SALESmanago Live Product Demo

Wednesday, 10:00 am CEST

SALESmanago Live Product Demo

Wednesday, 10:00 am CEST

REGISTER

The data controller

The data controller of your personal data is Benhauer sp. z o.o. based in Cracow, Stanisława Klimeckiego 4, entered in the Register of Businesses maintained by Division XI of the National Court Register of the District Court for Kraków-Center in Kraków under KRS number 0000523346, REGON number 122334666 and NIP number 6762447754 (hereinafter referred to as “Benhauer” or “the controller”).

GDPR - Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general data protection regulation).

Categories of the data subjects which data are processed by the controller

The controller process personal data in particular of the following categories of the data subjects

The data subject categories Types of processed personal data
Job candidates personal data referred to in the provisions, in particular in labor law, personal data received on the basis of the freely given consent of the data subjects
Contractors, their representatives, persons conducting agreements, and contact person personal data referred to in the provisions, needed to register and provide invoices (e.g., company name, company register number, address), and all personal data that are necessary to maintain business relations (name, surname, mobile phone number, email address)
Customers using the free trial or demo version of the product name, surname, company name, country, company email address, phone number, company website address
The newsletter subscribers email address
Persons who have consented to sending commercial and marketing information via electronic communication or using telecommunications devices and automatic calling systems. name, surname, company name, country, company email address, phone number, company website address
People who signed up for training and webinars name, surname, company name, country, company email address, phone number, company website address
People sending questions to the controller via phone calls, e-mail, or forms name, surname, company name, company email address, phone number

Principles of personal data processing

Job candidates

Purposes and legal basis of personal data processing: The controller will process your personal data:

  • in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR),
  • to fulfill legal obligations to which the controller is subject, which arising from legal provisions, in particular from labor law (article 6(1)(c) GDPR),
  • that are above the range of personal data referred to in Article 22^1 of the Labor Code on the basis of your freely given consent - only if such consent was given (Article 6(1)(a) GDPR).

Processing period: Personal data will be processed for 6 months from the end of the recruitment process. Personal data processed on the basis of given consent will be processed until the consent is withdrawn or until the purpose for which the data was obtained is achieved. In the case of a given consent for processing personal data for future recruitment processes, personal data will be processed for up to 12 months.

The recipients of the personal data: The controller may disclose the personal data of the contractors to entities authorized by the law. Entities supporting the controller, including IT services providers, may also have access to the personal data of the job candidates on the basis of agreements conducted with the controller.

Voluntary/obligation to provide personal data: Providing personal data referred to in Article 21^1 of the Labour code is obligatory. Providing other personal data is voluntary, however necessary to conclude an agreement with the controller. Providing personal data processed on the basis of given consent is voluntary and not giving them does not make any negative consequences.

Transfers of personal data to third countries or international organisations: The controller does not transfer personal data to third countries or international organisations.

Decision-based solely on automated processing/profiling: The controller is not making decisions based solely on automated processing, including profiling (concerning the purposes of data processing described above).

Purposes and legal basis of personal data processing: The controller will process personal data of the contractors who is a natural person:

  • to perform an agreement between the contractors and the controller or take action at the request of the contractors before the conclusion of the contract (Article 6(1)(b) of the GDPR);
  • fulfilling the legal obligations incumbent on the controller, arising in particular from tax and accounting legislation (Article 6(1)(c) of the GDPR);
  • pursuing or defending against claims, which is the legitimate interest of the controller (Article 6(1)(f) of the GDPR).

Purposes and legal basis of personal data processing: The controller will process personal data of the contractor’s representatives, persons conducting agreements, and contact person:

  • to maintain business contacts, which is the legitimate interest of the controller (Article 6(1)(f) of the GDPR);
  • fulfilling the legal obligations incumbent on the controller, arising in particular from tax and accounting legislation (Article 6(1)(c) of the GDPR);
  • pursuing or defending against claims, which is the legitimate interest of the controller (Article 6(1)(f) of the GDPR).

The recipients of the personal data: The controller may disclose the personal data to entities authorized by the law. Entities supporting the controller, including IT services providers, may also have access to the personal data on the basis of agreements conducted with the controller.

Processing period: The personal data of the contractors shall be processed for the period required by the law or by the limitation period for any claims, depending on which of these events occurs later. The personal data processed for contact purposes will be processed for the time for the duration of the business relationship.

Voluntary/obligation to provide personal data: Providing personal data is voluntary, however necessary to conclude an agreement with the controller.

Transfers of personal data to third countries or international organisations: Your personal data will also be processed in tools/systems provided by the entities supporting the data controller that are based or process data outside the European Economic Area. In this case, personal data is transferred on the basis of standard contractual clauses approved by the European Commission or a decision of the European Commission stating an adequate level of protection in a given country, e.g. on the basis of the EU-US Data Protection Framework.

Decision-based solely on automated processing/profiling: The controller is not making decisions based solely on automated processing, including profiling (concerning the purposes of data processing described above).

Purposes and legal basis of personal data processing: The controller will process personal data:

  • to perform the contract concluded by accepting the Terms of Service, the subject of which is to grant access to the trial version of the product offered by the controller (Article 6(1)(b) of the GDPR);
  • pursuing or defending against claims, which is the legitimate interest of the controller (Article 6(1)(f) of the GDPR).

The recipients of the personal data: The controller may disclose the personal data of the contractors to entities authorized by the law. Entities supporting the controller, including IT services providers, may also have access to the personal data on the basis of agreements conducted with the controller.

Storage period: Personal data will be processed for the period necessary to perform the contract for the use of the trial version of the product, and then for the period of limitation of any claims. If a paid version of the product is purchased, the trial account will be converted into an account with full access to the purchased services - in this case, personal data will be stored for the period required under applicable law or for the period of limitation of any claims, whichever occurs later.

Voluntary/obligation to provide data: Providing personal data is voluntary, but necessary to obtain access to the trial version of the product.

Transfers of personal data to third countries or international organisations: Your personal data will also be processed in tools/systems provided by the entities supporting the data controller that are based or process data outside the European Economic Area. In this case, personal data is transferred on the basis of standard contractual clauses approved by the European Commission or a decision of the European Commission stating an adequate level of protection in a given country, e.g. on the basis of the EU-US Data Protection Framework.

Decision-based solely on automated processing/profiling: The controller is not making decisions based solely on automated processing, including profiling (concerning the purposes of data processing described above).

Purposes and legal basis for data processing: Your personal data will be processed in order to conduct marketing activities, including personalized marketing content regarding the controller and its products, which is the controller’s legitimate interest (Article 6(1)(f) of the GDPR).

The recipients of the personal data: The controller may disclose the personal data of the contractors to entities authorized by the law. Entities supporting the controller, including IT services providers, may also have access to the personal data of the contractors on the basis of agreements conducted with the controller.

Storage period: Your personal data will be processed until you withdraw your consent to send commercial information to the indicated e-mail address. Consent can be withdrawn by sending an e-mail to the address dpo@salesmanago.com

Voluntary/obligation to provide personal data: Providing personal data is voluntary however necessary to receive commercial information as part of the newsletter service.

Transfers of personal data to third countries or international organisations: Your personal data will also be processed in tools/systems provided by the entities supporting the data controller that are based or process data outside the European Economic Area. In this case, personal data is transferred on the basis of standard contractual clauses approved by the European Commission or a decision of the European Commission stating an adequate level of protection in a given country, e.g. on the basis of the EU-US Data Protection Framework.

Decision-based solely on automated processing/profiling: The controller is not making decisions based solely on automated processing, including profiling (concerning the purposes of data processing described above).

Purposes and legal basis for data processing: Personal data will be processed:

  • in order to conduct direct marketing or send commercial and marketing information using the provided e-mail address or telephone number, which is the legitimate interest of the controller (Article 6(1)(f) of the GDPR),
  • to demonstrate that the data controller is acting legally, which is the legitimate interest of the controller (Article 6(1)(f) of the GDPR),
  • for pursuing or defending against claims, which is the legitimate interest of the controller (Article 6(1)(f) of the GDPR).

The recipients of the personal data: The controller may disclose the personal data of the contractors to entities authorized by the law. Entities supporting the controller, including IT services providers and selling partners, may also have access to the personal data of the contractors on the basis of agreements conducted with the controller.

Storage period: Your personal data will be processed until you withdraw your consent to send commercial information to the indicated e-mail address or phone number. Consent can be withdrawn by sending an e-mail to the address dpo@salesmanago.com

Voluntary/obligation to provide data: Providing personal data is voluntary, and not giving them does not make any negative consequences.

Transfers of personal data to third countries or international organisations: Your personal data will also be processed in tools/systems provided by the entities supporting the data controller that are based or process data outside the European Economic Area. In this case, personal data is transferred on the basis of standard contractual clauses approved by the European Commission or a decision of the European Commission stating an adequate level of protection in a given country, e.g. on the basis of the EU-US Data Protection Framework.

Decision-based solely on automated processing/profiling: The controller is not making decisions based solely on automated processing, including profiling (concerning the purposes of data processing described above).

Purposes and legal basis of personal data processing: Personal data will be processed:

  • Personal data will be processed: in order to perform the contract concluded by accepting the Terms of Service, the subject of which is the organization of training or webinar, including sending notifications regarding the event and verification of attendance at the event itself (Article 6(1)(b) of the GDPR).

The recipients of the personal data: The controller may disclose the personal data to entities authorized by the law. Entities supporting the controller, including IT services providers, may also have access to the personal data on the basis of agreements conducted with the controller.

Storage period: Personal data will be processed for the period necessary for the execution of the contract and thereafter for the period of limitation of possible claims.

Voluntary/obligation to provide data: Providing personal data is voluntary, but necessary to participate in the organized event.

Transfers of personal data to third countries or international organisations: Your personal data will also be processed in tools/systems provided by the entities supporting the data controller that are based or process data outside the European Economic Area. In this case, personal data is transferred on the basis of standard contractual clauses approved by the European Commission or a decision of the European Commission stating an adequate level of protection in a given country, e.g. on the basis of the EU-US Data Protection Framework.

Decision-based solely on automated processing/profiling: The controller is not making decisions based solely on automated processing, including profiling (concerning the purposes of data processing described above).

Purposes and legal basis of personal data processing: Personal data will be processed:

  • in order to answer the question sent, conduct electronic correspondence and carry out actions taken at the request, which is a legitimate goal of the controller (Article 6(1)(f) of the GDPR).

The recipients of the personal data: The controller may disclose the personal data to entities authorized by the law. Entities supporting the controller, including IT services providers, may also have access to the personal data on the basis of agreements conducted with the controller.

Storage period: Personal data will be processed for the period of e-mail correspondence or answering questions asked by phone, and then for the period of archiving email correspondence, unless consent is obtained to send commercial and marketing information or a business relationship is established - in which case the storage period will be consistent with the data storage period "Persons who have consented to the sending of commercial and marketing information via electronic communication or using telecommunications devices and automatic selecting systems" or “Contractors, their representatives, persons conducting agreements, and contact person”.

Voluntary/obligation to provide data: Providing personal data is voluntary, however, necessary to obtain an answer to the question asked.

Transfers of personal data to third countries or international organisations: The controller does not transfer personal data to third countries to third countries or international organisations.

Decision-based solely on automated processing/profiling: The controller is not making decisions based solely on automated processing, including profiling (concerning the purposes of data processing described above).

Rights of the data subjects


You have the right, as applicable, to:
  • request access to your personal data, rectification, deletion and limitation of processing, and if your personal data is processed by automated means on the basis of your consent or on the basis of a contract, you also have the right to transfer your personal data;
  • withdraw your consent at any time, if that data was processed on the basis of this consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • object to the processing of your personal data - when the data is processed on the basis of the Administrator's legitimate interest.

Right to lodge a complaint

You also have the right to lodge a complaint with the supervisory body (PUODO - President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warszawa, e-mail: kancelaria@uodo.gov.).

The controller’s contact details

The data controller:
Benhauer sp. z o.o. based in Cracow
(Salesmanago operator)
Stanisława Klimeckiego 4
30-705 Kraków
e-mail: rodo@salesmanago.com

Data Protection Officer:
Marcin Lis
e-mail: dpo@salesmanago.com