Privacy Policy

 

1. WHAT IS THE SCOPE OF THIS POLICY?

This Privacy Policy ("Policy") contains the information about the processing of personal data by Finally sp. z o.o. in Warsaw (“Company”), i.e.:

• defines the types of personal data that the Company collects;
• explains how and why the Company collects and uses your personal data;
• explains when and why the Company will share your personal data with third parties; and
• explains the rights and options that you have when it comes to your personal data.

The Policy applies when you are:

• a Website User, i.e. when you use the http://finally.global/ website ("Website") or you have filled out the contact form available on the Website;
• a Candidate to work, i.e. when you are a person interested in taking up employment in the Company and taking part in the recruitment processes conducted by the Company, regardless of the form of employment;
• a Customer of the Company, i.e. when you are a natural person for whom the Company provides services for implementing Salesforce solutions;
• a Customer Representative, i.e. when you represent or act on behalf of the Customer;
• a Potential Customer, i.e. when you are a person interested in the Company's offer regarding the implementation of Salesforce solutions and contacting the Company in order to obtain specific information or to conclude a contract;
• a Potential Customer Representative, i.e. when you represent or act on behalf of the Potential Customer;
• a Service Provider, i.e. when you provide a services to the Company;
• a Service Provider Representative, i.e. when you represent or act on behalf of the Service Provider. 

We process your personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”). 

2. WHO IS THE PERSONAL DATA CONTROLLER?

Your personal data controller is:

Finally spółka z ograniczoną odpowiedzialnością
Twarda 18
00-105 Warsaw
(„Controller”, „we”)

In matters related to the processing of personal data, you can contact us at the above-mentioned correspondence address or at the following e-mail address: finally.iod@discretia.pl.

3. WHAT INFORMATION AND FROM WHAT SOURCES WE COLLECT?

If you are a Website User, we collect information obtained from you in connection with your activity on the Website. These are in particular information provided by you in contact form on the Website, the IP address and information contained in cookies. 

If you are a Candidate to work, we collect information obtained from you during the recruitment for a job and participation in the recruitment process. These are in particular the data contained in the submitted application documents (CV, cover letter) and data provided during the recruitment meetings, telephone conversations and e-mail correspondence, including: name, surname, contact details, data on education, professional qualifications, the course of previous employment and others.

If you are a Customer, we collect information obtained from you in connection with the conclusion and execution of the contract concluded with us. These are in particular: name and surname, PESEL number, address of residence, contact details, information on the contract between us and the services provided.

If you are a Customer Representative, we collect information provided to us by you or by the Customer you represent for the purpose of concluding and executing the contract with the Customer. These are in particular: name and surname, position, name of the Customer, correspondence address, e-mail address (business), telephone number (business).

If you are a Potential Customer, we collect information obtained from you during telephone conversations, e-mail correspondence and meetings. These are in particular: name and surname, position, company name, contact details, information on the needs for the services of the company, the number of employees of the company and other data - if you facultatively decide to transfer them to the Company.

If you are a Potential Customer Representative, we collect information provided to us by you or by the Potential Customer you represent. These are in particular: name and surname, position, name of the represented entity, contact details, e-mail address (business), information on the needs for the services of the Company, number of employees employed by the Potential Customer and others.

If you are a Service Provider, we collect information provided to you by us in sent documents, during telephone conversations, e-mail correspondence and meetings. These are in particular information necessary for the conclusion and execution of the contract, including: name, surname, name and address of the company, correspondence address, NIP number, REGON number, bank account number, e-mail address, telephone number, information about the contract between us. Your data may also come from public sources.

If you are a Service Provider Representative, we collect information provided to us by you or by the Service Provider you represent for the purpose of concluding and executing the contract with the Service Provider. These are in particular: name and surname, position, name of the Service Provider you represent, correspondence address, e-mail address (business), telephone number (business).

4. WHAT IS THE PURPOSE AND THE BASIS ON WHICH WE PROCESS YOUR DATA?

If you are a Website User, we process your personal data:

• on the basis of the legitimate interests pursued by the Controller (Article 6.1(f) of the GDPR), for the purposes of:
  1. contact you and handle the message sent via the contact form,
  2. for the purpose of Website administration (management);

• on the basis of your consent, in case of providing personal data that are not necessary to contact and handle the message sent via the contact form (Article 6.1(a) of the GDPR).

If you are a Candidate to work, we process your personal data:

• in order to comply with legal obligations to which we are subject, resulting from legal provisions, including labour law provisions (Article 6.1(c) of the GDPR);
• on the basis of your consent, in case of providing personal data in broader scope than it is required by the law (including labour law) and for the purposes of future recruitment processes – as long as you have agreed to it (Article 6.1(a) of the GDPR, Article 9.2(a) of the GDPR);
• to establish or pursue possible claims or defend against such claims (Article 6.1(f) of the GDPR).

If you are a Customer or Service Provider, we process your personal data:

• in order to conclude and perform the contract with you (Article 6.1(b) of the GDPR);
• in order to comply with legal obligations to which we are subject (Article 6.1(c) of the GDPR), for example to store financial records;
• in order to pursue our legitimate interests, such as: maintaining business relationships, ongoing contact, marketing activities, as well as pursuing claims and defending against such claims (Article 6.1(f) of the GDPR).

If you are a Potential Customer, we process your personal data:

• in order to pursue our legitimate interests, such as: presenting the offer at your request, maintaining business relationships, ongoing contact in connection with the offer, pursuing claims and defending against such claims (Article 6.1(f) of the GDPR);

• to take steps at your request, necessary before entering into a contract (Article 6.1(b) of the GDPR);
• on the basis of your consent for marketing purposes of the Company (Article 6.1(a) of the GDPR).

If you are a Customer Representative, a Potential Customer Representative or a Service Provider Representative, we process your personal data:

• in order to pursue our legitimate interests related to the conclusion and performance of the contract, as well as taking necessary actions before concluding the contract with the entity you represent, maintaining business relationships and ongoing contact, conducting marketing activities, as well as pursuing claims and defending against them (Article 6.1(f) of the GDPR).

5. WHO DO WE SHARE YOUR DATA WITH?

When it is necessary to achieve the purposes in which we process your data, we can provide it to:

1. entities authorized to receive data on the basis of legal regulations;
2. entities that process your personal data on our behalf (for example entities providing consultancy, IT, training and other services).

In addition, we can share the personal data of Potential Customers or Potential Customer Representatives with our partner - Salesforce.

Whenever we disclose your personal data, we will ensure that only the minimum information necessary to achieve the purpose of data processing is transferred.

Your personal data will not be transferred outside the European Economic Area (EEA). Otherwise, we will ensure that cooperation with such entities is based on an appropriate legal basis and that they ensure appropriate standards of protection.

6. HOW LONG DO WE STORE YOUR DATA?

If you are a Website User, we store your personal data for the period of their usefulness, but no longer than it is useful for the purpose for which the data was collected – i.e. contact and handling of the message sent via the contact form or administration (management) of the Website.

If you are a Candidate to work, we store your personal data until it is useful for the purpose for which the data was collected, i.e. conducting the recruitment process for which you applied. If you decide to withdraw your consent, your personal data will be stored until that withdrawal. In justified cases, we will store your personal data for as long as it is necessary to pursue our legitimate interests.

If you are a Customer, a Customer Representative, a Service Provider or a Service Provider Representative, we store your personal data for the duration of the contract concluded with you or with the entity you represent. After this period, we will keep your data to the necessary extent for a period of time resulting from legal requirements and rules on limitation of claims. In justified cases, we will store your personal data for as long as it is necessary to pursue our legitimate interests.

If you are a Potential Customer or a Potential Customer Representative, we store your personal data until it is useful for the purpose for which the data was collected, but no longer than until we have received an objection to the processing of your personal data for that purpose. If we process your personal data on the basis of your consent, the data will be stored until the consent is withdrawn.  

7. WHAT RIGHTS DO YOU HAVE?

You can exercise your data subject rights by sending us the following requests:

1. if we process your personal data based on your consent, you can withdraw your consent at any time; the withdrawal of consent does not affect the lawfulness of the processing we have made on its basis until its withdrawal;
2. you can request access to your personal data and obtain a copy thereof;
3. you can exercise your right to data portability;
4. you can request rectifying or completing your personal data if it is incorrect or incomplete;
5. in connection with your special situation, you may object to the processing of your personal data if we process it by invoking our legitimate interest;
6. in cases specified by law – for example if your data is out of date, unnecessary, unlawfully processed, and if you withdrew your consent to processing them (if consent was the basis for such processing) or successfully filed an objection to the processing of your personal data - you can request erasure of your personal data;
7. you can also request a restriction of data processing. 

In order to exercise the above rights, please contact us by mail or e-mail address indicated in point 2 of the Policy.  

In any case you believe that the processing of your personal data violates the provisions of GDPR, you also have the right to lodge a complaint to the data protection supervisory authority in your country of residence. 

8. WHETHER YOU NEED TO PROVIDE US WITH YOUR PERSONAL DATA AND THEIR SOURCE IF THEY WERE NOT PROVIDED BY YOU

Providing your personal data is voluntary in every case but remember that failing to provide them will prevent us from achieving the purposes for which the data are collected, for example: 

1. it will prevent or significantly hinder contact with you or provide you with the offer you are asking for;
2. prevent you from taking part in recruitment proceedings conducted by the Company;
3. prevent the conclusion or execution of the concluded contract;
4. prevent the Company from carrying out its marketing activities. 

If you are a Customer Representative, Potential Customer Representative or Service Provider Representative and you do not provide us with your personal data, they come from the entity you represent or have been collected by us from public sources (for example from the website).