Meritus privacy policy

The Meritus website (hereinafter referred to as the "Website") is run by Meritus Systemy Informatyczne limited liability company with its registered office in Warsaw, corporate address: 70 Prosta Street, 00-838 Warszawa (hereinafter referred to as "Meritus").

Trust is the fundamental value of our company. At Meritus, we believe that the protection of privacy and protection of our clients' personal data is an inseparable value contributing to building mutual trust. Therefore, Meritus applies legal provisions ensuring the highest level of personal data protection and constantly strives to improve its activities in this area. Your personal data are processed on the basis of applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (hereinafter: "GDPR").

This Privacy Policy sets out the rules for the processing of Users' personal data in connection with their use of the www.meritus.pl website.

The administrator of your personal data is Meritus Systemy Informatyczne Sp. z o. o., 70 Prosta Street, 00-838 Warsaw. In matters related to the protection of your privacy, you can contact us at the following e-mail address: rodo@meritus.pl

Personal data - all information about a natural person identified or identifiable by one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including the device’s IP, location data, internet identifier as well as information collected through cookies and other similar technology

If you want to ask us a question via the contact form, please provide your identification data (name, surname) and contact details (e-mail, telephone number). The data shall be used to enable us to answer your question and - if you give your consent - to be able to send you information about our offer.

In order to provide you with the necessary information on our website, Meritus also processes data in the following areas:

• the address of the page (subpage) that you visit on our website;
• the address of the website from which you came directly to our site (the so-called "link");
• the date and time of your visit;
• the properties of your device, in particular the operating system, web browser and the size of the browser’s window;
• your device's IP address;
• identification numbers stored on your device so that we can recognize them on our website. Identification numbers are stored in the so-called cookies or eTags;
• device identifiers, which include the individual characteristics of your mobile device. Device identifiers enable us to recognize your device on our site. Examples of device identifiers are the "Ad-ID" of the iOS operating system or the "Ad-Displaying ID" of the Android operating system.

All personal data provided by you are processed when answering a question asked via the contact form and when sending you marketing information - provided that you express your consent. Unless otherwise stated in the following provisions, the legal basis for data processing is Article 6(1)(b) GDPR (necessity of processing to perform the contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract) and in the case of sending marketing information, this basis will be a separately expressed and completely voluntary consent (art. 6 (1) (a) of the GDPR).

We also process your personal data in order to create the best product offer tailored to your needs. We also would like your visit to the www.meritus.pl site to be transparent and pleasant to the highest degree. Therefore, we process your personal data in the form of cookies. The legal basis for the data processing is Art. 6(1)(a) of GDPR, i.e. your consent. You can withdraw your consent at any time by changing the settings of the browser you use. On the website, you can also choose whether you want cookies other than necessary to be used.

In order to provide you with a convenient communication channel, we offer the possibility of using the contact form, through which you can ask a question before concluding the contract. The legal basis for data processing is Art. 6 ( 1)(b) of GDPR (processing is necessary to take action at the request of the data subject before concluding the contract). Providing the above-mentioned personal data is voluntary, but necessary to create a personal user account.

If you give your consent, we will send you commercial information by electronic means. Thanks to this, you will be able to receive information about our offer on an ongoing basis and take advantage of many opportunities supporting the development of your business. You can withdraw your consent at any time by sending a short e-mail with, for example, the following text: "I withdraw my consent to marketing" to the following address: rodo@meritus.pl. Your request will be acted upon promptly and without any additional conditions. The legal basis for processing is Art. 6 ( 1) ( a) of GDPR as well as art. 10 of the Act on the provision of electronic services.

We hope that our collaboration with you will be harmonious and smooth. However, in the event of a dispute, your data may be used to defend against possible claims or to be able to effectively pursue them. They may also be necessary to prove that we have properly provided the service. The legal basis for processing is the legitimate legal interest of Meritus, including the possibility of pursuing claims, defending against them and demonstrating the correctness of the services provided (Article 6 (1) (f) of the GDPR). In this case, you have the right to object to the further processing of personal data for the above-mentioned purpose, but this objection must be dictated by your particular situation.

The recipients of your data may be entities that support us in servicing our business processes - they may be entities providing IT and accounting services. Such entities cooperate with us on the basis of separate agreements and when processing your data, they are obliged to follow our instructions.

We want our websites to be designed in the best possible way. Therefore, in order to constantly strive to improve quality, we use "tracking" tools that enable us to monitor the effectiveness of online offers. We use the network monitoring tools to collect the following data:

• Which links online users are redirected with to the www.meritus.pl site;
• Which of our pages are visited, when, how often and in what order?
• What information are users searching for on our site?
• Which links or offers are opened by users of our website?

On the basis of this information, we combine statistics that help us to understand the answers to the following questions:

• Which tabs are especially attractive to users of our website?
• Which articles are the most interesting for our users?
• What services should we offer to our users.

In particular, we use the automatically collected data referred to in point 3.2 above. On their basis, anonymous user profiles are created under a pseudonym, in which we store the data.

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"), USA. Google Analytics uses cookies that enable the analysis of your use of the website. The information generated by the cookie file about your use of this website is transferred and saved on a Google server. On this website, IP anonymization has been activated, which causes the IP addresses of Google users to be shortened earlier in the Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of this website, Google will use this information to analyze the use of the website by users, to prepare reports on website activity and to provide other services related to the use of the website and the Internet for the website owner.

The IP address transmitted as part of Google Analytics from your web browser shall not be merged with other Google data.

You can prevent the storage of cookies by the appropriate settings of your browser; however, we point out that in this case you may not be able to use all functions of this website to the fullest extent. In addition, users can prevent Google from collecting data generated by cookies and relating to your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing a browser plug-in available at the following link: https: / /tools.google.com/dlpage/gaoptout?hl=pl

Third party data: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of use: http://www.google.com/analytics/terms/pl.html
Privacy Policy: https://policies.google.com/privacy?hl=pL.
Objection to the processing of personal data:

You can object to the collection and processing of data related to the use of the Google website (including your IP address) at any time by downloading and installing plugins in your browser, available at the following address: https://tools.google.com/dlpage/gaoptout?hl=en

We also use the remarketing function of Google AdWords of Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google").

Remarketing in the Google AdWords system is a function that, after implementing the appropriate code on the website, allows you to create a personalized message for the recipient who previously browsed a given page / pages on the Google website in order to create advertisements targeted at your needs. For this purpose, your browser stores cookies collected from individual pages visited by you through the Google browser. Users’ visits are collected using cookies, which are used to identify the device's web browser, and not personal data; personal data are not stored. Of course, you can also visit our website without placing cookies in your browser. You can restrict or deactivate the storage of cookies by Google at any time by following the link provided and by installing the plug-in available at: www.google.com/settings/ads/plugin. More information on Google AdWords and Google's privacy policy can be found at: https://www.google.com/privacy/ads

Meritus uses the Google AdWords advertising system, a service provided by Google Inc. based in the USA ("Google"), and the conversion tracking capabilities of this system. If the User finds our website through a Google ad, Google AdWords will save a cookie in the browser that will allow us to collect statistics on the User's activity on our website. These files cease to be active after 30 days, do not contain any personal data and therefore are not used for personal identification. If you visit the advertiser's website pages while cookies are active, Google and the advertiser will receive information that the advertisement has been displayed. Each Google AdWords customer receives a different cookie. Consequently, cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers receive the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, you will not receive any information that personally identifies users. You can restrict or deactivate the storage of cookies by Google at any time by following the link provided and by installing the plug-in available there: www.google.com/settings/ads/plugin. More information about Google AdWords and Google's privacy policy can be found at: https://www.google.com/privacy/ads

We also plan to use the Google's DoubleClick device. DoubleClick Google is a service of Google Inc, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google's Doubleclick has been created with the aim of presenting advertisements relevant to you. These ads are displayed on our site and on third-party sites that also work with Google.

Our website stores the so-called cookies used to create anonymous User profiles in which we store data. Google uses these files to recognize your browser when you visit our website (or other websites whose suppliers use Doubleclick provided by Google). In this way, Google is trying to collect the following information:

• What pages have you visited?
• Which of the ads did you open?

Based on this information, Google selects the advertisements that are presented to you. You can manage the display of such advertisements by Google here. More information on Google Ads can be found here. For more information on Google's privacy practices, please click here.

Google operates its servers in the USA, i.e. in a third country outside the EU. Google's DoubleClick service transmits your data to these servers. The EU Commission has not yet taken a decision ensuring an adequate level of data protection by the US. However, Google applies the highest security standards and when transferring data, it applies legal mechanisms legalizing this transfer, ie Binding corporate rules or standard contractual clauses.

The legal basis for the Doubleclick integration by Google described in this section is Art. 6 (1)(f) of GDPR (legitimate interest of the administrator, based on our interest in promoting the website for advertising purposes). Google collects and processes the data generated in this context at its own risk.

On the website https://www.meritus.pl, we enable the use of the social plug-in of the Facebook.com social network and the plug-in for the LinkedIn portal. The plugins are marked with the portal logo and its icon. If the User launches a website that contains such a plug-in, the browser will establish a direct connection with the Facebook or LinkedIn server (depending on the choice of the plug-in by the User). The content of the plug-in is transferred directly to the browser by the selected portal and incorporated into the website by it. Meritus has no influence, in this regard, on the size of the data that Facebook or LinkedIn collects with the help of this plugin. By enabling the plugin, Meritus only receives the information that the User has launched the corresponding website of this page. For information on the purpose and scope of data collection by Facebook or LinkedIn and the scope of their processing and use, as well as the rights and options for privacy protection, please refer to the relevant documentation on the privacy policy of Facebook or LinkedIn.

In the use of plugins, both Meritus as well as Facebook and LinkedIn are joint controllers of data. If you want to exercise your rights in connection with the processing of data related to the use of the meritus.pl website - please contact us. All your legitimate demands will be immediately fulfilled.

In accordance with applicable law, we process your personal data for the time needed to achieve the set goal. After this period, your personal data shall be irretrievably deleted or destroyed.

We shall inform you about the detailed periods of data storage in the information clauses presented during data collection.

The data collected as part of website analysis shall be stored until you withdraw your consent to the use of cookies collected for this purpose. We remind you that you can withdraw your consent at any time by changing your browser settings.

In relation to personal data as the user of the website you have the following rights:

• The right to information about the processing of personal data - on this basis, the Administrator provides information on the processing of personal data to the person making such a request,, including in particular the purposes and legal grounds for processing, the scope of data held, entities to whom personal data are disclosed and the planned date of their removal ;
• The right to rectify data - on this basis, the Administrator removes any inconsistencies or errors regarding the personal data being processed, and supplements or updates them if they are incomplete or have changed;
• The right to delete data - on this basis, you can request the deletion of data, the processing of which is no longer necessary to achieve any of the purposes for which they were collected;
• The right to limit processing - on this basis, the Administrator ceases to perform operations on personal data, with the exception of operations to which the data subject has consented and their storage, in accordance with the adopted retention rules, or until the reasons for limiting data processing (eg. a decision of the supervisory body is issued, allowing for further data processing) cease to exist;
• The right to transfer data - on this basis, to the extent that the data are processed in connection with the concluded contract or consent, the Administrator issues the data provided by you in a computer-readable format. It is also possible to request that this data be sent to another entity - provided, however, that there are technical possibilities in this regard, both on the part of the Administrator and the other entity;
• The right to object to the processing of data for marketing purposes - the data subject may at any time object to the processing of personal data for marketing purposes, without the need to justify such an objection;
• You also have the right to object to processing for other purposes, but it depends on your particular situation and does not have to be taken into account by the Administrator.

An application regarding the exercise of the rights as described above can be submitted by traditional mail in writing to the following address: ul. Prosta 70, 00-838 Warszawa or by e-mail at: rodo@meritus.pl

Withdrawal of consent to further data processing in connection with the use of cookies can be easily made by changing the settings of the browser you use.

The application should, if possible, precisely indicate what the request concerns, i.e. in particular: who submits the application, which of the rights the person submitting the application wishes to exercise; what processing purposes the request relates to (e.g. marketing purposes, analytical purposes, etc.).

If the Administrator is not able to determine the content of your request or identify the person submitting the application based on the submitted application, they shall request additional information.

The response to the application shall be given immediately, no later than within one month of its receipt. If it is necessary to extend this period, the Administrator shall inform you about the reasons for such an extension.

The answer shall be given to the e-mail address from which the application was sent, and in the case of applications sent by letter, by registered mail to the address indicated by the applicant, unless the content of the letter indicates a desire to receive feedback to the e-mail address (in this case, please provide an e-mail address).

You also have the right to lodge a complaint with the supervisory body - the President of the Personal Data Protection Office, in the event of suspicion that the personal data are processed in breach of the (GDPR) Regulation.

In connection with the use of the marketing tools described above there might occur the transfer of your personal data to the third countries, i.e. outside the European Economic Area (EEA).

Your personal data will be transferred to third countries, i.e. outside the European Economic Area (EEA) only due to the fact that the providers supporting the provision of marketing services have servers located outside the EEA, which we have no influence on.

In matters not covered by this Privacy Policy, the provisions of the GDPR shall apply. You shall be notified by e-mail about any changes introduced to this Privacy Policy. This Privacy Policy is valid from: 09.01.2021

If you have any questions or suggestions regarding data protection, please contact us by e-mail at: mailto:rodo@meritus.pl or: kontakt@meritus.pl

Updated in: September 2021