submission and used when deduplicating contacts.

1 year 24 days

lang

.ads.linkedin.com

Functional

This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.

session

bcookie

.www.linkedin.com

Functional

This cookie is set by LinkedIn. The purpose of the cookie is to enable LinkedIn functionalities on the page.

2 years

lidc

.www.linkedin.com

Functional

To facilitate data center selection.

1 day

lang

.www.linkedin.com

Functional

This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.

session

__hssc

.vuestorefront.io

Functional

This cookie is set by HubSpot. The purpose of the cookie is to keep track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp.

30 minutes

__hssrc

.vuestorefront.io

Necessary

This cookie is set by Hubspot. According to their documentation, whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.

session

cookieyesID

.vuestorefront.io

Necessary

Unique identifier for visitors used by CookieYes with respect to the consent

1 year

cky-consent

.vuestorefront.io

Necessary

The cookie is set by CookieYes to remember the user's consent to the use of cookies on the website.

1 year

cookieyes-necessary

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Necessary' category.

1 year

cookieyes-functional

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Functional' category

1 year

cookieyes-analytics

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Analytics' category.

1 year

cookieyes-performance

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Performance' category

1 year

cookieyes-advertisement

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Advertisement' category

1 year

cookieyes-other

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies categorized as 'Other'

1 year

pageviewCount

.vuestorefront.io

Necessary

This cookie counts a number of pageviews and is used to display cookie consent banner.

30 days

pa_a

.vuestorefront.io

Necessary

Used to provide a sign-in functionality on our websites.

60 minutes

pa_ae 

.vuestorefront.io

Necessary

Used to provide a sign-in functionality on our websites.

60 minutes

SECURITY OF PERSONAL DATA

The Controller conducts a risk analysis on an ongoing basis to ensure that personal data is securely processed by the Controller, ensuring that only authorized persons have access to the data and only to the extent necessary for their tasks. The Controller shall ensure that all operations on personal data are recorded and carried out only by authorized employees and associates.

The Controller shall take all necessary measures to ensure that his subcontractors and other cooperating entities also guarantee appropriate security measures when they process personal data on behalf of the Controller.

CHANGES IN PRIVACY POLICY

 

We may periodically update our Privacy Policy. We will inform you about the most significant changes, but some will be made without notice. By using vuestorefront.io , you agree to be bound by the current version of our Privacy Policy published at https://vuestorefront.io/privacy-policy . We encourage you to review this Privacy Policy periodically.

GOVERNING LAW

Any claim relating to our Privacy Policy shall be governed by the laws of the Republic of Poland without regard to its conflict of law provisions.

QUESTIONS & CONTACT

Contact us with any issues regarding the processing of personal data or the use of cookies by emailing data@vuestorefront.io.