To whom can we share the data?

Your personal data may be transferred to processing entities that provide services to the Controller on the basis of entrustment agreements concluded with them (IT service providers, including hosting and services supporting HR processes, as well as operators of recruitment portals).Subject to applicable law, we may also transfer your data to other controllers entitled to obtain data under applicable law, such as courts or law enforcement agencies, only if they make a request on an appropriate legal basis, of course.

​

​

Is providing personal data voluntary?

Providing your data is mainly voluntary. We require you to provide personal data only at the stage of entering into an agreement with us (e.g. in the scope of sending a newsletter or e-book), and then in connection with the need to settle it (i.e. for accounting, tax or protection against claims). Detailed information in this regard is indicated above in the information for specific categories of persons.

 

What are your rights regarding your data?

In connection with the processing of personal data, pursuant to the principles set forth in the provisions on the protection of personal data, including the GDPR, you are entitled to certain rights, including:

​

• The right to access your data, i.e. the right to obtain confirmation from the xrNORD as to whether or not your personal data is being processed by us, or to obtain a copy of your personal data. This is to ensure that you are aware of and able to check how the xrNORD uses your personal data. We may refuse to provide a copy of your personal information where this could adversely affect the rights of another person;

• The right to rectification, i.e. the right to request the xrNORD to rectify any personal data that is inaccurate or incomplete without delay (e.g. where the xrNORD processes your incorrect name or address);

• The right to delete your data (also known as the “right to be forgotten”) – it enables you to request the deletion of your personal data if, for example, your data was used illegally, or your consent was withdrawn (if it was the only reason for processing your data). However, the “right to be forgotten” does not constitute an absolute right to erasure of personal data as there are certain exceptions to this right, e.g. where we still need to use the data to establish, pursue or defend legal claims or to fulfill a legal obligation (e.g. under accounting or tax law);

• The right to restrict processing – you have the right to prevent us from further using your personal data if, for example, the xrNORD is in the process of evaluating a request for rectification of your data. If the processing of personal data is restricted, xrNORD may still store your personal data, but may not further actively use it (e.g. for the purpose of fulfilling a contract);

• The right to data portability –  you have the right to receive the personal data concerning you, which you had provided to a us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the us, provided: a) the processing is based on consent or on a contract and b) the processing is carried out by automated means.

 

To the extent that the processing of your personal data is based on a legitimate interest, you have the right to object to the processing of such data. However, the xrNORD may continue to process personal data where it is able to demonstrate valid and legitimate grounds for processing overriding your interests, rights and freedoms or where necessary to establish, pursue or defend a claim.

To the extent that the processing of your personal data is based on consent, you have the right to withdraw your consent at any time. The consent withdrawal shall not affect the lawfulness of the processing that has been carried out on the basis of the consent prior to the withdrawal.

​

If you would like to exercise any of these rights, simply email us at: sw@xrnord.com

​

Do we transfer your data to countries outside the European Economic Area?

As a rule, your personal data will not be transferred outside the EEA or made available to international organizations. However, if the controller uses service providers from outside the EEA area, which have not been recognized by the European Commission as ensuring an adequate level of personal data protection, the transfer of personal data to the above-mentioned entities is carried out ̨ on the basis of standard data protection clauses which ensure appropriate safeguards in the field of protection of privacy and rights and freedoms people whom  applies to. A copy of the Standard Contractual Clauses can be obtained from the controller. 

​

Do we process your data automatically?

Please be advised that we do not make automated decisions, including those based on profiling.

 

What about Cookies?

We use Cookies on the end device of the User (e.g. computer, tablet, smartphone). Cookies may be read by the xrNORD IT system. We gain access to the information contained in Cookies for statistical purposes and to ensure the proper functioning of the website, in particular to maintain the session after logging in.

​

Importantly, we want you to know that:

• The internet browser configuration is possible to prevents storage of cookies on the User’s end device.

• The User may delete Cookies after they are saved by the xrNORD through: relevant features of the web browser, software intended for that purpose or using appropriate tools available under the operating system of the User.

​

Please be notified however that change to the web browser configuration that prevents or limits the Cookies storage on the User’s end device may impair the functionality of the services provided. Similar effects may occur when deleting the Cookies in the course of the service provision.

Information on how to delete Cookies in the most popular web browsers are included in the following links:

​

• Firefox

• Opera

• Internet Explorer

• Chrome

 

Use of Google Analytics for website analysis

This website operator notifies that in order to collect and analyze aggregated information on the portal use, it uses the Google Analytics service. Please visit this location to learn more about how this service collects and processes data.

 

Using Disqus for comments

The data is transferred to Disqus on the basis of your agreement with Disqus, which allows you to use Disqus. The purposes and duration of data processing in Disqus are determined by Disqus itself which we cannot influence.

In this case, your data is processed on the basis of your consent resulting from a comment addition. The data is processed solely for the purpose of publishing the comment on the blog. Some of the data (name and surname, profile photo) will be publicly available on the blog next to your comment.

​

Use of Hubspot for form management, website analysis and users tracking

This website operator notifies that they use the Hubspot platform to collect and analyze aggregated information about website users. Please visit this location to learn more about how this service collects and processes data.

 

Should I still know something?

For matters not covered by these Policy, provisions of law and particularly of the Act on provision of services by electronic means, the Act on personal data protection, the Civil Code and GDPR shall apply. xrNORD reserves the right to modify the Policy due to significant reasons. The following shall be deemed significant reasons: introduction of new, amendments to the existing legislation, adaptation to changes introduced by xrNORD. xrNORD notifies of the content of the changes by publishing a notice on the change of Policy at www.xrnord.com

 

The competent court for any disputes arising from the application of this Policy shall be the competent court under the applicable laws.

 

The date of the last version of the policy is March 15th, 2023.