Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

With reference to Article 13 GDPR, i.e. the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (GDPR), we provide information on the processing of personal data for specific categories of persons.

DATA CONTROLLER AND CONTACT DETAILS

The data administrator is VSF Sp. z o.o. (Polish limited liability company) located in Warsaw (00-032), Przeskok 2 Str., Astoria Business Link, In order to contact us please send an email to data[at]vuestorefront.io 

DATA PROTECTION OFFICER

We have appointed a Data Protection Inspector, who is Mr Krzysztof Łoś. To contact him, please send an email to klos@vuestorefront.io.

CANDIDATES

Purpose

Legal basis

Retention period

to recruit an employee

Article 6(1)(c) GDPR - for the purpose of fulfilling the employer's legal obligations under generally applicable legislation.

up to 3 months after termination of employment, and if you agree to participate in future recruitments;

to recruit an employee

Article 6(1)(c) GDPR - for the purpose of fulfilling the employer's legal obligations under generally applicable legislation.

 up to 1 year after submission of documents - after this time we will ask you again for your consent.

to recruit an employee

Article 6(1)(a) or Article 9(2)(a) GDPR - for purposes arising from your consent to the processing of your personal data, if processed on that basis (applies to data such as, for example, your image) - for data you provide us with in addition in your application documents or other documents.

up to 1 year after submission of documents - after this time we will ask you again for your consent.

CONTRACTORS

Purpose

Legal basis

Retention period

establishing business relations (offering)

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until an effective objection is made

concluding and executing a contract

Until the expiration of the statute of limitations for any claims

until the expiration of the statute of limitations for potential claims

filing of complaints, claims and requests

Article 6(1)(f) GDPR -  the legitimate interest of the controller

one year from the end of the complaint procedure or investigation of the complaint or request

maintaining accounting and tax records

Article 6(1)(c) GDPR – compliance with a legal obligation

6 years

asserting and defending against claims

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until the expiration of the statute of limitations for potential claims

CLIENTS

Purpose

Legal basis

Retention period

establishing business relationship (sales)

Article 6(1)(f) GDPR - the legitimate interest of the controller

until an effective objection is made

concluding and executing a contract

Article 6(1)(b) GDPR - in order to conclude and perform a contract

until the expiration of the statute of limitations for potential claims

filing of complaints, claims and requests

Article 6(1)(f) GDPR -  the legitimate interest of the controller

one year from the end of the complaint procedure or investigation of the complaint or request

maintaining accounting and tax records

Article 6(1)(c) GDPR – compliance with a legal obligation

6 years

asserting and defending against claims

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until the expiration of the statute of limitations for potential claims

marketing of own services and products

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until an effective objection is made

marketing our partners' services and products

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until an effective objection is made

CLIENT’S REPRESENTATIVES

Purpose

Legal basis

Retention Period

establishing business relationship (sales)

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until an effective objection is made

concluding and executing a contract

Article 6(1)(b) GDPR - in order to conclude and perform a contract

until the expiration of the statute of limitations for potential claims

filing of complaints, claims and requests

Article 6(1)(f) GDPR -  the legitimate interest of the controller

one year from the end of the complaint procedure or investigation of the complaint or request

maintaining accounting and tax records

Article 6(1)(c) GDPR – compliance with a legal obligation

6 years

asserting and defending against claims

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until the expiration of the statute of limitations for potential claims

clearance of accounts receivable

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until entire settlement

MAILERS

Purpose

Legal basis

Retention Period

recording mail and responding to it

Article 6(1)(f) GDPR -  the legitimate interest of the controller

maximum of 6 years from receipt or posting of mail

asserting and defending against claims

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until the expiration of the statute of limitations for potential claims

WEBSITE USERS

Purpose

Legal basis

Retention period

ensuring proper operation of the website

Article 6(1)(f) GDPR -  the legitimate interest of the controller

session

statistics

Article 6(1)(f) GDPR -  the legitimate interest of the controller

up to 2 years, depending on cookie

asserting and defending against claims

Article 6(1)(f) GDPR -  the legitimate interest of the controller

until the expiration of the statute of limitations for potential claims

RECIPIENTS

Recipients of your personal data will be: email and server hosting provider, external IT, as well as HR and accounting services, external payroll and HR software providers, external training providers, administrator's contractors.

YOUR RIGHTS

You are entitled to:

  • access to your data, rectification, restriction of processing, the right to erasure of your data if we are not obliged to process it under applicable law, and if the basis for processing of your personal data was consent, which you have withdrawn,
  • to file a complaint to the Office for Personal Data Protection,
  • to transfer to another controller the data processed on the basis of the consent given, if technically possible, and the right to receive a copy of this data in a structured format, whereby this right can only be exercised if the processing is carried out by automated means,
  • to withdraw consent to the processing of personal data, if given, where the withdrawal of consent does not affect the lawfulness of the existing processing of such data,
  • to object to the processing of personal data pursuant to Article 6(1)(f) GDPR.

IS THE PROVISION OF DATA VOLUNTARY (AND CONSEQUENCES)?

The provision of personal data processed under:

  • Article 6(1)(c) and Article 9(2)(b) GDPR - is a legal obligation (in particular labour law), and failure to provide it will prevent the conclusion of a contract and the performance of employment.
  • Article 6(1)(f) GDPR - is voluntary and stems from legitimate purposes, and failure to provide such data will prevent the realization of the specified purpose, as well as raising a justified objection to the processing of such data.
  • Article 6(1)(a GDPR - is voluntary, and failure to provide such data will only prevent the realization of the stated purpose of consent.

COOKIES

We use cookies as listed here:

Cookie

Domain

Type

Description

Duration

test_cookie

.doubleclick.net

Advertisement

This cookie is set by doubleclick.net. The purpose of the cookie is to determine if the user's browser supports cookies.

15 minutes

_fbp

.vuestorefront.io

Advertisement

This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.

3 months

bscookie

.www.linkedin.com

Advertisement

This cookie is a browser ID cookie set by Linked share Buttons and ad tags.

2 years

personalization_id

.twitter.com

Advertisement

This cookie is set by twitter.com. It is used integrate the sharing features of this social media. It also stores information about how the user uses the website for tracking and targeting.

2 years

UserMatchHistory

.ads.linkedin.com

Advertisement

Linkedin - Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences.

1 month

AnalyticsSyncHistory

.ads.linkedin.com

Advertisement

Used to store information about the time a sync with the lms_analytics cookie took place for users in the Designated Countries

1 month

li_gc

.ads.linkedin.com

Advertisement

Used to store consent of guests regarding the use of cookies for non-essential purposes

2 years

_gcl_au

.vuestorefront.io

Analytics

This cookie is used by Google Analytics to understand user interaction with the website.

3 months

_ga

.vuestorefront.io

Analytics

This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors.

2 years

_gid

.vuestorefront.io

Analytics

This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visted in an anonymous form.

1 day

_gat_UA-108235765-1

.vuestorefront.io

Analytics

This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.

1 minute

_hjTLDTest

.vuestorefront.io

Analytics

When the Hotjar script executes we try to determine the most generic cookie path we should use, instead of the page hostname. This is done so that cookies can be shared across subdomains (where applicable). To determine this, we try to store the _hjTLDTest cookie for different URL substring alternatives until it fails. After this check, the cookie is removed.

session

_hjid

.vuestorefront.io

Analytics

This cookie is set by Hotjar. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.

1 year

_hjFirstSeen

.vuestorefront.io

Analytics

This is set by Hotjar to identify a new user’s first session. It stores a true/false value, indicating whether this was the first time Hotjar saw this user. It is used by Recording filters to identify new user sessions.

Session

_hjIncludedInPageviewSample

.vuestorefront.io

Analytics

This cookie is set to let Hotjar know whether that user is included in the data sampling defined by your site's pageview limit.

30 minutes

_hjAbsoluteSessionInProgress

.vuestorefront.io

Analytics

This cookie is used to detect the first pageview session of a user. This is a True/False flag set by the cookie.

30 minutes

__hstc

.vuestorefront.io

Analytics

This cookie is set by Hubspot and is used for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).

1 year 24 days

hubspotutk

.vuestorefront.io

Analytics

This cookie is used by HubSpot to keep track of the visitors to the website. This cookie is passed to Hubspot on form submission and used when deduplicating contacts.

1 year 24 days

lang

.ads.linkedin.com

Functional

This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.

session

bcookie

.www.linkedin.com

Functional

This cookie is set by LinkedIn. The purpose of the cookie is to enable LinkedIn functionalities on the page.

2 years

lidc

.www.linkedin.com

Functional

To facilitate data center selection.

1 day

lang

.www.linkedin.com

Functional

This cookie is used to store the language preferences of a user to serve up content in that stored language the next time user visit the website.

session

__hssc

.vuestorefront.io

Functional

This cookie is set by HubSpot. The purpose of the cookie is to keep track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp.

30 minutes

__hssrc

.vuestorefront.io

Necessary

This cookie is set by Hubspot. According to their documentation, whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.

session

cookieyesID

.vuestorefront.io

Necessary

Unique identifier for visitors used by CookieYes with respect to the consent

1 year

cky-consent

.vuestorefront.io

Necessary

The cookie is set by CookieYes to remember the user's consent to the use of cookies on the website.

1 year

cookieyes-necessary

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Necessary' category.

1 year

cookieyes-functional

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Functional' category

1 year

cookieyes-analytics

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Analytics' category.

1 year

cookieyes-performance

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Performance' category

1 year

cookieyes-advertisement

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies in the 'Advertisement' category

1 year

cookieyes-other

.vuestorefront.io

Necessary

This cookie is set by CookieYes and is used to remember the consent of the users for the use of cookies categorized as 'Other'

1 year

pageviewCount

.vuestorefront.io

Necessary

This cookie counts a number of pageviews and is used to display cookie consent banner.

30 days

pa_a

.vuestorefront.io

Necessary

Used to provide a sign-in functionality on our websites.

60 minutes

pa_ae

.vuestorefront.io

Necessary

Used to provide a sign-in functionality on our websites.

60 minutes