Privacy Policy
Privacy Policy of EXCLUSIVE NETWORKS POLAND S.A.
Last update: 3 February 2022
This Privacy Policy is a part of Personal Data Security Policy of Exclusive Networks Poland S.A. , with its registered office in Kraków, ul. Zawiła 61, 30–390 Kraków. The Privacy Policy explains:
- What is Exclusive Networks Poland S.A.?
- What personal data is obtained by Exclusive Networks Poland S.A.?
- What is the purpose of processing personal data by Exclusive Networks Poland S.A. and making it available to third parties?
- What are the sources of personal data?
- How is personal data secured against the data processing breach?
- Obligations of entities contracting personal data of third parties to Exclusive Networks Poland S.A. and entities receiving such data from Exclusive Networks Poland S.A.,
- Rights of persons whose personal data are processed by Exclusive Networks Poland S.A.
What is Exclusive Networks Poland S.A.?
Exclusive Networks Poland S.A. is the leader in Value Added Distribution (VAD) in the field of ICT solutions. Exclusive Networks Poland S.A. provides comprehensive IT solutions which can be applied in all sectors of the economy. Pursuant to the provisions of the EU law, Exclusive Networks Poland S.A. is a controller of personal data. Contact details of Exclusive Networks Poland S.A. are given below:
Exclusive Networks Poland S.A.
ul. Zawiła 61
30-390 Kraków
tel. 12 25 25 555
fax 12 25 25 500
e-mail: contact@exclusive-networks.pl
In order to ensure the highest standards of personal data protection, Exclusive Networks Poland S.A. has appointed Data Protection Officer (hereinafter “DPO”) who is responsible for the implementation, supervision and auditing of Personal Data Security Policy and for the compliance of the processing of personal data by Exclusive Networks Poland S.A. with legal provisions. Should you have any questions or doubts, you can contact the DPO using the details below:
Exclusive Networks Poland S.A. Data Protection Officer – e-mail address for contact iod@exclusive-networks.pl
2. What personal data is collected by Exclusive Networks Poland S.A.?
The Polish IT market in which Exclusive Networks Poland S.A. is active is the market of IT goods and services, comprised of the following entities:
- IT manufacturers – usually global or Polish companies offering their products and services in several countries,
- IT distributors – global or local entrepreneurs,
- Resellers and integrators – usually local entrepreneurs
- Consulting companies – global or local companies,
- Buyers of products (goods and services) – end users.
Relations between the aforementioned entities may be of the following nature:
- consulting, including design of ready-made IT system solutions,
- delivery (sales) of equipment, software or service according to the specific preferences of the potential buyer,
- performing services of seeking or informing potential buyers about the offered goods, e.g. by the following means:
i. training,
ii. presentations,
iii. webinars,
vi. visits,
v. tests (so-called Proof of Concept),
- provision of professional services, e.g.:
i. auditing,
ii. design and selection of equipment for a given solution,
iii. configuration,
iv. installation,
v. integration,
vi. service maintenance,
vii. rental,
viii. disposal.
The subject of trade on the IT market in Poland is standardised software, hardware, as well as services provided by the seller or third parties acting on the seller’s behalf.
In the Polish IT market, there are market segments of buyers (end customers) classified as:
- institutional, the so-called B2B: i.e. organisations, companies and other public or private institutions – represented in the process by natural persons being their employees or providing services for their benefit under other legal relations, such as contract of mandate, self-employment or subcontracting,
- private, i.e. consumers, the so-called B2C, that is natural persons.
Exclusive Networks Poland S.A., by purchasing products directly from manufacturers, performs sales for both customer segments, exclusively through its commercial partners and telecommunications operators.
In connection with its activities, Exclusive Networks Poland S.A. has to process the data of the aforementioned entities and their employees, and in certain cases such data must be made available to such individual entities. Exclusive Networks Poland S.A. may collect some of the following information:
- first name, surname,
- phone number,
- e-mail address,
- company,
- job title,
- employer’s company,
- NIP [Tax Identification Number],
- PESEL [Personal Identification Number],
- mailing address,
- participation in special offers and training sessions organised by Exclusive Networks Poland S.A.
In addition, Exclusive Networks Poland S.A. obtains data which is not personal data, such as: IP address of the device used by a natural person in order to access the services of Exclusive Networks Poland S.A., technical information, including the information pertaining to internet and/or network connections, identifier of the VoIP device/ communicator, data pertaining to log-in activity, including date and time of the last log-in.
Exclusive Networks Poland S.A. also collects information related to the Customer by using cookies of which the Customer is informed while viewing the Exclusive Networks Poland S.A. website for the first time. (More about cookies you will find in our Cookies policy.)
In extraordinary cases, the scope of data processed may be broader, due to specific processing purposes, which the data subject will be informed about when collecting such data.
3. What is the purpose and legal basis for the processing of personal data by Exclusive Networks Poland S.A. and to whom the data may be transferred?
Personal data processed by Exclusive Networks Poland S.A. are mainly used for contact purposes as part of regular business activities constituting the subject of Exclusive Networks Poland S.A.’s activity.
Regular business activities of Exclusive Networks Poland S.A. include:
- sending commercial offer of Exclusive Networks Poland S.A.,
- pre-sales support (activities related to the preparation of solution relevant to the needs of the end user),
- contact for the purpose of performance of the contract for the delivery of equipment or provision of service,
- contact for the purpose of after-sales support,
- own marketing,
- processing arising from the generally applicable provisions of the law, including tax and customs law,
- making data available to the aforementioned third parties for the purpose of contract performance,
- investigation and enforcement of claims,
- providing technical and business knowledge (mailing, webinars, events, training).
Personal data is made available or entrusted for processing to the third parties only for the purpose of executing orders or contracts to which the employer of the data subject or the data subject is a party, or to take action at the request of the aforementioned prior to the conclusion of the contract, including obtaining special prices, after-sales support, performing warranties, providing updates and renewals.
Presentation of a competitive offer (including special manufacturer’s rebates) of Exclusive Networks Poland S.A. may require:
- provision of the buyer’s personal data (end customer or their employee) to the suppliers of Exclusive Networks Poland S.A. in order to verify the actual need for granting such a rebate,
- provision of the intermediary’s personal data (reseller or their employee) to the suppliers of Exclusive Networks Poland S.A. in order to verify the actual need for granting such a discount,
- provision of personal data of employees of the manufacturers to the intermediaries (resellers) or purchasers (end users) suppliers of Exclusive Networks Poland S.A. in order to verify the actual need for such a discount.
Furthermore, due to objective conditions of economic, legal or technical nature, Exclusive Networks Poland S.A. may be forced to disclose or to entrust personal data for processing to its suppliers in order to:
- obtain a special rebate,
- process an order,
- verify personal data in its trade control systems, the so-called WSK,
- verify personal data in the trade control systems of the manufacturers, the so-called Export Control,
- activate the product or service (e.g. maintenance) with the manufacturer,
- perform after-sales support.
Personal data may be transferred to the following categories of entities: manufacturers of products offered by Exclusive Networks Poland S.A., authorised distributors of these products, external authorised manufacturers’ service centres, spare parts warehouses, freight forwarders, professional carriers, postal operators, Exclusive Networks Group companies and other entities processing data on behalf of Exclusive Networks Poland S.A., e.g. providers of hosting, IT services, administrative, legal, consultancy, marketing and PR services.
Data may be transferred to contractors, cooperating entities and IT service providers located outside the European Economic Area, with the provision of legal safeguards (e.g. model contractual clauses for data protection approved by the European Commission) on the terms of Articles 44 – 49 of GDPR.
In addition, due to objective conditions of technical nature, Exclusive Networks Poland S.A. is forced to store the received personal data in order to:
- perform the services of remote configuration and technical support,
- remotely diagnose the product at the request of the buyer to verify their warranty claims, to secure them against exposure to unnecessary costs in the event of submission of unjustified claim,
- execute guarantee services, including:
i. assign the RMA number,
ii. track and collect the shipment,
iii. potentially establish contact with the sender (buyer or intermediary) to clarify any doubts,
iv. send return shipment.
In view of the above, Exclusive Networks Poland S.A. derives a legitimate interest to process personal data in accordance with the requirements of GDPR, and:
- undertakes not to expand the above-mentioned adopted criteria without prior consent of data owners,
- considers and respects the rights of data owners in accordance with the applicable legal standards, particularly in the following areas:
- data protection and restriction of access to such data only to authorised persons,
- transmission of data to third parties, particularly outside the EU,
- no profiling,
- no processing of sensitive data,
- use of pseudonymisation, wherever technically and economically justified and legally permitted,
- notification about obtained data in accordance with Article 14 point 3b of GDPR,
- assumes related liability, including liability concerning the potential leak of such data, as well as civil and administrative liability.
If Exclusive Networks Poland S.A. has to process personal data for any other purposes, a relevant consent shall always be obtained prior to the processing. Exclusive Networks Poland S.A. shall not make personal data available to third parties for marketing purposes.
4. What are the sources of personal data?
Exclusive Networks Poland S.A. may obtain personal data in the following manner:
- direct consents on the basis of the person’s registration for an event (training session, webinar, special offer) organised by Exclusive Networks Poland S.A. via an online form (event website),
- consents arising from the invitation sent automatically when adding the person to the CRM system functioning at Exclusive Networks Poland S.A.,
- consents arising from invitations sent by the CRM employee from the personal card level,
- independent registration of end users in the Exclusive Networks Poland S.A. systems by electronic means in order to obtain information about products offered by this company,
- independent registration of intermediaries in the Exclusive Networks Poland S.A. systems by electronic means in order to obtain information about products offered by this company,
- entrusting the data of employees of business partners of Exclusive Networks Poland S.A. provided on the basis of partnership agreements containing the provision on consent for the transmission of information about the products and commercial offer of Exclusive Networks Poland S.A.,
- entrusting personal data to Exclusive Networks Poland S.A. by third parties (the obligations of entities entrusting personal data to Exclusive Networks Poland S.A. are specified in point 6 below),
- personal meetings during which contact details are exchanged,
- digital marketing.
5. How is personal data secured against the violation related to its processing?
Personal data processed by Exclusive Networks Poland S.A. is stored at secure servers in European Economic Area. Exclusive Networks Poland S.A. has implemented appropriate technical and organisational measures in order to protect personal data against unauthorised or unlawful processing, including loss, destruction or damage. These measures include but are not limited to: access control systems, firewalls and antivirus programs, endpoint protection management, vulnerability scanning, appropriate backup policies. In case of personal data processed in paper form, data is stored in separate rooms to which only authorised persons have access, and if the data is processed in rooms to which more people have access, the data is stored in locked cabinets the keys to which are only in possession of persons authorised to process data.
Depending on the purpose of processing, personal data is stored only for a period of time necessary to meet the purposes specified in this Privacy Policy. In some cases, the provisions of the law require longer period of personal data retention than the period arising from the contracts or general purposes for which the data has been entrusted for processing, e.g. for tax or settlement purposes or for the purposes of meeting other legal requirements and obligations. In such cases the data shall be stored for a period arising from these regulations.
6. Obligations of entities entrusting personal data of third parties to Exclusive Networks Poland S.A.
By entrusting personal data to Exclusive Networks Poland S.A., making it available to Exclusive Networks Poland S.A. or receiving it from Exclusive Networks Poland S.A. for processing, a third party undertakes to follow the conditions of this Policy and, depending on the purpose of making personal data available to Exclusive Networks Poland S.A., such party undertakes to obtain all legally required consents of data subjects, including but not limited to for the transmission of such data to Exclusive Networks Poland S.A. with the right to make such data available to manufacturers and/or resellers for the purposes indicated in this Privacy Policy.
Considering the fact that, in certain cases, Exclusive Networks Poland S.A. may make personal data available to a third party, the third party undertakes to follow the below-mentioned obligations, regardless of the fact whether it acts as an entrusting entity or as an entity to which Exclusive Networks Poland S.A. has entrusted or made available data for processing.
Upon the provision of personal data to Exclusive Networks Poland S.A., the third party confirms that it assumes liability and indemnifies Exclusive Networks Poland S.A. against any liability arising from the fact that the third party has failed to obtain relevant consents of data subjects, and if an administrative fine or obligation to pay compensation is imposed on Exclusive Networks Poland S.A., the third party undertakes to pay the amount equal to the imposed fine and/or compensation upon the first request of Exclusive Networks Poland S.A..
The entrusting entity particularly, but not exclusively, undertakes to:
- Entrust personal data for processing in accordance with the principles set forth in the Privacy Policy, the obligations arising from GDPR, particularly Article 28, and the related provisions of the commonly applicable Polish law,
- Process the data only for the performance of cooperation for the duration of cooperation and potential security of claims arising from such cooperation, unless the data retention period arises from the commonly applicable provisions of the law,
- Use the personal data entrusted to it by Exclusive Networks Poland S.A. only for the purposes indicated at the time of transmission of personal data or at a later date, upon prior approval of Exclusive Networks Poland S.A.,
- Ensure sufficient guarantees of implementation of appropriate technical and organisational means so that the processing would meet the requirements of GDPR and protect the rights of data subjects,
- Obtain all legally required consents entitling it to make personal data available to Exclusive Networks Poland S.A. for the purpose of entrusting such data further to the following entities: authorised distributors of products, equipment manufacturers, external authorised service centres of the manufacturer, warehouses with spare parts, service centres acting as intermediaries in the transport of equipment.
If, for the proper performance of obligations arising from cooperation, it is necessary for Exclusive Networks Poland S.A. to entrust the data further, also to a third country, the third party represents that Exclusive Networks Poland S.A. may do so, and guarantees that it has the right to make personal data available to Exclusive Networks Poland S.A. for this purpose, the third party is considered to be the Controller within the scope of such data and performs the obligations set forth in Articles 12, 13 and 14 of GDPR. As far as Exclusive Networks Poland S.A. is subject to the information obligation arising from GDPR, the Parties agree that such obligations shall be performed by the third party, and the third party shall be fully liable towards Exclusive Networks Poland S.A. for the proper performance of such obligations, and shall be liable, without limitations, to the potential damage incurred by Exclusive Networks Poland S.A. on the account of improper performance of such obligations,
- Upon the completion of the provision of services related to data processing, the third party shall be obliged to delete or return to Exclusive Networks Poland S.A., at the discretion of Exclusive Networks Poland S.A., all personal data entrusted to it, and to remove all existing copies of such data, unless the processing is necessary in view of the commonly applicable provisions of the law or in order to determine, assert or secure claims.
7. Information about the rights of persons whose personal data are processed by Exclusive Networks Poland S.A.
Exclusive Networks Poland S.A. ensures the execution of the following rights vested in the persons whose personal data are processed:
- right to receive information about the processing of personal data,
- right to access the contents of processed personal data,
- right to rectify data,
- right to demand from the Controller to erase data,
- right to demand from the Controller to restrict the processing of data,
- right to data portability,
- right to object against the processing of data,
- right to lodge a complaint to the Polish supervisory authority or the supervisory authority of another European Union member state,
- right to withdraw consent to the processing of personal data at any time.