PRIVACY
AND COOKIE POLICY
1. Personal data controller
The controller of the personal data of users of the website https://www.signalgroup.eu is Signal Group spółka z ograniczoną odpowiedzialnością, with its registered office in Poznań (61-441), ul. 28 Czerwca 1956 r. 406, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000265195, NIP 7781440038, REGON 300381375 (hereinafter: the “Controller” or the “Company”).
The Controller may be contacted by e-mail at office@signalgroup.pl or in writing at the address of its registered office.
The Controller has appointed a Data Protection Officer, who may be contacted by e-mail at inspektor@signalgroup.pl or in writing at the address of the registered office, with the note “For the attention of the Data Protection Officer”. The Data Protection Officer is Kamil Sobieraj.
2. Scope and sources of data
We process data provided by users through the contact form, data arising from correspondence, technical data connected with use of the website, and information stored in system logs and cookies or similar technologies, to the extent that they are actually used on the website.
The scope of data may include in particular: first and last name, company name, e-mail address, telephone number, message content, IP address, device and browser information, date and time of visit, addresses of pages visited, technical error data, and cookie preference settings.
3. Purposes and legal bases of processing
We process personal data to handle messages submitted through the contact form, conduct correspondence and respond to enquiries, on the basis of Article 6(1)(f) GDPR; where an enquiry is intended to lead to a contract or concerns steps taken at the data subject’s request before entering into a contract, also on the basis of Article 6(1)(b) GDPR.
We process technical data, server logs and security information to ensure the proper operation of the website, detect misuse, maintain security and demonstrate accountability, on the basis of Article 6(1)(f) GDPR.
We use cookies or similar technologies that do not require user consent only to the extent necessary to operate the website, ensure security, remember privacy settings or provide other functions necessary for a service requested by the user.
We use statistical, preference or marketing cookies only if they are actually implemented on the website and the user has given prior consent through the relevant browser settings or cookie settings panel, in accordance with applicable electronic communications and data protection laws.
If a user’s message concerns the activities of a specific company within Signal Group, the data may be forwarded to that company so that it can respond and continue handling the matter. If that company subsequently handles the matter in its own name, it will provide the user with information about data processing no later than at the time of first contact.
4. Contact form
Using the contact form requires users to provide the data marked as mandatory. Failure to provide such data will make it impossible to accept and process the message.
Handling messages submitted through the form does not require separate consent to the processing of personal data. If consent to receive commercial information or direct marketing is implemented on the website, it will constitute separate, voluntary consent that may be withdrawn at any time.
5. Recipients of data
Personal data may be disclosed to entities providing the Controller with services related to the maintenance and development of the website, hosting, e-mail, IT tools, technical support, IT security, legal and organisational advice, and to other processors acting under appropriate agreements.
Data may also be disclosed to authorised authorities or institutions where such an obligation arises under applicable law.
If a matter concerns a specific company within Signal Group, data may be forwarded to that company to the extent necessary to respond and continue handling the matter.
6. Transfers of data outside the EEA
As the Controller uses Webflow services to create, maintain and host the website, together with related technical infrastructure and supporting provider services, users’ personal data may be transferred outside the European Economic Area, in particular to the United States.
The data covered by such a transfer may include, in particular, technical data relating to use of the website, data stored in system logs, data submitted through the contact form and other data processed within the website infrastructure, to the extent necessary to provide hosting, maintenance, security, content delivery and technical support services.
Data is transferred subject to appropriate safeguards required by law, in particular on the basis of adequacy decisions, the recipient’s participation in the Data Privacy Framework, standard contractual clauses approved by the European Commission, or other lawful transfer mechanisms.
7. Data retention period
Data from the contact form and correspondence will be retained for the period necessary to handle the matter and thereafter for the period required to demonstrate accountability, defend against claims or pursue claims.
Data processed for pre-contractual steps or entering into a contract will be retained for the period necessary for those steps and, if a contract is concluded, for the duration of its performance and for any further periods arising from applicable law and limitation periods.
Data stored in server logs and security systems will be retained for the period necessary to administer the website and ensure security, taking into account retention periods resulting from backups, system logs and providers’ technical requirements.
8. Rights of data subjects
Data subjects have the right to access their data, rectify or erase it, restrict its processing and, where provided by law, receive or transfer their data. They also have the right to object to processing based on Article 6(1)(f) GDPR.
Where processing is based on consent, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Data subjects also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
9. Voluntary provision of data
Providing data through the contact form is voluntary; however, data marked as required is necessary for the message to be accepted and processed.
Consent to cookies other than those that are strictly necessary, as well as any marketing consent, is voluntary.
10. Cookies and similar technologies
The website may use cookies and similar technologies, such as browser local storage or mechanisms used to remember user preferences, security settings and privacy settings.
The use of Webflow infrastructure and related hosting services may itself involve the processing of technical data, logs and identifiers used for security, content availability and the proper operation of the website. Not every such mechanism will be visible to the user as a separate cookie, but this information may constitute personal data within the meaning of the GDPR.
The use of statistical, preference or marketing cookies requires the user’s prior consent, unless the relevant mechanism is strictly necessary to provide a service expressly requested by the user.
If the Controller implements analytics or advertising tools, embedded third-party content, maps, video players, marketing pixels or similar solutions, detailed information about these technologies, including the provider, purpose, retention period and any data transfer, will be made available in the cookie settings panel and this policy will be updated accordingly.
11. Cookie categories
Strictly necessary or functional cookies are used to ensure the proper operation and security of the website, maintain sessions, remember privacy preferences and other technical settings. Their use does not require user consent where they are strictly necessary to provide a service requested by the user.
Preference cookies enable the website to remember user settings that are not strictly necessary but improve the user experience. Their use requires user consent where they are not necessary.
Statistical cookies are used to generate statistics and analyse website traffic. Their use requires the user’s prior consent if they use identifiers or similar tracking mechanisms.
Marketing cookies are used to tailor advertising content, conduct direct marketing, create profiles or measure the effectiveness of promotional activities. Their use requires the user’s prior consent.
12. Managing cookies
Users may manage their preferences through their browser settings and the “Cookie Settings” panel, where available on the website.
Restricting the use of cookies may affect certain website functions, especially those that require user settings to be remembered.
13. Social media and external links
The website may contain links to external services, in particular LinkedIn and YouTube. Clicking such a link takes the user to the external service, where any further data processing is carried out in accordance with the rules of its provider.
Merely placing a link to an external service does not cause that provider’s cookies to be installed on the user’s device before the link is clicked, unless embedded content or another technical solution requiring contact with a third party’s servers is implemented on the website.
14. Automated decision-making
Website users’ personal data is not subject to automated decision-making, including profiling, that produces legal effects concerning the user or similarly significantly affects them, unless a separate solution is implemented in the future, in which case users will be informed.
15. Changes to this policy
This policy is reviewed periodically and may be updated if the website’s functionality, the tools used, applicable law or the manner in which data is processed changes.
The current version of this policy is published on the website.