Privacy and Cookies Policy
spie-ce.com
1. Basic Information
1.1. This privacy policy describes the principles for handling personal data of Users using the website spie-ce.com (hereinafter referred to as the “Website”), users of the SPIE Central Europe sp. z o.o. social media fanpages, and the principles of using cookies by the Website.
1.2. The administrator of the Website and personal data collected through it is:
SPIE Central Europe sp. z o.o., headquartered in Gdańsk,
ul. Marynarki Polskiej 87, 80-557 Gdańsk,
KRS: 0000748054, NIP: 5272864378, REGON: 381262590,
hereinafter referred to as the "Administrator" or "We".
1.3. The Administrator has appointed a Data Protection Officer who can be contacted via email at: iod.spie.ce@spie.com or by mail to the address of the Administrator's headquarters.
1.4. You can contact us via the contact form at https://spie-ce.com/pl/kontakt or by traditional mail to the Administrator's address.
1.5. Anyone using the Website is a “User”.
1.6. We process your personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).
2. Purposes and Legal Bases for Processing Personal Data
2.1. Contact Forms, Email, and Traditional Correspondence
2.1.1. Personal data sent to us via contact forms on our Website or via email or traditional mail will be processed for the purpose of responding to inquiries and handling the matters you contact us about. The legal basis for processing your personal data is the legitimate interest of the Administrator, consisting in responding to messages, correspondence, and maintaining communication (Art. 6(1)(f) GDPR).
2.1.2. If you request a proposal from us, your personal data will be processed for this purpose based on Art. 6(1)(b) GDPR — to take steps at your request prior to entering into a contract (if you are a party to the contract) or based on our legitimate interest in providing the requested proposal (Art. 6(1)(f) GDPR) if you represent a legal entity.
2.1.3. If you are a party to a contract already concluded with the Administrator, processing of your personal data in correspondence may take place on the basis of that contract (Art. 6(1)(b) GDPR) for the proper performance of the contract/order (i.e., necessary communication).
2.1.4. If you are designated as a contact person by our contractor for the performance of a contract, we will process your data based on the Administrator’s legitimate interest (Art. 6(1)(f) GDPR), which is communication related to the execution of that contract.
2.1.5. Personal data contained in messages from contact forms, email, and traditional correspondence may also be processed to assert or defend against potential claims, which constitutes our legitimate interest (Art. 6(1)(f) GDPR).
2.2. Scheduling Meetings
2.2.1. To schedule a remote meeting with us, you are required to provide your name and email address.
2.2.2. The basis for processing your data is our legitimate interest (Art. 6(1)(f) GDPR), consisting in arranging and conducting a meeting at the User's request.
2.3. Recruitment, Job Candidates
2.3.1. If you send us application documents in response to a job advertisement, your personal data will be processed to conduct the recruitment process based on steps taken to enter into a contract in accordance with Art. 6(1)(b) GDPR (data necessary to conclude a contract). If you provide data beyond what is necessary, it will be processed based on your consent (applies to B2B or mandate contracts).
2.3.2. If you apply for an employment contract position, your personal data indicated in labor law (Art. 22(1) of the Labor Code) will be processed to conduct the current recruitment process based on the legal obligations imposed on the Administrator (Art. 6(1)(c) GDPR), while other data (e.g., photo, contact details, motivation letter content) will be processed based on your consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
2.4. Social Media
2.4.1. SPIE Central Europe sp. z o.o., based in Gdańsk, is the Administrator of your personal data shared while using our fanpages, including:
a. SPIE Central Europe LinkedIn Fanpage
2.4.2. We process your personal data if you leave any interaction on one of our fanpages, such as liking, following, sharing, commenting, or messaging. Data we process may include your name, profile name, profile photo (if it contains your likeness), and data shared in messages or comments.
2.4.3. The purposes for which we process personal data on social media fanpages include:
a. Managing our fanpages under the terms set by LinkedIn Ireland Unlimited Company and providing information about our company and services (legitimate interest – Art. 6(1)(f) GDPR);
b. Communication through LinkedIn features (comments, chats, posts, messages) (legitimate interest – Art. 6(1)(f) GDPR);
c. Analyzing engagement, popularity, statistics, and usage of our fanpages using available tools (legitimate interest – Art. 6(1)(f) GDPR).
2.4.4. According to the Court of Justice of the European Union, the administrator of a fanpage on a social media platform is a joint controller of users' personal data along with the platform owner.
2.4.5. Please note that this privacy policy does not govern how LinkedIn Ireland Unlimited Company processes your personal data. For details, refer to LinkedIn’s Privacy Policy.
3. Data Subject Rights
3.1. Under the GDPR, you have the following rights regarding your personal data:
a. The right to access your data and request a copy (Art. 15 GDPR);
b. The right to request rectification of your data (Art. 16 GDPR);
c. The right to request data erasure (Art. 17 GDPR);
d. The right to request restriction of processing (Art. 18 GDPR);
e. The right to data portability – receiving your data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means (Art. 20 GDPR);
f. The right to object to data processing based on legitimate interest, including for marketing purposes (Art. 21 GDPR);
g. The right to withdraw consent for marketing communications – if you have given consent to receive information about our events (webinars and training), you may withdraw this consent at any time.
3.2. To exercise your rights, please submit a request via the contact form at https://spie-ce.com/en/kontakt or by mail to the Administrator’s address.
3.3. You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that your data is being processed in violation of data protection laws.
4. Data Recipients
4.1. To ensure the proper functioning of our company and the Website, we must use external service providers. We only use providers who offer sufficient guarantees of implementing appropriate technical and organizational measures so that processing complies with GDPR and protects the rights of data subjects.
4.2. Users' personal data may be transferred to the following recipients or categories of recipients: providers of IT, technical, and organizational solutions that enable the Administrator to operate the company, including the Website and the electronic services provided through it (especially software providers for the Website, email and server hosting providers, company management software providers, mailing systems, and technical support providers), as well as legal and consulting service providers offering appropriate support to the Administrator (e.g., legal firms or debt collection agencies).
4.3. Your personal data may also be disclosed to law enforcement and government authorities, if required by applicable legal provisions.
5. Data Retention Period
5.1. Personal data from contact forms and electronic or traditional correspondence will be processed for the time necessary to handle the correspondence, extended appropriately by the period related to any legal relationship, archiving duties, potential claims, or other legally mandated obligations.
5.2. Other personal data processed based on legitimate interest (Art. 6(1)(f) GDPR) will be processed as long as that interest exists or until a valid objection to the processing is submitted.
5.3. Data processed for marketing communication will be retained until an objection is raised or consent is withdrawn.
5.4. Personal data of job candidates from application documents will be stored for 30 days after the recruitment process concludes. If the candidate gives consent, their data will be processed for future recruitment for up to 1 year or until consent is withdrawn.
5.5. Data processed under a contract (Art. 6(1)(b) GDPR) will be processed for the duration of the contract and then for the period of limitation of mutual claims.
5.6. In the case of data processed on our social media fanpages, please remember that you can always delete your comments or stop following our page.
6. Information on Requirement/Voluntariness of Providing Data
6.1. Providing personal data is voluntary but may be necessary to achieve the intended processing purpose.
6.2. Required fields in forms on the Website are marked with an asterisk. Entering other data is voluntary.
6.3. Any activity that leaves personal data on our fanpage is completely voluntary. You decide what data we can access based on the privacy settings of your profile on the relevant social media platform.
7. Information on Profiling and Transfer of Data Outside the EEA
7.1. Users' personal data will not be subject to automated decision-making, including profiling.
7.2. Personal data may be transferred to third countries, especially the USA, in connection with our use of electronic tools and services provided by foreign suppliers. These suppliers (e.g., email delivery systems, webinar registration tools) may store data on servers located in the USA. Such transfers are based on Standard Contractual Clauses and ensure an adequate level of personal data protection.
7.3. SPIE Central Europe sp. z o.o. does not transfer personal data of users from social media fanpages outside the EU or to international organizations. However, by using platforms such as LinkedIn, you have accepted their terms and privacy policies, including data transfer provisions to third countries like the USA. SPIE has no influence on how LinkedIn Ireland Unlimited Company processes your data.
8. What Are Cookies?
8.1. Cookies are small text files sent by a server and stored on the visitor’s device (e.g., hard drive, memory card) depending on the device used.
8.2. Data collected in this way is stored only anonymously or under a pseudonym and does not allow the Administrator to identify the User. Cookies do not damage the device or contain viruses.
9. What Cookies Do We Use and For What Purpose?
9.1. The Website uses the following types of cookies:
a. Analytical cookies – used to understand how users interact with the site. They provide metrics like visitor count, bounce rate, traffic source, etc.
b. Third-party cookies – help analyze how users use the site, store user preferences, and deliver personalized content and advertisements. These cookies are stored only with the User’s prior consent.
10. How to Manage Cookies?
10.1. Upon first visiting the Website, the User is informed about cookie usage. In the cookie settings window, the User can:
a. Accept all cookies,
b. Reject all cookies (except necessary ones),
c. Customize cookie preferences.
10.2. After clicking "Customize", detailed information about the types of cookies, their purposes, names, and duration is displayed.
10.3. The User can change their preferences anytime via “Cookie Settings”.
10.4. The User may also configure their browser not to store cookies on their device.
10.5. All cookies can be deleted using browser functions (clear cookies), dedicated programs, or tools available in the operating system.
10.6. For more details, refer to your browser's settings. Below are links to managing cookies in various browsers:
- Microsoft Edge
- Mozilla Firefox
- Chrome
- Safari
- Opera
11. Third-Party Cookies
11.1. Google Analytics
11.1.1. The Administrator may use Google Analytics provided by Google LLC, USA, to collect and analyze data on User interactions.
11.1.2. This data is processed based on the User’s consent by accepting analytical cookies on first visit.
11.1.3. Google Analytics cookies operate as follows:
- Visit and session tracking: e.g., _ga cookie tracks unique users.
- Demographic and geographic data: age, gender, country, city.
- User behavior: page views, clicks, time spent, scrolling, form submissions.
- Conversion tracking: registrations, form completions.
- Audience segmentation: grouping users for targeted analysis.
- Traffic analysis: visits, sources, navigation paths, bounce rate.
- Website optimization: identify weak points.
- Reporting: user behavior, conversion paths, goal completions.
- Opt-out: users can install the Google Analytics Opt-out Browser Add-on to block tracking.
11.2. Google Ads
11.2.1. The Administrator may use the Google Ads marketing program operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for conducting marketing campaigns, including remarketing. Data for this purpose is processed based on the User’s consent, expressed by accepting marketing cookies upon first visiting the Website.
11.2.2. If the User consents to the use of marketing cookies, upon entering the Website, Google cookies will be saved on the User’s device. Based on the pages visited by the User, these cookies allow the display of content/ads tailored to the User’s interests. The process works as follows:
a. Data Collection via Cookies
When Users visit the Website, Google Ads uses cookies to collect various types of information. These cookies may include data such as:
Information about browsing activity (e.g., which pages the User visited, how long they stayed),
- Demographic and geographic data,
- Device and browser information,
- Actions taken on the Website (e.g., completing a training registration form).
b. Conversion Tracking
Google Ads uses cookies to track conversions—specific actions Users take on the Website, such as form submissions. This allows measurement of which content/ads are most effective and deliver desired results.
c. Remarketing
One of the key functions of Google Ads cookies is remarketing. Remarketing allows information/ads to be shown to Users who have previously visited the Website. With cookies, Google Ads identifies these Users and enables retargeting with personalized content/ads.
d. Personalization of Content/Ads
Google Ads uses data from cookies to personalize marketing messages/ads, meaning content is adapted to the interests and behavior of Users. Based on collected data, Google Ads can display ads that are more relevant to specific Users.
e. Campaign Optimization
Data from cookies supports the continuous optimization of marketing campaigns. Google Ads analyzes the collected data to adjust bids, keywords, and content in order to improve campaign results.
f. Audience List Creation
Google Ads uses cookies to create audience lists, which can be used for targeted marketing. For example, the Administrator may generate a list of Users who visited the site but didn’t register for an event and show them ads encouraging them to return and sign up.
g. Campaign Effectiveness Analysis
Google Ads uses data from cookies to analyze the effectiveness of marketing campaigns. The Administrator can gain insights into various metrics, such as click-through rate (CTR), cost per click (CPC), conversion rate, and more. These metrics are crucial for making informed decisions about ongoing marketing strategies.