Privacy Policy of corporatevaluation.co
Personal Data of Clients
Client personal data is processed in a manner consistent with the provisions of applicable law, in particular in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”).
Services provided by Corporate Mind Sp. z o.o. are also conducted in compliance with the Act of 18 July 2002 on the provision of electronic services (consolidated text, Journal of Laws of 2019, item 123).
General Provisions
This Privacy Policy (hereinafter referred to as the “Privacy Policy”) specifies the manner of collecting, storing, and processing personal data of Clients necessary for the execution of contracts by Corporate Mind Spółka z ograniczoną odpowiedzialnością, registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, 14th Commercial Division of the National Court Register under KRS number: 0001038433, NIP: 5223259542, REGON: 52540295300000 (hereinafter referred to as the “Administrator”). This Privacy Policy is for informational purposes only and does not constitute a source of obligations for Clients. The Administrator takes special care to protect the interests of individuals whose data is processed and employs organizational and technical measures aimed at ensuring adequate and appropriate protection of the processed personal data. The service may collect personal data of Users through a contact form or registration form. This data may include: name, company name, job position, phone number, and email address. Providing the indicated personal data by the User is, of course, voluntary. The User has the ability to access their data and may correct or update it as needed.
Contact with the Administrator
For matters directly related to the processing of personal data, please contact us via email at: office@corporatevaluation.co
Purpose and Legal Basis for Processing Personal Data
The Administrator may process Client personal data for the following purposes:
- Necessary for the conclusion and execution of a service contract, including the provision of electronic services, i.e., based on Article 6(1)(b) GDPR (performance of the contract, including actions aimed at concluding the contract) and Article 6(1)(c) GDPR (legal obligation).
- Necessary for the conclusion and execution of a contract for services provided by the Data Administrator, i.e., based on Article 6(1)(b) GDPR (performance of the contract, including actions aimed at concluding the contract) and Article 6(1)(f) GDPR (legitimate interest of the Administrator, which is to facilitate the execution of the contract through communication with contact persons indicated in the contract).
- Handling the complaint process, i.e., based on Article 6(1)(b) GDPR (performance of the contract) and Article 6(1)(c) GDPR (legal obligation).
- Responding to emails, questions, inquiries, and contacting for this purpose, i.e., based on Article 6(1)(f) GDPR (legitimate interest of the Administrator, which is the ability to respond to the received message, providing an answer in accordance with its content).
- Establishing cooperation in connection with interest in the Administrator’s offer, i.e., based on Article 6(1)(f) GDPR (legitimate interest of the Administrator, which is establishing and maintaining a business relationship).
- Pursuing claims or defending rights, as the realization of the legitimate interest of the Administrator, i.e., based on Article 6(1)(f) GDPR.
- Fulfilling obligations towards tax authorities, i.e., based on Article 6(1)(c) GDPR.
- Conducting statistical research, i.e., based on Article 6(1)(f) GDPR (legitimate interest of the Administrator, which is to improve the functioning of the Service, allowing it to be tailored to the needs of the Client).
- Sending educational content, i.e., based on Article 6(1)(f) GDPR (legitimate interest of the Administrator, which is to maintain contact with Clients and provide them with valuable knowledge in the field of finance, controlling).
- Sending marketing content – based on Article 6(1)(f) GDPR (legitimate interest of the Administrator, which is the ability to send commercial information in connection with the Client’s consent expressed under the Act on the provision of electronic services, expressed through a clearly confirmatory action, which is leaving an email address).
- Internet marketing – based on Article 6(1)(f) GDPR (legitimate interest of the Administrator, which is the ability to send personalized online advertisements of the Administrator’s products and services).
- Offering business partner services, in this case, we process only data concerning activity on the website, including activities that are recorded and stored through cookies, i.e., based on Article 6(1)(f) GDPR – legitimate interest, which is business development, the ability to offer business partner services.
- Monitoring and enforcing compliance with the terms of use of the website, based on Article 6(1)(f) GDPR – legitimate interest, which is ensuring the functionality of the website.
- Administering and managing the website, including identity verification and preventing unauthorized access – legitimate interest, which is maintaining the stability of the website and ensuring cybersecurity for visitors.
- Aggregating data for analysis purposes, based on Article 6(1)(f) GDPR – legitimate interest, which is conducting activities aimed at improving the functioning of the website.
Each time, the purpose and legal basis for processing personal data by the Administrator arise from the actions taken by the Client on the corporatevaluation.co website.
Subscription to Newsletter and Consent to Telephone Contact
If the Client has provided their email address for this purpose, we provide newsletter services, i.e., delivering commercial information regarding our products or services. If the Client has provided their phone number for this purpose, we provide services for delivering commercial information regarding our products or services during a telephone conversation. Providing data related to the email address is voluntary but necessary for sending the newsletter.
Personal data is processed:
- In the case of directing marketing content to the user within the framework of the newsletter – the legal basis for processing is a legitimate interest in connection with the Client’s consent.
- In the case of directing marketing content to the user within the framework of telephone and SMS contact – the legal basis for processing is a legitimate interest in connection with the Client’s consent.
- For analytical and statistical purposes – the legal basis for processing is a legitimate interest, which is conducting analyses of user activity on the website to improve the functionalities used and improve our offer.
To possibly establish, pursue, or defend against claims – the legal basis for processing is a legitimate interest, which is the protection of rights.
Contact via Email
If the Client contacts us via email, they simultaneously provide their email address as the sender of the message. The Client may be asked to provide additional data only if it is necessary to handle the matter in question. The legal basis in such a case is our legitimate interest, which is the need to resolve the issue related to the service.
Personal Data of Members of Communities Created by the Administrator
If the Client is a member of one of the communities created by the Administrator and uses the services provided by the Administrator in accordance with the regulations of the respective community, we process data for:
- Performing the contract (including handling any complaints) – the legal basis for processing is the necessity of processing for the performance of the contract.
- Possibly establishing, pursuing, or defending against claims – the legal basis for processing is a legitimate interest, which is the protection of our rights.
Data of Users of Social Media Profiles and Commenters on Content in Services
Profiles created by the Administrator on services like Facebook, Instagram, LinkedIn, YouTube, Google are public. By visiting the profile, the Client shares their personal data (e.g., account name, comments, likes, internet identifiers, and IP address of the device used). If the Client comments on content on the Administrator’s services, they share their username and email address. This data is processed to: (i) enable effective profile or blog management in connection with the promotion of various events, services, and products by the Administrator, and (ii) communicate with users. The legal basis for processing personal data is our legitimate interest, which is promoting activities, improving the quality of services provided, and ongoing communication with users of profiles, fan pages, or blogs.
ATTENTION: The above information does not apply to the processing of the Client’s personal data by the administrators of individual services.
Data Recipients
Personal data, depending on the need, will be transferred to entities processing it on our behalf (especially entities that manage and provide IT systems, entities providing accounting services) and persons cooperating with Corporate Mind Sp. z o.o., who need access to the data to perform their assigned duties. Your personal data may also be transferred to banks, shipment processing entities, payment transaction processing entities, as well as authorized state bodies and other entities authorized under the law, particularly tax offices, when it becomes necessary.
In connection with the fact that the wycenafirm.com.pl service uses tools such as Google Analytics, Google Ads, Google Tag Manager, Google Search Console, Facebook Ads, your personal data may be transferred to a third country (i.e., a country that does not belong to the European Economic Area) – the United States of America. The legal basis for data transfer is Article 45(1) GDPR (European Commission decision on an adequate level of protection, which is the EU-U.S. Privacy Shield).
List of Transfers
- cyber_Folks S.A. – a company registered in Poznań, ul. Wierzbięcice 1B, 61-569 Poznań, KRS 0000685595, REGON 367731587, NIP 7792467259
- AfterMarket.pl – Limited Chytron 3, Office 301 1075 Nicosia, Cyprus
- MailerLite Limited – a company registered in Ireland at 38 Mount Street Upper, Dublin 2, D02 PR89, Ireland
- EasyCart – eduweb Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (02-972) at Al. Rzeczypospolitej 10, apt. 46, registered in the Register of Entrepreneurs of the National Court Register by the District Court for the capital city of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under KRS number 0000821672, NIP: 9512495989
- Stripe Inc. 354 Oyster Point Boulevard South San Francisco, California, 94080, USA
Rights under the General Data Protection Regulation
You have the right to:
- Request access to your personal data, its deletion, correction, restriction of processing, and data portability.
- Object to data processing if the processing is based on the premise of legitimate interest.
- Lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection) if you believe that the processing of personal data violates GDPR.
- Withdraw consent, with the stipulation that the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, please contact us at office@corporatevaluation.co
To exercise the above-mentioned rights, please contact the Administrator as indicated in the “Contact with the Administrator” section.
Social Media
The service uses social media plugins and other tools provided by social media services, such as Facebook, Instagram, LinkedIn, YouTube, Google.
By using services that include such plugins, the Client’s browser establishes a direct connection with the servers of the social media service administrators. The content of the plugin is transmitted by the respective service provider directly to the Client’s browser and integrated into the page. Through this integration, service providers receive information that the browser has displayed the respective service, even if the Client does not have a profile with the respective service provider or is not currently logged in. This information (including the IP address) is transmitted by the browser directly to the service provider’s server (some servers are located in the USA) and stored there.
If the Client is logged into one of the social media services, the service provider can directly associate the visit to the service with the Client’s profile on the respective social media service. If the Client uses the respective plugin, e.g., the “Like” button, the relevant information will also be transmitted directly to the service provider’s server and stored there. Additionally, this information will be published on the respective social media service and will be visible to the Client’s contacts.
The purpose and scope of data collection and further processing and use by service providers, as well as the Client’s rights in this regard and possible settings to ensure privacy protection, are described in the privacy policies of the respective service providers.
- YouTube, Google – Privacy Policy
- Facebook – Privacy Policy
- Instagram – Privacy Policy
- LinkedIn – Privacy Policy
If the Client does not want social media services to associate data collected during visits to our service directly with the Client’s profile on the respective social media service, it is necessary to log out of that service before visiting our Service. It is also possible to completely block the loading of plugins on the page by using appropriate browser extensions, e.g., script blockers.
Marketing
In connection with marketing activities, the Administrator may, based on the Client’s consent, legitimate interest, or the legitimate interest of entities cooperating with the Administrator (Article 6(1)(f) GDPR), or based on the Client’s consent (Article 6(1)(a) GDPR), process information that helps tailor advertisements and content to the Client’s preferences and expectations, including, among others, in connection with displaying behavioral advertising. For this purpose, data such as IP address, data from cookies, or information about the Client’s activity on the Service may be processed.
Marketing activities may include, in particular:
- Displaying marketing content on the Service that is not tailored to the Client’s preferences (so-called contextual advertising) – if personal data is used to display such advertising, its processing is based on a legitimate interest of the Administrator or a third party, which is promoting the services provided by the Administrator or the activities of third parties (Article 6(1)(f) GDPR). Data is processed until the Client ceases to use the Service.
- Displaying marketing content tailored to the Client’s preferences, including adjusting the displayed offers on the Service based on the offers viewed and the Client’s activity on the Service (so-called behavioral advertising). Information is collected via cookies or similar technologies (such as Meta Pixel, Google Ads) and used by the Administrator for marketing purposes based on the Client’s prior consent to such activities (Article 6(1)(a) GDPR). In this case, data will be processed until the Client withdraws consent.
- Contacting the Client for purposes related to permissible marketing activities through the communication channel provided by the Client, email, SMS, phone, push notifications. The legal basis for processing personal data is Article 6(1)(a) GDPR in conjunction with Article 10 of the Act on the provision of electronic services or Article 172 of the Telecommunications Law. In this case, data will be processed until the Client withdraws consent.
The Administrator uses marketing tools such as Meta Pixel, Google Ads to target advertisements to the Client. This involves the use of cookies from Meta (formerly Facebook). As part of cookie settings, you can decide whether to consent to the Administrator’s use of marketing cookies or not.
Social Tools
The Administrator provides the ability to use social features, such as sharing content on social media and subscribing to social media profiles. Using these features involves the use of cookies from social media service administrators, such as Facebook and LinkedIn.
We embed videos from YouTube on the site. When the Client plays such videos, cookies from Google LLC regarding the YouTube service are used.
Server Logs
Using the site involves sending queries to the server where the site is stored. Each query sent to the server is recorded in server logs.
Logs include, among others, the IP address, server date and time, information about the web browser, and the operating system the Client is using. Logs are stored and kept on the server.
Data stored in server logs is not associated with specific persons using the site and is not used by us to identify the Client.
Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone other than persons authorized to administer the server.
Data Retention Period
The period for which your personal data will be processed depends on the purpose for which the data was collected and the legal basis on which the specified purpose is based:
- In the case of a submitted complaint, until it is resolved. In the case of claims and/or defense of rights, until the conflict is resolved, taking into account the relevant limitation periods for claims.
- For the period specified by accounting and finance regulations.
- For the period of handling the message sent to us.
- If your personal data is processed based on consent, the data may be processed until the consent is withdrawn.
Cookies
The corporatevaluation.co website uses cookies. Cookies are small files sent by a web server to your browser and then stored on your computer. Cookies help analyze web traffic and recognize which part of the website was visited. My website also uses cookies to enable individual approaches to each visitor by tailoring activities to your needs. This happens through, for example, collecting and storing information about your preferences. This information is used solely for statistical analysis and is then removed from the system. The website uses the following cookies:
- Session cookies – which remain on the user’s device only until the browser session ends. Information saved is then permanently removed from the device’s memory.
- Persistent cookies – which remain on the user’s device until they are deleted or settings are changed. Ending the browser session or turning off the device does not remove them.
Cookies in no way give the Administrator access to your computer or any information about you except for the information on how you use the Administrator’s website and the personal data you decide to share with the Administrator.
To monitor and improve the website, the Administrator collects aggregate information about you when you browse the site. This information includes, for example, details about your operating system, browser version, IP address, and domain name URL. The Administrator may generate general statistics, collect data about website traffic, and share this data with third parties for advertising, promotional, and marketing purposes. This data does not contain any personal data. For the same reasons, the Administrator may collect and store information about how you use the Internet through cookies stored on your computer’s hard drive. Cookies contain information that is transferred to your device’s hard drive.
Data Source
Personal data processed in connection with the use of the corporatevaluation.co website and the services provided by the Administrator are usually obtained directly from the data subject or from the entity represented by the natural person. From the entity represented by the natural person, the Administrator may receive data in the form of name, surname, phone number, email address, job position, place of work, or scope of duties.
Effective Date of the Terms and Privacy Policy
This Privacy Policy and Terms of Service are effective as of 01.01.2024.