PRIVACY POLICY AND PERSONAL DATA PROTECTION

This document sets out the rules for the processing of personal data by Vinci G Vinci Sp. z o.o. (hereinafter: the “Controller”, “Vinci G Vinci”) in connection with the use of our website available at: www.vinci-vinci.pl and the provision of services to clients.

By reading this Privacy Policy, you will learn, among other things:

  • who the controller of your personal data is, 
  • what data we process and for what purposes, 
  • what rights you have regarding personal data protection. 

§ 1. General Information

The controller of personal data is: Vinci G Vinci Sp. z o.o., with its registered office in Katowice at: ul. Mickiewicza 29, 40-085 Katowice, Poland, NIP: 9542298437, REGON: 276560469, KRS: 0000039222.

Contact with the Controller:

  • e-mail: vinci-vinci@vinci-vinci.pl 
  • phone: +48 32 207 23 16 
  • correspondence address: ul. Mickiewicza 2G, 40-085 Katowice, Poland 

The Controller is not required to appoint a Data Protection Officer (DPO). The Controller does not process data in an automated manner and does not perform profiling.

§ 2. Scope and Purposes of Data Processing

Personal data is processed depending on the relationship with Vinci G Vinci – separately for website users and company clients.

1. Website users’ data

Legal basis: Article 6(1)(f) of the GDPR (legitimate interest of the Controller) and – with regard to cookies – Article 6(1)(a) of the GDPR (consent).

Purposes of processing:

  • handling contact form inquiries and responding to messages, 
  • managing company profiles on social media (e.g. Facebook, LinkedIn, Instagram) to provide information about activities, 
  • analyzing website traffic and optimizing its performance (analytical cookies), 
  • personalizing marketing content (marketing cookies – with user consent). 

Scope of data:

  • data provided in the contact form (e.g. name, surname, e-mail address, message content), 
  • data provided in e-mail correspondence, 
  • data stored in cookies (IP address, session identifiers, activity data). 

Data collected via cookies is processed in accordance with user preferences – you may change cookie settings in your browser at any time.

2. Clients’ data

Legal basis:

  • Article 6(1)(b) GDPR – performance of a contract, 
  • Article 6(1)(c) GDPR – compliance with legal obligations (e.g. issuing invoices, document retention), 
  • Article 6(1)(f) GDPR – legitimate interests of the Controller, such as:
    • securing and archiving documentation, 
    • pursuing or defending against claims, 
    • debt collection. 

Purposes of processing:

  • performance of service agreements, 
  • communication related to the execution of services, 
  • fulfillment of tax and accounting obligations, 
  • archiving documentation, 
  • possible debt recovery actions. 

Providing data necessary to conclude and perform a contract is a condition for the provision of services. Failure to provide such data makes cooperation impossible.

§ 3. Data Recipients

Recipients of personal data may include:

  • entities providing IT and hosting services to Vinci G Vinci, 
  • accounting office, 
  • cooperating professionals (accountants, auditors, legal advisors, attorneys, trainees), 
  • providers of analytical and marketing services (e.g. Google, Meta) – only if the user has consented to cookies, 
  • public authorities and courts – where disclosure is required by law. 

When using Google or Meta services, data may be transferred to the USA with appropriate safeguards in accordance with the European Commission’s decision on the EU–US Data Privacy Framework.

§ 4. Data Retention Period

Personal data is stored for the period necessary to fulfill the purposes of processing and thereafter for the time required by law or until the expiry of limitation periods for claims. In particular:

  • data processed under a contract – for the duration of the contract and the period required by document retention regulations, 
  • data processed based on consent – until the consent is withdrawn, 
  • cookie data – until deleted or browser settings are changed. 

§ 5. Rights of Data Subjects

You have the right to:

  • access your data and obtain a copy, 
  • rectify inaccurate data, 
  • erase data (“right to be forgotten”), 
  • restrict processing, 
  • data portability, 
  • object to processing, 
  • withdraw consent at any time (if consent was the basis for processing). 

To exercise your rights, you may contact us as indicated in § 1. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland.

§ 6. Cookies

The Vinci G Vinci website uses cookies to:

  • ensure proper functioning and security of the website, 
  • analyze traffic statistics (analytical cookies), 
  • personalize advertising content and integrate with social media (marketing cookies). 

Types of cookies:

  • technical (essential) – necessary for proper website operation, 
  • analytical – help analyze traffic and optimize the website, 
  • marketing – enable personalized advertising and remarketing. 

You can manage cookies through your browser settings. Restricting their use may affect website functionality.

§ 7. Data Security

The Controller applies appropriate technical and organizational measures to ensure the protection of personal data, including:

  • security of servers and IT systems, 
  • access control to data, 
  • confidentiality obligations for persons processing data. 

§ 8. Changes to the Privacy Policy

Vinci G Vinci reserves the right to amend this Privacy Policy in the event of changes in legal regulations or the operation of the website. The current version of the document will always be available at www.vinci-vinci.pl