Privacy Policy

of the website
Sanok Rubber Company S.A.

This Privacy Policy contains information regarding the processing of personal data that will be provided while using the website www.sanokrubber.pl. We make every effort to protect your privacy while using our website and ensure that personal data is processed with the utmost care and in accordance with applicable legal regulations, namely the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

Cookies Files

Our website uses cookies. Cookies are small text files sent by the server and stored on the computer or other device of the user browsing our website. Cookies are used to customize and optimize the website to meet the needs of Users, as well as to ensure the security and reliability of the website’s operation.

For certain types of cookies, consent is required, which can be modified or withdrawn at any time by adjusting your preferences in the banner (window) available via:

Types of Cookies Used by the Sanok Rubber S.A. Website

Essential Cookies – necessary for using the website, these are automatically installed on the User’s device. Their use is essential for the provision of a telecommunication service (data transmission to display content).
Statistical Cookies – allow the tracking of visit numbers and traffic sources on the website. They help identify which pages are more or less popular and provide insight into how users navigate the site. This enables the analysis of statistics and improvement of site performance. The information collected by these cookies is aggregated and not intended to identify individuals.
NOTE: The use of these cookies requires consent.
Marketing Cookies – used to track Users across websites.
Third-Party Cookies – for example, cookies used by Google to deliver personalized ads in its services (e.g., Google Search). They can also be used to display ads outside of Google websites (such as the “IDE” or “DSID” cookies stored in browsers under the doubleclick.net domain). These cookies allow user actions to be linked across devices if the user has previously logged into their Google account on one of them. This allows coordinated advertising across multiple devices. Cookies may also be set when an embedded YouTube video is placed on the website, logging statistics such as the number of views. They do not store any user data unless the user is logged into YouTube. In such cases, cookies may register actions like clicking “Like.”
First-Party Cookies – stored on the User’s device and remain there until the browser session ends. The stored information is then permanently deleted from the device memory. First-party cookies support website development by collecting statistics on visited subpages, browsers used, and time spent browsing the site.

Personal Data Protection Principles

Data Controller

The controller of your personal data is Sanok Rubber Company S.A., ul. Przemyska 24, 38-500 Sanok, Poland; phone: +48 13 46 54 444; REGON: 004023400, email: kontakt@sanokrubber.pl.

Data Protection Officer

You can contact the Data Protection Officer at the following address: Sanok Rubber Company S.A., ul. Przemyska 24, 38-500 Sanok, or via email at: iod@sanokrubber.pl.

Purpose, Duration, and Legal Basis for Personal Data Processing:

Personal data from contact forms:
The purpose of processing is to handle the request or provide a response/information to a question submitted via the contact form. Personal data will be processed for the time necessary to handle the request or provide a response.
The purposes indicated above constitute our legitimate interest as defined in Article 6(1)(f) of the GDPR.
Personal data of job applicants:
We process personal data for recruitment purposes based on Article 221 §1 of the Labor Code and, in some cases, additionally under sector-specific regulations (Article 6(1)(c) of the GDPR), as well as on the basis of consent (Article 6(1)(a) of the GDPR). This data will be stored until the current recruitment process is completed or until consent is withdrawn.
Additionally, we may process personal data for future recruitment processes if you give separate consent for this (Article 6(1)(a) of the GDPR). In this case, the storage period is 1 year from the end of the recruitment process during which you submitted your application documents or until consent is withdrawn.
Data collected through cookies and system logs generated by the website:
Data collected via cookies will be processed in order to:
- Provide Users with electronically delivered services by ensuring the proper functioning of the website, as a legitimate interest of the Controller (Article 6(1)(f) of the GDPR); these cookies are always active (so-called essential cookies).
- Tailor website content and improve service quality by analyzing how Users use the site, and generating statistics and reports on website performance (analytical/statistical cookies). The User’s consent is required to install these types of cookies (Article 6(1)(a) of the GDPR).
Personal data from anonymous whistleblowing forms:
We process data to investigate the reported matter until it is resolved or until consent is withdrawn (Article 6(1)(a) of the GDPR).
Whistleblower personal data:
The purpose of processing is to handle internal reports and take any necessary follow-up actions. Data is processed for 3 years after the end of the calendar year in which follow-up actions were completed or proceedings initiated by those actions ended.
The legal basis for processing is a legal obligation under whistleblower protection laws (pursuant to Article 6(1)(c) of the GDPR or, in the case of special category data, Article 9(2)(g) of the GDPR) or the legitimate interest of the controller, which includes receiving, verifying, and investigating legal violations (pursuant to Article 6(1)(f) of the GDPR).
If the whistleblower chooses to disclose their identity, the data that allows for their identification will be processed based on their explicit consent (Article 6(1)(a) of the GDPR).

We provide detailed information about the scope, purpose, legal basis, and duration of personal data processing at the time of data collection, for example, in the online form.

Recipients of Personal Data

Job applicants’ personal data may be shared with entities acting on behalf of the Data Controller, i.e., entities providing recruitment support services, based on appropriate data processing agreements.

Rights Related to Data Processing

You have the right to access your data, as well as to rectify, erase, or restrict its processing, the right to object to the processing, the right to data portability, and the right to withdraw your consent to the processing of personal data at any time.

To exercise the above rights, please contact the Data Controller or the Data Protection Officer.

You also have the right to lodge a complaint with the supervisory authority responsible for personal data protection, which is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) in Poland.

Data Security

The Data Controller collects data for specified, lawful purposes, processes it in accordance with the law, and does not subject it to further processing incompatible with those purposes. Data is collected only to the extent that is adequate, necessary, and essential for the purposes for which it is processed.

The Controller makes every effort to protect the data from unauthorized access by third parties and, to this end, applies high-level organizational and technical security measures. The Controller does not disclose data to any recipients who are not authorized to receive it in accordance with the applicable legal regulations.

Changes to the Privacy Policy

The policy is regularly reviewed and updated as necessary.