Home | GDPR privacy notice
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, biuro@aplusv.pl, tel. +48 71 715 62 20
The data will be retained until the recruitment process is completed and then for a further 3 months so that we can contact you if, during that additional period, we decide to employ you after all. If you consent to participation in future recruitment processes, the data will be retained for 24 months after the recruitment process is completed.
If the processing may give rise to claims relating to possible discrimination in employment, your data will be retained until the limitation period for such claims expires. In such a case, the retention period is 3 years in accordance with Article 291 § 1 of the Polish Labour Code.
If you are employed, we will continue to process your data in accordance with the retention periods applicable to employees/contractors.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective and justified objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw that consent before the end of the basic retention period, the data will be processed for that specific purpose for a shorter period, i.e. until the consent is withdrawn.
We process the data that you provide to us yourself, i.e. data contained in your application documents. This includes, in particular, your contact details and information about your qualifications and experience.
If you consent and provide a recording as part of the recruitment process, we will also process your image and voice.
During recruitment, we may also collect additional data, e.g. information provided orally during a job interview and data concerning the results of tests carried out.
We obtain the data directly from you.
Where we use recruitment agencies that source candidates and then provide us with their data, those agencies are the source of the data. If you were referred for employment under a referral programme, the source of the data was the person who referred you.
Providing certain data is a statutory obligation of a candidate for an employment contract, in particular the data referred to in Article 22(1) § 1 of the Polish Labour Code (first name(s) and surname; date of birth; contact details specified by you; education; professional qualifications; previous employment history).
Providing certain data may also be a condition for entering into an employment/cooperation agreement.
If you do not provide data that you are legally or contractually required to provide, we will not be able to conduct the recruitment process and, consequently, employ you.
Recipients are external entities to which we disclose your data:
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, tel. +48 71 715 62 20
The data will be retained no longer than the candidate’s application documents are retained, i.e. until completion of the recruitment process for the candidate for whom you are providing a reference. If consent has been given for participation in future recruitment processes, the data will be retained until that consent is withdrawn, but in any event for no longer than two years.
If claims may arise in connection with the processing, the data will be retained until the limitation period for such claims expires.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
As a standard, these data include: first name, surname, position, business e-mail address or business telephone number, and place of employment.
We obtained your data from the candidate whom we are recruiting.
The provision of your data by the candidate whom we are recruiting is neither a statutory obligation nor a condition for entering into a contract.
If the candidate does not provide us with your data, we will not be able to confirm or obtain the reference you have provided for that candidate.
Recipients are external entities to which we disclose your data:
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, tel. +48 71 715 62 20.
The data will be retained for 10 years from the end of the calendar year in which the employment relationship ended/was terminated, where it commenced on or after 1 January 2019.
The data will be retained for 50 years from the end of the calendar year in which the employment relationship ended/was terminated, where it commenced before 1 January 2019.
With regard to settlement documents submitted to ZUS (the Polish Social Insurance Institution), for 5 years from the date on which those documents are submitted to the relevant ZUS organisational unit.
For persons engaged under civil-law contracts, the data will be retained until the limitation period for claims arising from the contract expires or until statutory data-retention obligations expire, in particular obligations concerning the retention of accounting documents. As a rule, the maximum retention period is 6 years.
Data originating from recordings or photographs made during the Controller’s events (recorded image) will be processed for the period necessary to achieve the purposes of processing, i.e. documenting events and promoting and providing information about the Controller’s activities, but no longer than until the data cease to be current or useful for those purposes (the Controller periodically reviews whether continued processing remains justified). Where published on the Controller’s website or social media, the data will be processed until removed from those communication channels, unless an objection to such processing is submitted earlier.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw that consent before the end of the basic retention period, the data will be processed for that specific purpose for a shorter period, i.e. until the consent is withdrawn.
At the time of employment/engagement, we process the data that you provide to us yourself. These are data necessary to enter into an employment contract or civil-law contract and, if you are employed under an employment contract, also data connected with the performance of various employer obligations, such as data concerning members of your family, information about disability or data concerning your fitness for work.
During the term of an employment contract or civil-law contract, we obtain various new data about you. These may include information about training you have completed, your use of employee benefits, your image (e.g. obtained in connection with the production of a promotional video), data concerning your activity in resources made available to you (logs), geolocation data (in the context of company vehicles) and various other data, the scope of which may differ at different stages of the employment contract or civil-law contract.
As a standard, we obtain data directly from you.
In exceptional situations, we obtain such data from sources other than you. One example is a bailiff’s notice ordering attachment of your remuneration. Another example is when we ask our clients about their satisfaction with our service; in that case, we receive your personal data from them in the form of their opinion about you.
Providing certain data is a statutory obligation of an employee employed under an employment contract, in particular the data referred to in Article 22(1) of the Polish Labour Code.
Providing certain data may also be a condition for entering into an employment contract or civil-law contract.
If you do not provide data that you are legally or contractually required to provide, we will not be able to employ/engage you or exercise your rights / fulfil our obligations arising from specific legislation.
Recipients are external entities to which we disclose your data:
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, biuro@aplusv.pl, tel. +48 71 715 62 20
The data will be retained until the Controller settles accounts with the referring person and thereafter until any claims arising from the referral programme become time-barred.
Where generally applicable law directly specifies a data-retention period, specific data will be processed for the period prescribed by law, e.g. accounting/tax data connected with a reward paid to the referring person.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit a justified objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
Referred person: CV data processed in a separate recruitment process, information about the recruitment outcome, and information identifying the person who referred the candidate.
Referring person: first name, surname, position, information identifying the person referred, information about the referral reward paid, and bank account number.
We obtain the data from the job applicant (the referred person) when they submit application documents on our website.
Providing the data is neither a statutory requirement nor a condition for entering into a contract.
If you do not provide us with your data, we will not be able to implement the provisions of the referral programme.
Recipients are external entities to which we disclose your data:
– entities processing personal data on the Controller’s instructions pursuant to concluded agreements, including providers of IT systems and services, suppliers providing technical and maintenance services for IT systems used for processing, archiving and document destruction, and providers of advisory, accounting and HR services,
– law firms,
– entities providing payment services (banks and payment institutions, for the purpose of making payments to the referring person),
– other companies within the group.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, tel. +48 71 715 62 20.
Informing the person designated by an employee about an accident suffered by that employee (Article 6(1)(f) GDPR).
The data will be processed for the duration of the employment contract of the employee who designated you as an emergency contact.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
First name, surname and telephone number.
We obtain your data from our employee.
Providing the data is neither a statutory obligation nor a condition for entering into a contract.
Failure to provide the data will prevent us from informing you about an accident at work involving our employee.
Recipients are external entities to which we disclose your data:
– entities that provide us with IT tools used to store your data or entities that have access to your data when carrying out maintenance work on IT systems.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, tel. +48 71 715 62 20.
Compliance with the Controller’s legal obligation to collect information concerning an accident from witnesses to the event and to prepare an accident report (Article 6(1)(c) GDPR in conjunction with the Polish Labour Code).
10 years (the employer is required to retain the report establishing the circumstances and causes of an accident at work together with the remaining post-accident documentation for 10 years).
First name, surname and telephone number.
As a standard, we obtain your data directly from you. Your data may also be obtained from the person injured in the accident or from another witness.
Providing data by a witness to an accident at work is neither a statutory obligation nor a condition for entering into a contract.
Failure to provide the data will prevent us from obtaining your statement concerning the accident at work involving our employee.
Recipients are external entities to which we disclose your data:
– public authorities or other entities authorised under the law, where necessary to comply with legal obligations,
– entities that provide us with IT tools used to store your data or entities that have access to your data when carrying out maintenance work on IT systems,
– entities providing HR or legal services,
– companies disposing of or archiving documents and other media,
– courier and postal service providers.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, tel. +48 71 715 62 20.
Personal data and other information contained in the internal reporting register are retained by the Controller for 3 years after the end of the calendar year in which follow-up actions were completed, or after the completion of proceedings initiated by those actions.
Personal data that are irrelevant to the examination of a report are not collected and, if collected accidentally, are deleted without undue delay. Such personal data are deleted within 14 days of determining that they are irrelevant to the matter.
If claims may arise in connection with the processing, the data may be processed until the claims pursued are finally satisfied or until the applicable limitation period expires.
First name, surname, position and, where applicable, information concerning the whistleblower’s involvement in the reported breach/actions taken by the whistleblower.
We obtain your data from you.
The obligation to provide data by a person reporting a breach of law, or the right to make such a report anonymously, is governed by the Internal Reporting Procedure.
The Internal Reporting Procedure provides that anonymous reports will be examined. This means that even if you do not provide us with your data, your report will be verified in accordance with the adopted procedure.
The Controller does not intend to disclose personal data processed under the breach-reporting procedure to recipients within the meaning of Article 4(9) GDPR, except in cases specified by applicable law.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Your data processed in connection with the examination of a breach report will not be subject to automated decision-making, including profiling.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335, tel. +48 71 715 62 20.
Personal data and other information contained in the internal reporting register are retained by the Controller for no longer than 3 years after the end of the calendar year in which follow-up actions were completed, or after completion of proceedings initiated by those actions.
Personal data that are irrelevant to the examination of a report are not collected and, if collected accidentally, are deleted without undue delay.
Such personal data are deleted within 14 days of determining that they are irrelevant to the matter.
If claims may arise in connection with the processing, the data may be processed until the claims pursued are finally satisfied or until the applicable limitation period expires.
Person concerned by the report: first name, surname, position and the circumstances of the breach that the person is alleged to have committed.
Witness: first name, surname and, where applicable, information concerning the witness’s involvement in the reported breach/actions taken by the witness.
Your data may be disclosed only to entities authorised to receive them under applicable law and to entities to which the Controller has entrusted data processing under appropriate agreements, such as providers of whistleblowing systems, e-mail services and data-storage services.
Data may be disclosed to unauthorised persons only with your explicit consent.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
More information is available on the authority’s website.
Your data processed in connection with the examination of a breach report will not be subject to automated decision-making, including profiling.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335
Personal data will be retained until the limitation periods for claims arising from the contract with the client have expired. If no cooperation is established, your data will be deleted without undue delay unless their retention is justified by the establishment, pursuit or defence of claims, in which case the data will be retained until such claims become time-barred.
Certain data will also be retained until statutory data-retention obligations expire, in particular obligations concerning accounting documents. If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw that consent before the end of the basic retention period, the data will be processed for that specific purpose for a shorter period, i.e. until the consent is withdrawn.
Our client (a party to the contract) may be a natural person or an organisation, e.g. a commercial company. In the latter case, we process the personal data of persons acting on behalf of the organisation, e.g. its management board president, an authorised representative or contact persons responsible for performance of the contract.
Before entering into a contract with a client, we obtain the data necessary to present an offer. These are usually basic contact details: first name and surname, e-mail address and telephone number. In the case of clients who are natural persons, before entering into the contract we obtain additional data necessary for its conclusion, e.g. PESEL number or residential address, depending on the product/service we sell. Where a written contract is concluded by an authorised representative, we also process the PESEL number or identity-card number. Where cooperation takes place through an IT system, we also process the login, password and cooperation history.
During the term of the contract with the client, we obtain or process further data, such as information about completed transactions or, more generally, the history of cooperation, including satisfaction survey results.
Note: if, in connection with using our services/purchasing products offered by us, you have registered an account on our website, please remember that such an account is a separate service and information on the processing of your data in connection with that service can be found in another section of this Policy.
As a standard, we obtain data directly from you.
Your personal data may also be obtained from another source, e.g. from our client or potential client, if you are their employee or representative. We sometimes obtain personal data from publicly available sources, e.g. the client’s website or business intelligence databases, where we wish to verify the client before establishing cooperation.
Providing certain data is necessary to enter into and subsequently perform a contract.
Please remember that a contract may be concluded in various ways, e.g. by placing an order in an online store.
If you do not provide data that are required in order to enter into a contract, the contract cannot be concluded.
Recipients are external entities to which we disclose your data:
– public authorities or other entities authorised under the law, where necessary to comply with legal obligations,
– providers of external ICT systems that provide support and IT solutions,
– entities auditing our activities or appraisers/experts,
– entities providing accounting, advisory or legal services,
– companies disposing of or archiving documents and other media,
– courier and postal service providers,
– the organisation’s subcontractors or suppliers,
– banks and other financial and payment institutions,
– marketing agencies,
– companies within the Controller’s capital group.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335.
Personal data will be retained until the limitation periods for claims arising from the contract with the contractor or from applicable law have expired, whichever period is longer.
If no cooperation is established, your data will be deleted without undue delay unless their retention is justified by the establishment, pursuit or defence of claims, in which case the data will be retained until such claims become time-barred.
Certain data will also be retained until statutory data-retention obligations expire, in particular obligations concerning accounting documents.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
Our contractor (a party to the contract) may be a natural person or an organisation, e.g. a commercial company. In the latter case, we process the personal data of persons acting on behalf of the organisation, e.g. its management board president, an authorised representative or contact persons responsible for performance of the contract.
Before entering into a contract with a contractor, we obtain the data necessary to commence negotiations concerning the terms of cooperation. These are usually basic contact details: first name and surname, e-mail address and telephone number. In the case of contractors who are natural persons, before entering into the contract we obtain additional data necessary for its conclusion, e.g. PESEL number or residential address.
Where a written contract is concluded by an authorised representative, we also process the PESEL number or identity-card number. Where cooperation takes place through an IT system, we also process the login, password and cooperation history.
During the term of the contract with the contractor, we obtain or process further data, such as information about invoices issued by the contractor or, more generally, the history of cooperation.
As a standard, we obtain data directly from you.
Your personal data may also be obtained from another source, e.g. from our contractor, a company, if you are its employee or representative. We sometimes obtain personal data from publicly available sources, e.g. the contractor’s website or business intelligence databases, where we wish to verify the contractor before establishing cooperation.
Providing certain data is necessary to enter into and subsequently perform a contract.
If you do not provide data that are required to enter into or perform a contract, the contract cannot be concluded or properly performed.
Recipients are external entities to which we disclose your data:
– public authorities or other entities authorised under the law, where necessary to comply with legal obligations,
– providers of external ICT systems that provide support and IT solutions,
– entities auditing our activities or appraisers/experts,
– entities providing accounting, legal advisory or debt-collection services,
– companies disposing of or archiving documents and other media,
– courier and postal service providers,
– banks and other financial and payment institutions,
– the organisation’s clients,
– other companies within the Controller’s capital group.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335.
– voice calls,
– e-mail messages,
– SMS messages,
– traditional mail.
NOTE: the use of certain forms of communication requires separate consent to use the relevant channel. This applies to e-mail messages, voice calls and SMS messages (Article 398 of the Polish Electronic Communications Law).
Personal data will be retained until you object to marketing activities or withdraw your consent, depending on the legal basis for sending the communications, i.e. until you indicate to us in any manner that you no longer wish to receive information about our activities/services.
If you raise specific claims in connection with marketing communications sent by us, the data will be retained until the limitation periods for those claims have expired.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted (unless the objection concerns processing for direct marketing purposes, in which case no justification for the objection is required).
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw that consent before the end of the basic retention period, the data will be processed for that specific purpose for a shorter period, i.e. until the consent is withdrawn.
As a standard, these are only the data necessary to send a marketing communication, i.e. first name and surname, e-mail address and telephone number and, in the case of communications sent by traditional mail, also the correspondence address.
As a standard, we obtain data directly from you.
Providing the data is neither a contractual nor a statutory requirement.
There are no consequences in view of the above.
Recipients are external entities to which we disclose your data:
– providers of external ICT systems that provide support and IT solutions,
– entities providing marketing communication distribution services on our behalf,
– entities within the Controller’s capital group,
– courier and postal service providers,
– companies disposing of or archiving documents and other media,
– subcontractors,
– companies providing advisory, audit or legal assistance services,
– companies within the Controller’s capital group.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
We do not make automated decisions on the basis of the data that we process when sending communications. However, we may make such decisions on the basis of data obtained in other processes, e.g. in the course of performing a contract concluded with you. We use your purchase history to build your profile and then, on that basis, decide which offers to send you. This is carried out pursuant to Article 22(2)(c) GDPR and requires your prior explicit consent.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335
NOTE: if you participate in events organised by the Controller that are recorded on film or photographed, participation is equivalent to consent to the recording and free use and/or dissemination of your image, voice and statements in promotional and marketing materials without time or territorial limitations. Such consent covers all forms of dissemination and making available, in particular publication on the Controller’s websites, on profiles operated by the Controller on social media platforms such as Facebook, X, Instagram, TikTok and LinkedIn, and in promotional materials printed or distributed electronically via the Internet. The image may be subject to various forms of electronic image processing, cropping and composition without any obligation to approve the final product, provided that it is not used in an offensive manner or in forms generally regarded as unethical. The image of an event participant may be combined with images of other participants and with content concerning the business activities of the Controller and/or its partners, including marketing and promotional content. The event participant waives, now and in the future, any claims, including financial claims, that could arise from publication of the image in the above materials.
Personal data will be retained until the event has ended and, if claims may arise in connection with the processing, until the limitation periods for those claims have expired.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw that consent before the end of the basic retention period, the data will be processed for that specific purpose for a shorter period, i.e. until the consent is withdrawn.
As a standard, these are only the data necessary to send an invitation and organise the event. Depending on the event, these may include: first name and surname, e-mail address, telephone number and, subsequently, your image recorded during the event.
As a standard, we obtain data directly from you.
Providing the data is neither a contractual nor a statutory requirement.
Failure to provide the data may result in you being unable to participate in the event.
Recipients are external entities to which we disclose your data:
– providers of external ICT systems that provide support and IT solutions,
– entities supporting the organisation and delivery of the event,
– entities within the Controller’s capital group,
– entities auditing our activities,
– entities providing accounting, debt-collection or legal services,
– security companies.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335
Personal data will be retained until publication of the promotional material has ended.
Where an agreement has been concluded with the person shown in promotional material (e.g. an agreement for posing), the data will also be processed until the limitation period for claims arising from that agreement has expired.
The data will be retained until the limitation periods for claims connected with your appearance in the Controller’s promotional material have expired.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit an effective objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw that consent before the end of the basic retention period, the data will be processed for that specific purpose for a shorter period, i.e. until the consent is withdrawn.
As a standard, this is your image. Depending on the promotional material, the data may also include your first name and surname and the function you perform, e.g. university lecturer.
As a standard, we obtain the data directly from you; alternatively, the source of personal data in the form of an image may be the author of the relevant material or an entity holding rights to it.
Providing the data is neither a contractual nor a statutory requirement, except where we actually enter into agreements with persons appearing in promotional materials, e.g. agreements for posing.
There are no consequences in view of the above, except in relation to data necessary to enter into a contract; in that case, without the data the contract cannot be concluded and, for example, remuneration for posing cannot be paid to you.
Recipients are external entities to which we disclose your data:
– entities that provide us with IT tools used to store your data or entities that have access to your data when carrying out maintenance work on IT systems,
– entities supporting us in the production of promotional materials, such as photography agencies or graphic designers carrying out professional processing of promotional materials,
– entities providing legal services where necessary, e.g. in connection with claims that have been raised.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and you submit a justified objection to the processing, the data will be processed for that specific purpose until your objection is accepted.
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw your consent, the data will be processed for that specific purpose until the consent is withdrawn.
As a standard, these include data such as your IP address and any information about you originating from cookies or the operation of other tracking technologies. This may include, for example, information about the device from which you connect to us (from which you access our website), information about the browser you use and information about what you clicked on our website. Detailed information about the types of data involved can be found in the section of the Policy dedicated to cookies.
As a standard, we obtain the data directly from you as a user of our website.
Providing the data is neither a contractual nor a statutory requirement.
What happens if you do not provide your data
There are no consequences in view of the above.
Recipients are external entities to which we disclose your data:
– public authorities or other entities authorised under the law, where necessary to comply with legal obligations,
– companies within the Controller’s capital group,
– the Controller’s subcontractors,
– our suppliers, including the service providers referred to below,
– entities that provide us with IT tools used to process your data, including entities that provide us with tracking technologies,
– marketing agencies.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335
We retain/process your data for as long as we hold them in the relevant social medium. We do not delete posts or comments posted under them (unless they breach the rules), or private messages sent to us.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and you submit a justified objection to the processing, the data will be processed for that specific purpose until your objection is accepted. In practice, this means that we will then delete your data, e.g. a private message sent by you.
As a standard, these are data that you make available to us simply by using our social media profile. We therefore process information showing that you have liked/followed our profile, as well as the content of comments and private messages that you leave or send.
This will often also include your first name and surname, although this depends on the username you use on the relevant social medium.
We may also infer certain statistical data from your activity on our social media, e.g. your interest in particular topics.
As a standard, we obtain data directly from you.
Providing the data is neither a contractual nor a statutory requirement.
There are no consequences in view of the above.
Recipients are external entities to which we disclose your data:
– entities that provide us with IT tools used to process your data, including entities that provide us with tracking technologies,
– marketing agencies, in particular where we commission them to manage our social media profiles.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Transfers of data outside the EEA may also result from the nature of social media services and their international character. Further information can be found in the privacy policies of the relevant social media services.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335.
The basic retention period for data contained in the visitor register is 1 year from the date on which the data are entered in the register.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit a justified objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
As a standard, these data include your first name and surname, the company you represent, the person (on behalf of the Controller) who invited you, the date and time of entry and the date and time of exit, and your signature. In some cases, they may also include the registration number of the vehicle in which you arrive.
As a standard, we obtain data directly from you.
However, certain information may be obtained earlier from the company sending you to us, e.g. your first name and surname and the registration number of the vehicle in which you will arrive.
Providing the data is neither a contractual nor a statutory requirement.
You may experience difficulties entering the Controller’s premises.
Recipients are external entities to which we disclose your data:
– public authorities or other entities authorised under the law, where necessary to comply with legal obligations,
– companies providing services or IT solutions,
– companies within the Controller’s capital group,
– the organisation’s subcontractors and suppliers,
– companies providing advisory, audit or legal assistance services.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
More information is available on the authority’s website.
Last updated: 30 June 2026
Controller and contact details: A+V Spółka z ograniczoną odpowiedzialnością, with its registered office in Wrocław, address: ul. Sucha 2, 50-086 Wrocław, KRS No. 0000481335
Personal data will be retained until the correspondence has ended, the enquiry has been answered / the request has been handled, and then for a further period of 1 year.
If you communicate with us for the purpose of receiving our offer, the data will be retained for 3 years from the date on which the offer is presented if the offer is not accepted. If you accept the offer, we will process your data for the period applicable to clients or contractors. More information about the processing of your data, including the retention period, can be found in the dedicated information notice.
Thereafter, the data will be processed until the limitation periods for claims have expired, where such claims arise from the matter about which you contact us.
If we process certain data on the basis of the Controller’s legitimate interest (Article 6(1)(f) GDPR) and, before the end of the basic retention period, you submit a justified objection to the processing, the data will be processed for that specific purpose for a shorter period, i.e. until your objection is accepted.
If we process certain data on the basis of your consent (Article 6(1)(a) GDPR) and you withdraw that consent before the end of the basic retention period, the data will be processed for that specific purpose for a shorter period, i.e. until the consent is withdrawn.
This depends on the matter about which you contact us and the data that you provide to us in connection with it. We are unable to define in advance a complete catalogue of the categories of data that may be processed.
As a standard, we obtain data directly from you.
However, a person submitting a request or enquiry to us may also provide data concerning third parties in connection with the subject matter of the case.
If you are such a third party, the source of your data for us is the person who contacts us directly in order to submit the request or enquiry.
Providing the data is voluntary and is neither a contractual nor a statutory requirement.
Failure to provide the data may prevent us from achieving the purposes of processing.
Recipients are external entities to which we disclose your data:
– public authorities or other entities authorised under the law, where necessary to comply with legal obligations,
– entities that provide us with IT tools used to store your data or entities that have access to your data when carrying out maintenance work on IT systems,
– companies disposing of or archiving documents and other media,
– courier and postal service providers,
– audit firms,
– companies providing advisory, audit or legal assistance services,
– subcontractors,
– companies within the Controller’s capital group.
Data may be transferred to the United States in connection with the Controller’s use of ICT services and IT infrastructure provided by entities established in that country, pursuant to the European Commission adequacy decision confirming an adequate level of personal data protection (Article 45 GDPR), dated 10 July 2023. A transfer may take place only to entities holding a valid certification of compliance with the relevant Privacy Framework.
Your data will not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
as well as
If you believe that we process your personal data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
More information is available on the authority’s website.
Last updated: 30 June 2026