Privacy Policy
Who are we?
Appsilon spółka z ograniczoną odpowiedzialnością with its registered seat in Warsaw at Chmielna 2/31, postal code 00-020, Poland, entered into the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS number: 0000483137, NIP [tax identification number]: 5252569920, with share capital PLN 5000, further referred to as “the Company” is a data controller under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation further referred to as “GDPR”).
This privacy policy (“Policy”) describes how the Company and its related companies process the personal data of users collected via this website and subpages (the “Site”) including newsletter sign-up forms, electronic forms (including contact forms and forms that allow the download of digital products), recruitment process, or via any correspondence with the Company. This Policy does not apply to websites that post different statements.
WHOSE DATA DOES THE POLICY APPLY TO?
The Company process the personal data of Site users, in particular:
- Clients, Partners and Co-workers of the Company,
- Newsletter subscribers,
- individuals who complete forms on the Site to download digital products (such as for example e-books, checklists, templates),
- correspondents,
- job candidates,
- participants of the events.
WHAT DATA DO WE COLLECT?
We may collect the following personal data of Site users, in particular:
- name, surname, address, e-mail address, telephone number, bank account details, and personal identification numbers when you are a Client, Partner, or Co-worker of the Company.
- name, e-mail address, when you subscribe to our Newsletter,
- name, e-mail address, job title, when you complete forms on the Site to download digital products,
- name, e-mail address and/or phone number when you agree to receive marketing information such as notifications about offers or content that may include commercial information,
- name, surname, e-mail address, phone number, name of the organization that you are affiliated with, job title and any other data you provide voluntarily when you contact us via electronic forms or in other ways (e-mail, phone, correspondence),
- name, surname, e-mail address, phone number, organization that you are affiliated with, professional experience, education, image, address, social media content (LinkedIn, Github other portfolio sites), and all additional data you provide us via sending us your curriculum vitae and filling in the form for the recruitment process,
- name, surname, e-mail address when you register for the event.
Providing the personal data is voluntary, however, failure to do so would prevent the achievement of the processing purpose (for example, it may prevent you, depending on the specific case, from using selected functionalities within the Site or contacting us).
PURPOSE, LEGAL BASIS AND PROCESSING PERIOD
- The personal data of Clients, Partners and Co-workers of the Company are processed in order to:
- establish cooperation with the Company, including verification of your data and preparation of an offer at your request to enter into a cooperation with us - the legal basis is taking actions before entering into a contract (Article 6 point 1 b) GDPR),
- maintain contact with business Partners, including business customers and suppliers (e.g. persons responsible on the partner’s side for performing the contract with the Company). The Company processes contact details of such persons in order to communicate with business Partners on an ongoing basis and to maintain contacts with them - the legal basis is the legitimate interest of the Company (Article 6 point 1 f) GDPR),
- fulfill legal obligations relating in particular for archival purposes - the legal basis is fulfilling a legal obligation imposed on the Company (Article 6 point 1 c) GDPR).
The personal data will be processed for the duration of establishing cooperation and maintenance contact, or until an objection to the processing is raised, as well as for a period ensuring the possibility of pursuing claims or defending against them (no longer than the applicable statute of limitations).
- The personal data of Newsletter subscribers are processed in order to:
- provide the Newsletter service - the legal basis is the necessity of processing for the performance of the contract (Article 6 point 1 b) GDPR),
- in case of sending marketing information, such as notifications about offers or content that may include commercial information by e-mail, including profiling - the legal basis is the legitimate interest of the Company (Article 6 point 1 f) GDPR), in connection with the consent given to receive the Newsletter,
- the potential establishment, exercise or defense of claims - the legal basis is the legitimate interests of the Company (Article 6 point 1 f) GDPR).
The personal data will be processed for the duration of the service provision, until you withdraw your consent to receive the Newsletter, an objection is raised, as well as for a period ensuring the possibility of pursuing claims or defending against them (no longer than the applicable statute of limitations).
- The personal data of individuals who complete forms on the Site forms to download digital products, are processed in order to:
- provide digital products selected by you (including digital products such as e-books, checklists, templates) by e-mail - the legal basis is the legitimate interest of the Company (Article 6 point 1 f) GDPR),
- the potential establishment, exercise or defense of claims - the legal basis is the legitimate interests of the Company (Article 6 point 1 f) GDPR).
The personal data will be processed for the duration of the Company's legitimate interest, as well as for a period ensuring the possibility of pursuing claims or defending against them (no longer than the applicable statute of limitations).
- The personal data of correspondents (including individuals who complete contact forms available on the Site) are processed in order to:
- answer all your questions and requests sent through the electronic forms and using contact addresses published on the Site, including interactive windows - the legal basis is the legitimate interest of the Company (Article 6 point 1 f) GDPR),
- the potential establishment, exercise or defense of claims - the legal basis is the legitimate interests of the Company (Article 6 point 1 f) GDPR).
The personal data will be processed for the duration of responding to the inquiries, as well as for a period ensuring the possibility of pursuing claims or defending against them (no longer than the applicable statute of limitations).
- The personal data of job candidates are processed in order to:
- carry out the recruitment process in connection with your submission of application documents on the recruitment subpage in the scope of data indicated by the provisions of the labor law and taking the necessary actions to conclude a contract with the selected candidate - the legal basis is Article 22¹ of the Act of June 26, 1975, the Labour Code and Article 6 point b) GDPR. In the case of personal data which is not required by law and exceeding those specified in Article 22¹ of the Act of June 26, 1975, the Labour Code, the legal basis for processing is your consent (Article 6 point 1 a) GDPR).
The personal data will be processed until the end of the recruitment process, no longer than 6 months from the receipt of your application or for the period indicated in the possible consent for future recruitments (no longer than 12 months from the end of the recruitment process).
- consider the information generated in connection with your application in future recruitments within 12 months from the date of consent - the legal basis is your consent (Article 6 point a) GDPR).
The personal data will be processed until the consent is withdrawn, but no longer than 12 months from the date of submitting the application and giving consent.
- the potential establishment, exercise or defense of claims, where processing - the legal basis is the legitimate interests of the Company (Article 6 point 1 f) GDPR).
The personal data will be processed for a period ensuring the possibility of pursuing claims or defending against them (no longer than the applicable statute of limitations).
In the recruitment process, personal data of special categories (as defined in Article 9 of the GDPR), such as health information, may appear. However, we will process such data only if you provide it voluntarily along with your application.
- The personal data of participants of the events are processed in order to:
- process registration to attend the event, updating you with details regarding the event and administering the event - the legal basis is the necessity of processing for the performance of the contract (Article 6 point 1 b) GDPR),
- the potential establishment, exercise or defense of claims - the legal basis is the legitimate interests of the Company (Article 6 point 1 f) GDPR).
The personal data will be processed for the duration of the event, as well as for a period ensuring the possibility of pursuing claims or defending against them (no longer than the applicable statute of limitations).
- The Company automatically logs information about you and your computer when you visit our Site. For example, we log your computer operating system type, browser type, browser language, the website you visited before browsing our Site, pages you viewed, how long you spent on a page, access times, Internet protocol (IP) address, and information about your use of and actions on our Site. The personal data of Site users (including IP addresses or other identifiers and information collected through cookies or similar technologies) is processed by the Company to ensure the proper functioning of the Site, collect information about the user’s activity on the Site and to tailor the Company's offerings to the user's needs based on Article 6 point 1 a) of the GDPR, where processing is carried out based on consent given when accepting cookie settings, usually during the first visit to the Site. Such consent is voluntary and can be withdrawn at any time, and its withdrawal does not affect the lawfulness of processing carried out before the withdrawal. This data will be processed until consent is withdrawn, cookie settings are changed, or the data is deleted. Detailed information about the cookies used on our Site is available in the Cookie Policy.
MARKETING
The personal data of Site users, who gave the consent to receive e-mail and/or SMS/MMS and/or phone calls notifications about offers or content of interest, which in some cases may include commercial information, will be processed in order to:
- sending such notifications about offers or content of interest, which in some cases may include commercial information - the legal basis is the legitimate interest of the Company (Article 6 point 1 f) GDPR), in connection with the consent given to receive such notification,
- the potential establishment, exercise or defense of claims, where processing - the legal basis is the legitimate interests of the Company (Article 6 point 1 f) GDPR).
The personal data will be processed no longer than until the withdrawal of the consent or the submission of an objection to the processing of your personal data for marketing purposes, as well as for a period ensuring the possibility of pursuing claims or defending against them (no longer than the applicable statute of limitations).
PROFILING
The processing of data in the marketing of the Company’s own services may be subject to profiling. Profiling of personal data by the Company involves processing data by using it to assess certain information, particularly to analyze or predict the personal preferences of Site users.
The profiling will not produce any legal effects concerning you or similarly significantly affects you.
The information obtained through profiling will be used solely to tailor our marketing activities to the needs and preferences of the Site users.
WITHDRAWAL OF CONSENT
You can always withdraw your consent in each case when processing is based on your consent. If at any time you would like to withdraw your consent, you can simply email hello@appsilon.com and withdraw your consent, without effect on the lawfulness of the processing prior to the withdrawal.
RECIPIENTS OF DATA
Your personal data may be shared with the following trusted third parties:
- entities providing IT services and IT system suppliers,
- entities providing marketing services,
- entities providing consulting and auditing services,
- entities supporting other business processes, such as archiving and correspondence handling,
- law firms,
- authorized entities upon a documented request.
The purpose and scope of data collection, further processing and use of data by some third parties, as well as the associated rights of users and setting options for protecting privacy, are described in the privacy policy information of the respective provider. The company has no control over, and is not responsible for, the privacy policies and practices of third parties.
TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
Your personal data may be transferred outside the European Economic Area (EEA) to a third party country, to entities fulfilling a required protection level based on the European Commission requirements. If there is any transfer of data from EEA to other countries, data processors shall comply with the law regulations that ensure an adequate level of security to that of the EU regulations. For example, in order to use Google and HubSpot tools, Personal Data may be transferred outside the European Economic Area (EEA), specifically to the United States. These entities guarantee an adequate level of personal data protection as required by European regulations. If personal data is transferred to a third country that does not comply with EC requirements, any processing will be based on up-to-date standard contractual clauses approved by the European Commission. Information and copy of safeguards including such standard contractual clauses may be provided at the Company’s registered office or via e-mail.
YOUR RIGHTS
If the Company processes your data, you have the right to:
- request the data
- rectify the data,
- restrict the processing of the data,
- erase the data,
- transfer the data,
- object to the processing of data that takes place on the basis of the Company’s legitimate interest,
- withdraw your consent (where processing is based on consent) at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
The users whose data are processed have the right to lodge a complaint with the adequate supervisory body e.g. in Poland to the President of the Office for Personal Data Protection (postal address: ul. Stawki 2, 00-193 Warsaw, Poland).
SECURITY OF YOUR PERSONAL DATA
We take steps to help protect personal data. All personal data provided to us is stored on secure servers and guarded by strict procedures and well-trained staff. The Company processes personal data with due diligence when selecting and applying appropriate technical and organizational measures.
Taking into consideration the protection of your rights, personal data is:
- processed lawfully, fairly and in a transparent manner,
- collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes,
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, in accordance with the principle of data minimization,
- accurate and, where necessary, kept up to date,
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed,
- processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
We take all necessary actions to ensure that subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process personal data on behalf of the Company.
CONTACT INFORMATION
You can contact the Administrator via email at: privacy@appsilon.com.
The Administrator has appointed a Data Protection Officer, who can be reached via email at: privacy@appsilon.com for any matters related to the processing of personal data.
CHANGES TO THIS POLICY
This Policy is regularly reviewed and updated as necessary. We reserve the right to change this Policy and, if we make any changes, we will change the last updated date below.
This Policy was last updated on 21.03.2025.