VANSTAR Paweł Szostak respects the privacy of users of www.vanstar.pl and protects their personal data in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1. Introductory provisions
A user is any person visiting www.vanstar.pl. Use of the website is generally anonymous and does not require personal data, except when a user completes the contact form, applies for a position or voluntarily subscribes to commercial communications.
By using the website, the user accepts this Privacy Policy. The Controller reserves the right to amend it. A new version takes effect when published on www.vanstar.pl.
2. Personal data controller
The controller of personal data is:
- VANSTAR Paweł Szostak
- Address: Książe-Skroniów 41, 28-300 Jędrzejów, Poland
- Phone: +48 41 386 39 64
- E-mail: info@vanstar.pl
The duties of the Data Protection Officer are performed by attorney Wojciech Góźdź. For personal-data matters, please contact the Controller.
3. Purposes and legal bases for processing
We process personal data for the following purposes:
| Purpose of processing | Legal basis (GDPR) | Retention period |
|---|---|---|
| Responding to an enquiry submitted through the contact form | Article 6(1)(b) — steps taken at the data subject’s request before entering into a contract; or Article 6(1)(f) — the Controller’s legitimate interest in handling correspondence | Until correspondence is completed and subsequently until the limitation period for claims expires |
| Conducting recruitment based on applications and CVs | Article 6(1)(a) — consent; or Article 6(1)(c) — legal obligation (Labour Code) | Until recruitment ends; where consent is given for future recruitment, until it is withdrawn, for no longer than 12 months |
| Sending commercial information and newsletters (where consent has been given) | Art. 6 ust. 1 lit. a — zgoda | Until consent is withdrawn |
| Website traffic analysis, statistics and optimisation (Google Analytics) | Article 6(1)(a) — consent (analytics cookies) | In accordance with Google’s policy and the user’s cookie settings |
| Measuring advertising-campaign effectiveness (Meta Pixel) | Article 6(1)(a) — consent (marketing cookies) | In accordance with Meta’s policy and the user’s cookie settings |
| Identifying companies visiting the website for B2B purposes (Albacross) | Article 6(1)(a) — consent (marketing cookies); and Article 6(1)(f) — legitimate interest in analysing B2B traffic | In accordance with Albacross’s policy and the user’s cookie settings |
| Pursuing and defending against claims | Art. 6 ust. 1 lit. f — prawnie uzasadniony interes Administratora | Until the applicable limitation period expires |
| Fulfilling legal obligations (e.g. accounting and tax obligations) | Article 6(1)(c) — legal obligation | For the period required by law |
Providing data in forms is voluntary but necessary for the stated purpose, such as responding to an enquiry or considering an application.
4. Contact and recruitment forms
When completing a contact or application form, the user provides data such as their name, email address, telephone number and message and, for recruitment, a CV and cover letter.
Submitting a form requires prior review of the Website Terms and this Privacy Policy, and consent to personal-data processing by selecting the mandatory checkbox.
We use form data solely for the purpose for which it was provided: responding to an enquiry, managing commercial cooperation or conducting recruitment.
5. Commercial communications and newsletter
If a user consents to electronic commercial communications, their data may be used to send publications and information about the Controller’s offer in accordance with electronic-services law.
Consent may be withdrawn at any time by sending an email to info@vanstar.pl with the subject “UNSUBSCRIBE” or by contacting the Controller through another available channel.
6. Google Analytics
The website uses Google Analytics, an analytics tool provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to analyse website use, produce visitor statistics and optimise the website.
Service ID: G-MDVFXDLTZ2.
Google Analytics may collect information including pages visited, visit duration, traffic source, approximate geographic location at country/city level, device type and browser. Google may transfer data to the United States under Standard Contractual Clauses.
More information: Google Privacy Policy, Google Analytics opt-out browser add-on.
The tool is activated only after consent to analytics cookies through the cookie banner, where displayed, or acceptance of the relevant cookie category.
7. Meta (Facebook) Pixel
The website may use Meta Pixel (Facebook Pixel), an analytics and advertising tool provided by Meta Platforms Ireland Limited, to measure campaign effectiveness, create remarketing audiences and optimise advertising on Meta services (Facebook and Instagram).
Meta may combine collected data with information linked to the user on Meta services. Transfers outside the EEA may be based on Standard Contractual Clauses.
More information: Meta Privacy Policy, ustawienia reklam Meta.
The Pixel is activated only after consent to marketing cookies.
8. Albacross
The website may use the Albacross Nordic AB (Sweden) tool, which uses IP addresses and website behaviour to identify visiting companies (B2B entities) and analyse traffic for sales and marketing purposes.
Albacross may process information including the IP address, pages visited and visit duration and, for companies, publicly available business-identification data. More information: Albacross Privacy Policy.
The tool is activated only after consent to marketing cookies or, where permitted by law, on the basis of the Controller’s legitimate interest in analysing B2B traffic.
9. Cookies and related technologies
The www.vanstar.pl website uses cookies—small text files stored on the user’s device—and similar technologies such as localStorage and tracking pixels.
We use the following cookie categories:
- Essential — ensure the website functions correctly (e.g. session, CSRF and cookie preferences). They do not require consent.
- Analytics — support statistics and traffic analysis (Google Analytics). They require consent.
- Marketing — support remarketing and identification of B2B companies (Meta Pixel and Albacross). They require consent.
Users may change cookie settings at any time through the cookie banner, where available, or browser settings. Disabling cookies may limit website functionality but does not prevent access to its core content.
Cookies do not contain data that directly identifies a user unless the user provides such data through a form.
10. Data recipients and processing on behalf of the controller
Personal data may be disclosed to the following categories of recipients:
- IT, hosting and website-maintenance providers,
- analytics and marketing tool providers (Google, Meta and Albacross),
- accounting, legal and HR service providers,
- public authorities, to the extent required by law.
Data is not sold to third parties. Transfers outside the European Economic Area, including to the United States, take place only with safeguards required by the GDPR, particularly Standard Contractual Clauses.
11. Data security
The Controller applies technical and organisational measures appropriate to the risk to data subjects’ rights and freedoms, including HTTPS encryption, access controls, backups and access restricted to authorised persons.
No user-provided data is disclosed to third parties for purposes other than those described in this Privacy Policy, except where required by law or proceedings conducted by authorised bodies.
12. Data subject rights
Under the GDPR, you have the following rights:
- the right of access to data,
- the right to rectification of data,
- the right to erasure (“right to be forgotten”),
- the right to restriction of processing,
- the right to data portability,
- the right to object to processing based on Article 6(1)(f) GDPR,
- the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal,
- the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
To exercise your rights, please contact the Controller: info@vanstar.pl.
13. Information notice (Article 13 GDPR)
Pursuant to Article 13(1) and (2) GDPR, we inform you that:
- The controller of your personal data is VANSTAR Paweł Szostak, based at Książe-Skroniów 41, 28-300 Jędrzejów, Poland, tel. +48 41 386 39 64, email: info@vanstar.pl.
- The duties of the Data Protection Officer are performed by attorney Wojciech Góźdź. For personal-data matters, please contact the Controller.
- Recipients include entities authorised by law and processors acting on the Controller’s behalf (hosting, IT, analytics and B2B marketing).
- Your data may be transferred to third countries, such as the United States, only with safeguards required by the GDPR.
- You have the right to access, rectify and erase data, restrict processing, data portability, object to processing and withdraw consent where processing is based on consent.
- You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe processing infringes the GDPR.
- Providing data is voluntary but necessary for the purpose for which it is collected (responding to an enquiry, recruitment or newsletter delivery).
14. External links
The website may contain links to third-party websites such as LinkedIn and Google Maps. The Controller is not responsible for their privacy policies or content. We encourage users to review the privacy policies of websites they visit.
15. Changes to the Privacy Policy
The Controller may update this Privacy Policy following changes in law, implementation of new analytics or marketing tools, or changes to processing. The current version is always available at www.vanstar.pl/polityka-prywatnosci.