Privacy Policy

Who is the controller of my personal data?

The controller of personal data is Cloud4You sp. z o.o., with its registered office in Warsaw (02-822), at ul. Poleczki 23 (hereinafter: Cloud4You).

What personal data does the Controller process?

Cloud4You, as the controller of personal data within the meaning of the GDPR, processes, in particular, the following personal data:

  • Personal data of job applicants (data provided by applicants to the Controller in connection with participation in recruitment processes, in particular data contained in CVs)
  • Personal data of contractors and their representatives (company data* and contact person details, basic data required for issuing and recording invoices (name, tax identification number (NIP), business address), as well as contact details (first name, surname, company name, job position, email address, telephone number))
  • Personal data of individuals submitting enquiries via contact forms, email or telephone (basic contact details (first name, surname, email address) provided by individuals in connection with enquiries submitted to the Controller)
  • Personal data processed in connection with maintaining profiles on social media platforms, including LinkedIn, Facebook, YouTube, Instagram and TikTok

* Company data is considered personal data only where it allows the identification of the individuals to whom it relates. Data relating to capital companies is not considered personal data.

* GDPR = Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

On what basis does the Controller process my personal data?

Below are the rules governing the processing of your personal data (in particular, this section explains who has access to your data, how long it is stored, and the legal bases for its processing).

Personal data of job applicants

  • Purposes and legal bases for processing: Your personal data will be processed for the purposes of the recruitment process and, if you give your consent, for the purposes of future recruitment processes. The legal basis for processing this data is the applicable legislation (in particular, the Labour Code) and your consent.
  • Data recipients: The data may be disclosed to entities authorized to receive it under applicable law. Pursuant to relevant agreements, access to the data may also be granted to entities supporting Cloud4You with IT services and infrastructure.
  • Data retention period: The personal data processed by the Controller will be stored for a maximum period of 1 year from the end of the recruitment process or until you withdraw your consent.
  • Transfer of data to third countries: As a rule, Cloud4You does not transfer data outside the European Economic Area (hereinafter: EEA). However, there may be situations in which Cloud4You uses IT service providers whose registered offices or servers may be located outside the EEA. In such cases, the legal basis for transferring the data will be Standard Contractual Clauses approved by the European Commission.
  • Automated decision-making / profiling: Cloud4You does not make decisions based on automated processing, including profiling, with regard to the purposes of data processing described above.
  • Voluntary / mandatory provision of data: Providing personal data required by law, in particular under the Labour Code, is mandatory. In all other cases, providing data is voluntary.

Personal data of contractors and their representatives

  • Purposes and legal bases for processing: Personal data of contractors will be processed for the purpose of performing agreements concluded between the parties (pursuant to Article 6(1)(b) of the GDPR – processing is necessary for the performance of agreements to which you are a party) and for the purpose of fulfilling obligations imposed on the Controller under applicable law (pursuant to Article 6(1)(c) of the GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject, in particular with regard to issuing and retaining VAT invoices), arising, among others, from the Accounting Act and the VAT Act. Personal data of contractors’ representatives will be processed for contact purposes, including establishing and maintaining business contacts (pursuant to Article 6(1)(f) of the GDPR – the legitimate interest of the Controller, which is to ensure communication with the contractor and the proper performance of agreements concluded with contractors), as well as for the purpose of fulfilling obligations imposed on the Controller under applicable law (Article 6(1)(c) of the GDPR). Personal data of contractors and their representatives may also be processed for the purpose of pursuing or defending against potential claims (the legal basis for processing is Article 6(1)(f) of the GDPR – the legitimate interest of the Controller in pursuing and defending against claims), as well as for the purpose of sending commercial information where the relevant consent has been given (the legal basis for processing is Article 6(1)(f) of the GDPR in conjunction with consent to receive commercial information).
  • Data recipients: The data may be disclosed to entities authorized to receive it under applicable law. Pursuant to relevant agreements, access to the data may also be granted to entities supporting Cloud4You with IT services (in particular, manufacturers and distributors of IT systems).
  • Data retention period: Personal data of contractors and their representatives will be stored for the period required under applicable law. Contact details of contractors’ representatives processed for the purpose of maintaining business contacts will be stored until an objection to the processing of such data is submitted.
  • Transfer of data to third countries: As a rule, Cloud4You does not transfer data outside the European Economic Area (hereinafter: EEA). However, there may be situations in which Cloud4You uses IT service providers whose registered offices or servers may be located outside the EEA. In such cases, the legal basis for transferring the data will be Standard Contractual Clauses approved by the European Commission.
  • Automated decision-making / profiling: Cloud4You does not make decisions based on automated processing, including profiling, with regard to the purposes of data processing described above.
  • Voluntary / mandatory provision of data: Providing personal data is voluntary; however, it is necessary to maintain communication with Cloud4You and to perform the agreements between the parties.

Individuals submitting enquiries via contact forms, email or telephone

  • Purposes and legal bases for processing: Personal data will be processed for the purpose of conducting electronic correspondence and taking actions at your request (the legal basis for processing is the legitimate interest of the Controller, consisting of conducting electronic correspondence and taking actions at the request of the data subjects).
  • Data recipients: The data may be disclosed to entities authorized to receive it under applicable law. Pursuant to relevant agreements, access to the data may also be granted to providers of IT infrastructure and services processing data on behalf of Cloud4You.
  • Data retention period: The personal data processed by the Controller will be stored for the duration of the electronic correspondence and subsequently for archival purposes for the period specified in the Controller’s records management policy.
  • Transfer of data to third countries: As a rule, Cloud4You does not transfer data outside the European Economic Area (hereinafter: EEA). However, there may be situations in which Cloud4You uses IT service providers whose registered offices or servers may be located outside the EEA. In such cases, the legal basis for transferring the data will be Standard Contractual Clauses approved by the European Commission.
  • Automated decision-making / profiling: Cloud4You does not make decisions based on automated processing, including profiling, with regard to the purposes of data processing described above.
  • Voluntary / mandatory provision of data: Providing personal data is voluntary; however, it is necessary to exchange electronic correspondence or to take actions at your request.

Personal data processed in connection with maintaining profiles on social media platforms, including LinkedIn, Facebook, YouTube, Instagram and TikTok

Data controllers: The data controllers for personal data processed in connection with the operation of social media profiles are

  • LinkedIn Ireland Unlimited Company: which processes your personal data in accordance with the principles described here.
  • YouTube: The administrator of the YouTube platform, which processes your personal data in accordance with the principles described here.
  • Meta Platforms Technologies Ireland Limited (Facebook): which processes your personal data in accordance with the principles described here.
  • Meta Platforms Technologies Ireland Limited (Instagram): which processes your personal data in accordance with the principles described here.
  • TikTok Technology Limited and TikTok Information Technologies UK Limited, as joint controllers (TikTok), which process your personal data in accordance with the principles described here

collectively hereinafter referred to as the “Platforms”

Purposes and legal bases for processing: Cloud4You processes your personal data for the purpose of managing its profiles on the Platforms, in particular for publishing posts, conducting discussions in comments, corresponding via private messages, as well as for statistical purposes (obtaining statistics compiled based on your activity on our profile, e.g. post views) and marketing purposes, and, where justified, for the purpose of pursuing or defending against claims. These activities constitute the legitimate interest of Cloud4You (Article 6(1)(f) of the GDPR), which constitutes the legal basis for processing your personal data.

Data recipients: In the case of sharing posts and conducting discussions, access to this data is available to authorized employees of Cloud4You, the Platforms, as well as other persons and entities described in the privacy policies of the Platforms. References to these privacy policies are provided in the “Data Controllers” section.

Data retention period: Your personal data will be stored for the period specified in the privacy policies of the Platforms.

Transfer of data to third countries: As a rule, Cloud4You does not transfer data outside the European Economic Area (hereinafter: EEA). However, there may be situations in which Cloud4You uses IT service providers whose servers may be located outside the EEA. In such cases, the legal basis for transferring the data will be Standard Contractual Clauses approved by the European Commission.

Automated decision-making / profiling: Cloud4You does not make decisions based on automated processing, including profiling, with regard to the purposes of data processing described above. However, Cloud4You may use technologies for displaying personalized advertisements, which are described in the “Cookie Information” section below.

Voluntary / mandatory provision of data: Providing personal data is voluntary; however, it is necessary to post comments, send private messages to Cloud4You, and use other functionalities of the Platforms.

What rights do I have in connection with the processing of my personal data by Cloud4You?

Depending on the circumstances, you have the right to:

  • request access to your personal data, rectification, erasure and restriction of processing, as well as the right to data portability;
  • withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;
  • object to the processing of your personal data;
  • lodge a complaint with the supervisory authority (PUODO – President of the Personal Data Protection Office).

Where can I contact you regarding questions about the processing of my personal data and the exercise of my rights?

All enquiries and statements concerning the above rights should be sent to the following contact details:

Controller’s contact details:

Cloud4You sp. z o.o.
ul. Poleczki 23
02-822 Warsaw, Poland

Data Protection Officer’s contact details:

Email address: iodo@cloud4you.pl

Cookie Information

Cookies: The website https://www.cloud4you.pl uses cookies. These are small files stored in your web browser and used for the following purposes:

  • Optimization purposes – to make the website easier to use (e.g. remembering that certain messages displayed on the website have been dismissed).
  • Analytics purposes – to create statistics that allow the Website to better tailor its content to Users’ preferences.
  • Marketing purposes – to display advertisements tailored to Users’ preferences (based on Article 6(1)(f) of the GDPR – the legitimate interest of the data controller, which is direct marketing – where consent has been given to the use of cookies).

If you do not agree to cookies being stored on your device, please change your web browser settings and/or block the use of third-party cookies as described in the “Third-Party Cookies” section below.

Restricting the use of cookies may affect some of the functionalities available on https://www.cloud4you.pl/.

Third-party cookies: The Website uses cookie solutions and/or similar technologies provided by the following third parties:

  • Google Ireland Limited – Google Ads, Google Analytics, Google Tag Manager – for analytics and advertising purposes (displaying Cloud4You advertisements within the Google advertising network). Users can disable the use of their data by Google Analytics at any time here.
  • Google Ireland Limited – reCAPTCHA – for security purposes, in particular to verify whether an entry is being submitted by a human user. More information about this technology is available here.
  • Meta Platforms Technologies Ireland Limited – Meta Pixel – for analytics and advertising purposes (displaying Cloud4You advertisements within the Facebook advertising network). Users can review the principles governing the processing of their data and disable the use of their data by Meta Platforms Technologies Ireland Limited at any time here.
  • TikTok Technology Limited and TikTok Information Technologies UK Limited – TikTok Pixel – for analytics and advertising purposes (displaying Cloud4You advertisements within the TikTok advertising network). Users can review the principles governing the processing of their data and disable the use of their data here.
  • Hotjar Ltd – Hotjar – a solution used for analytics purposes (anonymous analysis of User behavior on the Website). Users can disable the use of their data by Hotjar at any time here.
  • Microsoft Clarity – a Microsoft analytics tool used to collect data about Users’ interactions with the Website, such as cursor movements, clicks and/or page scrolling. Microsoft may also process this data as a separate data controller. More information about Microsoft’s data processing practices is available here.
  • CookieYes – a tool for managing consent regarding the use of cookies.
  • MailerLite – an email marketing tool. The Website may use cookies that allow the effectiveness of email campaigns and User activity on the Website to be monitored (including visits to specific subpages and time spent on the Website). More information about MailerLite is available here.

The solutions referred to above may be used to tailor advertisements to Users’ preferences and for analytics purposes. These solutions make it possible to track Users’ activities on the Website (e.g. viewing a specific subpage). Based on this information, Users may be shown Cloud4You advertisements within the Google and/or Facebook advertising networks and/or may receive personalized email marketing communications (where the relevant consent has been given).d).