Scope of this document: This Privacy Policy describes the processing of personal data of users of the Payroll 360 sp. z o.o. website. It does not cover the detailed rules governing the processing of employees’ personal data on behalf of clients as part of HR and payroll services; such processing should be governed by separate agreements and privacy notices.
This Privacy Policy sets out the rules for the collection, processing and protection of personal data of users of the Payroll 360 sp. z o.o. website available at www.payroll360.eu (the “Website”).
The Controller exercises particular care to protect users’ privacy and ensure the security of the personal data processed.
Personal data is processed in accordance with applicable laws, in particular:
This Privacy Policy applies to data collected through the Website. It does not replace separate privacy notices used in relations with clients, employees, job applicants or contractors.
The Controller of personal data collected through the Website is:
Payroll 360 sp. z o.o.
ul. Królowej Jadwigi 160
30-212 Kraków, Poland
Tax Identification Number (NIP): 6772377819
The Controller may be contacted:
The Controller has appointed a Data Protection Officer, who may be contacted by email at iod@payroll360.pl or in writing at the Controller’s registered office address, with the annotation “Data Protection Officer”.
Users’ personal data may be processed for the following purposes:
Handling enquiries submitted via the contact form, email or telephone
Legal basis: Article 6(1)(f) GDPR – the Controller’s legitimate interest in conducting correspondence and responding to enquiries
Preparing and presenting an offer for Payroll 360 services
Legal basis: Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract; alternatively, Article 6(1)(f) GDPR – the Controller’s legitimate interest
Taking steps prior to entering into a contract or performing a contract
Legal basis: Article 6(1)(b) GDPR
Compliance with obligations arising from applicable law
Legal basis: Article 6(1)(c) GDPR
Ensuring the security of the Website
Legal basis: Article 6(1)(f) GDPR – the Controller’s legitimate interest in protecting the Website and its IT systems
Conducting statistical analyses concerning the operation of the Website, where appropriate tools are used
Legal basis: Article 6(1)(a) GDPR – the user’s consent, where required by law
Establishing, pursuing or defending against legal claims
Legal basis: Article 6(1)(f) GDPR – the Controller’s legitimate interest
The Controller does not sell users’ personal data.
The Controller may process, in particular, the following categories of data:
The scope of the data processed depends on the purpose for which the user contacts the Controller. Providing data is voluntary; however, it may be necessary to respond to an enquiry, prepare an offer or provide services.
Personal data will be processed for the period necessary to fulfil the purpose for which it was collected, and thereafter for the period required by applicable law or necessary to secure potential claims.
In particular:
Personal data may be disclosed only to entities authorised under applicable law or to entities providing services to the Controller, including in particular:
Entities processing data on behalf of the Controller act under appropriate agreements and solely in accordance with the Controller’s instructions, unless applicable law provides otherwise.
As a rule, personal data is not transferred outside the European Economic Area. If the use of specific technological tools requires such a transfer, it will be carried out in accordance with GDPR requirements and subject to appropriate safeguards.
Each data subject has the right to:
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise their rights, users may contact the Controller at biuro@payroll360.pl or the Data Protection Officer at iod@payroll360.pl.
A data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of their personal data infringes applicable law.
The Website uses cookies and similar technologies. Cookies are small files stored on the user’s device that enable the Website to function properly or support the use of its features.
Cookies may be used for the following purposes:
The following categories of cookies may be used on the Website:
Essential – Required for the proper operation of the Website. They may be used without separate user consent where they are necessary to provide a service requested by the user.
Functional – Enable the Website to remember user settings or preferences. They may require consent if they are not technically necessary.
Analytical – Help analyse how the Website is used and improve its operation. They are used after obtaining the user’s consent where such consent is required by law.
Marketing – May be used only where the Controller uses appropriate marketing tools and has obtained the required user consent.
Cookies other than essential cookies are used after obtaining the user’s consent where consent is required by applicable law. Users may change their cookie settings at any time through their web browser settings or the consent management mechanisms available on the Website.
Restricting the use of cookies may affect the operation of certain Website features.
The Controller does not make decisions concerning users based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.
If the Controller uses tools enabling marketing profiling, such profiling will be carried out only in accordance with applicable law and after obtaining any consent required from users.
The Controller reserves the right to amend this Privacy Policy in the event of:
The current version of the Privacy Policy is published at www.payroll360.eu.
Matters not regulated by this Privacy Policy are governed by the GDPR and applicable provisions of Polish law.
