PRIVACY POLICY WITH COOKIE POLICY AND FULFILLMENT OF INFORMATION OBLIGATIONS

Administrator of personal data

(Administrator / Organizer)

You can contact us:

● in writing at the address: Złota 75A/7, 00-819 Warsaw

● via email: biuro@ehsconsulting.pl

Data Protection Officer

Contact Information

We process your personal data:

1. First name;
2. Last name;
3. Address;
4. Phone number;
5. Email address;
6. Gender;
7. Age;
8. Data concerning professional qualifications, courses, trainings, etc.

Every person providing personal data to EHS CONSULTING through forms placed on EHS CONSULTING websites is informed of the specific purpose for which this data is processed.

EHS CONSULTING solely uses personal data for the specified purposes, specifically:

When creating a user account on the EHS CONSULTING website, personal data will be processed for the management of that account (e-learning). Providing this data is necessary for setting up and maintaining a user account.

In the case of contact forms placed on EHS CONSULTING websites, personal data will be processed for a one-time contact in the indicated form with the person whose data it concerns, in connection with the reported inquiry.

Personal data is also used for the purpose of fulfilling services ordered by customers and service users, for optimizing these services, and for technical purposes related to server administration. Additionally, some data, particularly IP addresses, are used to collect general, statistical demographic information (e.g., about the region from which the connection originates). Such data, including personal data, may be profiled by EHS CONSULTING by combining it with data about viewed products or services of EHS CONSULTING for automated assessment of product and service preferences and for preparing tailored information.

Your personal data processed based on given consent will be processed until its withdrawal or until the purpose for which the data was collected ceases. The consent given can be withdrawn at any time without affecting the lawfulness of processing carried out based on the consent before its withdrawal.

Data processed in connection with the conclusion and performance of an agreement will be processed in accordance with applicable regulations, but not longer than until the expiration of the period during which EHS CONSULTING or the user can assert claims related to the concluded agreement, unless a longer period is required by law.

EHS CONSULTING ensures the security of personal data through appropriate technical and organizational measures aimed at preventing unlawful processing of data, accidental loss, destruction, or damage.

EHS CONSULTING takes special care to ensure that personal information is processed in accordance with the principles of personal data processing specified in Article 5 of the GDPR, namely:

Principle 1: lawfully, fairly, and transparently, 

Principle 2: collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes; 

Principle 3: adequate, relevant, and limited to what is necessary for the purposes for which they are processed; 

Principle 4: accurate and, where necessary, kept up to date; 

Principle 5: kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; 

Principle 6: processed in a manner that ensures appropriate security of the personal data; 

Principle 7: processed in a way that ensures the rights of data subjects; 

Principle 8: not transferred without adequate protection to countries outside the European Economic Area or international organizations.

When collecting any personal data, EHS CONSULTING records where it was obtained from.

Personal data is obtained through:

Online forms - information is collected through forms available on EHS CONSULTING websites, used for contact purposes, submitting inquiries, and expressing comments.

Contact outside the website - EHS CONSULTING websites display phone numbers and email addresses for contacting them.

Network traffic data and statistics regarding the frequency of visits to EHS CONSULTING websites - records are kept of information about network traffic automatically logged by our server, such as a user's IP address, URLs visited before and after our website, and visited pages. Statistics on the number of entries and page views are also collected. EHS CONSULTING cannot directly identify a user's identity based on traffic data and usage statistics.

When using resources on websites managed by EHS CONSULTING - information about users is gathered through files such as "cookies" or "web beacons".

Cookies - small text files transferred from a website and stored on a user's hard drive used to customize content and services to individual needs and interests. They allow the site to "remember" who you are. Users can disable the acceptance of cookies in their browser at any time, but this may result in the loss of access to certain pages on EHS CONSULTING. Stored information is deleted after the session, for example, when moving to another website.

Web beacons - electronic graphic elements (also called web bugs, clear gifs, or trackers) that determine the number of users who visited these pages by clicking on advertisements related to our products and services from another company's website. Web beacons gather limited information, including a cookie number, time and date of page opening, and a description of the page containing the web beacon. Our pages do not contain web beacons placed by other advertisers, but we use third-party services to collect this data. As web beacons are used in conjunction with cookies, they can be disabled by turning off cookies or adjusting cookie acceptance settings in the browser.

In relation to the processing of your personal data, you have:

The right to access your data content, based on (Art. 15 of the GDPR);

The right to rectify data, based on (Art. 16 of the GDPR);

The right to erasure of data, based on (Art. 17 of the GDPR);

The right to restrict data processing, based on (Art. 18 of the GDPR);

The right to object to data processing, based on (Art. 21 of the GDPR);

The right to data portability, based on (Art. 20 of the GDPR);

The right to lodge a complaint with the supervisory authority (Office for Personal Data Protection).

EHS CONSULTING declares that it does not sell, disclose, or transfer the collected personal data of users to other individuals or institutions unless explicitly agreed upon or at the user's request. Alternatively, it may occur at the request of authorized state authorities for the purposes of ongoing procedures or actions related to security, defense, specific legally mandated tasks carried out for public interest, or when necessary to fulfill the legally justified purposes of EHS CONSULTING.

However, personal data processed by EHS CONSULTING may be accessible to IT service providers such as those responsible for changes in the websites www.ehsconsulting.pl and www.ehsconsulting.bhpsoft.pl, system updates, repairs of website malfunctions, and internet platform maintenance, etc. Hosting service providers, like webd.pl, and Google Poland sp. z o.o., may also have access limited to maintaining websites and marketing campaigns solely in connection with EHS CONSULTING's statutory activities. Under no circumstances will entities gaining access to user personal data become the administrators of the data processed by EHS CONSULTING.

Additionally, we may disclose aggregated, general statistical reports developed by us to cooperating websites or advertising agencies. These reports mainly cover website traffic and do not allow for the identification of individual users (anonymized data). Such information may be utilized for monitoring network traffic on the site or tracking website viewership.