Privacy policy

Who is the controller of my personal data?

The Controller of the personal data is Space Bridge Sp. z o.o. with its registered office in Lublin (20-601), 38 Tomasza Zana St., loc. 1003A, hereinafter: the Controller or Space Bridge.

What personal data does the Controller process?

Space Bridge, as a Controller of personal data within the meaning of the GDPR, processes in particular the following personal data:

  • Personal data of job candidates (data that candidates provide to the Controller, in connection with participation in recruitment processes – in particular, data contained on the resume);
  • Personal data of contractors and their representatives (data of companies* and contact persons – basic data for issuing and posting invoices (name, TIN, business address) and for contact (name, surname, company name, job title, e-mail address, telephone number));
  • Persons sending inquiries through contact forms, e-mail and telephone (basic contact information (name, surname, e-mail address) provided by persons in connection with questions sent to the Controller);
  • Applicants (in particular: name and surname, address, e-mail address, company and address, login, telephone number, fax number, number of the Universal Electronic System for Registration of the Population (PESEL), tax identification number (NIP), number in the National Official Register of National Economic Entities (REGON) or other identifiers operating in the country, legal form of business, education, date of commencement of participation in the project or support, date of termination of participation in the project or support, status on the labor market, date of establishment of economic activity, amount of funds granted for the establishment of economic activity, code in the Polish Classification of Activities (PKD) of the established economic activity);
  • Representatives, employees, contractors and associates of applicants and grantees (in particular: name and surname, address, e-mail address, company and address, login, telephone number, fax number, Universal Electronic System for Registration of the Population (PESEL) number, tax identification number (NIP), number in the National Official Register of National Economic Entities (REGON) or other identifiers operating in the country, legal form of business, education, date of commencement of participation in the project or support, date of termination of participation in the project or support, status on the labor market, date of establishment of economic activity, amount of funds granted for the establishment of economic activity, code in the Polish Classification of Activities (PKD) of the established economic activity)

* – Data of companies is treated as personal data only if they allow identification of the persons concerning them. Data of limited liability companies is not treated as personal data.

Under what rules does the Controller process my personal data?

The following presents the principles of processing your personal data (in particular, explaining who has access to it, how long it is kept and the basis for its processing).

Personal data of job applicants

  • Purposes and basis of data processing: Your personal data will be processed:
    • for the purposes of the recruitment process or for the purposes of future recruitment processes in the event that you give the appropriate consent – the basis for the processing of this data is the applicable legal regulations, in particular the Labor Code (Article 6(1)(c) GDPR*),
    • for the rest on the basis of consent – if consent was given (Article 6(1)(a) GDPR).
  • Data recipients: The data may be made available to entities authorized by law. Access to the data on the basis of relevant agreements may also have entities supporting Space Bridge in the field of services and IT infrastructure.
  • Storage period: The personal data processed by the Controller will be kept until the end of the recruitment process or until the consent you have given is revoked in the case of processing for future recruitment processes.
  • Transfer of data outside the EEA: The Controller does not intend to transfer personal data to third countries (i.e. countries outside the European Economic Area) or to any international organizations.
  • Automated decision-making / profiling: the Controller does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
  • Voluntariness / obligation to provide data: Providing personal data as required by legal regulations, in particular the Labor Code, is mandatory, otherwise it is voluntary.

Personal data of contractors and their representatives

  • Purposes and basis of data processing: Personal data of contractors will be processed:
    • For the purpose of executing contracts entered into between the parties ( 6(1)(b) GDPR),
    • in order to fulfill the obligations imposed on the Controller under applicable laws, in particular in the field of issuing and storing VAT invoices, resulting, among others, from the Accounting Act and the VAT Act (Article 6(1)(c) of the GDPR),
    • for the purpose of possible investigation as well as defense of claims, which is a legitimate interest of the Controller ( 6(1)(f) GDPR).
  • Purposes and basis of data processing: Personal data of contractor representatives will be processed:
    • for contact purposes, including for the purpose of establishing and conducting business contacts, which is a legitimate interest of the Controller (Article 6(1)(f) of the GDPR),
    • for the purpose of fulfilling obligations imposed on the Controller under applicable laws (Article 6(1)(c) GDPR),
    • for the purpose of possible investigation as well as defense of claims, which is a legitimate interest of the Controller ( 6(1)(f) GDPR).
  • Recipients of the data: The data may be made available to entities authorized by law. Entities supporting the Controller in the field of IT services (in particular, hosting providers) may also have access to the data on the basis of relevant contracts.
  • Storage period: Personal data of contractors and their representatives will be retained for the period required by applicable law. Contact data of contractors’ representatives processed for the purpose of conducting business contacts will be kept until you object to the processing of such data.
  • Transfers of data outside the EEA: Space Bridge does not intend to transfer personal data to third countries (i.e., countries outside the European Economic Area) or to any international organizations.
  • Automated decision-making / profiling: Space Bridge does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
  • Voluntariness / obligation to provide data: Provision of personal data is voluntary, however, it is necessary to conduct business relations with Space Bridge and to perform the agreements connecting the parties.

Persons sending inquiries through contact forms, e-mail and by phone

  • Purposes and basis of data processing: Personal data will be processed for the purpose of electronic correspondence and the implementation of actions taken at your request (The basis for data processing is the legitimate interest of the data controller to conduct correspondence and the implementation of actions taken at the request of data subjects – Article 6(1)(f) GDPR).
  • Recipients of the data: The data may be made available to entities authorized by law. Infrastructure and IT service providers processing data on behalf of Space Bridge may also have access to the data on the basis of relevant contracts.
  • Storage period: The personal data processed by the Controller will be kept for the period of electronic correspondence and thereafter for archival purposes for the period specified in the administrator’s manual.
  • Transfers of data outside the EEA: Space Bridge does not intend to transfer personal data to third countries (i.e., countries outside the European Economic Area) or to any international organizations.
  • Automated decision-making / profiling: Space Bridge does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
  • Voluntariness / obligation to provide data: Providing personal data is voluntary, however, it is necessary for the exchange of electronic correspondence or taking action on your request.

Applicants

  • Purposes and basis of data processing: Personal data will be processed:
    • for the purpose of evaluating the project/idea with a view to concluding an investment agreement (Article 6(1)(b) of the DPA);
    • for reporting purposes related to the financing of the Controller’s activities, which is a legitimate interest of the Controller (Article 6(1)(f) GDPR);
    • in order for the Controller to carry out its legal obligations under the law, in particular the Act of July 11, 2014 – On the Principles of Implementation of Programs in the Financial Cohesion Policy in the Financial Perspective 2014-2020 (i.e. Journal of Laws 2020.818, as amended) (Article 6(1)(c) GDPR);
    • for the purpose of correspondence and maintaining contact in connection with the possibility of concluding an investment agreement (Article 6(1)(b) of the GDPR);
    • in order to undertake contact in the future in the event of a negative assessment of the project, which is a legitimate interest of the Controller (Article 6(1)(f) of the GDPR);
    • for the purpose of possible investigation as well as defense of claims, which is a legitimate interest of the Controller ( 6(1)(f) GDPR).
  • Recipients of the data: The data may be made available to entities authorized by law. Entities supporting the Controller in the field of IT services (in particular, hosting providers) may also have access to the data on the basis of relevant agreements. Personal data may also be transferred to The National Centre for Research and Development.
  • Storage period: The personal data processed by the Controller will be stored for the period resulting from Article 23(1) of The Act of 11 July 2014 on the rules of implementing cogesion policy porgrammes financed under the 2014-2020 financial perspective (Journal of Laws 2020.818 with further amendments), unless specific provisions require the storage of personal data for a longer period.
  • Transfers of data outside the EEA: Space Bridge does not intend to transfer personal data to third countries (i.e., countries outside the European Economic Area) or to any international organizations.
  • Automated decision-making / profiling: Space Bridge does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
  • Voluntariness / obligation to provide data: The provision of personal data is voluntary, however, it is necessary for the evaluation of the presented project/idea or taking action on your request.

Representatives, employees, contractors and collaborators of applicants and grantees

  • Purposes and basis of data processing: Personal data will be processed:
    • for the purpose of evaluating the project/idea with a view to concluding an investment agreement (Article 6(1)(b) of the GDPR);
    • for reporting purposes related to the financing of the Controller’s activities, which is a legitimate interest of the Controller (Article 6(1)(f) of the GDPR);
    • in order for the Administrator to carry out its legal obligations under the law, in particular The Act of 11 July 2014 on the rules of implementing cohesion policy programmes financed under the 2014-2020 financial perspective (Journal of Laws 2020.818 with further amendments)  (Article 6(1)(c) GDPR);
    • for the purpose of correspondence and maintaining contact in connection with the possibility of concluding an investment agreement (Article 6(1)(b) of the GDPR);
    • in order to undertake contact in the future in the event of a negative assessment of the project, which is a legitimate interest of the Controller (Article 6(1)(f) of the GDPR);
    • for the purpose of possible investigation as well as defense of claims, which is a legitimate interest of the Controller ( 6(1)(f) GDPR).
  • Recipients of the data: The data may be made available to entities authorized by law. Entities supporting the Controller in the field of IT services (in particular, hosting providers) may also have access to the data on the basis of relevant agreements. Personal data may also be transferred to The National Centre for Research and Development.
  • Storage period: The personal data processed by the Controller will be stored for the period resulting from Article 23(1) of The Act of 11 July 2014 on the rules of implementing of programmes financed under the 2014-2020 financial perspective (Journal of Laws 2020.818 with further amendments), unless specific provisions require the storage of personal data for a longer period.
  • Transfers of data outside the EEA: Space Bridge does not intend to transfer personal data to third countries (i.e., countries outside the European Economic Area) or to any international organizations.
  • Automated decision-making / profiling: Space Bridge does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
  • Voluntariness / obligation to provide data: Providing personal data is voluntary, however, it is necessary for the evaluation of the presented project/idea or taking action on your request.

What rights do I have regarding Space Bridge’s processing of my personal data?

You have the right, as appropriate, to:

  • request access to your personal data, rectification, deletion and restriction of processing, as well as the portability of your personal data;
  • withdraw the consent given at any time. Withdrawal of consent, does not affect the legality of the processing that was carried out on the basis of consent before its withdrawal;
  • object to the processing of your personal data;
  • lodge a complaint to the supervisory authority (PUODO – President of the Personal Data Protection Office).

Who can I contact regarding questions about the processing of my personal data and the exercise of my rights?

All inquiries and statements regarding the aforementioned rights should be addressed to the following contact information:

Data controller contact information:

Space Bridge Sp. z o.o. based in Lublin

Tomasza Zana 38 lok. 1003A

20-601 Lublin

e-mail: contact@spacebridgefund.com

 

Data Protection Officer contact information:

iod@spacebridgefund.com