Information on data processing

Data controller

The controller of personal data is con-sensus with registered office in Krakow. You can also contact the Controller by writing to: kontakt@consensus.pl.

Purpose, legal basis and period of processing

The personal data provided will be processed, depending on the content of consent, for various purposes. The purpose of processing may be to provide access to services operated by the Controller, receiving newsletters, for marketing purposes or to contact in connection with an inquiry left in the form. Data is processed based on voluntary consent and until its withdrawal. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Data may also be processed for purposes resulting from the legitimate interests of the Controller. The legitimate interests of the Controller include in particular marketing purposes, as well as preparing statistical analyses.

Data recipients

Data recipients may include employees and collaborators of the Controller. Personal data is not transferred to any other entities, except trusted partners providing services to the Controller, e.g. hosting services. The entrustment of data to trusted partners takes place on the basis of data processing agreements concluded by the Controller, guaranteeing protection at a level corresponding to GDPR requirements.

The contact form on this site is operated by Formspree, Inc., established in the United States. The data you enter in the form — first name, last name, e-mail address, subject and content of the message, and a record of the consents given — is transferred to that company solely in order to deliver the message to the Controller. This involves a transfer of data to a third country, outside the European Economic Area.

Rights of data subjects

The data subject has the right to request access to data, its rectification, deletion or restriction of processing, as well as the right to object to processing, the right to data portability and the right to lodge a complaint with the Data Protection Authority, on the terms and in the circumstances provided for by law, and to the extent that the law provides for the possibility of exercising these rights due to the nature of the data and the nature of processing.

Obligation to provide data

Providing data is voluntary. However, due to the purpose and nature of processing, failure to express consent to processing will prevent the use of functionalities offered by the Controller on the operated portals or the lack of possibility to be placed on the mailing list and receive messages from the Controller's portals.

Automated processing

The Controller does not use data for automated decision-making. Based on pages viewed by users, the Controller may process data on preferences (profiling) for marketing purposes of the Controller's services, which is a legitimate purpose of data processing by the Controller.