| Standard data: full name, e-mail address, phone number, company name, job title, company address. |
Direct marketing of the Administrator and its partners. Providing the user with commercial and marketing information to promote and advertise IT.integro’s own services and products or the services and products of third parties (IT.integro’s partners). |
Consent given by the data subject. Article 6 sec. 1.a of the GDPR. |
Until the consent is withdrawn |
Server service providers, providers of web analytics software, providers of software for direct marketing activities, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, social media, company and industry portals, services providing video files. The recipients of the data may process the data provided to them for their own purposes. |
| Standard data: full name, e-mail address, phone number, company name, job title. |
Newsletter mailing. |
Consent given by the data subject. Article 6 sec. 1.a of the GDPR. |
Until the consent is withdrawn. |
Server service providers, providers of web analytics software, providers of software for direct marketing activities, government authorities to which the entrepreneur is subject, technical entities providing communication means. |
| Standard data: full name, e-mail address, phone number, company name, job title. |
Newsletter mailing regarding changes in the application environment. |
Data necessary for the performance of the agreement. Article 6 sec. 1.b of the GDPR. |
Until the termination of service delivery. |
Server service providers, providers of software for direct marketing activities, government authorities to which the entrepreneur is subject, technical entities providing communication means. |
| Standard data: full name, e-mail address, phone number, company name, job title, bank account numbers, VAT registration numbers, National Business Registry No., company addresses. Data generated as a result of concluding an agreement. |
conclusion of an agreement for the provision of the application, implementation services and maintenance services. Activities related to: application preparation and implementation, IT support for the application, application update, and version change
|
Data necessary for the preparation, conclusion and performance of the agreement. Article 6 sec. 1.b of the GDPR. |
Until the termination of service delivery. |
Legal entities, server service providers, tax authorities, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, banking entities, auditorium companies, telecommunication entities, electronic document signatures providers. |
| Standard data: full name, e-mail address, phone number, company name, job title, company address or employee’s workplace address. |
Delivery of physical marketing materials. Building the company’s image among customers. |
Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
Until the objection is raised or service delivery terminated. |
Server service providers, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, courier and postal companies. |
| Standard data: full name, e-mail address, phone number, company name, job title. |
Provision of information and marketing materials to customers through newsletter distribution, email communication, and phone contacts. Information about new products. Direct marketing of the Administrator. |
Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
Until the objection is raised or service delivery terminated. |
Server service providers, providers of web analytics software, providers of software for direct marketing activities, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, telecommunication entities, social media, company and industry portals, services providing video files. The recipients of the data may process the data provided to them for their own purposes. |
| Standard data: full name, company name. |
Fulfillment of mandatory law provisions arising from the provisions on the pursuit of claims. The right to pursue claims. |
Processing is necessary to comply with a legal obligation incumbent on the Administrator. Article 6 sec. 1.c of the GDPR. |
Three years from the completion of actions that could have resulted in claims. |
Legal entities, server service providers, government authorities to which the entrepreneur is subject, technical entities providing communication means, electronic document signatures providers, banking entities, auditorium companies, telecommunication entities. |
| Standard data: full name, company name, VAT registration numbers, National Business Registry No., job title, company address, home address, PESEL number, bank account numbers. |
Fulfillment of mandatory law provisions arising from the provisions of tax law. Tax law. |
Processing is necessary to comply with a legal obligation incumbent on the Administrator. Article 6 sec. 1.c of the GDPR. |
Five years from the completion of actions that could have resulted in a legal obligation. |
Legal entities, server service providers, government authorities to which the entrepreneur is subject, technical entities providing communication means, banking entities, electronic document signatures providers, telecommunication entities, auditorium companies, accounting software providers, accounting auditors. |
| Standard data: Image. |
Event registration and the creation of marketing materials from visual and audio recordings. Direct marketing of the Administrator and the creation of materials for promotional activities. |
Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
Until the objection is raised. |
Server service providers, suppliers related to the technical organization of conferences and events, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, social media, company and industry portals, services providing video files. The recipients of the data may process the data provided to them for their own purposes. |
| Standard data: image. |
Placing an image on identification badges for the purpose of ensuring the security of information, facilities, and individuals within their vicinity. |
Ensuring information, physical, and personal security on the company’s premises. Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
For the duration of employment or cooperation. |
Server service providers, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means. |
| Standard data: image. |
Placing an image in the entrepreneur’s systems for the purposes of identification, collaboration, and communication between employees, collaborators, partners, and clients. |
Collaboration and identification among employees, collaborators, partners and customers. Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
For the duration of employment or cooperation. |
Legal entities, server service providers, company customers, vendors, contacting individuals, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means. |
| Standard data: image. |
Recording and using the image in connection with marketing activities of the Administrator. |
Consent given by the data subject. Article 6 sec. 1.a of the GDPR. |
Until the consent is withdrawn. |
Server service providers, providers of web analytics software, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, social media, company and industry portals, services providing video files. The recipients of the data may process the data provided to them for their own purposes. |
| Standard data: Cookies. |
Collecting data for web analytics and creating statistics that help understand how users interact with the website, enabling the improvement of its structure and content. Maintaining the user’s session on the website. Storing information about the user’s consent to the use of third-party cookies (Google Analytics, SALESmanago, MailerLite). Collecting information and reporting website usage statistics to Google without personally identifying individual visitors and distinguishing one user from another. Displaying personalized advertisements on other websites. |
On the basis of consent given after accessing the website. Article 6 sec. 1.a of the GDPR. |
For the duration of the objection or withdrawal of consent. For technical, for the duration of the given session. |
Server service providers, providers of web analytics software, providers of software for direct marketing activities, tax authorities, government authorities to which the entrepreneur is subject, technical entities providing communication means. |
| Standard data: full name, e-mail address, phone number, company name, job title, company address, employee’s workplace address. |
Sending physical marketing materials to the customer’s employees. |
On the basis of the consent given after sending an email confirming its expression. Article 6 sec. 1.a of the GDPR. |
Until the consent is withdrawn or the collaboration is terminated. |
Server service providers, providers of web analytics software, providers of software for direct marketing activities, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, courier and postal companies. |
| Standard data: full name, e-mail address, phone number, company name, job title, company address. |
Sending the offer and information about the company’s applications and services as a result of consent for direct marketing by third parties. |
On the basis of consent given on the ERP-VIEW.PL website. Article 6 sec. 1.a of the GDPR. Consent obtained by ERP-VIEW.PL Patrycjusz Jaworski. |
Until the consent is withdrawn. |
Server service providers, providers of web analytics software, providers of software for direct marketing activities, government authorities to which the entrepreneur is subject, technical entities providing communication means, telecommunication entities, social media. The recipients of the data may process the data provided to them for their own purposes. |
| Standard data: full name, e-mail address, phone number, company name, job title, company address. |
Maintaining communication and responding to submitted requests. |
On the basis of the submitted request, correspondence, phone contact, or in-person interaction. Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
Until the objection is raised or the query is resolved. |
Server service providers, providers of web analytics software, providers of software for direct marketing activities, government authorities to which the entrepreneur is subject, telecommunication entities, technical entities providing communication means, social media. The recipients of the data may process the data provided to them for their own purposes. |
| Standard and special data. |
Fulfillment of duties related to employment, labor law, and work health and safety regulations. |
Legal obligations of the Administrator related to employment. Article 6 sec. 1.c of the GDPR Processing is necessary to comply with a legal obligation incumbent on the Administrator. |
For those employed before 2019, 50 years from the termination of employment. For the remaining, 10 years from the termination of employment. |
Server service providers, government authorities to which the entrepreneur is subject, technical entities providing communication means, electronic document signatures providers, banking entities, auditorium companies, telecommunication entities, companies related to passenger transport, fleet management, and short-term rentals. |
| Standard data: image. |
Video surveillance monitoring used to ensure the security of data, property and individuals. |
Ensuring property, data and individuals safety. Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
For 7 days from the registration or for the duration of proceedings. |
Monitoring providers, government authorities to which the entrepreneur is subject, police, public prosecutor’s office, courts, and property security companies. |
| Standard data. |
Data related to maintaining communication continuity. |
Employee consent. Article 6 sec. 1.f of the GDPR. |
For the duration of the given consent. |
Server service providers, technical entities providing communication means, telecommunication entities, government authorities to which the entrepreneur is subject. |
| Standard data: full name, e-mail address, phone number, job title, company name. |
Ensuring information security – employees. Information security system. |
Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
For the period necessary for the performance of the activity and for a period of 2 years after its completion. |
Server service providers, technical entities providing communication means, government authorities to which the entrepreneur is subject, legal entities, auditorium companies, telecommunications entities. |
| Standard data: full name, residential address, PESEL number, VAT Registration Number, business address, identity document number, bank account number. |
Preparation and execution of agreements with employees and collaborators. |
Agreements with employees and collaborators or activities aimed at concluding it, Art. Article 6 sec. 1.b of the GDPR. |
For the duration of the agreement and for the period required by tax law (5 years) and the right to pursue claims (3 years). |
Server service providers, government authorities to which the entrepreneur is subject, technical entities providing communication means, electronic document signatures providers. |
| Standard data: full name, place of employment, job title, e-mail address. |
Providing employees with non-salary means of motivation. |
Employee consent. Article 6 sec. 1.a of the GDPR. |
For the duration of the given consent. |
Providers of employee benefit services, private medical care, and group insurance, server service providers, government authorities to which the entrepreneur is subject, banking entities, technical entities providing communication means, companies related to passenger transport, fleet management, electronic document signatures providers. |
| Standard data: full name, place of employment, job title, e-mail address. |
Providing employees with material means of motivation. Rewarding employees. |
Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
Until the objection is raised. |
Server service providers, technical entities providing communication means, government authorities to which the entrepreneur is subject, entities preparing physical materials, courier and postal companies. |
| Standard data: full name, e-mail address, phone number, job title, company name. |
Ensuring information security at third party entities. Information security system. |
Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
For the duration of employment for the employee and a period of 2 years after the termination of cooperation. For the duration of the agreement and for the 3-year period related to the pursuit of claims. |
Server service providers, technical entities providing communication means, government authorities to which the entrepreneur is subject, legal entities, auditorium companies, telecommunications entities. |
| Standard data: full name, residential address, PESEL number, VAT Registration Number, business address, identity document number, bank account number |
For the purpose of preparing and executing an order for the Administrator. |
Data necessary for the performance or conclusion of the agreement. Article 6 sec. 1.b of the GDPR. |
For the duration of the services or deliveries to the entrepreneur and the 3-year period related to the pursuit of claims, as well as the 5-year period related to tax law. |
Server service providers, technical entities providing communication means, banking entities, telecommunication entities, government authorities to which the entrepreneur is subject. |
| Standard data: full name, e-mail address, phone number, company name, job title. |
Organization and participation in partner events, exhibitions, meetings with partners, vendors as well as current and potential customers. |
Consent given by the data subject. Article 6 sec. 1.a of the GDPR. |
Until the consent is withdrawn. |
Legal entities, server service providers, providers of web analytics software, providers of software for direct marketing activities, suppliers related to the technical organization of conferences and events, tax authorities, government authorities to which the entrepreneur is subject, telecommunication entities, companies related to passenger transport, fleet management, and short-term rentals, entities preparing physical materials, technical entities providing communication means, social media, company and industry portals, services providing video files. The recipients of the data may process the data provided to them for their own purposes. |
| Standard data: image. |
Preparation of materials after organized exhibitions, events, meetings with partners, vendors as well as current and potential customers. Preparation of materials after participating in exhibitions, events, meetings with partners, vendors as well as current and potential customers. Entrepreneur’s direct marketing. |
Processing is necessary for purposes of the legitimate interests pursued by the Administrator. Article 6 sec. 1.f of the GDPR. |
Until the objection is raised. |
Legal entities, server service providers, providers of web analytics software, providers of software for direct marketing activities, suppliers related to the technical organization of conferences and events, legal authorities, government authorities to which the entrepreneur is subject, entities preparing physical materials, technical entities providing communication means, social media, company and industry portals, services providing video files. The recipients of the data may process the data provided to them for their own purposes. |
| Standard data: recruitment. |
Employee recruitment. |
For the performance or conclusion of the agreement. Article 6 sec. 1.b of the GDPR. |
Until the recruitment process is finished. |
Server service providers, government authorities to which the entrepreneur is subject, technical entities providing communication means, electronic document signatures providers, providers of tools used for recruitment, posting advertisements, and collecting applications. |
| Standard data: recruitment. |
Recruitment for future positions. |
Candidate’s consent. Article 6 sec. 1.a of the GDPR. |
For the period of 24 months from the granting of consent. |
Server service providers, government authorities to which the entrepreneur is subject, technical entities providing communication means, electronic document signatures providers, providers of tools used for recruitment, posting advertisements, and collecting applications. |
| Standard data: full name, e-mail address, phone number, company name, job title, bank account numbers, VAT registration No., KRS No., employee’s workplace address. |
For the purpose of executing cooperation contracts with partners. |
For the performance or conclusion of the agreement. Article 6 sec. 1.b of the GDPR. |
For the duration of the agreement and for the period required by tax law (5 years) and the right to pursue claims (3 years). |
Legal entities, server service providers, tax authorities, government authorities to which the entrepreneur is subject, entities preparing physical materials, banking entities, auditorium companies, telecommunication entities, technical entities providing communication means, electronic document signatures providers. |
| Standard data: full name, e-mail address, phone number, company name, job title. |
Execution in response to requests regarding product information, application, and pricing. |
Processing is necessary to comply with a legal obligation incumbent on the Administrator. The Act of May 9, 2014, on the provision of information about the prices of goods and services, Art. 1. 6 sec. sec. 1.c of the GDPR. |
For the period of handling the query and the right to pursue claims (3 years). |
Legal entities, server service providers, providers of web analytics software, telecommunication entities, providers of software for direct marketing activities, tax authorities, government authorities to which the entrepreneur is subject, technical entities providing communication means, social media. |
| Standard data: full name, e-mail address, phone number, company name, job title. |
Handling the request for quote in connection with public procurement proceedings. |
Processing is necessary to comply with a legal obligation incumbent on the Administrator – law related to the handling of public procurement proceedings. Article 6 sec. 1.c of the GDPR. |
Until the completion of the tender process and the appeal period. |
Legal entities, server service providers, government authorities to which the entrepreneur is subject, telecommunication entities, banking entities, auditorium companies, technical entities providing communication means. |
| Standard data: full name, e-mail address, phone number, company/office name, job title. |
Handling requests from the Office, submissions, and requests from the Office. |
Processing is necessary to comply with a legal obligation incumbent on the Administrator – responses to requests. Article 6 sec. 1.c of the GDPR. |
Until the proceedings are terminated or for the period specified by law. |
Legal entities, server service providers, telecommunication entities, banking entities, auditorium companies, government authorities to which the entrepreneur is subject, technical entities providing communication means. |
| Standard data: full name, e-mail address, company/office name, job title. |
Handling the requests for violation of the law in connection with The Act of June 14, 2024, on the protection of whistleblowers. |
Processing is necessary to comply with a legal obligation incumbent on the Administrator – responses to requests. Article 6 sec. 1.c of the GDPR. |
Up to 3 years after the end of the calendar year in which follow-up actions were completed or the proceedings initiated by those actions were terminated. Data irrelevant for processing the request, in the case of their accidental collection, they will be immediately deleted – within 14 days from determining they are irrelevant for the matter. |
Entities providing legal advisory services, server service providers, penal prosecution agencies. |
