Twoja przeglądarka jest nieaktualna.

Przeglądarka Internet Explorer nie jest już obsługiwana. Proszę zmienić przeglądarkę, aby uzyskać lepszą jakość strony.

Data Protection

Privacy statement

It is important to us that you are fully informed about the personal data that we collect when you use our offers and services, and are familiar with how we use them.

Wherever DEKRA processes personal data, such processing is carried out according to the Regulation of the European Parliament and Council (EU) 2016/679 from 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as GDPR), for the purposes defined in this data privacy statement and indicated in the eventuel additional privacy information that we provide to you when we collect personal data.

Processing of personal data

Responsible Authority

DEKRA Certification sp. z o.o.
ul. Legnicka 48H, 54-202 Wrocław
e-mail: odo.pl@dekra.com

DEKRA Certification sp. z o.o. is the Data Controller of your personal data.

Your personal data may also be joint management by DEKRA Certification sp. z o.o. and other companies belonging to the DEKRA Group, on the basis of an agreement concluded between the companies, however, we inform of each such case in a dedicated information clause or in an additional privacy statement.

Visiting our website

We record and save your computer's IP address in order to send the contents of our website visited by you to your computer (e.g. texts, pictures, and files provided for downloading, etc.) (cf. Art. 6 (1) lit. b GDPR). We also process these data to identify and pursue any misuse. Legal basis in this case is Art. 6 (1) lit. f GDPR. In this context, our legitimate interest in data processing is to ensure the due functioning of our website and the business transacted via the Website.

Other purposes

We also process personal data that you provide voluntarily. The data processed by us in this context include the data of customers, employees, and suppliers to the extent necessary for the purposes specified within the scope of this data privacy statement.

In as far as we process your data as described above for the purpose of accepting and processing your inquiry, appointment, or order (e.g. newsletter), you are bound to make these data available to us. We are unable to process your request without the data.

Where you have given your consent to the processing of personal data for specific purposes, e.g. for marketing purposes (cf. Art. 6 (1) lit. a GDPR), you can withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent up to the time of withdrawal of consent.

Contact via forms

As part of the contact with DEKRA (e.g. via forms, a-mail, phone calls) personal data is collected. On our website we provide forms for various requests, such as contact with DEKRA, forms for commissioning, forms for bookings, forms for the creation of offers, forms for newsletter subscriptions and others (e.g. to order information material, to submitting complaints).

Which data is collected within each form, is evident in the respective form. This data is only saved and used for the purpose indicated in the form i.e. in particular of answering your request as well as for the contact and therefore technical administration of the data. Legal basis for the processing of this data is our legitimate interest on the answering of your request according to Art. 6 para. 1 lit. f GDPR or your consent according to Art. 6 para. 1 lit. a GDPR.

If your contact aims the completion of a contract or taking actions necessary before the service is provided, Art. 6 para. 1 lit. b GDPR applies for the processing of the data. Applies as well the implementation of legal obligations incumbent on the data controller (e.g. for tax and accounting purposes) pursuant to Art. 6 para. 1 lit. c GDPR and the implementation of the legitmate interests of the data controller, such as e.g. establishing, investigating or defending against claims pursuant to Art. 6 para. 1 lit. f GDPR.

Your data will be deleted after completion of processing of your request /after service providing. The process is completed as soon as the matter concerned is finally clarified, the contract is finished and if there are no legal retention requirements opposed (e.g. the data processing period specified by individual legal provisions was expiered). If the basis for data processing is your consent, the data may be processed until the purpose for which data was collected is achieved ora until you withdraw your consent.

Transfer to third parties

We generally transfer your data to the relevant DEKRA company where it is processed to deliver the service and support you requested.

This means that information may also be processed by other legal entities of the DEKRA Group. However, such processing is limited to the extent required for the purposes defined in this data privacy statement or to which the other legal entity acting as a service provider / processor has to follow the instructions given by the controller.

The service providers / processors, which may be also the other entities, e.g. IT service providers, are bound by instructions. Given this, they are subject to our requirements, which include processing of your data exclusively in line with our instructions and in compliance with the applicable Data Protection Act. In particular, they are contractually bound to treat your data with strict confidentiality, and are not permitted to process data for other purposes than the ones agreed.

Data transfer to the data processor is effected on the basis of Art. 28 (1) GDPR.

We will not sell your data to third parties or otherwise share them for commercial purposes.

Through the integration of external content (e.g. YouTube, Vimeo, Google, Facebook), data such as IP address, browser and Javascript content can be forwarded to the named third party providers when a page is loaded. If you do not want a third party provider to obtain information about you, do not consent to the processing of Marketing & Social Media cookies. As a result, you will not be able to use these functions on our website.

Beyond the above, we will transfer your personal data to prosecution authorities and, if applicable, damaged third parties without your explicit consent where this is necessary for clarifying illegal use of our services or for legal prosecution. However, such a transfer will only take place if there is concrete evidence of illegal conduct or misuse. Transfer of your data may also take place where this contributes to enforcing the conditions of use or other agreements. We are also under legal obligation to provide information to certain public bodies on request. These comprise prosecution authorities, authorities prosecuting offences punishable by a fine, and financial authorities.

The transfer of these data is based on our legitimate interest in fighting misuse, prosecuting criminal acts, and securing, asserting, and enforcing claims unless our interests are overridden by your rights and interests in the protection of your personal data, Art. 6 (1) lit. f GDPR.

If the recipients of the data will proces your personal data independently and on their own behalf, e.g. they will perform services to you on their own behalf, they become separate data controller and in this respect they bear their own responsibility for the processing of presonal data.

Data transfer to third countries

DEKRA may transfer your personal data to entities (e.g. IT suppliers) that will process personal data in countries outside the European Economic Area (EEA). If personal data is transferred to a country outside the EEA, will be taken measures to ensure further protection of this data and measures required by GDPR, e.g. standard data protection clauses addopted by European Commission. You have the option of obtaining from DEKRA further information and receiving a copy of your peronal data transferred to a third country at any time.

Security

DEKRA takes appropriate technical and organizational measures to protect any personal data you provide to DEKRA from accidental or intentional manipulation, loss, destruction, or access by unauthorized parties. This also applies to any external services purchased. We verify the effectiveness of our data protection measures and continuously improve them in line with technological development. Any personal data entered to online forms are encrypted during transfer using a secure encryption process.

Web Analysis Using Google Analytics

To the extent that you have given your consent, this website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”). This use includes the “Universal Analytics” operating mode. This mode enables connecting data, sessions, and interactions to a pseudonymized User ID across different devices, making it possible to analyze a user’s activities regardless of the device they use.

Google Analytics uses small text files called “cookies”, which are saved on your computer and make the analysis of your use of the website possible. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and saved there. If IP anonymization is active on this website, your IP address will first be anonymized by Google within the Member States of the European Union or another state party to the Agreement on the European Economic Area. Please note this website uses Google Analytics with the IP anonymization extension to ensure an anonymized recording of IP addresses (also called IP masking). The IP address transmitted by your browser in the context of Google Analytics is not merged with any other data of Google. More information on the terms of service and data protection is available at https://www.google.com/analytics/terms/us.html and/or https://policies.google.com/?hl=en

The legal basis for the use of Google Analytics is your declaration of consent according to point (a) of Art. 6 (1) of the GDPR. Google, on behalf of the operator of this website, will use this information in order to analyze your use of the website, to compile reports on your activities on the website, and to provide further services relating to the website use and internet use for the website operator.

The data sent by us and the data connected to cookies, user recognition (e.g. User-ID), or advertising ID are erased automatically after 26 months.Meta Platforms

Right to withdrawal

You have the right to withdraw your consent at any time with effect for the future. You can do this by changing your browser settings to prevent the saving of cookies. We would like to point out, however, that doing so may prevent you from enjoying the full functionality of our website.

You can also prevent the collection of the data generated by the cookie and relating to your use of the website (incl. your IP address) and its transmission to Google as well as the processing of this data by Google by downloading and installing the browser add-on.

Opt-out cookies also prevent the future collection of your data when you visit our website. To prevent the collection of data across various devices by Universal Analytics, you will need to opt out on all the devices you use. Click here to get the opt-out cookie: Save Google Analytics Opt-Out Cookie

In addition, you also have the possibility to determine which kinds of cookies you wish to accept or reject from our website by changing the Cookie Settings

Cookies

In order to make our Internet presence more user-friendly and ensure that it meets your needs as well as possible, we use cookies in some areas. A cookie is a small file that is saved locally on your computer as soon as you visit a website. Cookies also allow us to analyze the use of our website. Decide by yourself which cookies you allow or refuse. You can change your decision at any time.

For more information see our data privacy settings

Embedding of social media plugings

Our website may use buttons for the following social Networks

Meta Platforms

Meta Platforms Ireland Limited,
1601 S. California Ave,
Palo Alto, CA 94304, USA

LinkedIn

LinkedIn Corporation,
2029 Stierlin Court Mountain View,
CA 94043, USA

Twitter

Twitter Inc.,
1355 Market St, Suite 900,
San Francisco, CA 94103, USA

YouTube

YouTube, LLC,
901 Cherry Ave.,
San Bruno CA 94066, USA

The buttons show the logos of the individual social networks. However, the buttons are not standard social plugins, i.e. plugins provided by social networks, but links with button icons. These buttons are only activated by deliberate actions (clicking). As long as you do not click the buttons, no data will be transferred to the social networks. By clicking the buttons, you accept communication with the servers of the social network, thereby activating the buttons and establishing the link.

Once clicked, the button functions as a share plugin. The social network then obtains information about the site you have visited, which you can share with your friends and contacts. You need to be logged in to “share” information. If you are not logged in, you will be forwarded to the login page of the social network you have clicked, thereby leaving the pages of dekra.com. If you are logged in, your “like” or recommendation of the article in question will be transmitted.

When you activate the button, the social networks will also receive the information that you accessed the respective page of our website and when you did so. In addition, information such as your IP address, details about the browser you used, and your language settings may be transmitted. If you click the button, your click will be transferred to the social network and used according to their data policy.

When you click the button we have no control over the data collected and the data-processing operations. We are not responsible for this data processing, nor are we the “controller” as defined in the GDPR. Neither are we aware of the full extent of data collection, its legal basis, purposes and storage periods. Given this, the information provided here is not necessarily complete.

The data will be transmitted irrespective of whether you actually have an account with this provider or whether you are logged in there. If you are logged in with the provider, your data will be assigned directly to your account. Providers may also use cookies on your computers to track you.

As far as we know, these providers store these data in user profiles which they use for advertising, market research and/or demand-oriented website design. This type of analysis is performed (also for users who are not logged in) to present demand-oriented advertising and inform other users of the social network of your activities on our website. You have the right to object to the creation of these user profiles. To exercise your right of objection, please contact the relevant provider.

Please consult the information provided by the following social media sites for details of the purpose and scope of data collection and of further processing and use of the data by the respective social network, and for your rights and privacy settings:

Facebook

LinkedIn

Twitter

YouTube

If you do not wish social networks to obtain data about you, do not click the button.

Deletion of data

Standard periods for deletion of data

Legislation has defined numerous data storage periods and obligations. At the end of these periods, the relevant data will be routinely deleted. Data that are not affected by the above storage periods and obligations are deleted or anonymized as soon as the purposes defined in this data privacy statement no longer apply. Unless this data privacy statement includes other deviating provisions for data storage, we will store any data we collect for as long as they are required for the purposes for which they were collected.

Other data use and deletion of data

Any further processing or use of your personal data will generally only be carried out to the extent permitted on the basis of a legal regulation or where you have consented to data processing or data use. In the case of further processing for other purposes than the ones for which the data were originally collected, we will inform you about these other purposes and provide you with all other significant information before further processing.

Rights concerning the processing of personal data

Right of access to data

On request, you have the right to obtain information from us about the personal data concerning you and processed by us, to the extent defined in Art. 15 GDPR. For this purpose, please contact our data protection officer at the address given below

Right to data rectification

You have the right to require us to rectify any inaccurate personal data concerning you without undue delay (Art. 16 GDPR). For this purpose, please contact our data protection officer at the address given below.

Right to data deletion

Where the legal reasons defined in Art. 17 GDPR apply, you have the right to immediate deletion (“right to be forgotten”) of personal data concerning you. These legal reasons include: the personal data are no longer necessary for the purposes for which they were processed, or you withdraw your consent, and there are no other legal grounds for processing; the data subject objects to the processing (and there are no overriding legitimate grounds for processing––does not apply to objections to direct advertising). To assert your above right, please contact our data protection officer at the contact address given below.

Right to restriction of data processing

If the criteria defined in Art. 18 GDPR are fulfilled, you have the right to restriction of processing as established in the above article of the GDPR. According to this article, restriction of processing may be called for in particular if processing is unlawful and the data subject opposes deletion of the personal data and requests the restriction of their use instead, or if the data subject has objected to processing according to Art. 21 (1) GDPR as long as it is unclear whether our legitimate interest overrides the interest of the data subject. To assert your above right, please contact our data protection officer at the contact address given below.

Right to data portability

You have the right to data portability as defined in Art. 20 GDPR. This means you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another controller, such as another service provider. Prerequisite is that processing is based on consent or a contract, and is carried out using automated means. To assert your above right, please contact our data protection officer at the contact address given below.

Right to object to data processing

You have the right to object at any time under Art. 21 GDPR to processing of personal data concerning you which is based on Art. 6 (1) lit. f GDPR, on grounds relating to your particular situation. We will desist from processing your personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms, or unless processing is for the establishment, exercise, or defense of legal claims. To assert your above right, please contact our data protection officer at the contact address given below.

Right to withdraw consent to data processing

You have the right to withdraw any consent you have given to us at any time under Art. 7 GDPR.

To assert your above right, please contact our data protection officer at the contact address given below.

Right to file a complaint with a supervisory authority

If you think that processing of personal data concerning you and carried out by us is unlawful or impermissible, you have the right to file a complaint with the supervisory authority responsible for us. You can contact this authority at:

President of the Personal Data Protection Office

Address:
Stawki 2, 00-193 Warszawa
E-Mail: kancelaria@uodo.gov.pl

Amendment of this data privacy statement

In case an update requires an adaptation of this Privacy Policy, we therefore reserve the right to amend the current Privacy Policy. The current version is dated 12.01.2022.

Data Protection Officer

Please address any questions regarding the processing of your personal data, requests for information, applications, or complaints directly to our data protection officer:

Data protection officer
Hanna Korol
DEKRA Certification sp. z o.o.
ul. Legnicka 48H, 54-202 Wrocław
e-mail: odo.pl@dekra.com