Privacy policy

PRIVACY AND COOKIES POLICY

Privacy Policy and the use of cookies on hlt.pl website. (hereinafter referred to as "The service')

The personal data administrator and owner of the Service www.hlt.pl is the company HLT sp. z o.o. with its registered office in Głuchołazy, ul. Kolejowa 5, 48-340 Głuchołazy, registered in the National Court Register by the District Court in Opole, VIII Economic Department of the National Court Register, under the KRS number 0000080430, NIP 7551303668, email address: hlt@hlt.pl.

In the Service, you can find information about the company and the products offered.

The privacy policy contains information about the processing of personal data that you may provide to us while using the Service and the use of cookies on our Service. Our goal is to protect your personal data on the Internet. We will make every effort to protect your privacy while using the Service. For the purposes of this document, any individual using the Service is referred to as "User"User')

Cookies

On our website, we use cookies that contain information to customize content to your needs, improve the functionality of our website, and analyze traffic on our website.

Cookies used by us include:

  1. We use analytical tools like Google Analytics, which collect information about your visits to the website, such as the subpages you viewed, the time you spent on the site, or transitions between individual subpages. For this purpose, cookies from Google LLC related to the Google Analytics service are used.
  2. We use the Google Ads tool for remarketing campaigns. For this purpose, cookies from Google LLC related to the Google Ads service are used. Within cookie settings, you can decide whether you consent to the use of such cookies in your case or not.

The cookies of the Service are not harmful to you or your computer and data, so we recommend not disabling their support in browsers. The administrator is not responsible for the content of cookies sent by other websites to which links may be placed on the Service's pages.

We also use standard web server log files to count visitors to the Service and assess technical capabilities. This data is fully anonymized. We use this information to determine how many people visit the Service and to tailor the pages in the most user-friendly way, making the Service simpler and more user-friendly. Data collected in this way, automatically, cannot be changed or deleted.

How to disable cookies in a web browser?

The way to disable cookies in individual browsers can be found on the following pages:

  1. PRINCIPLES OF PERSONAL DATA PROTECTION

Legal basis for processing your personal data

Within the Service, your data will be processed:

  1. For the purpose of sending newsletters, data will be processed based on Article 6(1)(a) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR"). This means that the person whose data is concerned has given consent to the processing of their personal data for one or more specific purposes, and in connection with the fulfillment of a legal obligation incumbent on the administrator under Article 6(1)(c) of the GDPR in the case of responding to questions/complaints through the contact plugin.
  2. Responses to inquiries sent via contact forms

Recipients of data. Your data may be processed by our subcontractors, i.e., entities whose services we use in processing data and providing services on your behalf.

  1. FreshMail Sp. z o.o., Al. 29 Listopada 155c, 31-406 Kraków, NIP 6751496393, REGON 123040091 – for the purpose of using the mailing system in which your personal data is processed, if you have subscribed to the newsletter.
  2. Design sp. z o.o., Kolejowa 5, 48-340 Głuchołazy, REGON: 532456372, NIP: 7532227305 – content management on the website, website management.
  3. IQ PL Sp. z o.o., Geodetów 16, 80-298 Gdańsk, KRS 0000007725, NIP: 5832736211, REGON: 192478853 – hosting services.

All entities to which we entrust the processing of personal data guarantee the use of adequate measures to protect and secure personal data as required by law.

How long do we process your personal data?

The duration for which we can process your personal data depends on the legal basis that constitutes the legal grounds for processing. In this Privacy Policy of the Service concerning data retention, we specify that we may never process personal data for a period longer than required by the specified legal bases. Accordingly, we inform that:

  1. In the case of processing personal data based on the User's consent, the processing period lasts until the withdrawal of that consent;
  2. In the case of a submitted question or complaint, the processing period is 3 years from the date of the submitted question, unless applicable regulations prescribe longer retention periods, e.g., based on court judgments.

Rights. GDPR grants you the following potential rights related to the processing of your personal data:

  1. The right to access personal data,
  2. The right to rectify personal data,
  3. The right to erasure of personal data,
  4. the right to restrict the processing of personal data,
  5. the right to object to the processing of personal data,
  6. the right to data portability,
  7. the right to lodge a complaint with a supervisory authority,
  8. the right to withdraw consent for the processing of personal data if you have given such consent.
  1. FINAL PROVISIONS

Services and features within the Service will expand over time. This means, among other things, that changes may be made to this document in the future. Announcements of changes will be made by posting information about changes in the Privacy Policy within the Service. With each change, a new version of the Privacy Policy will appear with a new date. Any significant changes will be appropriately highlighted. This document is for informational purposes.

INFORMATION CLAUSE – VIDEO MONITORING HLT SP. Z O.O.

Operating on the basis of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 of 2016, p. 1, as amended), hereinafter referred to as the GDPR, it is informed that:

TABLE OF CONTENTS:

  1. Personal Data Administrator's Information
  2. Scope of data processing
  3. Purposes and Legal Bases for Processing Personal Data
  4. Data Retention Period
  5. Data Recipients
  6. Fairness and Transparency of Processing – Rights Regarding the Processing of Personal Data
  7. Right to Object
  8. Automated Decision Making

1. The Administrator of your personal data is:

HLT Sp. z o.o. with its registered office at ul. Kolejowa 5, 48-340 Głuchołazy, hereinafter referred to as "HLT" or "Administrator," registered in the National Court Register kept by the District Court in Opole, VIII Economic Department of the National Court Register under number 0000080430, with a share capital of PLN 277,536.00, NIP 7551303668, REGON 531160066, phone: 77 409 25 70, email: hlt@hlt.pl.

This information clause pertains to the personal data of individuals present on the premises of the HLT company, whose image has been recorded using video surveillance devices installed in the Administrator's production facility at its headquarters. The scope of information possibly processed beyond the image of individuals recorded on the monitoring device includes: vehicle registration number, time and place of the monitored event, and the behavior of individuals whose image is recorded on the imaging recording device.
Data processing through monitoring is carried out to secure the Administrator's facility and the area surrounding these facilities, including main and side entrance doors, building facade, parking lot, and the interior of the production hall.

The legal basis for processing personal data obtained through video surveillance is the legitimate legal interest of the Administrator, as the owner of the premises and the entity responsible for their protection, as well as for securing and ensuring safety on the supervised premises - Article 6(1)(f) of the GDPR. The purpose of using video surveillance on the premises and the surrounding area is particularly:

  • ensuring the safety of individuals present on the monitored premises,
  • protecting the Administrator's property, as well as the property of individuals or property brought by individuals present on the monitored premises,
  • recording events related to theft or vandalism,
  • identifying perpetrators of theft, vandalism, or damage, as well as perpetrators of other offenses or incidents causing harm to property or individuals on the premises and the surrounding area covered by surveillance,
  • recovering lost property or obtaining compensation for damage caused;
  • securing evidence in case of potential investigations, inquiries, or defense against claims, as part of the Administrator's legitimate legal interest as the entity responsible for protecting the premises.

4. Data retention period:
The period of storing image recordings is not longer than 3 months from the recording date. In cases where image recordings serve as evidence in proceedings based on the law or the Administrator becomes aware that they may constitute evidence in proceedings, the 3-month period is extended until the final conclusion of the proceedings. After the aforementioned periods expire, image recordings obtained through monitoring containing personal data are subject to destruction, unless separate regulations provide otherwise.

5. Recipients of personal data:
Personal data will only be disclosed to entities authorized to receive them under the provisions of applicable law. Personal data will not be transferred to a third country or international organization. The Administrator may disclose the obtained personal data to the following categories of data recipients, for purposes related to the Administrator's activities and to ensure the achievement of the processing objectives by the Administrator: security companies, insurers, brokers, IT and software service providers, law enforcement authorities, and courts.

6. Rights of the data subject:
You have the right to:

  • access your personal data – to obtain confirmation from the administrator whether your personal data is being processed, and if so, to gain access to them and receive information specified in Article 15 of the GDPR, provided it does not violate the rights to the protection of personal data of other individuals;
  • rectify your personal data – request the immediate correction by the Administrator of inaccurate personal data and the completion of incomplete personal data;
  • erase your personal data – request the Administrator to promptly erase your personal data if one of the conditions specified in Article 17 of the GDPR is met, including when personal data is no longer necessary for the purposes for which it was collected;
  • restrict the processing of your personal data in cases specified in Article 18 of the GDPR, including challenging the accuracy of personal data;
  • object to the processing of your personal data in cases specified in Article 21 of the GDPR.
  • lodge a complaint with the supervisory authority responsible for personal data protection.

7. Right to object.
In the scope where the legal basis for processing your personal data is the legitimate interest of the Administrator, you have the right to object to the processing of your personal data. In such a case, the Administrator will cease processing your data for those purposes, unless the Administrator can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the data is necessary for the establishment, exercise, or defense of legal claims or for statistical or archival purposes. To exercise the right to object, please contact the Administrator and submit a request in writing or electronically via the provided email address.

The Administrator does not use automated decision-making processes, including profiling, within the meaning of Article 22 of the GDPR, to make decisions that could have legal effects or similarly significantly affect you.
Your personal data obtained through video monitoring will not be used for automated decision-making.

INFORMATION CLAUSE HLT SP. Z O.O. FOR COOPERATING ENTITIES AND THEIR REPRESENTATIVES OR AGENTS

Operating on the basis of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 of 2016, p. 1, as amended), hereinafter referred to as the GDPR, it is informed that:

TABLE OF CONTENTS:

  1. Personal Data Administrator's Information
  2. The subject scope of the clause – who does it concern
  3. Purposes and Legal Bases for Processing Personal Data
  4. Categories of processed personal data
  5. Data Recipients
  6. Data Retention Period
  7. Right to Object
  8. Fairness and Transparency of Processing – Rights Regarding the Processing of Personal Data
  9. Source of personal data acquisition
  10. Automated Decision Making

1. The administrator of your personal data is:
HLT Limited Liability Company with its registered office in Głuchołazy at Kolejowa 5; 48-340 Głuchołazy, hereinafter referred to as "HLT" or "Administrator," entered into the National Court Register kept by the District Court in Opole, VIII Economic Department of the National Court Register, under number 0000080430, with share capital of PLN 277,536.00, Tax Identification Number (NIP): 7551303668, National Business Registry Number (REGON): 531160066, telephone: 77 409 25 70, email: hlt@hlt.pl.

2. Scope of the clause:
This information clause pertains to the personal data of individuals collaborating with the Administrator as service or goods providers, recipients of services or goods within the scope of the Administrator's business activities. It also covers the personal data of individuals acting as representatives, agents, or employees authorized to liaise in the context of the collaboration with the Administrator.

3. Purposes and Legal Bases for Processing Personal Data:
HLT may process your personal data for the following purposes:

  • undertaking activities aimed at concluding a contract (Article 6(1)(b) of the GDPR)
  • fulfillment of a sales/delivery contract for products offered by HLT or the execution of a purchase agreement for goods and materials by HLT, as well as for the performance of any other agreements related to HLT's activities, when processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR),
  • providing responses and explanations to your inquiries, requests, or questions (Article 6(1)(b) of the GDPR),
  • promotion and marketing of the activities carried out by HLT during the term of the contract, which constitutes a legitimate interest of the Administrator in promoting the activities and products offered by the Administrator (based on Article 6(1)(f) of the GDPR),
  • promotion and marketing of the activities carried out by HLT during the term of the contract, which constitutes a legitimate interest of the Administrator in promoting the activities and products offered by the Administrator (based on Article 6(1)(f) of the GDPR),
  • conducting analysis and statistics, as well as reporting and reporting activities, which constitute a legitimate interest of the Administrator related to the conducted business and corporate relationships, including providing your data to corporate-related entities for the above purposes (based on Article 6(1)(f) of the GDPR),
  • possible establishment, investigation, or defense against claims, which constitutes a legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),
  • in order to fulfill the legitimate interests of the Administrator, such as ensuring the safety of individuals and property within the scope of records obtained from monitoring on the premises of the Administrator's enterprise, to the extent that your presence is recorded on monitoring devices installed on the premises of the Administrator's enterprise (legal basis: Article 6(1)(f) of the GDPR),
  • for purposes separately indicated and for which you have provided your consent for the processing of your personal data (legal basis: Article 6(1)(a) of the GDPR),
  • in order to fulfill other obligations or rights arising or that may arise for the Administrator from the applicable laws of the European Union or Polish law (legal basis: Article 6(1)(c) of the GDPR).

4. Categories of personal data (information regarding personal data obtained other than from the data subject)
HLT processes the following categories of your personal data obtained other than from you: identification data, address data, contact data, and image based on monitoring recordings in the Administrator's premises.

5. Data recipients

  • "HLT may disclose your personal data to the following categories of data recipients, for the purposes related to mutual cooperation and to ensure the achievement of the objectives of personal data processing, to entities processing personal data on behalf of the Administrator, including but not limited to: IT and software service providers, suppliers of components and parts for goods covered by the subject of cooperation; contractors, suppliers, as well as security, insurance, transport, and courier companies, carriers, brokers, and other companies and entities cooperating with the Administrator in connection with the Administrator's activities or performing certain legal actions or services on behalf of the Administrator, tax advisors, legal advisors, entities providing accounting, auditing services, as well as entities corporately affiliated with the Administrator (i.e., in terms of capital or personnel) – with such entities processing data based on a contract with the Administrator and solely in accordance with the Administrator's instructions."
  • The data obtained by the Administrator will be disclosed to revenue authorities, tax authorities, inspections, offices, and any other public authorities in order to fulfill the obligations of the Administrator arising from applicable legal provisions, as well as within the powers of the aforementioned authorities and units of the public sector.
  • Additionally, the data obtained by the Administrator may be transferred to third countries in connection with activities carried out on social media platforms and the use of plugins and other tools originating from these platforms (e.g., Facebook, Twitter, Instagram, Google, etc.) or when the data recipient is located in a third country.

6. Data retention period:
HLT retains your personal data for the following periods:

  • for the duration related to the conclusion and performance of contracts for which the data is processed,
  • up to 12 months from the end of the limitation period for any claims arising or which may arise for either party from the accepted or submitted offer or the contract concluded by the parties,
  • until the natural person, whose data is processed based on their consent, requests a change or deletion of their personal data from the Administrator's resources (art. 6(1)(a) GDPR), and also until the objection to the processing of personal data is raised - in case of processing based on art. 6(1)(f) GDPR,
  • for archival, statistical, reporting, or reporting purposes - for a period not exceeding 20 years after the expiration of the legal relationship between you and the Administrator."
  • In the case of data obtained from monitoring records at the Administrator's premises - for a period of up to 3 months or for the duration of proceedings by competent authorities or courts in case the monitoring record constitutes evidence in the case.
  • In any case - for the period required by legal regulations to ensure the fulfillment of HLT's obligations or rights arising from these regulations and to pursue related claims or defend against claims.

7. Right to object.
If the processing of your personal data is based on the legitimate interest of the Administrator, you have the right to object to the processing of your personal data. The Administrator will cease processing your data for these purposes unless the Administrator can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless your data is necessary for the establishment, exercise, or defense of legal claims. To exercise your right to object, please contact HLT Sp. z o.o. and submit a request, in writing or electronically, using the contact details provided by the Administrator."

8. Accuracy and Transparency of Personal Data Processing:
According to the GDPR, in connection with the processing of your personal data, you have the following rights:

  • The right to access personal data, the right to request their correction, deletion, or restriction of processing under the conditions specified in the GDPR;
  • To the extent that the processing of personal data is based on the legitimate interest of the Administrator or direct marketing, the right to raise a justified objection;
  • To the extent that the processing of personal data is based on consent, the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
  • In the scope where data is processed for the purpose of entering into or performing a contract or based on consent, you have the right to data portability, i.e., the right to receive your personal data from the Administrator in a structured, commonly used, machine-readable format for the purpose of transmitting them to another controller;
  • The right to lodge a complaint with the President of the Office for Personal Data Protection in a situation where there is suspicion that the processing of personal data violates the provisions on the protection of personal data;
  • Providing personal data to the extent necessary for the conclusion and performance of the contract is necessary for the aforementioned purposes. In the event of failure to provide such data, the conclusion or performance of the contract will be impossible. However, in the case of not providing data for which processing is based on consent, it means that the Administrator will not carry out actions towards you when these actions are conditioned by the aforementioned consent;
  • The Administrator does not make decisions about the processing of personal data in an automated manner, including profiling.
  • Personal data may be transferred to a country outside the European Economic Area (a third country) or an international organization within the meaning of the GDPR when the Administrator uses the services of social media platforms or services (e.g., Facebook, Twitter, Instagram, Google+).

9. Source of data origin (information regarding personal data obtained other than from the data subject)
Your personal data may come from a legal representative, a principal in the case of granted power of attorney, a business for which you act as a representative or agent, including as an employee authorized to contact the Administrator, or from a party to an agreement concluded with HLT, also from publicly available sources, especially from the National Court Register (KRS), the Central Register and Information on Economic Activity (CEIDG), REGON. In the case of image data – from monitoring records used by the Administrator.

10. Automated Decision Making
Your personal data obtained through video monitoring will not be used for automated decision-making.

Candidate Data Protection Clause in Employment for HLT SP. Z O.O.

Acting on the basis of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L. 2016 No. 119, p. 1, as amended, hereinafter referred to as GDPR), it is hereby informed that:

TABLE OF CONTENTS:

  1. Personal Data Administrator's Information
  2. Purposes and Legal Bases for Processing Personal Data
  3. Data Retention Period
  4. Data Recipients
  5. Fairness and Transparency of Processing – Rights Regarding the Processing of Personal Data
  6. Right to Object
  7. Automated Decision Making

1. The Administrator of your personal data is:

HLT Sp. z o.o. with its registered office at ul. Kolejowa 5, 48-340 Głuchołazy, hereinafter referred to as "HLT" or "Administrator," registered in the National Court Register kept by the District Court in Opole, VIII Economic Department of the National Court Register under number 0000080430, with a share capital of PLN 277,536.00, NIP 7551303668, REGON 531160066, phone: 77 409 25 70, email: hlt@hlt.pl.

2. Cele i podstawa prawna przetwarzania danych osobowych:
The Administrator may process your personal data, in particular and accordingly, for the following purposes:

  • conducting the recruitment process for a possible establishment of an employment or civil-law employment relationship (Article 6(1)(a) and (b) of the GDPR in conjunction with Article 9(b) and (h) of the GDPR),
  • fulfilling by the Administrator of any obligations arising for it as an entity recruiting for employment from generally applicable legal provisions, including in particular labor law, tax regulations, social security regulations, occupational health and safety regulations (Article 6(1)(c) of the GDPR, and as regards special categories of data, Article 9(2)(b) and (h) of the GDPR),
  • establishing contact with you by the Administrator regarding recruitment processes through telecommunication means (Article 6(1)(f) of the GDPR).
  • archival (evidence) purposes as part of the Administrator's legally justified interest in securing information in the event of a legal need to establish facts (Article 6(1)(f) of the GDPR).
  • for purposes expressly indicated by your consent for the processing of your personal data for purposes other than those described above (Article 6(1)(a) of the GDPR).
  • in order to fulfill other obligations or rights arising or that may arise for the Administrator from the applicable laws of the European Union or Polish law (legal basis: Article 6(1)(c) of the GDPR).

3. Data processing and storage period:
Your personal data will be processed for the duration of the recruitment process and, in the scope covered by your consent, for the period indicated in your consent regarding future recruitment processes, or until the consent is withdrawn.

4. Recipients of personal data:
Recipients of your personal data will include the following entities cooperating with the Administrator, particularly in the following areas: entities responsible for conducting recruitment processes, personnel and payroll matters, tax and legal advisory services, as well as entities providing services related to the operation of information technology systems and software, security companies, and entities affiliated with the Administrator either corporately or personally or through jointly conducted activities.

5. Rights of the data subject:
You have the right to:

  • access your personal data – to obtain confirmation from the administrator whether your personal data is being processed, and if so, to gain access to them and receive information specified in Article 15 of the GDPR, provided it does not violate the rights to the protection of personal data of other individuals;
  • rectify your personal data – request the immediate correction by the Administrator of inaccurate personal data and the completion of incomplete personal data;
  • erase your personal data – request the Administrator to promptly erase your personal data if one of the conditions specified in Article 17 of the GDPR is met, including when personal data is no longer necessary for the purposes for which it was collected;
  • restrict the processing of your personal data in cases specified in Article 18 of the GDPR, including challenging the accuracy of personal data;
  • object to the processing of your personal data in cases specified in Article 21 of the GDPR.
  • Submitting a complaint to the supervisory authority responsible for personal data protection – i.e., the President of the Office for Personal Data Protection.

6. Right to object.
In the scope where the legal basis for processing your personal data is the legitimate interest of the Administrator, you have the right to object to the processing of your personal data. In such a case, the Administrator will cease processing your data for those purposes, unless the Administrator can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the data is necessary for the establishment, exercise, or defense of legal claims or for statistical or archival purposes. To exercise the right to object, please contact the Administrator and submit a request in writing or electronically via the provided email address.

7. Automated decision making
Your personal data obtained by the Administrator will not be used for automated decision-making.

Kolejowa 5
48-340 Głuchołazy
Poland

REGON: 531160066
NIP: 7551303668
KRS: 0000080430

Navigate

Product lines

Production

All rights reserved © 2024 HLT Sp z o.o.
All rights reserved © 2024 HLT Sp z o.o.