Privacy

We understand how important it is to protect personal data, which is why we have created a document titled “Privacy Policy of Admill Sp. z o.o.” in which we outline everything that is important for you, especially when using our website, admill.pl. Please know that we comply with the principles of lawful, fair, and transparent processing of your personal data.

Let’s start with a few definitions:

ADO – Data Controller, i.e., Admill Sp. z o.o.

RODO – Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

admill.pl – the website owned by Admill Sp. z o.o., where we provide our services. The website can be found at: https://admill.pl/

cookies – data, particularly small text files, saved and stored on the devices used by the User when accessing admill.pl.

User – an adult individual who uses the services offered by Admill Sp. z o.o.

Data Controller

The Data Controller is Admill Sp. z o.o., located at ul. Jana Wiktora 2, 36-100 Kolbuszowa.

How to Contact Us

If you want to contact us and ask a question, you can call us at +48 17 227 52 60 or fill out the contact form on our website under the “Contact” tab (https://admill.pl/kontakt/). You can also reach our Data Protection Officer at: admill@admill.pl.

What Data We Process and Why

In connection with the services we provide through admill.pl, we process your data for various purposes. We may also process your data when you visit our website. Below, we list all the instances in which we process your data, specifying the scope of the data and the legal basis according to the RODO provisions.

We process your data, such as name, email, and phone number, for the following purposes:

• Recruitment
• Marketing of our products and services
• Sending commercial information via electronic communication

In all of the above cases, we process your data because you have given us consent.

Profiling

Profiling means processing personal data to evaluate certain characteristics of a person. However, we want to assure you that we do not make automated decisions about you, and profiling is only done to tailor Admill Sp. z o.o.’s marketing offers and to create personality profiles of clients.

Who We Share Your Data With

We can share your data only when you give consent or with authorized entities, if necessary. Additionally, our employees who need access to your data to perform their duties, as well as subcontractors, such as IT companies, accounting firms, marketing agencies, and other independent recipients like business partners, may also have access to your data.

Your personal data may be shared with public authorities, such as the prosecutor’s office, police, the General Inspector for the Protection of Personal Data (soon the President of the Office for Personal Data Protection), the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications, if they request it.

Our suppliers are based in Poland, throughout the European Union, and around the world. In relation to the transfer of your data, we have ensured that our suppliers provide guarantees of a high level of personal data protection. These guarantees are primarily derived from their commitment to using standard contractual clauses adopted by the European Commission or participation in the “Privacy Shield” program established under the European Commission’s Implementing Decision (EU) 2016/1250 of July 12, 2016, regarding the adequacy of protection provided by the EU-U.S. Privacy Shield.

How Long We Process Your Data

We will store your data, such as name, email address, and phone number, which we process for direct marketing of our products, until you object to their processing. To do so, you should withdraw your consent. Otherwise, we may decide to stop processing this data if we determine that your consent is no longer valid. Data obtained during the recruitment process will be stored only for the duration of the recruitment.

Your Rights

You have the right to:

• Access to your data and obtaining a copy of it. You have the right to request confirmation from us as to whether we are processing your personal data, and if this is the case, you have the right to:
  1. Access your personal data,
  2. Obtain information about the purposes of processing, the categories of personal data being processed, the recipients or categories of recipients of these data, the planned storage period for your data or the criteria used to determine this period, your rights under the GDPR, and your right to file a complaint with a supervisory authority, the source of these data, automated decision-making, including profiling, and the safeguards applied regarding the transfer of these data outside the European Union.
  3. Obtain a copy of your personal data.
• To rectification (correction) of data. You have the right to rectify and supplement the personal data you have provided. Regarding other personal data, you have the right to request that we correct these data (if they are inaccurate) and complete them (if they are incomplete).
• To deletion of data (right to be forgotten) – if you believe there is no basis for us to process your data, you may request that we delete it. You have the right to request the deletion of personal data if:
  1. You have withdrawn your specific consent, to the extent that personal data was processed based on your consent;
  2. Your personal data is no longer necessary for the purposes for which it was collected or processed;
  3. You have objected to the use of your data for marketing purposes;
  4. You have objected to the use of your data for statistical analysis of the use of admill.pl and for satisfaction surveys, and your objection has been deemed justified;
  5. Your personal data is being processed unlawfully.

Despite a request for deletion of personal data due to an objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the establishment, exercise, or defense of legal claims. This particularly applies to personal data such as: name, email address, phone number, and application history, which we retain for the purpose of handling complaints and claims related to the use of our services.

• Restriction of data processing – you can request that we restrict the processing of your personal data to storage or performing actions agreed upon with you if, in your opinion, we have incorrect data about you or are processing it unlawfully, or if you do not want us to delete it because you need it for the establishment, exercise, or defense of legal claims, or for the period while you object to the processing of data. You have the right to request the restriction of the use of your personal data in the following cases:
  1. When you contest the accuracy of your personal data – we will restrict its use for the time needed to verify the accuracy of your data, but no longer than 5 business days;
  2. When the processing of your data is unlawful, and instead of deleting the data, you request a restriction on its use;
  3. When your personal data is no longer necessary for the purposes for which it was collected or used, but you need it to establish, exercise, or defend legal claims;
  4. When you have objected to the use of your data – in this case, the restriction will apply for the time needed to consider whether, due to your particular situation, the protection of your interests, rights, and freedoms overrides the legitimate interests we pursue by processing your personal data.
• To object to the processing of your data for direct marketing purposes. If you exercise this right, we will cease processing your data for this purpose. If your objection is justified and we have no other legal basis to process your personal data, we will delete the data to which your objection applies.
• To data portability – you have the right to receive from us your personal data, which you provided to us based on your consent, in a structured, commonly used, machine-readable format (e.g., a CV). You can also request that we transfer this data directly to another entity.
• To lodge a complaint with a supervisory authority. You can submit complaints, inquiries, and requests to us regarding the processing of your personal data and the exercise of your rights. If you believe that we are processing your data unlawfully, you have the right to file a complaint with the President of the Personal Data Protection Office or another supervisory authority.

Remember, you have the right to withdraw your consent for the processing of your personal data at any time. The withdrawal of consent takes effect from the moment it is withdrawn. Withdrawing consent does not affect the processing carried out by us in accordance with the law before the withdrawal. Withdrawing consent will not result in any negative consequences for you. However, it may prevent you from further using services or functionalities that, by law, we can provide only with your consent.

How you can exercise your rights with us

To exercise your rights, please send your request to the email address biuro@nomino.pl. Please note that before we fulfill your request, we will need to verify your identity to ensure that you are indeed the person who provided the data, and we will properly identify you.

If you submit a request to us in accordance with the above-mentioned rights, we will fulfill it or refuse to do so promptly, but no later than one month from the date of receipt. However, if due to the complexity of the request or the number of requests, we are unable to fulfill your request within one month, we will fulfill it within the next two months, notifying you in advance about the intended extension of the deadline.

For technical reasons, we always need 5 days to update the settings you have chosen in our systems. Therefore, it may happen that you will receive an email from us during the system update, even though you have previously opted out of receiving such messages.

We take care of your data

We make every effort to ensure the security of your personal data. Our services use encrypted data transmission (SSL) during registration and login, which ensures the protection of your identifying information and significantly prevents unauthorized systems or individuals from gaining access to your account.

What is personal data?

On our website, we use technologies such as cookies to collect and process personal data for the purpose of personalizing content and ads, as well as analyzing website and internet traffic. This technology is also used by entities affiliated with us and our partners, who also aim to serve ads that are best suited to your preferences. We would like to inform you about the details of the technologies we use.

Basis and purpose of processing

The processing of personal data requires a legal basis. The GDPR provides for several types of such legal bases for data processing, and in cases where you use our services, there will generally be three of them:

1. . Necessity of processing for the conclusion or performance of a contract to which you are a party. In our case, the contract is the terms and conditions of a given service. Therefore, if we conclude a contract with you for the provision of a particular service (e.g. a service providing you with the opportunity to read the admill.pl based on the content of the terms and conditions of this website), we may process your data to the extent necessary to perform this contract.
2. The need to process for purposes resulting from the legitimate interests pursued by the controller or by a third party. This basis for processing data applies when the processing is justified due to our legitimate needs, which includes, among others, the obligation to ensure the security of the service, to perform statistical measurements, to improve our services and adapt them to the needs and comfort of users (e.g. personalization of content in the services) as well as to market and promote our own services.
3. Your voluntary consent. It is necessary in particular when marketing services are provided to you by third parties (i.e. Partners referred to below) and when we provide such services to third parties. In order to be able to show you advertisements that are of interest to you (e.g. a product that you may need), advertisers and their representatives must be able to process your data. Giving such consent is not coercive, and if you do not want to, you do not have to give it. Thanks to our solution, you also have the option to narrow down the scope or change the consent at any time. Your other rights resulting from the consent are set out below.

Your data, as part of our services, will be processed only if we or another data processor have one of the legal bases permitted by the GDPR and only for the purpose adapted to a given basis, as described above. Your data will be processed until there is a basis for their processing – i.e. at the time of granting consent until its withdrawal, restriction or other actions on your part limiting this consent, if the data is needed for the performance of the contract – for the duration of its performance, and if the basis for data processing is the legitimate interest of the administrator – until the existence of this legitimate interest.

Transfer of data

Your data will be processed by Admill Sp. z o.o. and Partners of Admill Sp. z o.o., if you give them your consent, but they may also be entrusted to other entities for processing. In each such case, the transfer of data does not give the recipient legal grounds to use them freely, but only to use them for the purposes expressly indicated by Admill Sp. z o.o. or its Partner. Data transfers usually take place when working with a subcontractor (e.g. marketing agency) or service provider (e.g. data storage provider). In any case, the transfer of data does not release the transferor from responsibility for the processing. The data may also be addressed to public authorities, if they are authorized to do so by the applicable regulations and present an appropriate request, but never in other cases.

Cookies

Our website uses technologies such as cookies, local storage and other similar files to collect and process personal data and operational data in order to personalize the content and advertisements provided and to analyze traffic on our website. Our Partners also use this technology in the same way. Cookies are IT data saved in files and stored on your end device (i.e. your computer, tablet, smartphone, etc.). Your browser sends this data to the server every time you access a website from your device, when you visit various websites on the Internet.

Google Analytics and Google AdWords

Google Analytics uses “cookies” technology to enable the website to analyze traffic sources and how visitors use it.

Google AdWords uses the “cookies” technology to enable the website to assess the correctness and effectiveness of the advertising activity carried out using the AdWords network.

In both cases, Google collects data obtained from placing cookies on devices on its servers and uses this information to create reports and provide other services related to traffic and internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process such information on Google’s behalf.

Consent

Accepting cookies is consent to the processing of your personal data collected in connection with your visit to our website, including their processing in cookies, etc. installed on your devices and read from these files by Admill Sp. z o.o. and Partners. You can do this by clicking on the “Accept” button. Consent is voluntary. You can change your consent preferences at any time, including withdrawing it completely, by following our privacy policy. The above consent applies to the processing for marketing purposes other than the own purposes of Admill Sp. z o.o. and its Partners. At the same time, we would like to inform you that Admill Sp. z o.o. and its Partners, as part of the Internet services they provide, will process your data for their own marketing and recruitment purposes described in detail above, based on their legitimate interest as the administrator.