SPARTEZ refers to SPARTEZ Sp. z o.o. Sp.k. with registered seat in Gdańsk, Norwida 2, Court Registration Number (KRS) 0000572100, VAT No. PL5842727722.
SPARTEZ is responsible for the processing of your personal data (the Controller). However, SPARTEZ may also be processing your personal data in the capacity of a Processor, as further described in the “SPARTEZ as Processor” section below.
Right of access: You have the right to obtain from us information as to whether we are processing your personal data, and where that is the case, access the personal data and information regarding the processing, for example the purposes of processing and categories of personal data concerned.
Right to rectification: If you believe we store incorrect information about you, you can request that we correct or supplement your data.
Right to erasure: You have the right to request that we delete your personal data. You can make such a request if for example you believe that we no longer need to keep your personal data to fulfil our purposes of processing such information, or if you have withdrawn your consent for us to further use your personal data.
Right to restriction of processing: You have the right to require that we temporarily suspend all our processing of your personal data with the exception of storing them. You can exercise this right if for example we do not agree if your personal data are accurate, or you believe our processing of your personal data is unlawful.
Right to object: You have the right to object at any time to the processing of personal data concerning you, including marketing activities.
You may opt out of receiving promotional communications from SPARTEZ by using the unsubscribe link within each email or by emailing us to have your contact information removed from our promotional email list or registration database. Although opt-out requests are usually processed immediately, please allow ten (10) business days for a removal request to be processed.
Right to data portability: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance, where our processing is based on your consent or on a contract and where the processing is carried out by automated means.
Right to lodge a complaint with a supervisory authority: If you are not satisfied with the way SPARTEZ processes your personal data or responds to your application or request, you have the right to lodge a complaint with a supervisory authority.
The controller of personal data is Spartez sp. z o.o. sp. k., in Gdańsk 80-280, St. Norwida 2, KRS 0000572100, NIP 5842727722.
Personal data is processed for the purpose of performance under the agreement you entered into, for tax or accounting purposes, as well as for direct marketing of our own products and services. Contact information is recorded so that we are able to contact you to inform you of offerings, best practices as well as provide marketing information about our services and products. We may also contact you or your employees via given contact information with request to provide feedback or product requests. Contact information is also stored to provide support, answer your questions or handle issues.
Data is provided to the controller voluntarily and the processing is conducted on the basis of an agreement, therefore, if you refuse to provide the data, no agreement will able to be concluded or executed.
Personal data will be processed solely for the purposes indicated above and for the period of performance under the agreement; after termination of the agreement, the data will be processed until the expiry of the period of limitation for reciprocal claims and the period of storing of accounting documents required by law.
Personal data will not be disclosed to any other entities save for those entities commissioned by the Controller to process such data for the purpose of proper handling of the collaboration processes. However, such entities process the data on the basis of an agreement concluded with the Controller and solely as instructed by the Controller, and may not use personal data for other purposes. We work with third party service providers to provide website, application development, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analysis and other services for us. These service providers may process your information for the purpose of providing those services for us. Therefore, personal data may be transferred to a third country on the basis of standard data protection clauses adopted or accepted by the European Commission or on the basis of Privacy Shield participation clause. Customer’s or Contractor’s data may be also disclosed to authorized entities as long as it is required by the generally applicable law.
Personal data will not be used for automated decision-making processes. Your data may be subject to profiling for the marketing purposes.
Each person whose personal data is processed has the right of access, demand rectification, erasure or restriction of processing of personal data, the right to object processing of personal data, the right to transfer personal data (data portability), and the right to lodge a complaint with a supervisory authority.
In case of products, in all cases connected with processing personal data by the Controller, including information about adequate safeguards on protection of personal data applied in connection with sharing personal data with third parties, please contact the Data Protection Officer at the e-mail address: firstname.lastname@example.org.
The controller of personal data provided in connection with the conducted recruitment processes, including the personal data contained in the enclosed application documents, in accordance with the application filed and consent granted, is Spartez sp. z o.o. sp. k., Norwida 2, 80-280 Gdańsk.
Personal data are processed solely for the purpose of recruitment.
In the case of job application, data in the scope specified in the Labour Code – the Act of 26 June 1974 (Dz.U. [Polish Journal of Laws] of 1974 No. 24 item 141 as amended) and implementing acts are provided voluntarily and processed on the basis of the above-mentioned laws. Additional data in the application documents, as well as data provided when applying for a collaborator (a civil law contract) are provided voluntarily and processed on the basis of consent which may be withdrawn at any time without affecting the lawfulness of data processing carried out on the basis of the consent before its withdrawal. In both cases, participation in the recruitment process is impossible if the data are not provided.
Candidates’ data – their first and last name and the date of birth – will be processed for 18 months following the completion of the recruitment process in which a given candidate participated. This results from the recruitment policy adopted by our companies which excludes a candidate from participating in another recruitment process in less than 18 months. If a candidate voluntarily consents to participating in future recruitments, his or her personal data will be processed for 18 months following the completion of the recruitment processing which this candidate participated.
Personal data of candidates will not be disclosed to any other entities save for those entities commissioned by the Controller to process such data for the purpose of proper handling of the recruitment processes, e.g. IT services providers, business consultants. However, such entities process the data on the basis of an agreement concluded with the Controller and solely as instructed by the Controller, and may not use personal data for other purposes. Therefore, personal data may be transferred to a third country on the basis of standard data protection clauses adopted or accepted by the European Commission.
Personal data will not be used for automated decision-making processes. Your data may be profiled during recruitment process for the purpose of evaluating your skills and expericence.
Each person whose personal data are processed has the right of access, demand rectification, erasure or restriction of processing of personal data, the right to object processing of personal data, the right to transfer personal data, and the right to lodge a complaint with a supervisory authority. In any case of processing based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
In all cases connected with processing personal data by the Controller, including information about adequate safeguards on protection of personal data applied in connection with providing personal data, please contact the Data Protection Officer at the e-mail address: email@example.com.
Web and product logs: are gathered for the purpose to understand effectiveness of our website pages and usability of our products. We gather certain information and store it in log files when you interact with our websites or products. This information includes internet protocol (IP) addresses as well as browser type, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences.
Analytics Information: are recorded for the purpose to understand effectiveness of our website pages and products. We collect analytics information when you use our websites or products to help us improve our products and services.
General Uses: We use the Information we collect about you (including personal data to the extent applicable) to provide, operate, maintain, improve, and promote our websites and products; to monitor and analyse trends, usage, and activities in connection with our websites; to investigate and prevent unauthorised access to our websites and other illegal activities.
Compliance with Laws and Law Enforcement Requests; Protection of Our Rights: We may disclose your Information (including your personal data) to a third party if (a) we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, (b) to enforce our agreements, policies and terms of service, (c) to protect the security or integrity of our products and services, (d) to protect SPARTEZ, our customers or the public from harm or illegal activities, or (e) to respond to an emergency which we believe in the good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person.
For how long do we keep your personal data?
In general terms, we don’t keep your personal data longer than necessary for the purposes for which the personal data are processed. After such time, we will either delete or anonymise your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.
SPARTEZ provides the following security statement with a promise to adhere to the highest effective industry standards. We implement appropriate technical safeguards as HTTPs and organizational measures to guard your personal data, however, no security system is impenetrable and due to the inherent nature of the Internet as an open global communications vehicle, we cannot guarantee that information, during transmission through the Internet or while stored on our systems or otherwise in our care, will be absolutely safe from intrusion by others, such as hackers.
In relation to the Jira Cloud plugins' performance SPARTEZ does not store any critically vulnerable user or client data. Nevertheless due to the nature of JIRA API we might store e.g. userKeys to provide product functionalities.
People and Access
Only authorized SPARTEZ employees have access to the application data. Jira Cloud plugins created by SPARTEZ are designed to allow application data to be accessible only with appropriate credentials. Users and clients are responsible for maintaining the security of their own login information.
SPARTEZ understands the importance of ensuring privacy of the personally identifiable user and client information. We do not share any kind of private information regarding users or clients, nor their activity.
SPARTEZ provides services to various customers. If you are an end-user of SPARTEZ products as a customer, then SPARTEZ may be processing your personal data in the capacity of a Processor, in which case the customer (your employer/principal) acts as the Controller of your personal data processing. Our customers determine the purposes of personal data processing by adapting and configuring the products. Such processing carried out by SPARTEZ is regulated by data processing agreements with customers, whereby SPARTEZ only processes personal data on documented instructions from the Controller. If you have any questions or requests with respect to such processing, you should contact your employer/principal. If you are an employee of one of our customers and would no longer like us to process your information in connection with SPARTEZ services please contact your employer.
If you are a Controller and believe SPARTEZ is processing your personal data in the capacity of a Processor, you may request signing Model Data Processor Agreement for SPARTEZ Add-On Customers (DPA) as provided below in Addendum 1. In that case please let us know at firstname.lastname@example.org.