Privacy policy

Draft version, under legal review.

1. Data controller

The controller of personal data is Centrum Informacji Biznesu Sp. z o.o., based in Pabianice, ul. Żeromskiego 17, 95-200 Pabianice, Poland.

E-mail: rodo@cib.pabianice.pl
Post: Centrum Informacji Biznesu Sp. z o.o., ul. Żeromskiego 17, 95-200 Pabianice, Poland, marked “personal data protection”

3. Data origin

Personal data is collected only in connection with the company’s activities, in particular through business contacts, audits of customers and suppliers, recruitment, forwarding of goods and contact with the customer service office.

4. Types of personal data processed

We process personal data necessary for:

concluding and performing contracts between us,
performing the legal obligations of Centrum Informacji Biznesu Sp. z o.o. regarding sales documents,
protecting the rights of Centrum Informacji Biznesu Sp. z o.o. regarding claims, in accordance with the law,
concluding employment contracts and civil law contracts.

5. Purpose of data processing

Your personal data is processed by the Controller in order to perform the concluded contract, in particular:

contact with the customer: order handling, accepting suggestions, complaint handling,
marketing activities: contact for purposes related to permitted marketing activities through available communication channels, in particular by e-mail or telephone with the customer’s consent.

Personal data will also be processed for purposes arising from separate legal provisions, including tax and accounting purposes.

Due to the legitimate interest of Centrum Informacji Biznesu Sp. z o.o., personal data is also processed in order to:

ensure the sale of our products,
handle contacts with the service department, also when they are not related to the performance of a contract,
archive data,
ensure the safety of people, property and the product,
conclude employment contracts and civil law contracts.

6. Transfer of personal data

Personal data will be processed only by Centrum Informacji Biznesu Sp. z o.o. and by selected technology partners, such as: postal, courier and forwarding companies, banks, companies operating our IT systems, companies providing legal and tax services, companies handling electronic exchange and archiving of documents, companies insuring our receivables and conducting debt collection, and other companies providing services that serve the legitimate interests of Centrum Informacji Biznesu Sp. z o.o.

Processing of personal data by technology partners of Centrum Informacji Biznesu Sp. z o.o. is based on an agreement that ensures the processing complies with the General Data Protection Regulation.

Personal data may be transferred to public authorities authorised to obtain it under separate regulations (for example the Police, the Public Prosecutor’s Office, customs and tax offices).

The rules for transferring data outside the European Economic Area in connection with the tools described in section 11 are under legal review.

7. Data processing period

Personal data will be processed until consent to the processing is withdrawn, and after withdrawal for the limitation period of claims due to and against the data controller.

The Controller may process personal data for security purposes, to prevent fraud and extortion, and for statistical and analytical purposes for up to 10 years from the end of the contract.

Where separate legal provisions require it (for example the Accounting Act or the Tax Ordinance), personal data will be stored for the period required by those provisions.

8. Automated processing and profiling

Personal data is not processed in an automated manner, including profiling to adjust the website content to personal preferences and interests.

9. Your rights regarding your personal data

Everyone has the right to:

access their personal data, including obtaining a copy of the data being processed; the right to obtain a copy must not adversely affect the rights and freedoms of others,
correct and complete data that is incorrect or out of date,
have the data deleted,
restrict processing when: the data subject contests the accuracy of the data (for a period enabling the controller to verify it); the processing is unlawful and the data subject opposes deletion and requests restriction instead; the controller no longer needs the data, but the data subject needs it to establish, pursue or defend claims,
data portability: the data subject has the right to receive the personal data they provided to the controller in a structured, commonly used, machine readable format, and to transmit it to another controller,
not be subject to automated decision making (including profiling),
object to the processing of personal data, where processing is for statistical purposes or based on the Controller’s legitimate interest and the objection is justified by the person’s particular situation.

Requests regarding these rights should be sent to the Controller:

by e-mail to rodo@cib.pabianice.pl,
by registered letter with acknowledgment of receipt to: Centrum Informacji Biznesu Sp. z o.o., ul. Żeromskiego 17, 95-200 Pabianice, Poland, marked “personal data protection”,
in person at the Controller’s office.

The Controller provides information about the actions taken without undue delay, within one month of receiving the request. Due to important circumstances (for example the number of requests or their complexity) this period may be extended by another 2 months. Within one month, the Controller will inform the data subject about the reasons for the delay and the extension.

10. Supervisory authority and complaints

Every person has the right to lodge a complaint about the Controller’s action or omission with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

11. Cookies and tools on cibglobal.com

Cookies and consent: the CookieYes banner stores your choice regarding cookies.
Statistics: Google Analytics 4 runs in Consent Mode; without your consent it does not store analytics cookies.
Form protection: Cloudflare Turnstile checks that a form is sent by a person.
Handling enquiries: form data goes to the company e-mail inbox and to monday.com, where we handle sales enquiries.
Hosting: the website runs on a server in Warsaw, Poland (xCloud).