TABLE OF CONTENTS

  1. Who is the Controller of your personal data?
  2. How to contact us as the Controller of your personal data?
  3. How do we process your personal data?

3.1. The purposes and legal basis for processing your personal data:   

3.1.1.  Data of customers and potential customers
3.1.2.  Data of customers personnel and potential customers personnel
3.1.3.  Data of contractors and potential contractors
3.1.4   Data of contractors personnel and potential contractors personnel
3.1.5.  Data of journalists and other persons to whom services are pitched as part of    the provision of PR services               
3.1.6.  Marketing data
3.1.7.  Other personal data

3.2. The storage period of your personal data   
3.3. Recipients of your personal data   
3.4. Voluntary provision of personal data   

  1. Do we transfer your personal data outside the EEA?
  2. What are your rights related to the processing of your personal data?

5.1. What rights do you have?   
5.2. How to implement those rights?   

  1. Cookies information

PRIVACY POLICY

1. DATA CONTROLLER

The Controller of your personal data is:

SAROTA PR Sp. z o. o
Władysława Beliny – Prażmowskiego St. 69/7
31-514 Cracow
POLAND

The Controller runs:

2. CONTACT WITH THE CONTROLLER

You can contact us in all matters related to the processing of your personal data under following details:

  • e-mail: prywatnosc@sarota.pl
  • phone: +48 12 684 12 68;      
  • traditional mail at the following address:      
    SAROTA PR Sp. z o.o., Władysława Beliny-Prażmowskiego St. 69/7, 31-514 Cracow, POLAND

 3. DATA PROCESSING BY THE CONTROLLER

3.1. Purposes and legal basis for processing your personal data

3.1.1. Data of customers and potential customers   

Your personal data as our client will be processed in order to provide PR services to you.

By signing a contract with us for the provision of PR services or by contacting us to conclude the contract, you provide us with the data necessary to conclude and perform this contract. Your personal data will be processed to communicate, to the extent necessary for the conclusion or performance of a contract that you are or will be part of, (Article 6 (1) (b) of the GDPR). After the contract has been executed your personal data will be processed on the basis of the controller’s legitimate interest (Article 6 (1) letter f), consisting in archiving of data in the event of potential claims.

In terms of data related to the Controllers obligations provided for by law, in particular in the field of bookkeeping and tax settlements, the legal basis for the processing of your data is Article 6 (1) (c) of the GDPR related with applicable law, which implies the need for the Controller to fulfil given obligations.

3.1.2. Data of customers personnel and potential customers personnel

If you are a contact person on the part of our (potential) customer, your personal data will be processed by us to contact you in current matters, in particular to answer your questions and possibly to keep in touch, submit and accept contract offers, conducting negotiations, as well as concluding and performing contracts between us and your employer/entity you represent. In this case, we process the following categories of your personal data: first name, surname, email address, phone number, job position. We collect this data from our client and your employer.  

The legal basis for the processing of your personal data is our legitimate interest Article 6 (1) (f) of the GDPR, consisting in maintaining relationships and contacting our clients. 

3.1.3. Data of contractors and potential contractors

If you are our (potential) contractor, your personal data will be processed by us to contact you in current matters, in particular to respond to your inquiries and possibly to keep in touch, submit and accept contract offers, conducting negotiations, as well as concluding and performing contracts between us and you.    

The basis for the processing of your personal data is performing a cathe performance of the contract or taking actions to conclude it is Article 6 (1) (b) of the GDPR. After the contract has been executed your personal data will be processed on the basis of the controller’s legitimate interest (Article 6 (1) letter f), consisting in archiving of data in the event of potential claims.

In terms of data related to the Controllers obligations provided for by law, in particular in the field of bookkeeping and tax settlements, the legal basis for the processing of your data is Article 6 (1) (c) of the GDPR related with applicable law, which implies the need for the Controller to fulfil given obligations.

3.1.4. Data of contractors personnel and potential contractors personnel

If you are a contact person on the part of our (potential) contractor, your personal data will be processed by us to contact you in current matters, in particular to answer your questions and possibly to keep in touch, submit and accept contract offers, conducting negotiations, as well as concluding and performing contracts between us and your employer/entity you represent. In this case, we process the following categories of your personal data: first name, surname, email address, phone number, job position. We collect this data from our client and your employer. 

The legal basis for the processing of your personal data is our legitimate interest Article 6 (1) (f) of the GDPR, consisting in maintaining relationships and contacting our clients.

3.1.5.  Data of journalists and other persons to whom services are pitched as part of the provision of PR services

If you are a journalist, influencer, seller or other person to whom our services are pitched as part of providing our clients with PR services, your data will be processed in order to send you press information on the brands represented by the Controller, informing you about products and services of companies cooperating with the Controller (partners), about events, competitions, fairs and other industry events organized by the Controller, based on Article 6 (1) (f) of the GDPR,  in order to implement the legitimate interest of the Controller and his partners, which is the performance of the activities of a PR agency.   

In order to better match the type and scope of content sent to you, your data will be subject to partial automatic processing process, including auxiliary profiling, however, making decisions about sending you information and its type will not be automated. 

3.1.6. Marketing data

If you use our websites we can process your data, such as your IP address, cookies, the website address from which you entry, your browser, location data and other identifiers associated with entering our  pages. We can also process the data you have left on our pages in comments, messages, etc. If that data allows to identify you, it constitutes as personal data within the meaning of the GDPR. We process that data for the purpose of informing about our activities and for analytical and statistical purposes, and the basis for their processing is our legitimate interest Article 6 (1) (f) of the GDPR, consisting in marketing of own services and conducting user activity analyses. 

If you are a subscriber to our newsletter, your personal data will also be processed for the purpose of our services direct marketing, consisting in sending information and news about our activities, based on your consent – Article 6 (1) (a) of the GDPR. 

3.1.7. Other personal data   

If you contact us or we contact you in matters other than:

  • conclusion of a contract for the provision of PR services,
  • cooperation with us as our contractor or a contact person from our contractor,
  • maintaining relations with journalists and other persons to whom activities are addressed as part of the provision of PR services,

your personal data will be processed by us solely for the purpose of settling the matter related to that contact.

The legal basis for the processing of your personal data is our legitimate interest Article 6 (1) (f) of the GDPR consisting in handling correspondence and dealing with current matters related to our business activities. 

Your data are processed only if you submit it to us, you or shared it out through their employer/entity that you represent.

3.2. The period of storage of your personal data

Your personal data will be processed by us only for the time necessary to achieve the purposes of their processing, maximally until the expiry of the limitation period for any claims and an additional period of six months after the expiry of the limitation period in which shipments of any mail related may be delivered. 

In the scope of data processed by us on the basis of a legitimate interest, the data may be deleted earlier if an effective objection to their processing is filled.

In terms of data processed by us on the basis of consent given, that data may be deleted earlier if consent to their processing is withdrawn. Consent may be withdrawn at any time, however, it does not affect the lawfulness of the processing based on consent before its withdrawal.

Data processed on the basis of applicable law Article 6 (1) (c) of the GDPR will be processed for the period provided for by law.

3.3. Recipients of your data   

We will only share your personal data with our clients in reports from PR services performed and entities with whom we cooperate in conducting our activities (service providers), in particular businesses such as accounting, legal, IT, hosting, communication service providers, social network Controllers, etc. 

3.4. Voluntary submission of data   

Providing us with your personal data is voluntary, but it is necessary to achieve the purposes of processing.

4. TRANSMISSION OF DATA OUTSIDE THE EEA

Your data transfer outside the EEA may occur in the scope of processed data on our profiles on social networks. Your personal data collected on our profiles in social networks is transferred to the servers of the controllers of those portals, some of which are based in the United States.

All of the Controllers of social networking sites established in the United States, where we process your data, joined the EU-US- Privacy Shield to ensure an adequate level of protection of personal data required by European regulation. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies that have a Privacy Shield certificate.

5. YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA

5.1. RIGHTS RELATED TO THE PROCESSING OF YOUR PERSONAL DATA   

In connection with our processing of your personal data, you have the following rights:

5.1.1. The right to access your personal data   

On this basis, you can get information about the processing of your personal data by us, including primarily the purposes and legal basis for processing, the type (categories) of data, recipients to whom we share your data and the planned period of processing.

5.1.2. The right to a copy of your personal data   

If you make such a request, you will receive from us a copy of your data that we process.

5.1.3. The right to request the rectification of your personal data      

If your data that we process is incorrect or incomplete, you can at any time ask us to correct or complete it.

5.1.4. The right to request the deletion of your personal data      

You can request the deletion of your personal data that we process, when it is no longer necessary to achieve any of the purposes for which it was collected.

5.1.5. The right to request the restriction of the processing your personal data      

If you request a restriction of processing, your personal data will no longer be processed in a range other than their storage, until the reasons for limiting their processing ale cleared. In addition to storage, your personal data may be processed exceptionally on the basis of your consent or in order to determine, assert or defend claims or to protect the rights of another natural or legal person or due to important reasons of public interest, during the period of limitation of their processing.

5.1.6. The right to transfer your data   

If we process your data in connection with the concluded contract or your consent, you can ask us to issue your personal data provided to you by us in a format that allows it to be read by a computer. You can also request that this data be sent to another entity, but only if it is possible due to the technical possibilities existing on our side and the entity to which you want to send your data.  

5.1.7. The right to object to the processing of your data      

In the scope of data processed on the basis of our legitimate interest (this is the basis indicated in Article 6 (1) (c) of the GDPR), you can object to their processing at any time. Remember that your objection regarding processing in other purposes than direct marketing should contain justification. You can object to our processing of your personal data for marketing purposes without justification. 

5.1.8. The right to withdraw consent to the processing of your data   

In the case of processing your data on the basis of your consent (the basis indicated in Article 6 (1) (a) of the GDPR), you can withdraw your consent at any time. Withdrawal of consent, of course, does not affect the lawfulness of our processing of your data before withdrawing your consent.

5.1.9. The right to file a complaint   

If you think that the processing of your personal data by us violates the provisions of the GDPR or other provisions regarding the protection of personal data,          you have the right to submit a complaint to supervisory authority for personal data protection, if you  decide that the processing of your personal data violates the provisions of the GDPR.

5.2. HOW TO MAKE REQUESTS IN CONNECTION WITH THE PROCESSING OF YOUR DATA   

You can submit any requests related to your rights regarding the processing of your personal data by us:

  • e-mail: prywatnosc@sarota.pl
  • phone: +48 12 684 12 68;
  • traditional mail at the following address:     
    SAROTA PR Sp. z o.o., Władysława Beliny-Prażmowskiego St. 69/7, 31-514 Cracow, POLAND

You will receive the answer to the application in the same way as you submitted your application to us, unless you clearly indicate in what form you want to receive it.

If we are unable to identify you based on your application, we will ask you for additional information.

An application for exercising your rights is considered within one month of its receipt. This deadline may be extended, in which case you will be informed of the reason for the extension.

6. COOKIES

We use cookies and similar technologies to collect personal data from the computer or other device you use to access the site. “Cookies” are pieces of information that may be placed on your device for the purpose of collecting data to facilitate and enhance your communication and interaction with our site.

We use cookies and other technologies on all our sites to ensure the best possible experience on our site. These uses include:

  • We use analytical cookies to recognize and count users of our site, measure the effectiveness of our content, and understand how visitors use our site. We currently use Google Analytics for this purpose.
  • We may place, or allow a third party to place, functional cookies to make a website easier to use, such as cookies that maintain a user’s session.

You can review your Internet browser settings to exercise choices you have for certain cookies. If you disable or delete certain cookies in your Internet browser settings, you might not be able to access or use important functions or features of this site.

You can find out more information about cookies here .

version for print