Privacy Policy

The website www.certusoft.pl uses cookies

If you do not change your browser settings, it means you agree to their use.

1. What are cookies?

Cookies (often referred to as “cookies”) are data – in particular text files – that are stored on the User’s device. They are intended for use when browsing the website. Cookies usually contain the name of the website they originate from, the duration of their storage on the device, and a unique identifier.

2. Automatic Information Collection

The website does not automatically collect any information, except for the data contained in cookies.

3. The Entity Responsible for Cookies

The entity that places cookies on the User’s device and has access to them is the website operator, Certusoft Sp. z o.o., based in Warsaw at Aleja Prymasa Tysiąclecia 83A, suite 137, 01-242 Warsaw, registered in the National Court Register – Entrepreneurs Register under number KRS 0000954074, NIP 5242775523.

4. Use of Cookies

• Enabling user login and maintaining the user’s session on each subsequent page of the website,
• Customizing website content according to the user’s preferences and optimizing the browsing experience,
• Creating anonymous statistics without the possibility of identifying the user.

5. Cookies of the Operator's Partners

Cookies used by the Operator's partners – including users of the website – are subject to their own privacy policies.

6. Browser Settings Regarding Cookies

Web browsing software by default allows cookies to be stored on the user’s device. The user can change the settings to automatically block cookies or to be notified each time a cookie is sent to their device.

7. Changing Cookie Settings

The user can change the cookie settings at any time. Detailed information on managing cookies is available in the settings (help section) of the web browser.

8. Editing Cookie Settings in Popular Web Browsers:

• Chrome
• Mozilla Firefox
• Microsoft Edge
• Safari

9. Changes in Settings and the Operation of the Website

The website operator informs that changes in the user’s browser settings may prevent the proper functioning of the website.

Information on the Processing of Personal Data

1. Scope of Information

The information on the processing of personal data by Certusoft Sp. z o.o. applies to data received:

• Through electronic forms and other remote communication channels,
• In the context of direct and indirect contacts with clients,
• By representatives of Certusoft in the scope of procurement, sales, or marketing activities.

This information does not apply to the processing of personal data of employees or job applicants.

2. Data Controller and Contact for Personal Data Matters

The data controller for your personal data is Certusoft Sp. z o.o., based in Warsaw at Aleja Prymasa Tysiąclecia 83A, suite 137, 01-242 Warsaw, registered in the National Court Register – Entrepreneurs Register under number KRS 0000954074, NIP 5242775523. Email: rodo@certusoft.pl, Tel: +48 608 448 500.

3. Source of Data and Categories of Data Provided by Other Entities

Certusoft may receive contact data directly from the individual concerned or via another person. In the case of direct contact, the data provider has full control over the scope of data shared with Certusoft. When data is provided by another party, Certusoft collects only the basic contact data related to the activity – such as first name, last name, email address, phone number, company, and any other data that is shared.

4. Legal Basis, Purposes, and Duration of Processing

Personal data is processed by Certusoft for the purposes of business contacts, newsletter distribution, responding to inquiries, and post-conference contact. You have the right to object to the processing of personal data at any time in accordance with the “Your Rights” section.

4.1. Business Contacts

Based on Article 6(1)(f) of the GDPR, with the processing period lasting until an objection is raised pursuant to Article 21 of the GDPR. Contact data provided via an electronic form or in any other manner may be processed for business contact purposes. Business contacts include ongoing communication related to negotiations, contract execution, sending offers, meeting invitations, or other marketing activities conducted by a Certusoft representative. In cases where the data pertains to a representative of a supplier or service provider, Certusoft may also initiate contact to obtain an offer, information, or documents. Processing is carried out in pursuit of the legitimate interest of the data controller – namely, marketing, the sale of products and services, and building and strengthening business relationships.

4.2. Response to Inquiries

Based on Article 6(1)(a) of the GDPR, with the processing period lasting until the request is withdrawn (withdrawal of consent). In the event of filling out a contact form or submitting an inquiry (e.g., via the company’s website, email, or telephone), the consent covers contact related to fulfilling the inquiry. Consent may be withdrawn at any time; however, its withdrawal does not affect the lawfulness of processing prior to the withdrawal, and withdrawal results in no further response.

4.3. Post-Conference Contact

Based on Article 6(1)(f) of the GDPR, with the processing period lasting until an objection is raised pursuant to Article 21 of the GDPR. Personal data obtained directly during a conference (e.g., by leaving a business card or exchanging contact details) or provided to Certusoft by the conference organizer will be used for the one-time dispatch of promotional materials related to the conference topic and to request consent for further contact. Processing is carried out in pursuit of the legitimate interest of Certusoft – namely, customer acquisition, marketing and sales of products and services, and building and strengthening business relationships.

4.4. Newsletter

Based on Article 6(1)(a) of the GDPR, with the processing period lasting until the newsletter subscription is canceled (withdrawal of consent). Should you consent to receiving the newsletter from Certusoft, it will be sent to the provided email address at a frequency determined by the marketing department and will contain information about the offer, activities, and other relevant details concerning Certusoft.

5. Consequences of Not Providing Data

In electronic forms, providing data is voluntary; however, failure to provide data marked as required may result in the inability to submit the form. For data collected by Certusoft representatives in procurement, sales, or marketing activities, providing data is voluntary and its omission may result in the inability to establish future contact.

6. Unsubscribing from the Newsletter

Consent to receive the newsletter is voluntary and may be withdrawn at any time. To do so, please follow the instructions included in the newsletter or use the contact details provided in the “Data Controller and Contact” section. Withdrawing consent does not affect the lawfulness of processing prior to its withdrawal. Unsubscribing from the newsletter, without objecting to business contacts, may still provide a basis for Certusoft to initiate contact for business purposes.

7. Your Rights

Under the GDPR, you have the right to:

1. Access your data
2. Rectify your data
3. Erase your data
4. Restrict data processing
5. Data portability
6. Object (where processing is based on the legitimate interest of the controller)
7. Withdraw consent (where processing is based on consent)

The exercise of these rights is subject to the conditions set out in the GDPR. In case of refusal, a justification for the refusal will be provided. To exercise these rights, please contact us as indicated in the “Data Controller and Contact” section.

8. Data Recipients and Transfer to Third Countries

Contact data is stored on Certusoft's servers and is remotely accessible by Certusoft representatives. Please note that personal data may be transferred to countries outside the EU where Certusoft employees are located. Data may be shared with suppliers, service providers, and partners with whom Certusoft cooperates, to the extent necessary for business contacts, marketing activities, and the operation of Certusoft.

9. Automated Decision-Making

The provided data may be processed for the purpose of profiling and tailoring the marketing content, offers, or information sent by Certusoft in response to inquiries and business or professional activities. The data will not be processed for the purpose of automated decision-making.