Privacy Policy and personal data processing

Sycope, the owner of the www.sycope.com service, makes all possible efforts to protect your privacy. This Privacy Policy is effective from May 25, 2018 for the purpose of transparent, lawful and secure processing of personal data.
The functioning of the Privacy Policy is based on the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard of the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), which defines what data and on what terms they are processed.

Personal Data Controller

The controller of personal data is Sycope with the registered office in Warsaw, Goraszewska 19 and Dublin, 8-9 Marino Mart Farview Clontarf, Dublin 3. If you have any questions regarding the processing of your personal data and your rights, please contact us at contact@sycope.com

Sycope, purposes and legal basis for the processing of personal data

The Service performs the functions of obtaining information about users and their behavior as follows:

• Through the information voluntarily entered in the forms.
• By storing on end devices on end devices “cookies”
• By collecting web server logs by the hosting operator www.webflow.com

Information in forms

The Service collects information provided voluntarily by the user.
The service may also store information about connection parameters (time stamp, IP address). The data provided in the form is processed for the purpose resulting from the function of a form, e.g. for registration for a seminar or for making a webinar recording available.

Registration for free seminars and workshops

Data scope: In order to register for organized seminars and workshops, we process personal data submitted under the contact form: Name, e-mail address, telephone number, company name, position
Legal basis: Processing is necessary to take action at the request of the data subject.

Download recordings from archival webinars

Scope of data: In order to get a link of the recorded webinar, we process the data sent under the contact form: Name, e-mail address, telephone number, company name
Legal basis: Processing is necessary to take action at the request of the data subject.
In the case of personal data obtained in other way than by the chaosgears.com website (by telephone, e-mail, etc.), we process it only for the purpose for which it was made available and for the time necessary for this purpose. In case of a planned change in the purpose of the processing, we always ask the owner of the personal data for consent and inform about the changing conditions of data processing.

Cookies

We use cookies in order of properly functioning of the website and to adapt the content of the website to the user’s preferences and optimize the usage of the website.

These files allow us to recognize the basic parameters of the device (such as: device type, screen resolution, country from which it comes to enter) and thus display the website adapted to your needs accordingly.
Cookies are also used to collect general and anonymous statistical data through analytical and marketing tools:

1. Google Analytics (cookie administrator: Google Inc. based in the USA),

2. Google AdWords (cookie administrator: Google Ireland Limited, based in Ireland).

If you do not agree to the use this type of tool, you can change your cookie settings yourself and at any time, specifying the conditions for their storage and access by cookies to your devices. This change can be made in your web browser settings. This will allow you automatically block cookies, or you will be informed about the placement of cookies on your device any time. Also in your browser there is an option that allows you to delete cookies at any time. When you decide to restrict using of cookies, it is possible that this will affect some of the functionalities available on our website.
Information about the possibilities and how cookies are handled you can find in your browser.

Transfer of personal data

Your personal data is transferred to entities providing services for us:

• hosting – Webflow Inc. company registered in San Francisco 398 11th Street, 2nd Floor, CA 94103
• sending emails and contact base management– HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA
• for webinars – Cisco company registered 2710 Gateway Oaks Drive, Suite 150N Sacramento CA 95833, USA

These entities process your Data only on our order.

Location

The suppliers which services we are using, based in countries of the European Economic Area and outside the EEA, and in this case we pay special attention to our suppliers to provide guarantees of a high level of protection of personal data. These guarantees arise from an obligation to use standard contractual clauses adopted by the Commission (EU) or to participate in the EU-US Privacy Shield Program.
The Controller stores your personal data for a period of no longer than is required to prepare an offer, to respond to an inquiry, to sell the service. Data can be deleted at any time.

Server logs

Information about some user behaviors is subject to server-tier logon. This data is used solely for the purpose of administering the service and to ensure the most efficient operation of the hosting services provided.
The resources viewed are identified by URLs. In addition, the following may be recorded:

1. time of arrival of the request,
2. time of sending a response,
3. the name of the client station – identification made by HTTP
protocol,
4. information about errors that occurred during the execution of http transactions,
5. URL of the page previously visited by the user (referrer link) – in case the transition to the Service occurred through a link,
6. information about the user’s browser,
7. Information about the IP address.

The above data is not associated with specific people browsing the pages and is used only for the purpose of administering the server.

Rights

In connection with processing by Sycope your data, you have the following rights:

1. access to your personal data,
2. rectification of personal data,
3. deletion of personal data,
4. restriction of the processing of personal data,
5. transfer of personal data,
6. object to the processing of personal data,
7. withdrawal of previously expressed consent to the processing of personal data.

To exercise your rights, please contact us at contact@sycope.com
If we receive a request for the exercise of the rights mentioned above, we will respond immediately, no later than one month after receipt of the rights mentioned above. Due to the complex nature of the request or the number of requests, if we are unable to comply with the requests within one month, we will fulfill them, upon prior notice, within the next two months.

Security of Personal Data

Sycope as a Controller of Personal Data undertake to:
1. safeguard personal data:
– before it is made available to unauthorized persons,
– removal by an unauthorized person
– changes, damage and destruction,
2. admission to the processing of personal data only of persons having authorized issued by us,
3. to ensure control over the correctness of the processing of personal data,
4. keeping records of persons authorized to the processing of personal data, exercise special care so that persons authorized to process such data keep it secret, even after the termination of cooperation, 5. keeping legally required documentation describing the processing of the entrusted personal data and technical and organizational measures ensuring the protection of the processing of such data,
6. security that the devices and information and telecommunications systems used in Sycope for the processing of personal data, comply with the requirements of the Regulation of the Ministry of Interior and Administration of 29 April 2004 on the documentation of the personal data processed and the technical and organisational conditions to which the devices and systems should correspond.

Information for persons designated for contact or cooperation by the company’s contractors

In accordance with Article 14 of the General Data Protection Regulation (hereinafter “RODO”), we inform you that:1. The administrator of your personal data is SYCOPE S.A., 19 Goraszewska St., 02-910 Warsaw, tel. 48695444803, e-mail: dane.osobowe@sycope.com2. Your personal data was obtained by the Administrator from its contractor in connection with the connection with the performance of the contract, and this will include, in particular, your identification and contact information.3. your personal data will be processed in order to ensure the proper performance of the contract, based on Article 6(1)(f) of the RODO i.e. when it is necessary for the purposes arising from the legitimate interests of the Administrator.4. Recipients of your personal data may be:
a) entities entitled to receive data under the law;
b) other entities that process personal data under relevant contracts, including IT, accounting, legal and auditing companies;
c) companies, bodies and institutions to which the administrator will address correspondence or inquiries on behalf of the parties;
d) entities with whom the controller cooperates and to whom it shares personal data acting for a purpose arising from the legitimate interest of the controller or a third party.5. your personal data will be kept for the period necessary for the purposes of processing, i.e. until the statute of limitations for claims arising from the contract referred to in point. 3.6. In connection with the processing of your personal data, you have the following rights:
a) the right to access your data and to receive a copy of it in accordance with Article 15 of the RODO;
b) the right to rectify (amend) your data in accordance with Article 16 of the RODO;
c) the right to restrict data processing in accordance with Article 18 of the RODO;
d) the right to object in accordance with Article 21 of the RODO.7. If you become aware of unlawful processing of your personal data, you have the right to lodge a complaint to the supervisory authority competent in matters of personal data protection, i.e. the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.8. In case of personal appearance at the administrator’s office, I kindly inform you that the company’s premises are covered by a video surveillance system. The monitoring is used to protect property and ensure safety, including of people working there. The source of the data is the recordings from the cameras of the monitoring system. Recipients of recorded personal data will be only entities authorized to obtain personal data under the law. The monitoring data will be processed for a period of up to 3 months. For more information on video surveillance, please contact the company’s secretariat.9. If we intend to transfer your data to a third country or international organization, you will be informed by a separate communication.

Information for the company’s clients and customers

Acting on the basis of Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter “RODO”, I inform you that:1. The administrator of the personal data is SYCOPE S.A., 19 Goraszewska St., 02-910 Warsaw, tel. 48695444803, e-mail: dane.osobowe@sycope.com2. Personal data may be processed for:
a) conclusion and performance of obligations under the contract,
b) To carry out obligations under the law,
c) implementation of marketing activities,
d) customer satisfaction surveys,
e) Ensure the security of property and employees (including through video surveillance),
f) communication with contractors,
g) To establish, assert or defend claims,
h) conducting educational activities.3. The legal basis for data processing is:
a) Entering into and performing a contract with the administrator (Article 6(1)(b) of the DPA),
b) Performing legal obligations (Article 6(1)(c) of the RODO),
c) Consent, to the extent that the data are not necessary for the conclusion and performance of a contract with the controller, in particular for marketing activities (Article 6(1)(a) RODO),
d) The administrator’s legitimate interest in marketing activities, customer satisfaction surveys, ensuring the safety of property and employees, establishing, asserting or defending claims, and communicating with contractors (Article 6(1)(f) of the DPA);4. Recipients of personal data may be:
a) Entities to which the controller will outsource services related to the processing of personal data, such as company associates, implementers of IT, accounting, legal, auditing services, as well as companies, bodies and institutions to which the controller will direct correspondence or inquiries on behalf of the parties,
b) Authorities authorized by law, including courts and other public administration bodies;
c) entities with whom the controller cooperates and to whom it shares personal data acting for a purpose arising from the legitimate interest of the controller or a third party.5. Personal data will be stored for the period required by law and until the termination of the contract with the controller and the statute of limitations for claims arising therefrom and in the case of data processed on the basis of consent until such consent is withdrawn; data processed as part of the monitoring system will be kept for up to 3 months after recording, and in the case of a customer satisfaction survey until the party objects;6. If the processing is based on consent, the party has the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;7. The party has the right of access to the content of its data and the right to rectification, erasure, restriction of processing, the right to data portability and the right to object – exclusively under the terms of the RODO;8. A party has the right to lodge a complaint with the President of the Office for Personal Data Protection if it considers that the processing of personal data violates the provisions of the RODO;9. Providing personal data is voluntary, but to the extent that data processing is necessary for the purpose of entering into and performing a contract with the administrator, the consequence of failing to provide such data will be the inability to enter into a contract with the administrator;10. In case of intention to transfer data to a third country or international organization, information about this intention will be provided by a separate communication.