§1. General Provisions
The data shall be administered by Sagra Technology limited liability company with its registered office in Szczecin, entered into the Register of Entrepreneurs under the KRS number: 0000122856, whose registration files are kept by the District Court Szczecin Centrum in Szczecin, 13th Commercial Department of the National Court Register, NIP: 8520604961, REGON: 008080085. Data shall be protected in accordance with the requirements of generally applicable law.
Since 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) shall apply. The most important goal of the GDPR shall be strengthening protection of personal data which are collected and processed by companies and institutions operating in the European Union.
§2. Data Controller
Sagr Technology Sp. z o.o. in Szczecin shall be the Administrator of Personal Data, which means an entity that independently or jointly with others sets the purposes and means of processing personal data.
We may collect information about you from various sources, including directly from you (for example from personal contact or electronic correspondence) as well as from publicly available sources and other external sources, e.g. CVs, databases and websites available online and others; from other documents or forms that you have submitted to participate in initiatives sponsored or supported by Sagra Technology Sp. z o.o.
The Personal Data shall be processed:
- in accordance with the provisions on personal data protection,
- to the extent and for the purpose necessary to establish, shape the content of the Agreement, change or to resolve it, and implement appropriately,
- to the extent and for the purpose necessary to fulfil legitimate interests (legally justified purposes) of the Data Controller,
- to the extent and for the purpose consistent with the consent expressed by you if, for example, you have subscribed to the newsletter, downloaded material from the site, etc.
Sagra Technology Sp. z o.o. may collect and use some or all of the following categories of personal data:
- Your first name, last name and contact details (telephone number, fax number, email address).
- professional information, such as the workplace, position,
- information concerning contacts with us, for example about the type of meetings we have held, dates of meetings, topics discussed, questions about our company and products, a type of materials that we have presented to you and any of your comments on them,
- personal preferences, for example a preferred method of contacting us and all your requests regarding your personal data processed by us.
We process this information in order to plan potential cooperation with you or your employer, make contact with you (by phone, by email or through a personal meeting) to provide information on potential cooperation, products of Sagra Technology Spółka z o.o. and to ensure that we provide you with adequate information. The data shall be also processed in order to process any existing relationships that may bind us with you and perform our contractual rights and obligations if we are bound with you by an agreement or with the entity for which you work or with which you cooperate.
You may resign from receiving information from Sagra Technology at any time by sending a message to: [email protected]
The legal basis for data processing is our legitimate interest in maintaining a relationship with you or your employer and, if applicable, your consent. You have the right to withdraw your consent at any time, provided that this does not affect lawfulness of processing of your data prior to its withdrawal.
In the event of withdrawal of the consent, we shall cease all relevant processing, however we may still need to process some of your personal data if it is necessary to enforce our contractual rights and obligations, if we are bound by an agreement with you or your employer, comply with legal claims or protection against them.
Until we are bound by an agreement with you or your employer, the legal basis for data processing shall be the need to process them in order to execute this agreement. If the above legal bases cease to be applicable, we may continue to process your personal data for an additional period to establish, enforce legal claims or protect against them or if it is required by law.
Providing personal data to Sagra Technology is voluntary. However, in some cases we shall require user information to give the user access to certain parts of our websites, e.g. In order to download certain content. Sagra Technology also processes some information to improve the website and make it more user-friendly.
Data that we may acquire concern:
- dates and times of access,
- browsed pages and files,
- user’s country
- user organization (based on the IP address),
- type and version of the browser.
In addition, the user may provide us with information such as his/her contact details and information about the organization. Some of the ways in which we may obtain this information are:
- newsletter subscription
- downloading materials available on the website
- online forms
§3. Rights of data subjects
Every data subject (provided that we are the data administrator) has the right to access data, rectify, delete or limit processing, the right to object, the right to submit a complaint to the supervisory authority. In order to exercise the indicated rights, you may report to our registered office or send an application to our address by mail or email.
You may contact the person supervising processing of personal data in our organization by email at the following email address: [email protected]
GDPR aims at providing every person with the opportunity to protect their rights and freedoms and to ensure control over processing of their data. To this end, you can exercise your rights:
– the right to access the data – the data subject has the right to receive information, including which of their data we process, for what purposes they are processed, and obtain copies thereof.
You may ask us whether we process your personal data.
– the right to delete the data (the right to be forgotten) – the data subject may indicate the scope and circumstances justifying requested deletion of the data, e.g. data are no longer necessary to achieve the purposes for which they were collected, and there are no legal grounds for further processing of the data, the data is processed unlawfully.
The right to delete the data may be exercised if, being the Data Administrator, we have no legal basis for processing the data. Please note that if you have an active agreement with us, data processing is necessary for its implementation and your personal data may not be deleted.
– the right to transfer the data – the data subject has the right to receive their personal data in a structured, commonly used machine-readable format.
A request for transfer of the data may be submitted by the data subject.
– the right to limit data processing – the data subject indicates that there are circumstances fulfilling conditions specified in art. 18 of GDPR for limiting processing of their data, e.g. we do not need certain data, there are no premises for further processing and the data subject requests to suspend data operations or not to delete data.
Any request for limiting data processing shall require individual consideration in terms of existing grounds for data processing, the purpose and scope of their processing.
– the right to rectify the data – at any time, when the need arises, the data subject shall inform us about the change in their personal data.
You can ask us to rectify incorrect or complete incomplete personal data.
– the right to object – at any time, you can object to data processing in an automated manner, as well as object to data processing for marketing purposes.
Objection to data processing may be submitted, for example, at our registered office, by mail to our address, or by email: [email protected]
– the right to file a complaint regarding personal data processing with the supervisory body.
In the matter of exercising your rights, we shall provide information in writing, by email or it may be picked up at our registered office after prior appointment.
If we receive a request for exercising the personal data right, without undue delay, and in any case within one month from the date of receipt of the request, we shall provide any data subject with information about actions taken in connection with exercising the above-mentioned rights. If necessary, this period may be extended by another two months due to complexity of the request or a number of requests. Within one month of receipt of the request, we shall inform the data subject about such extension, stating the reasons for the delay.
§4. Protection of personal data
Both during the period of validity of current provisions of the generally applicable law on personal data protection (Act on personal data protection and the implementing regulation) and in the light of European regulations, we shall process your data using all technical and organizational measures necessary to ensure data security. Your personal data are the most valuable resources for our organization. Sagra Technology has implemented and continues to implement appropriate technical and organizational measures to ensure protection of personal data processing, in particular to protect data against unauthorized access, unauthorized removal, loss and alteration, damage or destruction. In addition, all our employees and co-operators are obliged to maintain confidentiality which includes all information regarding your Personal Data.
Our employees shall receive training on protected information security, including personal data protection. We have implemented data encryption and we have introduced access control, thanks to which we minimize the effects of possible data security breaches. We do not share the personal data with entities other than those authorized under the applicable law.
§5. Data Protection Officer
At present, we have appointed the Information Security Administrator to coordinate the activities and supervise security of personal data and the Data Protection Officer. You can contact the Data Protection Officer by mail, writing to the address of our registered office or to the e-mail address: [email protected]
§6 Sharing your personal data
Sagra Technology Sp. z o.o. may from time to time share your personal data with other entities in relation to the purpose for which your Personal Data are collected. In particular, we may share your personal data with:
- entities that cooperate with us in connection with the proposed or actual Sagra Technology projects,
- third parties that provide Sagra Technology with goods or services, such as legal advisers, lawyers, auditors and IT service providers,
- with other third parties pursuant to the court order, to protect the interests of Sagra Technology or in other situations where it is required by law or for the purposes of court proceedings.
Processing your personal data in the manner described above does not involve transferring them to other countries, including countries outside the European Union (EU) / European Economic Area (EEA).
§7. Storing your personal data
If processing of your data is based on your consent or our legitimate interest in maintaining a relationship with you, Sagra Technology stores your personal data only until you withdraw your consent or your express objection to data processing.
If data processing is necessary for the purpose of executing the agreement to which you or your employer is a party; Sagra Technology processes your personal data until execution or termination of the agreement or until all contractual claims become barred.
If the above legal bases cease to be applicable, we may continue to process your personal data to establish, enforce legal claims or protect against them – for an additional period of up to 10 years or for the period required by law.
§8. Sensitive personal data
According to the general rule, Sagra Technology shall not collect “sensitive personal data” through its website. “Sensitive personal data” shall refer to information on racial or ethnic origin, political views, religious or philosophical beliefs, trade union membership or regarding health or sex life. Providing us with sensitive personal data voluntarily (e.g. by providing us with a CV or by a job application online), the user expressly consents to the use of personal data as described in this Policy.
§9. Third-party websites
§11. Google Analytics
The Sagra Technology website uses Google Analytics, a web analytic service provided by Google, which uses information generated by the cookies about the use of this website