The company IDEAS NCBR Sp. z o.o. (hereinafter IDEAS) pays special attention to the protection of users’ privacy, including their personal data collected in connection with visiting the website www.ideas-ncbr.pl (hereinafter: the website) and using the electronic services available on the website. In this document, we have specified all the necessary information about the processing of personal data that we want to provide to you in order for you as a user to make informed choices about using, including providing personal data by the website.
The entity responsible (otherwise: the Administrator) for the processing of your personal data collected by the website is IDEAS NCBR Sp. z o.o. with the exceptions set out in this policy.
IDEAS NCBR Sp. z o.o.
In order to ensure the transparency of data processing, in particular, we always inform about data processing at the time of its collection, including the purpose and legal basis of the processing – e.g. when using the contact form or setting cookie preferences. We strive to collect data only to the extent necessary for the indicated purpose and processed only for the period in which it is necessary.
When processing data, we ensure their security and confidentiality as well as access to information on processing to data subjects. If, despite the security measures in place, there is a breach of personal data protection (e.g. “a leak” or loss of data), we will inform the data subjects of such an event in a manner consistent with the law.
How we collect personal data
We may collect personal data through:
For what purposes and legal bases we process personal data
We process users’ personal data in connection with:
by using the website, we collect user data in the form of anonymous information to the extent necessary for the proper functioning of the website, managing its content, creating statistical summaries of its visits, interest in content, publications, etc. The collected information about users relates to: IP address, type of software (e.g. Windows or Mac), screen resolution, name and version of the operating system as well as the type and version of the web browser, a unique device identifier. In the event that the user browses the website from a mobile device, we will collect similar information. We collect this information through cookies or server log files. The legal basis for the processing of the collected information is our legitimate interest pursuant to Article 6 (1) (f) of the GDPR or the consent (Article 6 (1) (a)) of the user to install cookies in accordance with the choice made.
by using the contact form provided on the website, or by sending e-mail correspondence to the e-mail addresses provided, in a topic not related to the services provided by us to the sender of this correspondence, we will ask you to provide certain data that will allow us to respond.
The collected information resulting from the correspondence is processed solely for the purpose of communication and handling correspondence. We try to collect only the information that is necessary for a given case. The legal basis for the processing of the collected information is our legitimate interest pursuant to Article 6 (1) (f) of the GDPR, consisting in the need to resolve a reported matter related to business activity. In a situation where you provide us with other data than necessary to settle a given case, the legal basis for the processing of this data will be Article 6 (1) (a) your consent to the processing of this personal data.
by using the contact form provided on the website, or by sending e-mail correspondence to the e-mail address provided, in the subject related to the services provided by us to the sender of this correspondence, we collect information necessary to conclude or perform the concluded contract.
The collected information resulting from the correspondence is processed solely for the purpose of communication and handling correspondence. We try to collect only the information that is necessary for the conclusion or performance of the contract. The legal basis for the processing of the collected information is a contract or conclusion of a contract at the request of the data subject, pursuant to Article 6 (1) (b) of the GDPR, i.e. collecting the necessary information to conclude the contract and its implementation. In a situation where you provide us with other data than necessary to settle a given case, the legal basis for the processing of this data will be Article 6 (1) (a), i.e. your consent to the processing of this personal data.
in the case of contacting us by phone, in matters not related to the concluded contract or services provided, we may ask for personal data only if it is necessary to handle the case to which the contact relates. The legal basis for the processing of the collected information is our legitimate interest pursuant to Article 6 (1) (f) of the GDPR, consisting in the need to resolve a reported matter related to business activity.
by sending the application documents to the e-mail address provided, we expect to provide us with personal data specified in the law (name and surname, date of birth, address, contact details provided as well as education and professional experience, if necessary for a given job position). Please do not provide us with any information other than that indicated above. In a situation where the scope of the transferred data is wider, this data will be processed by us on the basis of your consent resulting from the provision of this data for the purposes of the recruitment process.
The legal basis for the processing of the collected information is a legal provision obliging the controller to process a specific scope of personal data is Article 6 (1) (c) of the GDPR and the legitimate interest in assessing the candidate’s qualifications for a given job position, Article 6 (1) (f) of the GDPR, in the remaining scope (applies to data other than those resulting from the law), and consent of the data subject, pursuant to Article 6 (1) (a) of the GDPR.
in connection with running a company profile, we process users’ personal data for the purposes of maintaining a company profile on selected social networks in order to inform about our activities, to promote the various events we organize and our brand, products and services, to build and maintain a community and for communication via the available functionalities of the given website (comments, chat, messages) and for analytical purposes regarding the analysis of the functioning, popularity, and manner of using a given company profile. The legal basis for the processing of the collected information is our legitimate interest pursuant to Article 6 (1) (f) of the GDPR.
More in section IX: Social media.
We may also collect personal data:
Types of personal data collected
In connection with the provision of electronic services, we collect personal data to the extent necessary for the specific purpose of their processing. These are, among others: name and surname, e-mail address, telephone number, content of the message or conversation. In addition, when sending application documents to us, we will process data such as: year of birth, address, education, experience, and in some cases (if they are provided) additionally: images, interests, skills.
In addition to the data provided above, when using our website, we will additionally collect and save in the file log data about the IP address (internet protocol address) of the end device you use, the name of the service provider through which the website is accessed, the name of downloaded files or information, date and time and the times of viewing the published content, date and time of information sent, name of the operating system and information on the web browser used to browse the website, name or number of the device from which you browse. Log files are saved by us for a short time to determine disruptions and for security reasons (e.g. to investigate attack attempts) and then deleted. Log files, the further storage of which is required for evidence purposes, are not deleted until the incident in question has been finally resolved and may be forwarded to investigating authorities on a case-by-case basis.
Rights of the data subjects
The user whose personal data we process has the following rights:
on this basis, we provide the person submitting the request with information on data processing, including in particular the purposes and legal grounds for processing, the scope of the data held, entities to which they are disclosed, and the planned date of data deletion.
on this basis, we provide a copy of the processed data relating to the person submitting the request.
on this basis, we are obliged to remove any inconsistencies or errors in the processing of personal data and to supplement them if they are incomplete.
on this basis, we are obliged to immediately stop processing data for the purpose of direct marketing.
on this basis, we are obliged to take steps to assess whether our legitimate interest does not violate the right to privacy of the requesting person, and in the event of a violation of the law, stop processing personal data for a specific purpose.
on this basis, you can request the deletion of data, the processing of which is no longer necessary to achieve any of the purposes for which they were collected.
on this basis – to the extent that the data is processed in connection with the concluded contract or consent – the Administrator issues the data provided by the data subject in a computer-readable format.
on this basis, we cease to perform operations on personal data – with the exception of operations for which the data subject has consented – and their storage, in accordance with the adopted retention rules or until the reasons for limiting data processing have ceased to exist.
if it is found that the processing of personal data violates the provisions on the protection of personal data, the data subject may submit a complaint to the President of the Personal Data Protection Office.
In order to exercise the above-mentioned rights, contact us on one of the following communication channels:
Telephone: 539 698 327
Post: IDEAS NCBR Sp. z o.o. ul. Nowogrodzka 47A, 00-695 Warsaw
Recipients of personal data
We do not disclose the personal data of the Users of our website, except in the case of:
Cross-border data transfers
We do not transfer data to third parties based in countries outside the European Economic Area (EEA) or international organizations.
Automated processing including profiling
Except as permitted by applicable law, cookies will not be placed on your hard drive until you have given your consent via the cookie banner or via the preference centre.
Your personal data is not used for profiling.
Time of data processing
In accordance with the established policy, we will process personal data:
Social media plugins
LinkedIn is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA („LinkedIn”). You can find an overview of the LinkedIn plugins and their appearance here: https://developer.linkedin.com/plugins; information on data protection can be found on LinkedIn here: https://www.linkedin.com/legal/privacy-policy
This online offer uses the YouTube video platform, which is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”). YouTube is a platform that allows you to play audio and video files.
Our purpose of processing data on our social profiles is to inform Users about our offers, products, services, promotions, competitions, industry events, company news, as well as to interact with people visiting our company profile.
Data Protection Officer
We have appointed a Data Protection Officer who can be contacted on any topic regarding the processing of personal data through: