langpl langen
  1. Homepage
  2. Privacy and Cookie Policy

Privacy and Cookie Policy

This Privacy and Cookie Policy (hereinafter: the "Privacy Policy") contains information regarding the processing of your personal data and the use of cookies in connection with your use of the website available at: https://eurohansa.pl (hereinafter: the "Website").

 

1.      Information about the Data Controller

The Data Controller is:

Eurohansa sp. z o.o., with its registered office in Toruń at ul. Letnia 10–14, 87-100 Toruń, entered into the Register of Entrepreneurs maintained by the District Court in Toruń, 7th Commercial Division of the National Court Register under KRS number: 0001129943, NIP: 8961644091 (hereinafter: the "Data Controller" or the "Company"), contact details: gdpr@eurohansa.pl.

 

2.      Contact Point

The Data Controller has appointed a Data Protection Officer who can be contacted at: iod@eurohansa.pl.

 

3.      Purposes and legal bases of data processing

DATA OF WEBSITE USERS

Purpose of Processing Personal Data Legal Basis
To contact you regarding the matter you described.
  • Full name
  • Email address
  • Message content
  • Other necessary data related to your inquiry

Article 6(1)(f) GDPR

- processing is necessary for the purposes of the legitimate interests pursued by the Company, namely responding to your message sent via the contact details provided on our website.
Purpose of Processing Personal Data Legal Basis
To contact you and maintain Communication regarding your inquiry via email.
  • Full name
  • Email address
  • Message content
  • Other necessary data related to your inquiry

Article 6(1)(f) GDPR

- legitimate interest of the Company to respond to and continue communication regarding your message.

Article 6(1)(b) GDPR

- processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
Purpose of Processing Personal Data Legal Basis
Performance of a contract to which the data subject is a party or taking steps at the request of the data subject prior to entering into a contract.
  • Full name
  • Email address
  • Phone number
  • Address
  • Company details (name, VAT number and other identifiers), if applicable
  • Other contract-related data

Article 6(1)(b) GDPR

- processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract.
Purpose of Processing Personal Data Legal Basis
Fulfillment of obligations arising from tax law.
  • Full name
  • Email address
  • Phone number
  • Address
  • Company details (name, VAT number and other identifiers), if applicable
  • Bank account number
  • Invoice data
  • Other contract-related data

Article 6(1)(c) GDPR

- processing is necessary for compliance with a legal obligation to which the Company is subject.
Purpose of Processing Personal Data Legal Basis

Conducting a recruitment process.
  • Full name
  • Email address or phone number
  • Data included in the CV (e.g. experience, education)
  • Message content

Article 6(1)(b) GDPR

- necessary to carry out the current recruitment process for the offered position (contractual necessity).

Article 6(1)(a) GDPR

- processing is based on consent, e.g. for participation in future recruitment processes.
Purpose of Processing Personal Data Legal Basis

Use of cookies – other than strictly necessary cookies.
  • Information collected via cookies on the website

Article 6(1)(a) GDPR

- processing is based on consent (requested upon first visit to the website).
Purpose of Processing Personal Data Legal Basis

Analysis of your activity on the website.
  • IP address
  • Date and time of website visit
  • Type of web browser used
  • Browser language
  • Time spent on the website
  • Time spent on individual pages

Article 6(1)(f) GDPR

- processing is necessary for the purposes of the legitimate interests pursued by the Company, namely understanding user activity on the website.
Purpose of Processing Personal Data Legal Basis
Archiving and evidence purposes.
  • Full name
  • Email address
  • Message content
  • Other necessary data related to your inquiry
  • Address
  • Company details (name, VAT ID, and other identifiers) – if applicable
  • Other contract-related data
  • Bank account number
  • Invoice data
  • Information collected via cookies
  • IP address
  • Date and time of website visit
  • Type of web browser used
  • Browser language
  • Time spent on the website
  • Time spent on individual pages
  • Other necessary data

Article 6(1)(f) GDPR

- processing is necessary for the purposes of the legitimate interests pursued by the Company, namely securing information that may serve as legal evidence.
Purpose of Processing Personal Data Legal Basis

Establishment, exercise, or defense of legal claims.
  • Full name
  • Email address
  • Message content
  • Other necessary data related to your inquiry
  • Address
  • Company details (name, VAT ID, and other identifiers) – if applicable
  • Other contract-related data
  • Bank account number
  • Invoice data
  • Information collected via cookies
  • IP address
  • Date and time of website visit
  • Type of web browser used
  • Browser language
  • Time spent on the website
  • Time spent on individual pages
  • Other necessary data

Article 6(1)(f) GDPR

- processing is necessary for the purposes of the legitimate interests pursued by the Company, namely protecting the Company’s financial interests.
Purpose of Processing Personal Data Legal Basis

Compliance with obligations under the GDPR.
  • Full name
  • Email address
  • Message content
  • Other necessary data related to your inquiry
  • Address
  • Company details (name, VAT ID, and other identifiers) – if applicable
  • Other contract-related data
  • Bank account number
  • Invoice data
  • Information collected via cookies
  • IP address
  • Date and time of website visit
  • Type of web browser used
  • Browser language
  • Time spent on the website
  • Time spent on individual pages
  • Other necessary data

Article 6(1)(c) GDPR

- processing is necessary for compliance with a legal obligation of the Company;

Article 6(1)(f) GDPR

- processing is necessary for the purposes of the legitimate interests pursued by the Company, e.g. maintaining records and logs, and keeping track of individuals who exercised their GDPR rights.

 

4.      Obligation to Provide Your Personal Data

You are not obligated to provide us with your personal data. Providing personal data is voluntary and depends on your decision. However, providing certain personal data may be necessary to fulfil your expectations, e.g., to contact the Data Controller or to conclude or perform a contract with the Data Controller. Please note that if you contact us regarding any matter, providing your data may be necessary, e.g., to respond to your inquiry. You are obligated to provide us with your data when they are processed by the Company in order to fulfil obligations arising from tax law and the GDPR.

 

5.      Right to Withdraw Consent

If the processing of personal data is based on your consent, you may withdraw that consent at any time:

  • at your discretion by changing your settings, or
  • by sending an email directly to: iod@eurohansa.pl

If your personal data was processed based on consent, the withdrawal of consent does not render the prior processing unlawful. In other words, until consent is withdrawn, we have the right to process your personal data, and the withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

 

6.      6. Profiling and Automated Decision-Making

We inform you that your data will not be used for automated decision-making, including profiling.

 

7.      Recipients of Personal Data

Like most businesses, we use the support of external service providers in our operations, which may involve the need to share personal data.
Therefore, if necessary, we may transfer your data to external service providers.

External service providers involved in the processing of your personal data include:

  • Hosting providers storing data on servers,
  • Entities providing technical support, if the technical tasks involve areas where personal data is stored,
  • Legal service providers, who are bound by professional secrecy and gain access to personal data due to the need for legal assistance,
  • Other subcontractors, who may access the data if it is necessary for providing services.

Additionally, we may be required by law or a competent authority’s decision to share your personal data with other public or private entities. We ensure that every request for data disclosure is carefully and thoroughly analysed to avoid unauthorized access.

 

8.      Transfer of Data Outside the European Economic Area

We inform you that your personal data will not be transferred outside the European Economic Area.

 

9.      Personal Data Retention Period

In accordance with applicable legal regulations, we do not process your personal data indefinitely, but only for the time necessary to achieve the intended purpose. After this period, your personal data will be irreversibly deleted or destroyed.

Below are the data retention periods:

  • Correspondence handling – data will be processed for the duration of correspondence,
  • Contacting you via email – data will be processed for the duration of the communication,
  • Contract conclusion and performance – data will be processed for the duration of the contract and until the expiration of any claims,
  • Fulfilling tax law obligations – data will be retained for the period required by law, i.e., 5 years from the end of the tax year in which the obligation arose,
  • Recruitment processes – data will be retained until the recruitment process ends or until a valid objection is submitted (for ongoing recruitment), or until consent is withdrawn but no longer than 6 months (for future recruitments),
  • Use of cookies (excluding necessary cookies) – data will be processed until consent is withdrawn or the purpose is achieved,
  • Website activity analysis – data will be processed until a valid objection is submitted or the purpose is achieved,
  • Archiving and evidence purposes – data will be processed until a valid objection is submitted or the purpose is achieved,
  • Establishing, exercising, or defending claims – data will be processed until claims become time-barred, with the limitation period depending on the applicable law,
  • Fulfilling obligations under the GDPR – data will be processed until it is no longer useful, a valid objection is submitted, or the statute of limitations for our liability as the Data Controller expires.

 

10.  Your Rights Related to Personal Data Processing

Under the GDPR, you have the right to:

  • access your personal data,
  • rectify your personal data,
  • erase your personal data,
  • restrict the processing of your personal data,
  • object to the processing of your personal data,
  • transfer your personal data,
  • lodge a complaint with a supervisory authority (e.g., the President of the Personal Data Protection Office), if you believe that your data is being processed unlawfully.

As the Data Controller, we respect your rights under the data protection regulations and strive to facilitate their exercise to the greatest extent possible. Please note that the above rights are not absolute, meaning that in some cases we may legally refuse to fulfil them. However, any such refusal will occur only after thorough analysis and only if it is necessary.

 

11.  Cookies

The Data Controller uses cookies on the website, just like most websites. Cookies are small text files saved on your computer, phone, tablet, or other device. These files can be read by our system or systems of third parties whose services we use. We use cookies based on your consent, except where they are strictly necessary for the website to function properly or when their use is based on our legitimate interest. Cookies that are not essential remain blocked until you give your consent. When you first visit the website, a banner appears asking for your consent and allowing you to manage cookie preferences.

Cookies serve various helpful functions on the website, including:

  • Essential (necessary) cookies – required for the proper functioning of the website; these do not require consent,
  • Marketing/advertising – used to target advertising content,
  • Statistics – used to analyze user behavior on the website (e.g., number of visitors, time spent on the site, most viewed content). This helps us improve the website and tailor it to user preferences. We use Google tools such as Google Analytics to track activity and create statistics.

Your browser is typically set to allow cookies by default. Therefore, during your first visit we request your consent. If you do not wish to use cookies, you can change your browser settings to block them completely or to notify you each time cookies are placed.

You can manage cookies through your browser by:

  • Blocking all or selected cookies,
  • Blocking cookies from specific websites,
  • Deleting stored cookies and site data at any time.

You can also manage cookie settings directly on our website under the "Cookies" tab.

Browsers also offer incognito mode, which prevents browsing history and downloaded files from being stored. Cookies created in incognito mode are deleted once all windows of the mode are closed. Please note that disabling or limiting cookies may affect the functionality of our website and many others.

 

12.  Types of Cookies Used

Name Description Expiration Function
CookieConsent Third-party cookies- Cookiebot 1 year Stores the user’s consent status for cookies on the website.
PHPSESSID First-party cookies Session Maintains the user’s session state on the website.
XSRF-TOKEN First-party cookies 1 day Ensures secure browsing by preventing cross-site request forgery. Essential for site security.
_ga Third-party cookie Google Analytics 2 years Used by Google Analytics to collect data about the number od user visit and visit timestamps.
_ga_# Third-party cookie Google Analytics 2 years Used by Google Analytics to collect data about the number od user visit and visit timestamps.

 

13.  Privacy Policy Updates

We may modify this Privacy Policy, in particular due to technological developments or changes in applicable laws. You will be informed of any amendments to this Privacy Policy in a manner appropriate to the method of data processing. This Privacy Policy is effective as of 11.04.2025.

 

 

 

langpl langen