Data protection

Privacy notice – website and contact form

This notice forms part of the personal data protection system. Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Controller provides the following information:

§1. Data Controller

The Controller of your personal data is ABM Industry Sp. z o.o., with its registered office at ul. Wincentego Pola 27, 44-100 Gliwice, Poland, NIP PL6312683851, e-mail: kontakt@abmindustry.pl.

§2. Purposes and legal bases of processing

Your personal data is processed in order to handle enquiries submitted to the Controller through the contact form, by e-mail or by telephone, conduct communication relating to an enquiry, take steps aimed at entering into a contract, ensure the proper and secure operation of the website, and establish, pursue or defend possible claims.

The legal basis for processing is, as applicable:

a) Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract or performance of a contract where the enquiry concerns potential or existing cooperation;

b) Article 6(1)(f) GDPR – the Controller’s legitimate interest in communicating with persons who contact the Controller, ensuring the security and proper operation of the website, and establishing, pursuing or defending possible claims;

c) Article 6(1)(a) GDPR – the data subject’s consent, only where the Controller expressly requests such consent, in particular for separate marketing purposes.

§3. Categories of personal data

The Controller may process data provided by the user in the contact form or during another form of contact, in particular:

a) first and last name,

b) e-mail address,

c) telephone number,

d) company name and other business information provided in the enquiry,

e) message content and other data voluntarily provided by the user.

In connection with use of the website, technical data necessary to ensure the security and proper operation of the service may also be processed, including in particular the IP address, date and time of connection, browser information and the requested resource, if such data is recorded in server logs.

§4. Recipients of personal data

Your data may be disclosed to entities providing postal, telecommunications, hosting and IT services to the Controller, subcontractors involved in handling the enquiry or performing cooperation, and other entities authorised to receive the data under applicable law.

§5. Retention period

Data related to an enquiry will be processed for the period necessary to handle the enquiry and conduct communication. If the contact results in a contract with a client, personal data related to entering into and performing the contract will be retained for 6 years after the end of the contract in accordance with the Controller’s Personal Data Retention Policy. If data is processed for establishing business contacts and business communication (traditional marketing) on the basis of Article 6(1)(f) GDPR, it will be retained until one month after an objection is accepted or for no longer than 5 years. In the case of telephone or e-mail marketing based on consent, data will be processed until one month after withdrawal of consent is accepted. Technical data and server logs will be retained for the period necessary to ensure the security and proper operation of the service.

§6. Your rights

1) Right of access under Article 15 GDPR

2) Right to rectification under Article 16 GDPR

3) Right to erasure under Article 17 GDPR

4) Right to restriction of processing under Article 18 GDPR

5) Right to data portability under Article 20 GDPR

6) Right to object under Article 21 GDPR

7) Where processing is based on consent, the right to withdraw consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

§7. Voluntary provision of data

Providing data in the contact form is voluntary; however, fields marked as required are necessary to submit the form and receive a response. Providing any other data is voluntary.

§8. Automated decision-making, including profiling

The Controller does not process website users’ personal data using automated decision-making processes, including profiling.

§9. Cookies and similar technologies

The website www.abmindustry.pl does not currently use optional cookies or similar technologies for analytics or marketing purposes. If solutions requiring user consent are introduced in the future, the Controller will update the information available on the website and implement an appropriate consent mechanism.

To protect the contact form against automated spam and abuse, the Controller uses Cloudflare Turnstile provided by Cloudflare, Inc. During verification, Turnstile may process necessary technical signals relating to the device and connection, in particular the IP address, User-Agent header, TLS fingerprint, and information about the website and the service key used. Turnstile is used solely for security purposes and to distinguish users from automated bots, and not for advertising purposes. More information: Cloudflare Turnstile Privacy Addendum.

§10. How to exercise your rights

Questions and requests relating to personal data processing may be submitted through the contact form available at www.abmindustry.pl or by e-mail to kontakt@abmindustry.pl. You may also contact the Controller by post at: ABM Industry Sp. z o.o., ul. Wincentego Pola 27, 44-100 Gliwice, Poland.

The Controller responds without undue delay and no later than within 30 days of receiving a request. You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Privacy notice concerning the processing of personal data of external entities (contractors) by ABM Industry Sp. z o.o.

This notice forms part of the personal data protection system. Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Controller provides the following information:

§1. Data Controller

The Controller of your personal data is ABM Industry Sp. z o.o., with its registered office at ul. Wincentego Pola 27, 44-100 Gliwice, Poland, NIP PL6312683851, e-mail: kontakt@abmindustry.pl.

§2. Purposes and legal bases of processing

Your personal data is processed for establishing contacts and conducting business communication, entering into and performing contracts with clients, entering into and performing contracts with subcontractors, and securing claims after performance of a contract.

The legal basis for processing your personal data is:

a) Article 6(1)(b) GDPR – performance of a contract or taking steps at the request of the data subject prior to entering into a contract.

b) Article 6(1)(f) GDPR – the Controller’s legitimate interest in establishing contact and conducting business communication using publicly available business data, within the scope of the Controller’s activities, and in securing possible claims after performance of a contract.

c) Article 6(1)(a) GDPR – consent of the data subject to the processing of personal data for marketing purposes; sending commercial information by electronic means is carried out in accordance with Article 398 of the Polish Electronic Communications Law.

§3. Categories of personal data processed

The Controller processes data such as:

a) first and last name

b) registered office/place of residence

c) telephone number

d) e-mail address

e) NIP (tax identification number)

§4. Recipients of personal data

Your data may be disclosed to recipients such as the Controller’s subcontractors and contractors as part of activities necessary to enter into and perform a contract, entities providing postal, telecommunications, hosting and IT services to the Controller, as well as other entities entitled to receive the data under applicable law.

§5. Retention period

Your personal data will be processed in accordance with the Personal Data Retention Policy for up to 6 years after the end of the contract in connection with Article 6(1)(f) GDPR. Where your data is used for marketing purposes, in accordance with the Personal Data Retention Policy the Controller will process your data for up to 5 years from its collection on the basis of Article 6(1)(f) GDPR, unless you exercise your right to object, and for up to 5 years from its collection on the basis of Article 6(1)(a) GDPR, unless you withdraw your consent. In such cases, the Controller is obliged to delete your personal data within one month from approval of the relevant request.

§6. Your rights in connection with the processing of your personal data

1) Right of access to your personal data in accordance with Article 15 GDPR

2) Right to rectification of your personal data in accordance with Article 16 GDPR

3) Right to erasure of your personal data in accordance with Article 17 GDPR

4) Right to restriction of processing of your personal data under the conditions set out in Article 18 GDPR

5) Right to data portability under Article 20 GDPR

6) Right to object in accordance with Article 21 GDPR

§7. Information obligation under Article 13(2)(e) GDPR

In connection with the information obligation under Article 13(2)(e) GDPR, the Controller informs you that the data referred to in §3(a) and (e) is mandatory for the purposes of performing a contract and complying with the provisions of the Polish VAT Act. Without providing this data, performance of the contract will not be possible.

Providing the personal data referred to in §3(b), (c) and (d) is voluntary and enables more efficient communication. The personal data is processed on the legal basis indicated in §2, i.e. Article 6(1)(f) GDPR. Failure to provide this data does not affect the possibility of performing the contract.

§8. Automated decision-making, including profiling

In fulfilment of the information obligation under Article 13(2)(f) GDPR, the Controller informs you that it does not process personal data using automated decision-making processes, including profiling.

§9. Source of personal data

The Controller processes personal data on the basis of information provided:

a) directly by the persons to whom the data relates, in connection with ongoing cooperation or actions aimed at entering into a contract;

b) indirectly, in particular from publicly available sources such as websites of entities, public registers and social media profiles, to the extent the data has been made publicly available.

§10. How to exercise your rights

Any questions and requests in connection with the above may be submitted through the contact form available on the Controller’s website at www.abmindustry.pl, by e-mail to kontakt@abmindustry.pl, or by traditional post to the Controller at: ABM Industry Sp. z o.o., ul. Wincentego Pola 27, 44-100 Gliwice, Poland.

The Controller responds to your request without undue delay and no later than within 30 days of receiving it. All actions performed by the Controller are physically handled by members of the Management Board of ABM Industry Sp. z o.o.

You have the right to lodge a complaint concerning the Controller’s processing of personal data with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Privacy notice for job candidates

This notice forms part of the personal data protection system. Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Controller provides the following information:

§1. Data Controller

The Controller of your personal data is ABM Industry Sp. z o.o., with its registered office at ul. Wincentego Pola 27, 44-100 Gliwice, Poland, NIP PL6312683851, e-mail: kontakt@abmindustry.pl.

§2. Purposes and legal bases of processing

Your personal data is processed for the purpose of conducting the employee recruitment process.

The legal basis for processing your personal data is:

1) Article 22¹ §1 of the Polish Labour Code in conjunction with Article 6(1)(c) GDPR;

2) Article 6(1)(a) GDPR with regard to data exceeding the scope indicated in Article 22¹ §1 of the Polish Labour Code, provided voluntarily and on your own initiative, with your consent to its processing;

3) Article 6(1)(f) GDPR with regard to the processing of personal data after completion of the recruitment process, for the purpose of pursuing the Controller’s legitimate interest in protecting itself against possible claims related to the recruitment process.

§3. Categories of personal data processed

The Controller processes in particular data such as:

1) first name(s) and last name;

2) date of birth;

3) contact details provided by the person;

4) education;

5) professional qualifications;

6) employment history, excluding information about remuneration in the current employment relationship and previous employment relationships;

7) other data provided voluntarily and on the candidate’s own initiative – on the basis of consent.

§4. Recipients of personal data

Your personal data may be disclosed to entities providing postal, telecommunications, hosting and IT services to the Controller, as well as entities entitled to receive it under applicable law.

§5. Retention period

Your personal data will be processed in accordance with the Personal Data Retention Policy until the end of the recruitment process plus 3 months (in accordance with §3 point 3).

§6. Your rights in connection with the processing of your personal data

You have the following rights:

1) access to your personal data, rectification, erasure or restriction of processing;

2) objection to processing;

3) right to data portability;

4) where processing is based on Article 6(1)(a) or Article 9(2)(a) GDPR, the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;

5) right to lodge a complaint with the supervisory authority.

§7. Information obligation under Article 13(2)(e) GDPR

In connection with the information obligation under Article 13(2)(e) GDPR, the Controller informs you that the data referred to in Article 22¹ §1 of the Polish Labour Code and indicated in this notice as items 1–6 is required by law. Failure to provide the above data will make it impossible to participate in the recruitment process.

§8. Automated decision-making, including profiling

In fulfilment of the information obligation under Article 13(2)(f) GDPR, the Controller informs you that it does not process job candidates’ personal data using automated decision-making processes, including profiling.

§9. How to exercise your rights

Any questions and requests in connection with the above may be submitted through the contact form available on the Controller’s website at www.abmindustry.pl, by e-mail to kontakt@abmindustry.pl, or by traditional post to the Controller at: ABM Industry Sp. z o.o., ul. Wincentego Pola 27, 44-100 Gliwice, Poland.

The Controller responds to your request without undue delay and no later than within 30 days of receiving it. All actions performed by the Controller are physically handled by members of the Management Board of ABM Industry Sp. z o.o.

You have the right to lodge a complaint concerning the Controller’s processing of personal data with the supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).