The purpose of this Privacy Policy is to explain the principles on which WIKOSS-SPORT Sp. z o. o., based in Będzin, collects, uses, and protects your personal data, as well as to present the rights you have concerning the processing of personal data by the Administrator.

Please read the following information carefully.

Personal Data Administrator

The administrator of personal data collected through the website available at wikoss.pl is WIKOSS-SPORT Sp. z o. o., headquartered in Będzin (42-500), ul. Zwycięstwa 12/13U, NIP: 6252465078, email: info@wikoss.pl, phone: +48 797 722 290.

The Administrator carefully selects and applies appropriate technical and organizational measures to ensure the protection of processed data, including securing data against unauthorized access, disclosure, loss, destruction, or unlawful modification. The Administrator maintains constant control over the data processing process and limits access to data to the greatest extent possible, granting relevant authorizations only when necessary.

For inquiries regarding personal data processing, please contact us at info@wikoss.pl with the note “GDPR”.

Purpose and Legal Basis of Data Processing

Personal data is collected in the following cases:

  • Contact form – The purpose of processing personal data (name, surname, phone number, email) is to provide a response to your inquiry via email or phone (including SMS). Legal basis: GDPR Art. 6(1)(b) (handling business inquiries) or Art. 6(1)(a) (ensuring proper handling of other inquiries);

  • Recruitment via forms or email – The purpose of processing personal data (CV, cover letters, additional information) is to evaluate your application in the recruitment process. Legal basis: GDPR Art. 6(1)(b) (for ongoing recruitment) or Art. 6(1)(a) (consent expressed in the CV and cover letter; if you want your application to be considered in future recruitments, mention this in the clause);

  • Marketing of the Administrator’s services and sending commercial information – The purpose of data processing is to send commercial information regarding the Administrator’s offer and promotional materials. Legal basis: GDPR Art. 6(1)(a) and (f);

  • Webinar registration – The purpose of processing personal data is to organize and conduct the webinar. Legal basis: GDPR Art. 6(1)(a);

  • Compliance with legal obligations imposed on the Data Administrator. Legal basis: GDPR Art. 6(1)(c);

  • Legitimate interests pursued by the Administrator or a third party, particularly for asserting, establishing, and defending claims, ensuring IT security, for archival and statistical purposes, as well as for analytical purposes such as analyzing automatically collected data on website usage, including cookies (e.g., Google Analytics, Facebook Pixel, Salesmanago.pl, Microsoft Bing Ads), and for marketing profiling purposes. Legal basis: GDPR Art. 6(1)(f).

On the website, the Administrator processes personal data provided by you. Personal data may also be collected automatically via cookies, as described in the cookie policy below.

Remember that providing personal data is voluntary but necessary to fulfill the processing purposes described above. Without providing the data, we cannot achieve these purposes.

Processing of additional, non-mandatory data is based on your decision, meaning that the legal basis for processing such data is your consent (Art. 6(1)(a) GDPR).

Data Retention Period

Personal data may be processed for the following periods:

  • For inquiries via the contact form – for the time necessary to address the inquiry, and if consent for commercial information has been given, for the duration of the Administrator’s business needs but no longer than one year or until consent is withdrawn;

  • For recruitment – for the duration of the ongoing recruitment process and, if consent is given for future recruitments, for no longer than one year;

  • For marketing and commercial purposes – for the Administrator’s business needs but no longer than two years or until consent is withdrawn;

  • For webinar registration – for the time necessary to organize and conduct the webinar;

  • For legal obligations and legitimate interests – for the time necessary to achieve the purpose of processing but no longer than required by archival and limitation regulations and tax law provisions.

After the specified periods, the data will be deleted.

Your Rights

You have the right to:

  • Request access to, rectification, deletion, or restriction of your personal data;

  • Object to the processing of your personal data, including profiling;

  • Transfer your personal data;

  • If processing is based on consent – withdraw consent at any time, which does not affect the legality of processing before consent withdrawal;

  • Lodge a complaint with the supervisory authority if you believe that your personal data is being processed in violation of GDPR.

Data Recipients

Recipients of personal data may include authorized employees of the Administrator, legal service providers, external service providers (e.g., IT service providers, mailing service providers, accounting and tax service providers, and other entities processing data on behalf of the Administrator based on a data processing agreement), and entities authorized by law (in particular, courts and government authorities).

Personal data will not be transferred to third countries or international organizations.

Due to the Administrator’s use of Facebook, LinkedIn, Twitter, Instagram, and Microsoft services, your personal data may be transferred to the United States. These platforms use approved contractual clauses or security mechanisms in accordance with GDPR for data transfers from the European Economic Area to the U.S. and other countries.

The Administrator may also use Google services, which maintain servers worldwide, meaning that personal data may be processed on servers outside the European Economic Area. Google applies GDPR security mechanisms.

Detailed information on personal data processing is available in each platform’s privacy policy:

Changes to the Privacy Policy

The Administrator reserves the right to modify the Privacy Policy if required by applicable law, technological changes in the website’s operation, or if the modification introduces a higher standard than the legal minimum.