PLATIGE IMAGE S.A. PRIVACY POLICY

I. BASIC INFORMATION

  1. This Platige Image S.A. Privacy Policy (“Policy”) specifies the principles and legal grounds of the personal data processing performed by Platige Image S.A., a company based in Warsaw (ul. Władysława Szpilmana 4, 02-634 Warsaw), entered in the commercial register of the National Court Register under company number (KRS): 0000389414, Polish tax number (NIP): 5242014184 (“Controller” or “Platige”).
  2. This Policy fulfils the notification obligations under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).
  3. This Policy concerns personal data of: (1) Platige’s customers and business partners as well as their staff (employed or otherwise hired) and their representatives; (2) persons who contact Platige or are contacted by Platige using any methods (e-mail, telephone, mail); (3) job candidates; (4) users of Platige websites; (5) visitors to Platige social media sites; (6) visitors to Platige offices.
  4. This Policy indicates the categories of personal data processed by Platige, the legal basis of the processing and its period, and to whom the data may be transmitted. This Policy also specifies the rights of data subjects towards their personal data according to GDPR.
  5. A data subject can contact Platige on any issues related to his/her personal data, either by writing to the registered office address or by email to rodo@platige.com.
  6. Anyone whose personal data Platige processes has the following rights: (1) to be informed about the processing of his/her data, including the categories of data processed and the potential data recipients; (2) to request the correction of any data that is inaccurate or incomplete; (3) to request that the data be erased or its processing restricted (if certain legal requirements are fulfilled); (4) to object to the processing of his/her data (if certain legal requirements are fulfilled); (5) to move his/her personal data (the Controller will provide it in a format enabling its transfer to a third party chosen by the data subject).
  7. Every data subject has the right to lodge a complaint with the Polish data supervision authority, namely the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl), whenever the data subject believes that his/her data has been processed in violation of the law.

II. PERSONAL DATA OF INDIVIDUAL CUSTOMERS

  1. Platige processes personal data of its customers who are individuals (‘natural persons’) in connection with certain services provided to them.
  2. The personal data is processed for the purpose of establishing the cooperation with them, the proper performance of services and billing, and to exercise potential legal claims. The data may include: full name, contact details (correspondence address, telephone number, email address, social media accounts), bank account number, Polish personal number (PESEL), Polish tax number (NIP).
  3. The legal basis of such processing is GDPR Article 6.1.(b) (activities aimed at conclusion or performance of a service contract), Article 6.1.(c) (fulfilment of the Controller’s legal obligations), Article 6.1.(f) (exercise and defence of legal claims under a contract).
  4. The data will be processed until the cooperation becomes terminated and, after the termination, for a period necessary to fulfil legal obligations (e.g. under tax legislation) as well as for the statutory time bar period applicable to claims under the contract between Platige and the data subject.

III. PERSONAL DATA OF BUSINESS PARTNERS

  1. Platige processes the personal data of its business partners, subcontractors, suppliers and vendors who are individuals (‘natural persons’), in connection with the cooperation with them, for the purpose of establishing the cooperation, to keep in contact with them on an ongoing basis, including in relation to the conclusion of a contract, presentation of an offer or placement of a purchase order.
  2. The personal data may include: full name, Polish personal number (PESEL), Polish tax number (NIP), address details (such as the principal place of business, place of work), job position, contact information (mailing address, telephone number, email address), bank account number, social media accounts, personal portfolio.
  3. In the event of persons who signed a contract with Platige based on which their work, image or artistic performance will be used in any programmes, films or series produced by Platige, the personal data will also be processed for the purpose of exercising moral rights (required labelling of the work or artistic performance with the author’s full name or pseudonym) as well as for the purpose of establishing and settling any royalties as may be connected with the use of the work or artistic performance.
  4. The legal basis of such processing is GDPR Article 6.1.(b) (activities aimed at conclusion or performance of a service contract), Article 6.1.(c) (fulfilment of the Controller’s legal obligations), Article 6.1.(f) (exercise and defence of legal claims under a contract).
  5. The personal data will be stored for a period of the contract and, once completed, it will be processed to the extent necessary in order to use the image / creative work developed based on the contract (including to document the Controller’s acquisition of relevant rights permitting it to use of the created work in a manner compliant with the contract) and to exercise and defend any claims in that regard – for a period during which last the rights or licences granted to the Controller under the contract.

IV. PERSONAL DATA OF REPRESENTATIVES AND STAFF

  1. In connection with the establishment of the cooperation, negotiations and the conclusion of a contract, Platige will process personal data of persons representing or hired by its individual customers and business partners. These may include, in particular, individual members of the staff (employed or otherwise hired) in charge of contact or performance of a contract.
  2. Their personal data will be processed for the purpose of keeping in contact on an ongoing basis, including in relation to the conclusion and performance of the contract, presentation of offers, placement of purchase orders, responding to any questions.
  3. The data may include: full name, place of work, job position, contact details (mailing address, telephone number, email address, social media accounts).
  4. The legal basis of such processing is the legitimate interest, according to GDPR Article 6.1.(f), which the Controller has in the establishment and continuation of the cooperation and contact with them, as well as in exercising and defending legal claims.
  5. The data will be processed until the cooperation becomes terminated and, after the termination, for the statutory time bar period applicable to claims under the contract. The data may be erased at an earlier date when an objection is filed against its processing or whenever Platige considers the data as no longer necessary for the achievement of its legitimate interest.

V. CONTACT PERSONS FOR PLATIGE

  1. Platige will process personal data of persons who contact Platige by post, email, online forms or telephone in relation to any matter, such as to establish a business cooperation, or who are contacted by Platige for the purpose of establishing such cooperation.
  2. As part of its contact database, Platige processes the personal data in order to keep in contact on any ongoing issues, including to answer questions, make enquiries or propose offers, as may be needed for a potential cooperation, for example.
  3. For such purpose, the data may include: full name, place of work, job position, contact details (mailing address, telephone number, email address, social media accounts) and other data as may be made available in any correspondence or over the phone (for example, an individual portfolio).
  4. The legal basis of such processing is the legitimate interest, according to GDPR Article 6.1.(f), which the Controller has in responding to inquiries and in the establishment and continuation of relations as part of its business.
  5. The data will be processed for the duration of the business relationship and for a period of three years thereafter. The data may be erased at an earlier date when an objection is filed against its processing or whenever Platige considers the data as no longer necessary for the achievement of its legitimate interest.

VI. JOB CANDIDATES

  1. In connection with new recruitment, Platige will process personal data provided by job candidates in order to assess their qualifications for a given job applied for, and to select the right person, i.e. to perform activities aimed at the conclusion of an employment contract or non-employment contract for services related to a given job position.
  2. For the purposes of future recruitment at Platige, personal data provided during the recruitment may be retained only based on a candidate’s separate consent.
  3. In connection with its recruitment processes, Platige will process the following personal data of candidates from their CVs or other documents (for example, questionnaires): full name, date of birth, place of residence, education, previous employers. In the event of employment contract candidates whose job application contains data reaching beyond that specified in the labour legislation, the data will be processed based on a candidate’s separate consent which will be expressed by way of submitting the job application documents (CV, e-mail, resume, application).
  4. The legal basis of such processing is: (1) GDPR Article 6.1.(c) in conjunction with Article 221 (1) of the Labour Code – for job candidates seeking employment contracts; (2) GDPR Article 6.1.(b) and (c) – for job candidates seeking non-employment contracts for services; (3) GDPR Article 6.1.(a) for the purposes of personal data processing in future recruitment, the processing of one’s image and the transmission of any data other than specified in the labour legislation; and (4) GDPR Article 6.1.(f) for the purposes of data collected for candidate assessment and for the establishment or exercise of potential legal claims.
  5. A candidate’s personal data will be processed until the end of the recruitment process and, if a separate consent has been given to future recruitment, the data will be retained for a period of 3 years of its receipt.
  6. Personal data may be transmitted to professional entities which handle the recruitment process on behalf of Platige.

VII. PLATIGE WEBSITE USERS

  1. Platige also processes personal data collected through www.platige.com and any services provided there.
  2. Platige processes data left during the use of that website, for example data contained in ‘cookies’ (explained below).
  3. The data is collected to ensure the proper functioning of the website, to provide access to it, to ensure its security (and prevent hacker attacks), to provide statistics as necessary for the proper functioning of the website and improve its quality, and for the marketing of Platige and its services.
  4. The legal basis of such processing is GDPR Article 6.1.(f) – the Controller’s legitimate interest in the achievement of the purposes specified in above.
  5. Personal data will be processed for a period necessary to fulfil the purposes of its collection but no longer than for 5 years unless an earlier objection is effectively filed (in such event, the data will be erased).

VIII. PLATIGE SOCIAL MEDIA VISITORS

  1. As the data controller, Platige processes personal data of visitors, followers and commenters of Platige’s official profiles that are available on Facebook, Instagram and LinkedIn platforms.
  2. The rules of following, posting/deleting comments and contacting the profiles are defined in dedicated terms of service of the respective social media networks that are the personal data controllers themselves in relation to their services.
  3. Personal data obtained through Platige’s social media profiles is processed to contact their visitors, to enable any interested people to contact Platige, to present activities and events related to Platige and its projects, and for statistical purposes using the tools provided by these social media sites.
  4. The social media networks make it also possible to make contact with Platige and send messages containing, for example, a question or a request. In such a case, the data will also be processed for the purpose of responding to such message.
  5. As part of the social media profiles and with their help, Platige will process data made available through functionalities of a given system. Such personal data is given voluntarily.
  6. The legal basis of such processing is GDPR Article 6.1.(f) – the Controller’s legitimate interest in the achievement of the purposes specified in above, in particular the promotion of the Platige brand, responding to questions and establishment of contact.
  7. The data will be retained and, if requested, erased depending on actual features of the individual social network.

IX. VISITOR REGISTER

  1. To ensure the security of people and property (including confidential information) as may be kept by Platige in its offices, the Controller keeps a register of office visitors. It therefore processes the following visitor data: full name, company name (if applicable).
  2. The legal basis of such processing is GDPR Article 6.1.(f) – the Controller’s legitimate interest in the achievement of the purposes specified in above.
  3. Personal data will be processed for a period necessary to fulfil the purposes of its collection but no longer than for 5 years unless an earlier objection is effectively filed (the data would be erased in such case).

X. PERSONAL DATA RECIPIENTS

  1. Personal data may be transmitted to entities that provide Platige with services (such as third-party IT providers, courier companies, HR service providers, accountants, contractors and recruiters). Personal data may also be transmitted to Platige subcontractors who render services on behalf of Platige or to its clients. They are always trusted processors to whom Platige entrusts certain activities in order to meet its objectives to the best degree possible.
  2. In the event of persons who signed a contract concerning the use of their creative work, image or artistic performance in programmes, films or series produced by Platige, the personal data may be transmitted to entities involved in the film/television production (such as distributors, co-producers and entities otherwise using the film/programme/series) – for the purpose and to the extent related to the use of the creative work/image specified in such agreement/contract and for the purpose of exercising moral rights, and also to copyright and related rights management organisations – for the purpose and to the extent related to the establishing and settlement of royalties.
  3. Platige does not plan any data transmission to any third countries (outside EEA) in the future. However, if so, the transmission would be ensured in full compliance with all legal requirements. If the data is transmitted to a third country otherwise than based on one’s consent, based on the need to ensure the proper performance of a contract, or based on one of the exceptions specified in GDPR Article 49, the data will be transmitted in line with GDPR Article which refers to a decision of the European Commission qualifying the level of personal data protection in a given third country as adequate. In such case, no special authorisation would be required to transmit the personal data to that country. GDPR Article 46 says that a transmission to a third country may take place if adequate safeguards are in place and the data subject rights and legal measures are enforceable in the legal system there.

XI. COOKIES POLICY

  1. Cookies containing information as well as any similar technology can be placed on an end-user’s device and accessed by Platige Image and any entities to which it transmits the user’s data, for example technical service providers of Platige (including analytical and marketing services). Cookies are computer data, in particular a text file, which is stored on an end device of a website or WPM app user. Cookies typically contain the domain name of their source website, the duration of their storage on the end-user device, and a unique identifier. Cookies are not used to identify the user specifically and his/her identity cannot determined based on the cookies. A website may place a cookie in a user’s browser as long as it permits cookies. Please note that browsers allow websites to access only cookies placed by themselves and not those placed by other websites.
  2. Types of cookies. Based on the lifespan of cookies and other similar technology, we use two main types of such files: (a) session cookies which are temporary files stored on an end-user’s device until the user logs out, leaves the website and application or until the user closes the software (web browser); (b) permanent cookies which are stored on an end-user’s device for a time specified in the cookies parameters or until they are deleted by the user. Based on the purpose of cookies and other similar technology, we use the following types of cookies: (a) cookies essential for the functioning of the website and applications, enabling a user to use our services, for example authentication cookies used for services that require authentication; (b) security cookies, for example used to detect abuse of authentication; (c) performance cookies which enabling Platige to collect information about a user’s use of the website and applications; (d) functional cookies which enable Platige to ‘remember’ a user’s settings and customise the user interface, for example the choice of language and region, (e) advertising cookies which provide advertising content that is more relevant to a user’s interests; (f) statistical cookies which compile statistics about websites and applications.
  3. Purpose of cookies. Platige uses cookies and other similar technology for the following purposes: (a) to provide services; (b) to adapt the content of websites and applications to a user’s preferences, and optimise the use of websites, for example cookies allow the recognition of the user’s device and appropriate displaying of the website adapted to his/her individual needs; (c) to compile statistical data which helps to understand how users use websites and applications, to improve their structure and content; (d) to maintain a user’s session (after logging in) thanks to which the user does not have to re-enter the login and password on every sub-page; (e) to present advertising, for example taking into account the user’s interests or place of residence (custom advertising) but preventing repeats and duplication of ads.
  4. Browser settings. In many cases, the web browsing software (web browser) allows by default the storage of cookies and other similar technology on an end-user’s device. However, the user can change these settings at any time. Unless changed, such information may be uploaded to and stored on one’s end device, therefore allowing Platige to store information on the end-user’s device and access this information. The user can manage the browser settings in the browser directly. The most popular browsers offer, for example, options to: accept all cookies (to take full advantage of the options offered by websites), manage cookies of individual sites at one’s choice, specify different settings for different types of cookies, for example, to accept permanent cookies as session cookies, to block or delete cookies. Detailed information on this is available in the software (browser) itself. More details for users of specific web browsers: Internet Explorer, Mozilla Firefox, Chrome and others. Please note that restricting or disabling cookies and other similar technology may affect the functionalities offered by our website.