Effective as of 18.08.2024
This Privacy Policy (hereinafter: "Policy") contains information about the processing of your personal data in connection with the use of the CV to blind website, operating at the Internet address https://cvtoblind.com (hereinafter: "Website").
Your personal data controller is MLNATIVE sp.z o.o. (limited liability company) with its registered office in Gdańsk (registered office address: ul. Stefana Batorego 33/19, 80-251 Gdańsk) in the Register of Entrepreneurs of the National Court Register kept by the District Court for Gdańsk-Północ w Gdańsku, VII Commercial Division of the National Court Register under KRS number: 0001026089, holding NIP: 9571155976, REGON: 524788382, with share capital: PLN 5.000,00
In all matters related to the processing of personal data, you may contact the Controller by e-mail at: hello@cvtoblind.com.
The Controller applies modern organizational and technical safeguards to ensure the best possible protection of your personal data and ensures that it processes it in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "GDPR"), the Data Protection Act of 10 May 2018 and other data protection legislation.
The use of the Website requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for the processing, as well as the duration of the processing and the obligation or voluntariness to provide it.
Personal data processed: e-mail address
Purpose of the processing: Conclusion and performance of the Newsletter Provision Agreement
Legal basis: Article 6(1)(b) of the GDPR (processing is necessary for the performance of the Newsletter Provision Agreement concluded with the data subject or for taking steps to conclude it) and Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the Controller's legitimate interest, in this case to inform about new releases and promotions available on the Website)
Provision of the above-indicated personal data is voluntary, but necessary in order to receive the Newsletter (failure to provide such data will make it impossible to subscribe to the Newsletter). The Controller will process the above-indicated personal data until an effective objection is raised or the purpose of the processing is achieved, or until the claims resulting from the Newsletter Provision Agreement become time-barred (whichever occurs first).
Personal data processed: 1) name and surname / company name; 2) e-mail address
Purpose of the processing: Handling complaints
Legal basis: Article 6(1)(f) of the GDPR (processing is necessary for the Controller's legitimate interest, including the pursuit or defence against possible claims)
Provision of the above-indicated personal data is a condition for receiving a response to the complaint or exercising your rights under the Controller's liability provisions (provision of such data is voluntary, but failure to provide it will prevent you from receiving a response to the complaint and exercising the said rights). The Controller will process the above-indicated personal data for the duration of the complaint procedure and in the case of exercising the aforementioned rights of yours - until they expire.
Personal data processed: 1) first name; 2) e-mail address; 3) other data contained in the message to the Controller
Purpose of the processing: Handling of queries submitted by users
Legal basis: Article 6(1)(f) of the GDPR (processing is necessary for the Controller's legitimate interest, in this case to respond to an enquiry received)
The provision of the above-indicated personal data is voluntary, but necessary in order to receive a response to an enquiry (failure to provide such data will prevent you from receiving a response). The Controller will process the above-indicated personal data until an objection is successfully raised or the purpose of the processing is achieved (whichever occurs first).
Personal data processed: 1) the date and time of your visit; 2) the IP number of your device; 3) type of operating system of the device; 4) approximate location; 5) type of Internet browser; 6) time spent on the Website; 7) sub-pages visited and other actions taken on the Website
Purpose of the processing: Analysis of your activity on the Website
Legal basis: Article 6(1)(f) of the GDPR (processing is necessary for the Controller's legitimate interest, in this case to obtain information about your activity on the Website)
The provision of the above-indicated personal data is voluntary, but necessary in order for the Controller to obtain information about your activity on the Website (failure to provide such data will result in the Controller's inability to obtain the said information). The Controller will process the above-indicated personal data until you successfully raise an objection or the purpose of the processing is achieved.
Personal data processed: 1) IP address; 2) server date and time; 3) web browser information; 4) information about the operating system. The above data is saved automatically in the so-called server logs every time the Website is used.
Purpose of the processing: Administration of the Website
Legal basis: Article 6(1)(f) of the GDPR (processing is necessary for the Controller's legitimate interest, in this case to ensure the proper functioning of the Website)
The provision of the above-indicated personal data is voluntary, but necessary in order to ensure the proper functioning of the Website (failure to provide such data will prevent proper functioning of the Website). The Controller will process the above personal data until an objection is successfully raised or the purpose of the processing is achieved.
Personal data processed: 1) Name and surname; 2) company name; 3) contact details you have provided (e-mail address; mailing address; telephone number)
Purpose of the processing: Fulfillment of data protection obligations
Legal basis: Article 6(1)(c) of the GDPR (processing is necessary for the fulfillment of a legal obligation incumbent on the Controller, in this case obligations under data protection legislation)
Provision of the above-indicated personal data is voluntary, but necessary for the Controller to properly perform its duties under data protection legislation, including the exercise of rights granted to you by the GDPR (failure to provide such data will result in the inability to properly exercise the said rights). The Controller will process the above-indicated personal data until the expiry of the statute of limitations for claims for breach of data protection regulations.
Personal data processed: 1) name and surname / company name; 2) e-mail address; 3) address of residence / registered office; 4) PESEL/NIP number
Purpose of the processing: Establishment and assertion of or defence against claims
Legal basis: Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the Controller's legitimate interest, in this case to establish, assert or defend against claims that may arise in connection with the performance of Agreements concluded with the Controller)
Provision of the above-indicated personal data is voluntary, but necessary in order to establish, assert or defend against claims that may arise in connection with the performance of Agreements concluded with the Controller (failure to provide such data will result in the Controller's inability to undertake the said activities). The Controller will process the above-indicated personal data until the expiry of the statute of limitations for claims which may arise in connection with the performance of Agreements concluded with the Controller.
The following third parties working with the Controller will be the recipients of the personal data: a) the hosting company; b) newsletter service provider; c) companies providing tools to analyze activity on the Website (including Google Analytics, Apollo); d) providers of solutions based on LLM language models (including Microsoft offering Azure Open AI Service).
In addition, personal data may also be transferred to public or private entities if such an obligation arises from generally applicable law, a final and non-appealable court judgment, or a final and non-appealable administrative decision.
In connection with the Controller's use of services provided by Google LLC, your personal data may be transferred to the following third countries: UK, Canada, USA, Chile, Brazil, Israel, Saudi Arabia, Qatar, India, China, South Korea, Japan, Singapore, Taiwan (Republic of China), Indonesia and Australia. The basis for the transfer of data to the aforementioned third countries is:
You may obtain a copy of data transferred to a third country from the Controller.
In relation to the processing of personal data, you have the following rights:
Essential cookies (Provider: The Controller) — The operation of these cookies is essential for the proper functioning of the Website, so you cannot disable them. Thanks to these files (which collect, among other things, your device's IP number), it is possible to inform you of cookies operating on the Website. Period of operation: most of the essential cookies are session cookies, but some remain on your terminal equipment for a period of 24 months or until they are deleted.
Google Analytics / Google Tag Manager (Provider: Google) — This tool allows the collection of statistical data about the use of the Website, including the number of visits, duration of visits, search engine used, location. The data collected helps to improve the Website and make it more user-friendly. Period of operation: up to 2 years or until they are deleted (whichever occurs first).
Apollo scripts (Provider: Apollo) — Personalized advertising across various platforms. Period of operation: up to 2 years or until they are deleted (whichever occurs first).
To the extent not covered by the Policy, the generally applicable data protection regulations shall apply.
The Policy shall be effective as of 18.08.2024.
This Privacy Policy (hereinafter: "Policy") contains information about the processing of your personal data in connection with the use of the "CVtoBlind" Application (hereinafter: "Application").
All capitalized terms not otherwise defined in the Policy shall have the meaning given to them in the Terms and Conditions, available at: www.cvtoblind.com/terms-of-use
Your personal data controller is MLNATIVE sp. z o.o. (limited liability company) with its registered office in Gdańsk (registered office address: ul. Stefana Batorego 33/19, 80-251 Gdańsk) in the Register of Entrepreneurs of the National Court Register kept by the District Court for Gdańsk-Północ w Gdańsku, VII Commercial Division of the National Court Register under KRS number: 0001026089, holding NIP: 9571155976, REGON: 524788382, with share capital: PLN 5.000,00 (hereinafter: the "Controller").
In all matters related to the processing of personal data, you may contact the Controller by e-mail at: hello@cvtoblind.com.
The Controller applies modern organizational and technical safeguards to ensure the best possible protection of your personal data and ensures that it processes it in accordance with the provisions of the GDPR, the Data Protection Act of 10 May 2018 and other data protection legislation.
The use of the Application requires the processing of your personal data. Below you will find detailed information about the purposes and legal grounds for the processing, as well as the duration of the processing and the obligation or voluntariness to provide it. The Controller processes, among others: account and service data (name and surname, company name, e-mail address, VAT ID/NIP, address) for the conclusion and performance of the Service Agreement (Art. 6(1)(b) and 6(1)(f) GDPR); e-mail address for the Newsletter (Art. 6(1)(b) and 6(1)(f) GDPR); data for handling complaints, e-mail notifications, enquiries, reviews, tax obligations, data protection obligations, establishing and defending claims, analysis of activity in the Application, and administration of the Application, each on the relevant legal basis under Art. 6 GDPR and retained for the periods described in the full policy.
In order to create your profile for marketing purposes and to target you with direct marketing tailored to your preferences, the Controller will process your personal data by automated means, including profiling - however, this will have no legal effect on you or similarly materially affect you. The legal basis is Article 6(1)(f) of the GDPR. The Controller will process personal data for the purpose of profiling until an objection is successfully raised or the purpose of the processing is achieved.
The following third parties working with the Controller will be the recipients of the personal data:
In addition, personal data may also be transferred to public or private entities if such an obligation arises from generally applicable law, a final and non-appealable court judgment or a final and non-appealable administrative decision.
In connection with the Controller's use of services provided by Google LLC, your personal data may be transferred to the following third countries: UK, Canada, USA, Chile, Brazil, Israel, Saudi Arabia, Qatar, India, China, South Korea, Japan, Singapore, Taiwan (Republic of China), Indonesia and Australia, on the same legal bases (adequacy decisions and standard contractual clauses) described above. You may obtain a copy of data transferred to a third country from the Controller.
You have the same rights as described in the Website Privacy Policy above, namely: the right of access and to receive a copy of your data, rectification, erasure, data portability, withdrawal of consent, restriction of processing, objection, and the right to lodge a complaint with the President of the Personal Data Protection Office.
The Application uses "cookies" installed on your terminal device on the same principles described in the Website Privacy Policy (ensuring proper functioning, enhancing user experience, keeping statistics, and carrying out marketing activities). The Controller uses essential cookies and Google Analytics. You can enable or disable cookies of each category (except essential cookies) at any time.
To the extent not covered by the Policy, the generally applicable data protection regulations shall apply.
The Policy shall be effective as of 18.08.2024.
