Gfi EAST > Privacy policy

Statement

The purpose of this privacy statement is to let you know how we will protect your data.

Which entities collect data and have access thereto?

  • Gfi Poland Sp. z o.o. with its registered office in Warsaw (02-675), ul. Wołoska 24, building B, floor VI, e-mail: kontakt@gfieast.com, phone: +48 22 31 46 000 – hereinafter referred to as the Controller

Member companies of the Gfi East Group:

  • IMPAQ AG – Friesenbergstrasse 75 CH – 8055 Zürich, Schweiz, schweiz@impaqgroup.com, phone +41 44 405 21 00
  • IMPAQ U.K. Ltd., 9 Bridle Close, Surbiton Road, Kingston upon Thames, KT1 2JW, United Kingdom, uk@gfieast.com, phone +44 20 8549 2133
  • Vauban A Gfi Group Company, 169A Calea Floreasca, Building A, 4th Floor, 1st District, Bucharest, Romania, office@imapaqaddstones.ro, phone +40 31 860 2272
  • GFI Österreich GmbH, DC Tower, 30th floor, Donau-City-Strasse 7, A-1220 Vienna, Austria, austria@gfieast.com, phone +43 1 205 551 7021, phone +43 1 205 551 7022

 What kind of information is collected by us?

The Controller uses your personal data to better understand your needs and interests and thus to be able to provide better services to you. We guarantee to all persons who share their personal data with us that this data will only be used to improve company’s relationships with our customers.

You can use our website to send enquiries to us or apply for a job. Personal data, which you will share with us through our website, include your name and surname, address, telephone number, e-mail address, preferred form of contact, information about education and employment and data concerning the position you wish to apply for.

In order to personalise our contacts and improve our services, we may also ask you to provide information about your interests, certain demographic information as well as your experience with our products or services. Such additional information is not mandatory.

How do we use your personal data?

The Controller uses your personal data to better understand your needs and interests and thus to be able to provide better services to you. In particular, we will use this information when contacting you in the process of providing services and support as well as to let you know about our new services and products. We may also contact you when conducting a survey regarding our services.

Personal data provided to our company may be sent overseas under Data Processing Entrustment Agreements which we concluded, in order to consolidate, store and improve the management of our customers’ data.

To whom do we make your personal data available?

The Controller undertakes not to sell, lend or otherwise make your personal data available to third parties, unless this is required by law, lawsuits or court decisions. The Controller will not share your personal data with third parties, unless this is in connection with the use of our services by you. In such cases, your consent granted at the time when such information is provided will be required. The Controller shares the data of its customers with its entities and companies acting on our behalf, but only in the manner described in the section “How do we use your personal data”.

The Controller hires external service providers and suppliers in the process of providing services and solutions described in the section “How do we use your personal data”. Suppliers and service providers are obliged to maintain the confidentiality of the information received on behalf of the Controller. They are also forbidden to share such information for purposes other than to provide services to the Controller. We may change such service providers or hire additional companies to improve the service offered to our customers.

The Controller and its related entities may merge with or be taken over by other entities, or they may also dispose of some or all of their assets. Should such a merger or take-over occur, the Controller will use its best endeavours to notify you if, as part of such a merger or take-over, your personal data is made available for the purpose of continuing our services.

Cookie Policy

The Controller uses Google Analytics, a web-based tool of Google Inc. (“Google”). Google Analytics uses the so-called “cookies”, which are text files installed on user’s computer in order to help us analyse the ways in which our website is used by users. The information generated by cookies on how the website is used (including IP addresses) will be sent to and stored by Google on servers in the USA. Google will use this information for the purpose of evaluating how the website is used by users, compiling reports on user activity for website operators and providing services associated with handling websites. Google may also transfer this information to third parties, if this is required by law, or if such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

By using our website, you consent to the processing of your data by Google in the manner and for the purpose set out above. Google Analytics terms and conditions.

Please note that cookies are also used in services of third parties, which handle the so-called social profiles for the Controller. Relevant privacy policies can be found on the following websites: LinkedIN.com, Youtube.com, Twitter.com, Instagram.com, Facebook.com.

You may refuse the installation of cookies by selecting the appropriate settings of your Internet browser. Please note, however, that this may result in you not being able to access the full functionality of our website, for instance the option of storing the selected language version of the website or the status of filling in the application forms.

Access to personal data and its correctness

The Controller makes every effort to ensure that your personal data is correct. Upon your request, we will provide you with access to such data and the possibility to update it. Do not hesitate to contact us.

Due to the processing of personal data, the data subject has the following rights:

  • the right of access and rectification of personal data,
  • right to have his or her personal data erased or to restrict the processing of personal data,
  • the right to object,
  • the right to transfer data,
  • the right to withdraw consent at any time without prejudice to the lawfulness of processing carried out on the basis of the consent prior to its withdrawal,
  • the right to lodge a complaint with the competent supervisory authority.

Data security

The Controller makes every effort to ensure the security of the data provided to us. In order to prevent unauthorised access or disclosure of data and to ensure its correctness and proper use, the Controller applies appropriate physical security measures and procedures to protect the data collected by us.

Our company will not be liable for any loss or damage, including, without limitation, indirect or consequential damage or any loss or damage resulting from loss of data or loss of profits caused in connection with the use of our website.

Our company makes every effort to ensure smooth operation of our website. However, the Controller will not bear any responsibility in the event when the website is temporarily unavailable due to technical reasons beyond our control.

External links

The Controller’s website may contain links to external websites for information purposes (for instance links of business partners or marketing services). If you use such links, you will leave our website. The Controller has no control over such websites or their privacy procedures, which may differ from the procedures we apply.

We do not endorse or make any representations with regard to such external websites. Personal data that you provide on such external websites will not be covered by the Controller’s Privacy Statement. We recommend that you read the privacy policy presented on a relevant website before sharing your personal data. Some external companies may share their databases of personal data with the Controller and such procedures are subject to the privacy policy of such external companies.

Data processing for recruitment purposes

Providing your personal data is a necessary condition for starting the recruitment process with Gfi Poland (Gfi East).

Gfi Poland sp. z o.o. with its registered office in Warsaw (02-675), ul. Wołoska 24, building B, floor VI, e-mail: kontakt@gfieast.com, phone: +48 22 31 46 000 as well as indicated entities of Gfi East Group will be the Controller of your personal data. 

If you have any questions regarding the processing of your personal data, please write to the following address: rodo@gfieast.com

 The sole purpose of processing your personal data will be to conduct the recruitment process in accordance with the principles set out in Labour Law, with particular regard to the provisions of the Act of 26th June 1974 – the Labour Code (Journal of Laws (Dz. U.) No. 24, item 141 as amended) – Article 9 par. 2 letter b) of the General Data Protection Regulation (GDPR).

For the purposes necessary to conduct the recruitment process, your personal data will be made available to recipients such as: our employees and co-workers involved in recruitment procedures, entities to whom we will outsource a specific aspect of the recruitment process, member companies of our capital group and customers for whom we carry out projects, as well as other data recipients, for instance couriers.

Your personal data will not be transferred to a country outside the European Economic Area or to an international organisation.

Your personal data will not be processed for automated decision-making and, in particular, your personal data will not be profiled.

Your personal data in the form of a submitted “curriculum vitae” document will be retained for a period of 3 years from the end of the year, in which the application was submitted or a shorter period when the possibility of recruitment ceases. However, contact details such as name, surname, telephone number, e-mail address will be retained for a period of 7 years or a shorter period when the possibility of recruitment ceases.

You have the right to access your data and the right to rectify and erase it or restrict the processing thereof.

You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the provisions of law.

Please also note that we will use the collected personal data to contact only selected candidates. Personal data not used by us are permanently deleted by us after the lapse of the retention period indicated above.

Contact with regard to the processing of personal data

If you have any questions or concerns, please contact us at the following address: Gfi Poland Sp. z o.o. with its registered office in Warsaw (02-675), ul. Wołoska 24, building B, floor VI, e-mail poland@gfieast.com phone: +48 22 31 46 000.

Additional information

The Controller reserves the right to amend the wording of the Privacy Policy as well as to introduce a new document, through the so-called unilateral act. The Controller will provide information about any changes on its website www.gfieast.com