Skip to main content

Privacy policy

The Privacy policy sets out the rules for the processing of personal data collected through www.leonsoftware.com, related websites and other sources (hereinafter referred to as the "Website"). The Privacy policy aims to unify and collect in one place information regarding the processing of personal data in indicated areas. It may happen that in the case of some personal data processing activities, information about the processing can also be found somewhere else. The information contained in the Privacy policy and the relevant regulations are not mutually exclusive, and in case of doubt, the regulations should be given priority.

 

I. Controller

The controller of your personal data is Leon Software sp. z o.o. sp. j. with its registered office in Warszawa, Al. Jerozolimskie 151/5U, 02-326 Warszawa. You can contact the Controller by e-mail: or by correspondence at the above-mentioned address.

 

II. Purpose, legal basis and time frames for the processing of personal data

1. Are you interested in participating in our webinar, workshop or consultation?

We collect the personal data required in order to register for the above-mentioned events directly from you. Your personal data are processed in order to enable you to participate in a webinar, workshop or consultation.

The legal basis for the processing of your personal data is the consent you have expressed by willing to participate (Article 6 (1) (a) of the GDPR). Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Providing personal data is voluntary, but providing them is necessary to participate in the webinar, workshop or consultation. Refusal to provide personal data will render such participation impossible.

Personal data are stored until the consent is withdrawn or the purpose of processing is no more.

 

2. Are you interested in our commercial information?

Your personal data are processed for the purpose of sending commercial information.

The legal basis for the processing of your personal data is your consent by providing your e-mail address and confirming your willingness to receive commercial information (Article 6 (1) (a) of the GDPR). Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

Providing personal data is voluntary, but providing them is necessary for sending commercial information. Refusal to provide personal data will render such communication impossible.

Remember that if you have agreed to receive commercial information from our business partners, we have provided them with your e-mail address for this purpose.

Personal data are stored until the consent is withdrawn or the purpose of processing is no more.

 

3. Are you a party to a contract concluded with us?

If you are a party to a contract with us or you intend to conclude such a contract, the data that we process about you are contact details and other data necessary to conclude the contract. Those data was obtained directly from you.

Your personal data are processed for the purpose of:

  • to conclude and perform the contract,
  • compliance with legal obligations imposed upon us, including particularly accounting activities,
  • implementation of a legitimate interest, consisting in ensuring the communication necessary to conclude and perform the contract and its ongoing service, providing you with answers to questions, maintaining business contacts, as well as for the establishment, exercise or defence of legal claims.

The legal basis for the processing of your personal data are:

  • the necessity to process them in order to conclude and perform the contract (Article 6 (1) (b) of the GDPR),
  • fulfilling our obligations imposed upon us (Article 6 (1) (c) of the GDPR),
  • our legitimate interests (Article 6 (1) (f) of the GDPR) described above.

Providing personal data is voluntary, but it is necessary to establish cooperation and service the contract. Refusal to provide personal data will result in the inability to conclude and perform the contract, including answering the question you asked.

Personal data are stored for the period necessary to establish and continue cooperation, as well as to present possible offers in the future. Since the data are necessary for the purposes resulting from the regulations (in connection with tax obligations) and for the purposes of establishing, investigating and defending against claims, the data may also be stored until the expiry of the limitation period for tax obligations related to contracts, which may be extended by period of limitation of civil law claims.

 

4. Do you represent our client or contractor?

If you represent our client, contractor or other entity in contacts with us (e.g. your employer, customer or contractor), the data we process about you are contact details related to your function or relationship with the entity on behalf of which you are acting. We have obtained this data directly from you or we have received them from this entity.

Your personal data are processed for the purpose of:

  • compliance with legal obligations imposed upon us, including particularly accounting activities,
  • implementation of a legitimate interest, consisting in ensuring the communication necessary to service and perform the contract concluded with the entity on behalf of which you are acting, providing you with answers to questions, maintaining business contacts, as well as for the establishment, exercise or defence of legal claims.

The legal basis for the processing of your personal data is:

  • fulfilling our obligations imposed upon us (Article 6 (1) (c) of the GDPR),
  • our legitimate interests (Article 6 (1) (f) of the GDPR) described above.

Providing personal data is voluntary, however, it is necessary for the cooperation with the entity you represent. Refusal to provide personal data will result in the inability to maintain contacts necessary for the performance of the contract or answer the question you have asked.

Personal data are stored for the period necessary to establish and continue cooperation, as well as to present possible offers in the future. Since the data are necessary for the purposes resulting from the regulations (in connection with tax obligations) and for the purposes of establishing, investigating and defending against claims, the data may also be stored until the expiry of the limitation period for tax obligations related to contracts, which may be extended by period of limitation of civil law claims.

 

5. Are you contacting us to submit a job application?

In such a case, personal data are processed in order to carry out the recruitment process for the position offered in our structures and to select the appropriate person for employment in the position specified in the job offer, including the assessment of qualifications, abilities and skills of the job candidate.

Depending on whether the recruitment process leads to the conclusion of a contract covered by the employment relationship and thus the provisions of the Labor Code, or leads to the conclusion of a civil law contract or a contract for the provision of services, there are different legal grounds for the processing of personal data:

  • In the case of recruitment for positions for which contracts covered by the employment relationship are provided, and thus the provisions of the Labour Code bind, the legal basis for the processing of personal data is:
  1. to the extent resulting from the Article 22 (1) of the Labour Code, the legal basis is the legal obligation imposed on the Controller (Article 6 (1) (c) of the GDPR). This applies to such data as: name(s) and surname, date of birth and contact details indicated by the job applicant. If it is necessary to perform work of a certain type or in a specific position, this also applies to information on education, professional qualifications and employment history. The legal obligation on the Controller also includes the data that are necessary to exercise the right or fulfil the obligation resulting from the law.
  2. in the case of providing personal data in a wider scope than specified in the provisions of the labour law, the legal basis for their processing in the above-mentioned purpose is consent (Article 6 (1) (a) of the GDPR). This applies to the provision of the results of competency tests, as well as any data contained in the curriculum vitae (CV), cover letter or made available during interviews. We do not require the above data, but we treat their provision as tantamount to consenting to their processing. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

We would like to point out that the provision of personal data indicated in point I lit. a) above is mandatory in the light of applicable labour law provisions. Failure to provide them will result in the inability to participate in the recruitment process. Providing by the job applicant personal data indicated in point I lit. b) above is voluntary. We declare that the failure to provide such data may not be the basis for unfavourable treatment of the job applicant, and may not cause any negative consequences for them, especially it may not be a reason justifying the refusal of employment.

In the case of recruitment for positions for which there are envisaged civil law contracts or contracts for the provision of services, the legal basis for the processing of personal data is consent (Article 6 (1) (a) of the GDPR). This applies to all data contained in the curriculum vitae (CV), cover letter or made available during interviews.

We would like to point out that the provision of personal data by the job applicant for the purpose of concluding the indicated contracts is voluntary, as consent is required to do so. However, we would like to point out that consent to the processing of such personal data by us as: name(s) and surname, date of birth and contact details and - within certain positions - information about education, professional qualifications and the employment history, is necessary to the given application was taken into account within the recruitment process.

CVs should be deleted after the recruitment process is completed, in any case not longer than 3 months, unless consent for further processing has been given.

 

6. Above points do not apply to you and just want to contact us?

If you only want to contact us, the data we process about you are your contact details and data resulting from your message. We obtained those data directly from you.

Your personal data are processed in order to pursue a legitimate interest, consisting in ensuring the handling of your message and possibly answering questions arising from it.

The legal basis for the processing of your personal data is our legitimate interest (Article 6 (1) (f) of the GDPR) described above.

Providing personal data is voluntary, but it is necessary for us to deal with your message. Refusal to provide personal data will result in the inability to handle the message sent by you and thus its removal.

Personal data are processed as long as your message is being dealt with unless the personal data being processed are covered by other personal data processing activities which set different time frames of processing.

 

Recipients of personal data

Personal data will be transferred - depending on the need - to entities processing it on our behalf (in particular to entities operating and supplying IT systems, entities providing accounting services) and persons cooperating with us who must have access to the data in order to perform their duties. When it is necessary, your personal data may also be transferred to banks, couriers, entities handling payment transactions as well as authorized state authorities, in particular tax offices.

 

IV. Your rights under the General Data Protection Regulation

You have the right to:

  1. request access to your personal data, rectification, erasure or limitation of processing, as well as data portability,
  2. if the basis for the processing of personal data is consent - you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal,
  3. if the basis for the processing of personal data is a legitimate interest - you have the right to object at any time to the processing of personal data for reasons related to your particular situation,
  4. lodge a complaint with the supervisory authority, i.e. President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.

You can exercise of your rights using the contact details provided at the beginning of the Privacy Policy.

 

V. Use of personal data to make automated decisions, including profiling

Your personal data will not be used to make automated decisions, including profiling.

 

VI. Changes to the Privacy Policy

The Privacy policy may change, about which you will be informed 7 days in advance.

Questions related to the Social Media Policy should be directed to: .

Data of last modification: 17 June 2021