Cookie Policy

for the website www.viavox.pl

We are pleased that you are visiting our website. We have prepared this Cookie Policy so that you can learn, among other things:

  1. what cookies are;
  2. which cookies we use and for what purposes;
  3. how they affect your privacy;
  4. what rights you have under the law.

The controller of your personal data is Via Vox BPO sp. z o.o. with its registered office in Warsaw (02-403), at ul. Pianistów 2, KRS: 0001001364; e-mail: viavox@viavox.pl, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division, under KRS number 0001001364, NIP: 5252930913 (hereinafter also referred to as: ViaVox).

Contact with the Controller in matters relating to personal data protection: The Controller has appointed a Data Protection Officer. The Data Protection Officer (DPO) is Marcin Pankau. In all matters relating to the processing of personal data by ViaVox, you may contact our Data Protection Officer by e-mail at: marcin.pankau@viavox.pl or by post to the address of our registered office, marked “Data Protection Officer”.

Table of contents

1. What are cookies?

2. What cookies do we use?

3. How do we process your data and what rights do you have?

4. How can you exercise your rights relating to the processing of personal data?

5. Changes to the Cookie Policy.

1. What are cookies?

  1. Cookies are small text files stored on the device you use to view our Website. There are different types of cookies.
  2. Our Website uses only essential cookies. This means that when the Website is loaded, only essential cookies are installed on your device. We use essential cookies primarily to provide you with the services and functionalities of the Website that you wish to use. The Website cannot function properly without these cookies.
  3. We store essential cookies on your device when the Website is loaded – in accordance with the EU ePrivacy Directive (Directive 2002/58/EC) – without your consent.
  4. Consequently, our Website does not include a cookie management panel allowing you to specify your cookie preferences.
  5. We do not use any other cookies.

2. What cookies do we use?

We use the following essential cookies, which ensure the proper functioning of the Website and its basic functions. Without them, you may not be able to use the Website properly. These cookies are exempt from the requirement to obtain your consent under the EU ePrivacy Directive (Directive 2002/58/EC):

  1. g44_header_sizes – this is a technical session/persistent cookie. It is directly responsible for the visual layer (layout). It is used exclusively to ensure the correct display of the website. The data is processed for 24 hours from the moment the cookie is stored on the User’s device. After this period, the cookie expires automatically and is deleted by the browser.
  2. wp-wpml_current_language – this is a standard session cookie used by the WPML plugin. It remembers the language selected by the User while browsing the Website. The data is processed only for the duration of the current browsing session. The cookie is deleted immediately after the User closes the web browser.

Although the cookies we use are essential for the operation of the Website, the User may change cookie settings directly in their web browser at any time (including blocking or deleting cookies). Completely blocking technical cookies may cause errors in displaying the Website or prevent proper switching between language versions.

3. How do we process your data and what rights do you have?

We process data collected by the cookies used on our Website. As a rule, cookies do not constitute personal data. However, certain information stored in cookies (e.g. information concerning preferences), particularly when combined with other information about a website user, may be treated as personal data.

Whenever the Website is accessed, the server automatically records only so-called server logs, such as the User’s IP address, date and time of transmission and browser type, and records access to the Website.

On what legal basis do we process your data and for what purposes?

We process the data of persons using the Website (including IP addresses), to the extent necessary to provide access to the Website and its basic functionalities:

  • for the purpose of providing electronic services consisting in making the Website content and its basic functionalities available to Users – in this case, the legal basis for processing is that processing is necessary for the performance of a contract;
  • for the purpose of ensuring the security and functioning of the Website – on the basis of our legitimate interest consisting in ensuring the availability and security of the Website.

User activity on the Website, including personal data, is recorded in system logs (chronological records of events concerning the IT system). We process the information collected there in connection with the provision of the service (necessity for the performance of a contract) and for the purpose of ensuring IT security (the Controller’s legitimate interest). This data is not used to identify Users and is automatically deleted within 14 days.

With whom do we share your data – recipients of the data?

We share your data with:

  • subcontractors, i.e. entities whose services we use in connection with data processing and with whom we have concluded data processing agreements, including our hosting service provider, providers of IT solutions used by us, entities providing IT support services to us and entities supporting us in operating the Website and maintaining its functionality.

Do we transfer your data to a third country and on what basis?

We inform you that we do not transfer your data to a third country.

Does the processing involve automated decision-making, including profiling?

Your personal data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

You have the right to access your data, request its rectification, erasure, restriction of processing and data portability.

You have the right to object at any time to the processing of your data where we process it on the basis of our legitimate interest. If you object and your objection is justified, we will cease processing your data for these purposes.

You have the right to lodge a complaint with a supervisory authority. A complaint may be lodged in the Member State of your habitual residence, place of work or place of the alleged infringement. More information on how to exercise your rights can be found below in section 4 of this document.

Providing data is voluntary. When you load our Website for browsing, we collect only the data necessary to display it (essential cookies) – without collecting such data, displaying the Website (providing the service) will not be possible.

4. How can you exercise your rights relating to the processing of personal data?

Every data subject has the right to submit a request to us in order to exercise their rights, which may include:

A. the right of access to data;

B. the right to rectification of data;

C. the right to erasure of data (“right to be forgotten”);

D. the right to restriction of processing;

E. the right to data portability – this right applies only where the processing is based on your consent or a contract and the data itself is processed by automated means;

F. the right to object to the processing of personal data:

a) objection to processing for direct marketing purposes – you may object at any time to the processing of your personal data for such marketing, including profiling to the extent that the processing is related to such direct marketing, without having to justify your objection;

b) the right to object to other purposes of processing – you may object at any time, on grounds relating to your particular situation, to the processing of personal data based on our legitimate interest, including profiling. An objection in this respect should include justification;

G. the right not to be subject to a decision (including profiling) based solely on automated processing which produces legal effects concerning you or similarly significantly affects you – you may object to such processing at any time;

H. the right to withdraw consent (where processing is based on consent) – this right may be exercised at any time. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;

I. the right to lodge a complaint with a supervisory authority responsible for personal data protection – a complaint may be lodged in the Member State of your habitual residence, place of work or place of the alleged infringement.

  1. We exercise due care when considering requests from data subjects, taking into account applicable law as well as the rights and freedoms of other data subjects.
  2. When submitting your request, you should provide data that will allow us to identify you unequivocally.
  3. We will not refuse to act on a request from a data subject wishing to exercise their rights unless we are unable to identify the data subject unequivocally.
  4. We will provide information on actions taken in response to a request without undue delay and, in any event, within one month of receiving the request. Where necessary, we may extend this period by a further two months, taking into account the complexity and number of requests. Within one month of receiving the request, we will inform you of such an extension and the reasons for the delay.
  5. If we receive a request electronically, we will also respond electronically where possible, unless your request indicates otherwise.
  6. If we do not take action on your request, we will promptly, and no later than within one month of receiving the request, inform you of the reasons for not taking action and of the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.
  7. Communication and actions taken in connection with the exercise of your rights are generally free of charge. However, where requests are manifestly unfounded or excessive, in particular because of their repetitive nature, we may:
  8. charge a reasonable fee, taking into account the administrative costs of providing information, conducting communication or taking the requested action; or
  9. refuse to act on the request.
  10. If we are unable to identify you unequivocally or have reasonable doubts concerning your identity, we may request additional information necessary to confirm your identity. If you fail to provide the additional information within 30 days from the date of receiving the request and it remains impossible to identify you unequivocally, the request will be rejected. You will be informed of the deadline for providing the additional data and the consequences of failing to do so.
  11. We inform every recipient to whom we have disclosed your personal data of any rectification, completion, erasure or restriction of processing of such data, unless this proves impossible or involves disproportionate effort.

5. Changes to the Cookie Policy.

We reserve the right to make changes to this Policy. Such changes may result from the need to adapt the document to changes in applicable law or privacy standards or from an expansion of our range of services. We will inform you of any material changes by means of a clearly visible notice on the Website. The notice will clearly explain the content of the changes and their consequences for your data. The effective date of each change will be determined so that the notice is displayed sufficiently in advance. This will give you time to familiarise yourself with the new content and assess the impact of the changes on the processing of your data. The timeframe will take into account your ability to freely exercise the rights available to you under the GDPR (e.g. withdrawing consent or objecting to processing). At the end of the document, you will always find information on the date of its most recent update.