I. Terms and Conditions (Website)
1. These Terms and Conditions are referred to in Article 8 of the Act of 18 July 2002 on the provision of electronic services (Journal of Laws of 2016, item 1030, as amended) and apply only to the services provided to users of the website under the following domain: https://www.kcrcro.com/ (Website).
2. The operator of the website is KCR S.A. (Polish joint-stock company) with its seat at 6 Postępu str., 02-676 Warsaw registered in the District Court for the Capital City of Warsaw 13th Commercial Division of the National Court Register under the number KRS 0000289542, tax identification number (NIP): 5213169665, share capital: 571.666,20 PLN (fully paid), info@kcrcro.com, (+48) 22 313 13 13 (KCR).
3. Use of the website is free for its users. These Terms and Conditions have been posted by KCR in an accessible way, so users can access, reproduce, and save the contents of these Terms and Conditions through the user’s IT system.
4. Technical requirements. To use the website, the user must have access to an IT system in the
following configuration:
— access to electronic equipment connected to the public network (Internet),
— access to active e-mail post,
— Internet website allowing for displaying hypertext documents (HTML) on the computer screen connected
in the Internet network with the network service www Internet Explorer in version 11, Microsoft Edge
42-44, Chrome 64-71, Firefox 59-64, Safari 11-12, Opera 50-57. Service operations need JavaScript with
screen resolutions from 360 to 1600 pixels.
5. The user assures that they will use the website solely in accordance with the applicable law, the rules of social coexistence and good morals, while respecting the intellectual property rights of KCR. The user is also forbidden to provide content that is unlawful, offensive, fictitious, or potentially misleading or that may cause interference or damage to the information systems.
6. KCR provides website users with electronic services which consist of:
a) Online contact forms – users of the website may ask KCR questions or place requests for contact to
KCR using special contact forms:
— If you would like to become KCR’s client or vendor, please contact KCR Group via RFI/RFP contact form
for the most timely response.
— For PR & Marketing enquiries, please choose MEDIA or CONFERENCES, depending on the subject of your
enquiry.
— Investigators and site representatives interested in joining our sites network can reach us through
our Investigators’ subpage (using APPLY AS A SITE form).
— Job applicants are advised to visit KCR’s CAREERS section for the most recent job offers.
— For all OTHER enquiries not covered by the above, please use OTHER section.
Providing an e-mail address in each contact form means that the user agrees to receive commercial
information from KCR within the meaning of Article 10(1) of the Act of 18 July 2002 on Provision of
Services by Electronic Means to the email address indicated therein.
b) KCR Insights (KCR’s newsletter) – KCR sends the subscribers of KCR Insights commercial information
and other promotional and educational materials to the e-mail addresses indicated by them. For the
purposes of these Terms and Conditions, ‘Commercial Information’ shall mean any information meant
directly or indirectly for the promotion of KCR Group goods, products, or services or KCR Group’s image.
7. KCR takes actions that are necessary for correct and fully efficient operation of the website and undertake to remove all irregularities raised by users. The users can place complaints connected with our website by sending an e-mail message to the KCR e-mail address.
8. Our website may contain links to websites or mobile applications we do not own or control. Our Privacy Policy does not cover them. Please read the legal terms and conditions of use and privacy policy sections of third-party site to which you link. KCR is not responsible for, does not recommend and accepts no liability for any information or opinion contained in any third-party website.
9. All matters not settled herein rules of our Privacy Policy Section II & Cookies Policy shall apply.
10. KCR reserves the right to modify these Terms and Conditions from time to time. If KCR modifies these Terms and Conditions, the revised version of Terms and Conditions will be posted on the website in advance (before such changes are effective). Where such changes are substantial, KCR will also notify the users (including subscribers of KCR newsletter) through available means, where possible. By continuing to use the Website after such changes are in effect, the user will be deemed to accept and agree to the Terms and Conditions and to abide by them.
II. Privacy Policy - Personal Data Protection
Whenever we refer to “we”, “us” or “our” in this Privacy Policy we mean: KCR S.A. (Polish joint-stock company) with its seat at 6 Postępu str., 02-676 Warsaw, Poland, registered in the District Court for the Capital City of Warsaw 13th Commercial Division of the National Court Register under the number KRS 0000289542, tax identification number NIP: 521-31-69-665, share capital (covered in total): PLN 506.246,20, e-mail: info@kcrcro.com or relevant local KCR company. For more information regarding relevant local KCR companies, please contact us using data specified below in CONTACT DATA section.
KCR S.A. or, as the case might be, the relevant local KCR company which has a relationship with you, are the controllers of your personal information. We carefully safeguard the information we hold about our partners, clients and employees. We endeavor to comply with the General Data Protection Regulation and the local laws applicable in the countries in which we operate.
This Privacy Policy applies to personal data collected by us as a data controller of the personal information that you provide to us when you visit our website at: https://www.kcrcro.com/ or through the e-mail contact.
This policy also applies for processing personal data in the recruitment process for which we use an additional tool, Bamboo HR. KCR S.A. or the local KCR company to which you are applying, are the controllers of your personal information.
If you are visiting our website as a prospective staff member, please refer to the section that applies to our job applicants.
If you are KCR’s employee, contractor, and/or Client, please note that there are separate privacy policies that are regulating details of personal data processing. Relevant documents shall be always shared with you before processing takes place.
In this Privacy Policy, we would like to provide you with information about how we use your personal data that’s been collected from you. Additionally, we would like you to know why we process that data and explain your rights regarding our use of your personal data.
Our website and services are not intended for children, and we do not collect personal data relating to children.
If you are a California resident, read more about our Notice to California Residents here.
In here you can learn more about Curandus Privacy Policy.
Contact data:
How to contact us:
If you have any questions about this Privacy Policy or would like to contact us about any other matter related to the processing of your personal information, please use the following contact da:
KCR S.A.
6 Postępu Street
02-676 Warsaw, Poland
E-mail: gdpr@kcrcro.com
What types of information we collect:
"Personal data" is any information that relates to you and that identifies you either directly from that
information or indirectly, by reference to other information that we have access to. The personal data
that we collect, and how we collect it, depends upon how you interact with us. Categories of personal
data that we routinely collect about you includes:
— Full name and surname;
— Email address;
— Postal address;
— Job title/position;
— Company name;
— Other contact details;
— Data relating to our website/apps: IP address, cookies and other collected during your visit at our
website (for more details, please see also our Cookies Policy).
If you are a job applicant, we may also process information included in your CV or cover letter, such as employment history, academic background, skills and competencies, languages spoken, if you provide such information to us.
We do not collect any special categories of personal data, as defined under the General Data Protection Regulation.
Providing your personal data is voluntary, however if you do not provide us with the necessary information, we will not be allowed to perform the services, conclude an agreement, or reply to your enquiry.
What we do with your personal data:
Your personal data will be processed only for the purposes as described in this Privacy Policy:
| Purpose | Lawful basis for processing |
|---|---|
| To fulfil a query, to respond to your inquiries and fulfil your requests for services and/or to administer our services. | Article 6 paragraph 1 point b or Article 6 paragraph 1 point f of the GDPR - our legitimate interest here is to identify the sender of the query and handle the query, including queries transmitted through electronic means. |
| To facilitate your attendance at one of our events / meetings. | Article 6 paragraph 1 point b of the GDPR. |
| To facilitate your attendance at one of our events / meetings. | Article 6 paragraph 1 point b of the GDPR. |
| To maintain records of prospective, current, and past clients and partners. | Article 6 paragraph 1 point f of the GDPR - our legitimate interest in undertaking marketing activities to offer you products or services that may be of your interest. |
| To track your use of our websites and interaction with our services. For example, to understand which website content is most popular with our visitors. | Article 6 paragraph 1 point f of the GDPR - our legitimate interest in enhancing, facilitating, and improving our website content and our services that you may use or are using – for more details please see our Cookies Policy. |
| To provide our subscribers with KCR’s online newsletter (KCR Insights) and commercial information (direct marketing) through electronic means. |
Article 6 paragraph 1 point a of the GDPR (subscriber’s consent). Article 10 of the Polish Act on the Provision of Electronic Services and Article 172 of the Polish Telecommunications Law. |
If you are a job applicant, your personal data provided in the application documents will be processed for the following purposes:
| Purpose | Lawful basis for processing |
|---|---|
| To conduct the ongoing recruitment and take action before concluding an employment agreement with you (if applicable). | Article 6 paragraph 1 point a & Article 6 paragraph 1 point c of the GDPR in connection with relevant local labor laws. |
| To carry out future recruitment if you grant us such consent. | Article 6 paragraph 1 point a of the GDPR – your consent that you can provide us with voluntarily. |
| To establish or pursue claims that may arise in connection with the recruitment process, until the end of the period of limitation in the event you are not employed in the position for which you applied. | Article 6 paragraph 1 point f of the GDPR (legitimate interest of the data controller - the right to defense against the claims of a person who has not been employed). |
We take appropriate steps to ensure your personal data is stored in a secure environment to prevent any unauthorized access. We will not share your personal information with any third parties for them to use for their own marketing purposes. We may disclose your personal data if required to do so by law.
If this is compliant with applicable law, we may transfer your personal data to other entities, including our service providers, subcontractors, and companies from our company’s capital group, provided that you give us your consent or there is another legal basis to provide these data to those entities. In case of data transfer to the companies from our capital group, we may have a legitimate interest in sending personal data for internal administrative purposes.
As we conduct our businesses globally, it might be necessary to process and transfer personal information data outside of the country where we collect it from you. We may process your personal information abroad, including outside the European Economic Area (EEA), provided we comply with the applicable laws and regulations. In cases where we are sharing your personal data with organizations outside the EEA, we will ensure they agree to apply equivalent levels of protection as we do, and the transfer of your personal data is compliant with applicable law.
We use MailChimp as our marketing automation platform. By subscribing our online newsletter (KCR Insights), you acknowledge that the information you provide will be transferred to MailChimp for our direct marketing purposes.
Your rights and obligations
You have a number of rights under data protection law, which have been strengthened under the General Data Protection Regulation (GDPR):
You have the right to request access to and rectification or erasure of your personal data, as well as restriction of processing, data portability, the right not to be subject to a decision based solely on automated processing, including profiling, and the right to object to your personal data processing.
You have the right to object the personal data processing where the processing is carried out based on legitimate interests and/or for statistical purposes and your objection is justified by your particular situation.
You have the right to withdraw your consent to personal data processing at any time to the extent to which your consent applies. Withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.
If you are unhappy with the way in which we have handled your personal data, you have the right to file a complaint with the supervisory body dealing with the protection of personal data in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes provisions of the General Data Protection Regulation.
We encourage you to contact us first, as we aim to promptly, efficiently, and satisfactorily resolve any concerns or complaints you may have in relation to the processing of your personal data.
To fulfill your request, we will require you to provide satisfactory proof of your identity to ensure that your rights are respected and protected. This is to ensure that your personal data is disclosed only to you.
How long we store your personal data for
The information we collect may be archived or stored periodically by us according to backup processes.
We will only retain personal data for as long as is necessary for the purposes we are using it for – the retention period will vary depending on the purposes it is used for.
For the recruitment process purposes, we may process your personal data in the scope covered by the labor law until the recruitment process is completed, and the data provided by you voluntarily in a wider scope than required by the law, until your consent to the processing of personal data is revoked.
Upon completion of the recruitment process, we may process your personal data to defend against potential claims that may occur in connection with recruitment until the end of the period of limitation of these claims.
If you give us consent to use your personal data for the purpose of future recruitment, your data will be used for up to 3 years.
Privacy Policy updates
This Privacy Policy may be amended or updated from time to time, so please check it regularly for updates. If we make any significant changes to its content, we will communicate this to you where possible through available means.
Please contact us regarding the details above if you have any questions about our Privacy Policy or processing of your personal data at: gdpr@kcrcro.com
III. COOKIES POLICY
We use cookies to operate our website https://www.kcrcro.com/, to understand how our visitors use it and to facilitate, personalize, measure, develop and improve our advertising and marketing efforts. We also use cookies to personalize your experience on our website by presenting you with services and products that you are particularly interested in.
We, as well as third parties that provide content, advertising, or other features on our Services, may manage cookies to automatically collect information through the Services, such parties and we are committed to adhering to data protection principles also in the process of managing cookies.
What are the cookies?
Cookies are text files placed on your computer or other mobile device which contain information about your internet usage that is held in your browser or on your computer’s hard drive.
There are different types of cookies: some are essential for the website to operate properly (Necessary Cookies), whereas others are aimed at enhancing and personalizing your user experience.
Necessary cookies: These cookies are required for the functioning of the website and cannot be deactivated in our systems. They are set only in response to user actions that amount to a request for services, such as setting privacy preferences, logging in or filling out forms. You can set your browser to block or alert you to these cookies, but some parts of the site will then not function. These cookies do not store any personally identifiable information about you.
Targeting Cookies: These cookies might be set by our advertising partners to provide behavioral advertising and re-marketing analytical data. They do not store directly personal information but are based on uniquely identifying your browser and internet device. They collect any type of browsing information necessary to create profiles and to understand user habits in order to develop an individual and specific advertising routine.
Functional cookies: These cookies are set by us or by third party service providers we use to implement additional functionalities or to enhance features and website performance, however they are not directly related with the service you requested.
Performance cookies: These cookies are set to provide quantitative measures of website visitors and traffic sources so we can measure and improve the performance of our site. Information collected with these cookies is aggregated and therefore anonymous. With the usage of these cookies, we are able to count visits and traffic sources to improve the performance of our site and application. If you do not allow these cookies, we will not know when you have visited our site.
Social media cookies: These cookies are set by a number of social media services that might be added to the site to allow you to share our content with your friends and networks. They are able to track your browsing on other sites and build a profile of your interests. This may affect the content and messages you see on other sites you visit. If you do not allow these cookies, you may not be able to use or see these sharing tools.
More information on all aspects of cookies can be found on https://www.allaboutcookies.org/.
Please note that we have no affiliation with https://www.allaboutcookies.org/ and we are not responsible for this third-party website.
How to turn off cookies
In many cases the software used for browsing websites allows saving cookies on the website user’s final device by default. You may change the settings related to cookies at any time in this respect, in a way that allows deleting cookies or blocking their use automatically.
We encourage you to actively choose your browser’s settings and express consent to the preferred cookie use. Please be informed that restricting the use of cookies may affect some of the website’s functionalities.
You can turn cookies off at any time by going into your browser settings. However, this may have a detrimental effect on your user experience.
If you are happy to continue letting us use cookies for the purposes described in our Cookies Policy, then you do not need to do anything with your device settings.
Google Analytics & Hotjar
We use technology such as Google Analytics and Hotjar, which also collects information about users of our website.
These tools enable us to analyze how our visitors interact with our website and any apps provided therein, to optimize the website and user experience.
The information we collect through these tools may include:
— IP address,
— the type of a browser,
— the number of sessions per browser on each device,
— the type of the device and operating system the Website User is using,
— referrer information,
— time zone and country,
— user preferences,
— how many and which pages the website user visited,
— how much time the user spends on which pages,
— which links the user chooses to click etc.
Further information concerning the terms and conditions of use of Google Analytics and data privacy can be found at https://www.google.com/analytics/terms/.
To opt out of being tracked by Google Analytics across all websites visit https://tools.google.com/dlpage/gaoptout. Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor KCR will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link. You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.
The technology described above may require transferring personal data to the USA. We guarantee that such transfer may only take place upon providing legal basis (e.g., upon signing standard contractual clauses). Google participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework.
Your rights
The information collected about you through our website and tools described above may be deemed as a personal data. Please familiarize yourself with our Privacy Policy to obtain detailed information about the rights you have in cases where we are processing your personal data, while using the cookies and other similar technologies.