Privacy policy

This Policy provides information about the purposes and methods of processing and security of your personal data in connection with electronic communication, as well as your use of the website www.czw.com.pl (hereinafter referred to as the Website), and our use of cookies.

Whenever this document refers to the GDPR, it should be understood as Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

I. Data administrator and contact details

The administrator of your personal data is Centrala Zbytu Węgla „Węglozbyt” S.A. with its registered office in Katowice 40-048 at ul. Kościuszki 30, registered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000059625; whose registration documentation is kept at the District Court Katowice-Wschód in Katowice; with tax identification number: 6340013565; REGON number 271832934; share capital of PLN 1,000,000.00 paid in full, BDO: 000072618, hereinafter referred to as: the Administrator.

Administrator contact details:

  1. mailing address: Centrala Zbytu Węgla „Węglozbyt” S.A., ul. Kościuszki 30, 40-048 Katowice,
  2. email address: czw@czw.com.pl,
  3. Data Protection Officer: iod@czw.com.pl (Detailed information about the DPO can be found at: czw.com.pl, in the “contact” tab).

II. Purposes of personal data processing

Your personal data will be processed:

1. In connection with electronic communication for the purposes of:

  • enabling contact with the Administrator by electronic means of communication and contacting addressees, documenting arrangements made with contractors and accepting documents, letters, and applications in electronic form,
  • conducting recruitment for a job position, in the case of sending application documents,
  • concluding, performing, or terminating a contract, including in particular a commercial contract,
  • protection against claims and pursuit of possible claims,
  • fulfilling the legal obligations incumbent on the Administrator, resulting from European Union law or Polish law, in particular the obligations incumbent on the Administrator in connection with the provisions of the GDPR and labor law.

2. In connection with the use of the Website and the use of cookies for the following purposes:

  • ensuring the functionality of the Website, fixing errors, and analyzing aggregate statistics on visits and content popularity,
  • related to the Administrator’s maintenance of a company profile on social media on the terms specified by the owners of the given portal and providing information on the Administrator’s activities therein,
  • preventing fraud, ensuring the security of the ICT environment,
  • conducting direct marketing.

If your personal data is to be processed for a purpose other than those indicated above, you will be informed of the change in advance, or, if required by law, your consent will be obtained for the processing of personal data to the extent and for the purpose indicated in this consent.

III. Legal basis for the processing of personal data

Your personal data is processed on the following basis:

  1. Article 6(1)(a) of the GDPR – i.e. your consent, in particular in the recruitment process for a job position and in connection with the use of cookies on the Website; consent may be withdrawn at any time, but this does not affect the lawfulness of data processing prior to its withdrawal,
  2. Article 6(1)(b) of the GDPR – i.e. in connection with the performance of a contract;
  3. Article 6(1)(c) of the GDPR – i.e. to fulfill the legal obligations incumbent on the Controller in connection with labor law and regulations on ownership supervision in companies with State Treasury shareholding;
  4. Article 6(1)(f) of the GDPR – i.e. for purposes arising from the legitimate interest of the Controller consisting in the pursuit of the Controller’s statutory objectives, direct marketing, as well as the enforcement of its rights or protection against claims.

IV. Data recipients

The recipients of your personal data are:

  1. lawyers, legal advisors, and other entities providing legal services who cooperate with the Administrator and independently decide on the purposes and methods of data processing,
  2. entities providing IT, accounting, postal, and courier services,
  3. entities authorized under applicable law (in particular courts and state authorities),
  4. social networking services and messengers – Meta Platforms, Inc.,
  5. entities providing software for analyzing traffic on the Website – Google LLC.

V. Transfer of personal data to a third country or international organization

In connection with the use of tools for analyzing traffic on the Website, their provider declares that its servers are located in the United States, and therefore outside the European Economic Area. In this situation, the transfer of personal data will take place on the basis of the data protection agreement between the European Union and the United States (EU–US Data Privacy Framework), to which the provider is a party.

All other personal data will not be transferred to a third country or international organization within the meaning of the GDPR. VI. Period of personal data processing

Your personal data will be processed for the following periods:

  1. We will process the data contained in the Administrator’s financial and accounting documentation for 6 years from the end of the calendar year in which the data was made available, but not less than until the expiry of the limitation period.
  2. data processed for the purpose of concluding and performing a contract, including in particular a commercial contract – for 6 years from the end of the calendar year in which the data was made available, but not less than until the expiry of the limitation period,
  3. data processed for the purpose of fulfilling the Administrator’s legal obligations under labor law and regulations on ownership supervision in companies with State Treasury shareholding – for 6 years from the end of the calendar year in which the data was made available, but not less than until the expiry of the limitation period,
  4. data processed for purposes resulting from a legitimate interest pursued by the Controller or a third party – for 6 years from the end of the calendar year in which the data was made available, but not shorter than until the expiry of the limitation period,
  5. data processed on the basis of consent obtained – until its withdrawal; withdrawal of consent does not affect the lawfulness of data processing prior to withdrawal of consent.

VII. Your rights

In connection with the processing of your personal data, you have the following rights:

  1. the right to access your personal data obtain confirmation from the Administrator as to whether your personal data is being processed. If this is the case, you are entitled to access your personal data and obtain the following information: the purposes of the processing, the categories of personal data, information about the recipients or categories of recipients to whom the data has been or will be disclosed, the planned period of storage of the data or the criteria for determining it, the right to request rectification, erasure or restriction of processing of your personal data and to object to such processing (Article 15 of the GDPR),
  2. the right to obtain a copy of the personal data undergoing processing. The first copy is free of charge. The controller may charge a reasonable fee based on administrative costs for any further copies. If you request a copy electronically and do not indicate otherwise, the information will be provided in a commonly used electronic form (Article 15(3) of the GDPR),
  3. the right to access your personal data obtain confirmation from the Administrator as to whether your personal data is being processed. If this is the case, you are entitled to access your personal data and obtain the following information: the purposes of the processing, the categories of personal data, information about the recipients or categories of recipients to whom the data has been or will be disclosed, the planned period of storage of the data or the criteria for determining it, the right to request rectification, erasure or restriction of processing of your personal data and to object to such processing (Article 15 of the GDPR),
  4. the right to rectify data that is incorrect or to request the completion of incomplete personal data, taking into account the purposes of the processing (Article 16 of the GDPR),
  5. the right to erasure of data if one of the conditions referred to in Article 17(1) of the GDPR is met, you have the right to request the erasure of your personal data. However, this right does not apply to the situations referred to in Article 17(2) of the GDPR,
  6. right to restrict processing – in the cases referred to in Article 18(1) of the GDPR, you have the right to restrict the processing of your data,
  7. the right to data portability (in the case of personal data processed on the basis of Article 6(1)(b) of the GDPR), i.e. to receive in a structured, commonly used, machine-readable format your that has been provided to the controller and to request that this data be sent to another controller, if the data is processed on the basis of your consent or a contract concluded with you and if the data is processed by automated means (Article 20 of the GDPR),
  8. the right to object to the processing of your personal data for the legitimate purposes of the controller, on grounds relating to your particular situation, including profiling. In such a situation, the controller may no longer process this personal data unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms or grounds for the establishment, exercise, or defense of legal claims (Article 21 of the GDPR).
  9. the right to withdraw consent (in the case of personal data processed on the basis of Article 6(1)(a) of the GDPR) at any time for the processing of data provided voluntarily by you (Article 7(3) of the GDPR). Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

VIII. Skarga do organu nadzorczego

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data violates the provisions of the GDPR.IX. Obligation to provide personal data

Providing personal data may be a statutory requirement in order for the Administrator to fulfill its legal obligations, or it may be voluntary but necessary (e.g., in the case of concluding and performing a commercial contract with the Administrator).

X. Information on automated decision-making, including profiling

The personal data collected by the Administrator is not subject to profiling or automated decision-making. We assure you that we collect personal data in the amount necessary to achieve specific processing purposes. It is not sold to other entities, edited, or changed.XI. Information about cookies

  1. Our Website uses cookies, which are used to facilitate the use of our Website, improve the quality of our services, and enable the analysis of user traffic and behavior.
  2. Cookies are divided into permanent (persistent) and temporary (session) cookies. Permanent cookies are stored on the user’s device for a specified period of time or until they are deleted by the user. Temporary cookies are deleted when the browser is closed.
  3. We use our own cookies and third-party cookies. Our own cookies are used to ensure the proper functioning of the Website, personalize content, save user preferences, and analyze statistics. Third-party cookies are used by external analytical tools and for integration with social networking sites and messengers.
  4. Users have the right to control and limit the way cookies are used on the Website. Most web browsers allow you to manage cookies, including blocking, limiting, or deleting them.
  5. Disabling or limiting cookies may affect the functionality of the Website and the quality of the services provided.
  6. Technical cookies are necessary for the proper functioning of the website. They enable the maintenance of user sessions, the handling of forms, the memorization of preferences, and the security of the Website.
  7. Analytical cookies are used to collect information about how users use the website, such as the number of visits, pages visited, time spent on the Website, and the source of traffic. The data obtained helps to analyze and optimize the Website, improving its functioning and adapting its content to the needs of users.

XII. Why do we use cookies?

  1. Cookies can significantly affect the comfort of using the Website. They allow the content displayed to be tailored to the user’s preferences and interests, making the Website more attractive and useful.
  2. Cookies enable the Website to remember the settings selected by the user, such as language, layout, or color scheme, allowing for faster and more convenient use of the Website.
  3. Cookies allow the Website to track user activity on various subpages, making it easy to return to recently visited sections or continue unfinished activities, such as filling out forms.
  4. Cookies may be used to analyze user traffic and behavior on the Website, which helps to optimize its performance and deliver high-quality content.
  5. Cookies allow integration with social networking sites and messengers such as Facebook and Messenger, enabling easy sharing of content and use of additional features such as commenting and liking.
Scroll to Top