Reach Us
Reach Us

Privacy Policy of CSHARK Sp. z.o.o.

I. Your Data Controller and Data Processor

Your Data Controller is CSHARK sp. z o. o., based in Wrocław, Poland, Rynek 36/37, 50-102 Wrocław  (hereinafter referred to as „CSHARK”).
To exercise your rights, give or withdraw consent, and talk about all security aspects of your Personal Data, contact us via email: privacy@cshark.com, or send us a letter to the above address.

II. Personal data sources

We process data that we receive directly from you, via email, sent via our website, and in CVs that you send to us. In such cases you have full control over how much data you disclose to us. We may also process your data disclosed to us by a third party (e.g. a recruitment agency, our clients).

III. Why, on what legal basis and how long we process your data

As a part of our business, we can process personal data for the following purposes:

Handling correspondence

If you are contacting us via email, website or traditional mail, we may process your data based on a legitimate interest in replying to your query.
We process your data for a period of time necessary for handling correspondence, and we may continue processing it for the duration of the limitation period of possible claims.
Sharing your data is voluntary but it is necessary for making it possible for us to contact you in order to answer your query

Fostering and maintaining business relations

We may process your data as a part of our contractual obligations to you or in order to take action upon your demand before signing a contract with you or your employer. Once a contract has been concluded, your personal data is processed in connection with the performance of the contract.

Additionally, we may process your data to fulfill our legal obligation resulting from tax laws and financial reporting regulations.
Based on our legitimate interest, we may process your data to exercise or for defense of possible claims resulting from the contract we signed with you.

We process your data for a period of time necessary to perform or create the contract and to limit the period of possible claims.
Sharing your data is voluntary and it is necessary for making it possible for you to sign a contract with us, and to perform the contract.

Recruitment

We may process your personal data referred to in Article 22 [1] of the Labor Code as a part of a current recruitment process. In that case the basis for data processing are the actions taken before the contract was signed. If you disclose more personal data, then the basis for its processing will be your consent.

Based on your consent, we may process your data for the purpose of future recruitments.

Your personal data will be processed for as long as the particular recruitment process lasts (including possible investigation or defense of claims), and in case you gave your consent to participate in future recruitment processes – for a period of 5 years or until you withdraw your consent.

Sharing your data is voluntary but to the extent resulting from the Article 22 [1] of the Labor Code it is necessary for making it possible for you to take part in the recruitment.

Marketing and advertising

We may process your personal data on the basis of your consent for the purposes of informing, promoting and undertaking marketing activities by CSHARK to current and potential customers of the company.
Data may be processed through social networks such as Facebook, Instagram, Twitter, YouTube, LinkedIn for marketing purposes.
Your data may be processed until you withdraw your consent to its processing.

IV. What are your data protection rights?

In accordance with general principles, you have the following data protection rights:

  • The right to access,
  • The right to rectification,
  • The right to erasure,
  • The right to restrict processing,
  • The right to data portability,
  • The right to object to processing (when the basis for processing is CSHARK legitimate interest),
  • The right to withdraw your consent (when the basis for processing is your consent),
  • The right to lodge a complaint with a supervisory authority.

Exercise of the above rights depends on the conditions set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as „GDPR”. In case your claim is rejected, you will receive a reasoned reply.

Please note that:

  • the right to data erasure shall be granted only in cases listed in the GDPR regulations, i.e.:
    • The data will no longer be necessary for the purposes for which they were collected by CSHARK in the first place,
    • You will withdraw your data processing consent,
    • You will object to your data processing,
    • Your data will be processed unlawfully,
    • Your data should be erased in order to fulfill an obligation resulting from the law.
  • CSHARK may refuse to erase personal data if any of the conditions listed in the GDPR is met, e.g. if data processing is required for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.
  • the right to restrict data processing shall be granted only in cases listed in the GDPR regulations, i.e.:
    • You’ll notice that you data is incorrect – you can request the restriction of its processing for the period necessary for us to verify it,
    • Your data will be processed unlawfully but you will object to its erasure, asking instead for restricting its processing,
    • Your data will no longer be necessary for us but you may need it to be able to defend or bring claims,
    • You will object to your data processing – until we establish if our legitimate interests are overriding to the basis for your objection.
  • the right to data portability shall be granted only in cases when the legal basis of the processing of personal data is a consent or the contract execution and the processing is carried out by automated way.
  • In some cases we can refuse your objection to data processing based on CSHARK’s legitimate interest, when there is a compelling legitimate basis for data processing that override the interests or the fundamental rights and freedoms of the data subject, or where there are grounds for the establishment, exercise or defense of legal claims. CSHARK shall not be entitled to such a power if the data are processed for direct marketing.

In some cases we can refuse your objection to data processing based on CSHARK’s legitimate interest, when there is a compelling legitimate basis for data processing that override the interests or the fundamental rights and freedoms of the data subject, or where there are grounds for the establishment, exercise or defense of legal claims. CSHARK shall not be entitled to such a power if the data are processed for direct marketing.

V. Recipients of personal data

Your personal data may be disclosed to third parties who process personal data on behalf of CSHARK, e.g. accounting services, IT services providers – whereby these entities process data under contract with us and in accordance with our instructions.
We may disclose your personal data to other recipients where this is necessary for the specific purpose of the processing, e.g. banks, postal operators, law firms, our clients, recruitment software providers.
Your personal data may also be disclosed to entities authorized by law, including judicial authorities.

VI. Social Media processing and data co-administration

CSHARK processes personal data as part of the social media profiles and accounts it maintains on Facebook, LinkedIn, Twitter, Youtube and Instagram. Personal data is processed in order to:

  • to run fanpages and groups on the social media sites Facebook, LinkedIn or Instagram, under the terms and conditions set out by the administrators of these sites and in accordance with the rules and regulations of these sites,
  • to communicate via fanpages and social media accounts about CSHARK’s activities and initiatives, including the promotion of events, services and products,
  • communicate through the available functionalities of these services, such as responses to reactions, comments and private messages,
  • analysis of the activity of users of our profiles, including for the collection of data on the number of likes, comments and shares of our profile or the content posted on it, for statistical and advertising purposes via the tools provided by social networks.

The basis for data processing is the legitimate interest of CSHARK to promote its brand, take care of its image, carry out direct marketing and provide opportunities for contact and effective communication.

The service providers are joint controllers of the personal data:

The co-management includes the processing of data for statistical and advertising purposes as well as the analysis of data in order to display statistics on the activity of the users of the fanpage. The rules of data co-management and the rules of processing of personal data by the above-mentioned providers as independent data controllers are available on the websites they operate.

VII. Automatic data gathering

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
Our website may use the following cookie types:

  • Necessary cookies – necessary for proper functioning of our website. There is no way to disaas they are necessary for the provision of electronic services
  • Analytical cookies – used for analysis of your behavior on our website. They allow us to analyze traffic on our website and improve its efficiency.
  • Marketing cookies- record your visit to our website, the pages you visit and the links you follow. The information collected helps us to make our website and the content (including marketing) displayed on it more relevant to your interests and to measure the effectiveness of marketing or information activities. We may share information with third parties for that specific purpose.

You can stop providing us with this data at any time by deleting cookies from your device. To do so you need to change your Internet browser settings. You can also enable cookies blocking for all or selected websites.

If you do not know how to manage your cookies, you can find it on your browser’s page:

We analyze the data we collect using solutions from third party providers. We currently use Google Analytics, a tool provided by Google Inc. (“Google”). The information generated by the cookies relates to your use of our website and is not personally identifiable due to the extension providing anonymous IP address logging.

Additionally, we use social media plug-ins. Data collected in connection to the social media plug-ins can only be transferred between your Internet browser and the selected social media operator. We have no way of knowing what data is collected and transferred. Consequently, we encourage you to read the information on the data processing on the websites of the social media operators:

VIII. Transfer of personal data to third countries

CSHARK also works with suppliers based outside the European Economic Area (EEA). Accordingly, your personal data may be transferred outside the EEA when necessary and with an adequate degree of protection. We ensure that the agreed standard contractual clauses adopted by the European Commission as part of the screening procedure are the basis for the data transfer each time.

IX. Changes to our Privacy Policy

We may change this Privacy Policy at any time, especially when there is a change in regulations, technology or the way our website works. You can always find the most up-to-date version of our Privacy Policy on our website.

Feel free to contact us

Connect with Us Experts