Website Privacy Policy

The privacy of our website users is very important to us. This Privacy Policy outlines how Kromtix collects, processes, discloses, and uses your personal information.

Kromtix, as the Data Controller, ensures that:

1. Data shall always be collected for specified and clearly defined purposes and to the extent necessary to achieve those purposes.
2. Personal data shall be kept for as long as necessary to achieve these purposes.
3. Personal data shall be collected lawfully and fairly at all times, where appropriate, with the knowledge or consent of the data subject.
4. Personal data is protected with reasonable safeguards against loss or theft, as well as against unauthorized access, disclosure, copying, use, or modification.
5. Our clients are provided with information about the rules and practices relating to personal data management.

Article 1. Privacy and Processing Information

1. The Data Controller of personal data is Kromtix with its registered office at [Insert Address]. You can contact us via email at info@kromtix.com.
2. Kromtix, as a personal data Controller (hereinafter referred to as “Controller”), pays great attention to the protection of privacy and confidentiality of personal data of users who provide their data through forms available on our website, the rules of which are specified in the Terms of Use.
3. The Data Protection Officer (DPO) of Kromtix is [Insert Name], who can be contacted via email at info@kromtix.com.
4. The Controller shall, with due diligence, select and apply appropriate technical and organizational measures to protect personal data being processed. Full access to databases is granted only to persons authorized by the Controller.
5. The Controller protects personal data against unauthorized access and processing in violation of applicable regulations.
6. Visitors to kromtix.com can browse through subpages of the website without providing personal data.

Article 2. Grounds for Processing Personal Data

Personal data shall be processed by the Controller in accordance with the law, particularly the General Data Protection Regulation (GDPR).

1. Personal data are processed to:

   a. Answer questions addressed to the Controller through contact forms available on the kromtix.com website, including interactive windows available on each subpage of the website (according to Article 6.1.f of the GDPR);

   b. Dispatch marketing content, including information about planned events and workshops, business information, newsletters, or eBooks, based on consent (Article 6(1)(a) of the GDPR);

   c. Recruitment, including:

   • Establishing and maintaining contact with the Candidate in relation to the application documents submitted, pursuant to Article 6(1)(b) of the GDPR.
   • Carrying out and resolving the recruitment process based on Article 6(1)(b) of the GDPR, i.e., taking necessary actions at the request of the data subject before concluding the contract – in the scope of data indicated in Article 221 §1 of the Labor Code and on the basis of the Candidate’s consent, i.e., Article 6(1)(a) of the GDPR and in the scope of data beyond the catalog indicated in Article 221 §1 of the Labor Code.
   • Considering the Candidate’s application documents in future recruitment processes based on their voluntary consent (Article 6(1)(a) of the GDPR).

   d. Establishing contact to prepare an offer of the Controller’s services and/or products tailored to the Customer’s needs (Article 6.1.b of the GDPR).

   e. Adapting and developing the website’s functionalities, including its structure and content, creating aggregated statistics, and preserving the security and quality of services provided by the service – based on the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

   f. Investigating or safeguarding against possible claims (according to Article 6(1)(f) of the GDPR).

   g. Conducting statistical analysis of information about participants of our events (according to Article 6 (1) (f) of the GDPR) where the legitimate purpose is to have information about the statistics which allows us to improve our activities.

2. Providing personal data is voluntary. However, failure to do so may prevent, depending on the specific case, the conclusion of a contract, use of selected services, or receipt of marketing content.
3. Users should not provide the Controller with personal data of third parties. In case of transfer of third parties’ data, the User is obliged to sign a declaration that they have the consent of third parties to transfer the data to the Controller.

Article 3. Scope of Processing Personal Data

The Controller processes personal data only to the extent necessary to achieve a strictly defined purpose, in accordance with the information indicated below:

1. Sending a message through the contact form, including email address and telephone number, and other information voluntarily provided by the User.
2. Sending newsletters, commercial and business information, and e-books, including name, surname, email address, and telephone number.
3. Recruitment, including the email address and information contained in the application form.
4. Preparation of offers, including name, surname, email address, telephone number, and other information contained in the message sent through the contact form.
5. Customization and development of website functionality, including IP addresses collected during Internet connections for technical purposes related to server administration.

The Controller does not make automated decisions based on the data collected about users.

Article 4. Data Retention Period

Personal data shall be kept only for the time necessary to achieve the specific purpose for which it was transmitted, as set out below:

1. Personal data collected for answering questions via the contact form will be processed no longer than 12 months after the last contact.
2. Data collected for sending marketing content, newsletters, commercial and business information, and e-books will be processed until the User withdraws consent.
3. Personal data collected for recruitment purposes will be processed for the duration of the recruitment process, and if the Candidate agrees to leave the data for future recruitment processes, they will be stored until the withdrawal of consent, but not longer than 24 months from the date of its granting.
4. Personal data collected for preparing a personalized offer will be processed for the duration of the offer negotiation, and after its completion for 12 months from the date of the last contact or will feed the Controller’s customer database to execute the concluded agreement.

Article 5. Recipients of Personal Data

1. Users’ data may be made available to entities authorized to receive data in accordance with applicable laws, including relevant judicial authorities.
2. Personal data may be transferred to entities cooperating with the Controller based on appropriate agreements, including selected marketing agencies and partners providing technical services (development and maintenance of IT systems and websites)

Article 6. Cookie Policy

Kromtix collects data in logs, which are used only for service administration purposes, and these data are not transferred to third parties.

In accordance with established practice, we store HTTP queries addressed to our server. The resources viewed are identified by their URLs. The information collected in the logs includes:

• • The public IP address of the computer from which the query came.
  • User station name – identification implemented by the HTTP protocol, if possible.
  • User name given during the authorization process.
  • Time for the inquiry to arrive.
  • First line of the HTTP request.
  • The HTTP response code.
  • The number of bytes sent by the server.
  • The URL of the page previously visited by the user, in case the Company’s website was accessed via a link.
  • Information about your browser.
  • Information about errors that occurred in the execution of HTTP transactions.

• This data is not connected to specific individuals browsing the Controller’s pages.

  To ensure the highest quality of service, the Controller periodically analyzes log files to determine which pages are visited most often, which web browsers are used, and whether the site’s structure contains any errors. The collected logs are stored for 24 months as auxiliary material used to administer the service. Based on cookie files, statistics may be generated that do not contain any identifying features of the persons visiting kromtix.com.

• The following types of cookies are used on the website:

  a. Security cookies: Used to detect misuse of authentication and ensure the security of the website.

  b. Performance cookies: Enable the collection of information on how users interact with the website to improve its performance.

  c. Functional cookies: Allow the website to remember the settings selected by the user and personalize the user’s interface, such as the selected language or region.

  d. Advertising cookies: Enable the delivery of advertising content tailored to users’ interests.