Home page

Privacy Policy

version effective as of 5 March 2025

I. General information

Below you will find information regarding the processing of your personal data in connection with the use of the website available at: https://unshade.pl/ (the “Website”), as well as the processing of your personal data in other cases. This Privacy Policy also contains information about the cookies or similar technologies used on the Website.

II. Data of the controller and contact with the controller

Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).

The controller, i.e. the entity that determines the purposes and means of processing of your personal data, is Unshade spółka z ograniczoną odpowiedzialnością (limited liability company) with its registered office in Poznań (61-806), ul. Święty Marcin 29/8, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań, VIII Economic Department of the National Court Register under KRS number: 0001001182, holding NIP (tax identification number): 7831867981, REGON number: 523613048 (“Controller”, “we”).

In matters concerning the processing of your personal data, you may contact us by writing to the e-mail address: contact@unshade.pl or by writing to the registered office address indicated above.

III. Purposes and legal bases for processing

1. Processing of data of persons contacting the Controller (by writing, e-mail, telephone, contact form on the Website)

When you contact us in writing, by email, phone or through a contact form, we receive your personal data directly from you and process it for the following purposes and on the following legal bases:

in order to respond to your inquiry - which constitutes our legitimate interest in accordance with Article 6(1)(f) of the GDPR;
for the purpose of establishing, asserting and defending claims, which also constitutes our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

Providing personal data is necessary for the above purposes, in particular to respond to your inquiry.

Your personal data is processed for the period necessary for the above purposes or until you successfully object to the processing of your personal data.

2. Processing of personal data of Customers (natural persons)

When you use our services or the products we offer, we receive personal data directly from you and process it for the following purposes and on the following legal grounds:

for the purpose of entering into contracts with you for the provision of services, delivery of a product and their performance - on the basis of Article 6(1)(b) of the GDPR;
for the purpose of ongoing contact regarding the performance of services and the handling of any complaints, which is our legitimate interest under Article 6(1)(f) of the GDPR;
for the purpose of fulfilling our legal obligations in the field of taxation and accounting, in particular: issuing an invoice or other accounting evidence, bookkeeping, tax settlement, archiving data for accounting purposes - on the basis of Article 6(1)(c) of the GDPR in connection with the provisions of tax law and the Accounting Act;
for the purpose of establishing, investigating and defending claims, which is our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

Provision of personal data to the extent necessary for us to carry out our legal obligations is mandatory and results from tax regulations and the Accounting Act. Provision of personal data to the remaining extent is necessary for the purposes indicated above.

Personal data is stored for the period of contract performance and thereafter until the statutory obligation to store data ceases (5 years from the end of the fiscal year) and until the expiration of the statute of limitations for claims.

3. Processing of personal data of Contractors (natural persons conducting business)

If we enter into a contract with you as a Contractor, we receive personal data directly from you and process it for the following purposes and on the following legal bases:

for the purpose of entering into a contract with you and its performance - on the basis of Article 6(1)(b) GDPR;
for the purpose of ongoing contact regarding the performance of the contract and the maintenance of the business relationship, which is our legitimate interest under Article 6(1)(f) of the GDPR;
in order to fulfil our legal obligations in the field of taxation and accounting, in particular: bookkeeping, tax settlement, data archiving for accounting purposes - on the basis of Article 6(1)(c) of the GDPR in connection with the provisions of tax law and the Accounting Act;
for the purpose of establishing, investigating and defending claims, which is our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

Provision of personal data is necessary for the above purposes, and in the case of data processed for the purpose of fulfilling legal obligations - it is mandatory and results from tax regulations and the Accounting Act.

4. Processing of personal data of Representatives (persons representing customers or contractors)

If our client or customer (whether an individual, company or other type of entity) is represented by you, or the client or customer has appointed you to communicate with us on an ongoing basis in connection with the conclusion and performance of a contract, we receive your personal data from the client or customer or directly from you.

We then process your identification data (e.g. names, surnames, the name of the company you represent or cooperate with, possibly data on the authority given to you (e.g. date of authority given, type and scope of authority given), contact data (e.g. business phone number, email).

We process your personal data for the following purposes and on the following legal bases:

for the purpose of entering into a contract between the contractor or customer and us and its performance, and in particular to verify your authorization to enter into the contract on behalf of the contractor or customer and to contact you as a contact person in connection with the performance of the contract - on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of the legitimate interest pursued both by us and by our contractor or customer, which is to enable the efficient ongoing performance of the contract and to enable verification of your authorization to enter into the contract on behalf of the contractor or customer;
for the purpose of making tax settlements and keeping accounting records - on the basis of Article 6(1)(c) GDPR, i.e. the processing of data is necessary for the fulfilment of legal obligations incumbent on us and resulting from generally applicable laws, including tax law and accounting regulations;
for the purpose of establishing, asserting or defending claims between a contractor or customer and us, which is our legitimate interest under Article 6(1)(f) of the GDPR;
in order to establish or maintain a business relationship with a contractor or customer, through you, which is our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

If you provide us with your personal data directly, it is voluntary, while necessary for the conclusion and performance of the contract and the establishment of business relations. Failure to provide personal data will result in the inability to conclude and perform the above contract, as well as to maintain business relations.

Personal data shall be processed for the period necessary to fulfil the purposes indicated above, in particular for the period of maintaining business relations and fulfilling the contract concluded with our contractor or customer, and thereafter shall be stored until the statute of limitations for claims or until the expiration of the obligation to store data under the law (e.g. tax law).

5. Processing of personal data in connection with maintaining a profile on a social networking site and using a social networking site's communicator

We maintain a profile on the social network LinkedIn – https://pl.linkedin.com/company/unshade.

your user ID (may include your first and last name);
your identification and other information to the extent published by you on our profile;
your profile photo (your image);
other photos (which may also depict your image) voluntarily posted by you under our posts;
the content of your comments and the content of the conversation held with you via the social network;
statistical data on visits to our social media profile.

Accordingly, we process your personal data in order to maintain a profile on social media, under the terms and conditions set by the operator of that social network, and to inform you through it about activities, services, events we organize, to share knowledge, as well as to build and maintain a community and to communicate through the available social networking functionalities (comments, messages, including event sign-ups), which constitutes our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

Provision of personal data is voluntary.

Information that is contained in private messages sent to us via LinkedIn will be kept for the duration of the correspondence.

In the case of information held by us as part of your shared comments, it will be available on our profile until you delete it.

Personal data collected by the social network, i.e. history of posts, history of activity and messages sent, are subject to storage under the terms of the rules of the social network.

Please note that in addition to us, the controller of your personal data is the operator of the social network LinkedIn, which you use and through which you visit our profile.

Information on the processing of your personal data by the operator of LinkedIn can be found here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy.

6. Processing of personal data in connection with the use of cookies

In connection with our use of cookies or similar technologies on the Website (as detailed below), we may process your personal data in the form of Internet identifiers (e.g., ID from cookies, IP address) and information about your activity on the Website. Personal data processed in connection with the use of cookies or similar technologies is processed for the following purposes:

to enable your proper use of the Website, i.e. to provide the service - on the basis of Article 6(1)(f) of the GDPR (in the case of necessary cookies or similar technologies);
for analytical, marketing and other purposes (as appropriate to the function of the cookie data), depending on which cookies or similar technologies you have given your consent to under Article 6(1)(a) GDPR (in the case of non-essential cookies and similar technologies).

Personal data processed in connection with the use of necessary cookies are stored for the validity period of each cookie, while data processed on the basis of consent are stored for the validity period of each cookie, but no longer than until you withdraw your consent.

7. Processing of data in connection with sending requests for the exercise of rights under the GDPR

In connection with our processing of your personal data, you have certain rights (these are listed below in the Privacy Policy). You may address correspondence to us regarding the exercise of these rights. As a result, we process your identification data, contact data and other data provided in correspondence with you or any other person who sends us a request on your behalf to exercise your rights under the GDPR. If the request is not sent directly by you, but by an attorney or legal representative, we additionally process data concerning that attorney or representative, i.e. their identification data, contact data and data concerning the type of authorization.

Personal data is processed by us for the following purposes and on the following legal bases:

for the purpose of conducting contact and correspondence on a sent request for the exercise of rights on the basis of the GDPR, on the basis of Article 6(1)(c) of the GDPR, as the processing of personal data is necessary to fulfil our legal obligation under Article 12(1)-(3) of the GDPR;
for the archiving of correspondence conducted on the handling of a sent request for the exercise of rights on the basis of the GDPR, for purposes of proof and to demonstrate that we have timely responded to a sent request, which is our legitimate interest under Article 6(1)(f) of the GDPR.

Provision of personal data is necessary to carry out the requested request.

Personal data is processed for the period of correspondence and will then be archived for evidence purposes until the expiration of the statute of limitations for claims.

IV. Data recipients

Your personal data may be disclosed by us to other entities if it is necessary for the purposes of processing, i.e.:

subcontractors, service providers, in particular, entities providing accounting, IT, hosting services;
entities authorized to process data under the law;
when we publish your review of our services or you publish content on our social media profile, your personal information is also visible to visitors to the Website or social media profile, and to the social network operator;
in connection with the use of cookies or similar technologies, data may be disclosed to providers of such technologies.

V. Transfer of data outside the EEA

In connection with our maintenance of a profile on LinkedIn or the use of cookies or similar technologies of third parties on the Website, your personal data is processed through this social network or the provider of cookies or similar technologies, whose servers may be located in the United States or another country outside the European Economic Area (EEA). When personal data is transferred outside the EEA, the entity in question is required to apply appropriate safeguards, in particular the EU Standard Contractual Clauses. In such cases, you may request a copy of these appropriate safeguards. For more detailed information, please refer to the privacy policy of the social network LinkedIn: LinkedIn: https://www.linkedin.com/legal/privacy-policy or to the website of the provider of cookies or similar technologies.

VI. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling.

VII. Your rights in connection with the Controller's processing of your personal data

In connection with our processing of your personal data, you have the following rights:

access to your personal data (Article 15 of the GDPR), including obtaining a copy of your data (Article 15(3) of the GDPR),
to rectify (correct) or complete incomplete personal data (Article 16 of the GDPR),
to request erasure of personal data in cases provided by law (Article 17 of the GDPR),
request the restriction of the processing of personal data (Article 18 of the GDPR),
to receive your data in a structured commonly used format and to have it transferred when the processing is based on your consent or contract by automated means (Article 20 of the GDPR),
object to the processing of your personal data when it is processed for the Controller's legitimate interest, on grounds related to your particular situation (Article 21 of the GDPR),
revoke, at any time, the consents granted, without affecting the legality of the processing that took place on the basis of the consents prior to their revocation.

You can exercise the above rights by contacting us at the details provided in section II. of the Privacy Policy.

In addition, if you consider that the processing of your personal data violates the provisions of the GDPR, you have the right to file a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection, based in Warsaw. Details on how to file a complaint can be found on the DPA website, at: https://uodo.gov.pl/pl/83/155

VIII. Cookies and similar technologies

Depending on your settings on the Website, in addition to cookies or similar tracking technologies (collectively, “cookies”) that are technically necessary, we may use cookies for statistical, analytical or advertising purposes.

Cookies are small packets of data that are stored locally in the cache or hard drive of your device from which you access the Website.

In accordance with applicable law, we may store cookies on your device if it is necessary for the operation of the Website (these cookies are described below as necessary). Their use does not legally require your prior consent. For the use of all other types of cookies (in particular analytical and advertising cookies) we need your permission.

Necessary cookies are automatically installed on your device when you access the Website or make certain choices on the Website. They are necessary for the proper functioning of the Website, including performing certain tasks. These cookies are not deleted when you stop browsing the Website, but have a limited validity period.

If you consent to this when you first visit the Website or later through the cookie settings panel available at the bottom of the Website, we will also use other cookies or similar technologies that you have consented to.

You can change your cookie settings at any time using the settings panel available at the bottom of the Website.

IX. Changes to the Privacy Policy

This Privacy Policy may be updated if there is a change in legislation that affects the processing of your personal data or the use of cookies, as well as if our processing of personal data and the types of cookies used change.