As Hishoo, we respect your privacy and understand that by entrusting us with your information, you are placing your trust in us. Therefore, we want to provide you with essential information about what happens with the personal data we process about you. This Policy describes how and when we collect your personal data, what we use it for, whom we share it with, how long we store it, and what rights you have in this context.

1. Definitions

To make things easier, below we define a few key terms used in this document:

  • Policy – the document you are reading, i.e., the Hishoo Privacy Policy.
  • GDPR – General Data Protection Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals regarding the processing of personal data and the free movement of such data and repealing Directive 95/46/EC.
  • Websites – websites owned by Hishoo available at the following addresses: Hishoo.me

2. Who We Are and Whose Data We Process

The data controller of:

  1. 1/People who visit and use our Websites;
  2. 2/People who visit or follow Hishoo profiles on Facebook, LinkedIn, and YouTube and interact with them;
  3. 3/People who contact Hishoo via online contact forms, telephone, email, or other communication channels;
  4. 4/People who participate in webinars organized by Hishoo;
  5. 5/Customers or potential customers of Hishoo, i.e., individuals interested in or using products or services offered by Hishoo;
  6. 6/Representatives of Hishoo’s business partners (advisors or consultants, contractors, and service providers for Hishoo);
  7. 7/Candidates for employment at Hishoo;
  8. 8/Subscribers to Hishoo’s newsletter.

The data controller is Hishoo Prosta Spółka Akcyjna, based in Gdynia, at 15A Żniwna St., 81-586 Gdynia, entered into the register of entrepreneurs of the National Court Register kept by the District Court of Gdańsk – Północ, VII Commercial Division of the National Court Register under KRS 0000921725, with tax identification number (NIP) 5842808538 and a share capital of 390,000 PLN (hereinafter referred to as “Hishoo”, “we”, “our”, “us”). All inquiries, requests, or complaints related to the processing of personal data by Hishoo should be directed to the email address wm@hishoo.me or in writing to our address Hishoo Prosta Spółka Akcyjna ul. Żniwna 15A 81-586 Gdynia with the note “GDPR.”

3. When and How We Collect Your Data

We collect your personal data directly from you when you:

  • Browse one of our Websites;
  • Follow and interact with our channels on social media;
  • Contact us via online contact forms, telephone, email, or other communication channels;
  • Register for and participate in webinars organized by Hishoo;
  • Enter into a contract with us regarding Hishoo’s services or products and use the services or products we offer;
  • Contact us in connection with business collaboration, consultancy, or the provision of services to us;
  • Respond to job offers at Hishoo;
  • Subscribe to our newsletter.

We also collect your personal data from third parties when:

  • For representatives of Hishoo’s business partners: we receive your contact information from your employer or client;
  • For job candidates: we receive your contact information from our employees or partners within the referral system.

4. Purposes and Legal Basis for Data Processing

We process personal data for the following purposes:

  1. Individuals visiting and using our Websites:

    • Ensuring the proper technical functioning of our Websites (Article 6(1)(f) GDPR);
    • Profiling for statistical analysis of Website usage (Article 6(1)(f) GDPR);
    • Profiling for the analysis of how the Website is used and adjusting offers to user needs, provided you consent to cookies (Article 6(1)(f) GDPR).

    Providing your personal data is necessary to use our website. Consent for profiling and analysis is voluntary.

  2. Individuals visiting or following Hishoo profiles on social media platforms (Facebook, LinkedIn, YouTube) and interacting with them:

    • Informing about Hishoo products and services and building a positive image of Hishoo (Article 6(1)(f) GDPR);
    • Promoting educational content related to Hishoo’s areas of activity (Article 6(1)(f) GDPR);
    • Responding to inquiries and comments through social media (Article 6(1)(f) GDPR).

    Providing your personal data is necessary to follow our profiles and for responding to your inquiries and comments.

  3. Individuals contacting Hishoo via online forms, telephone, email, or other communication channels:

    • Responding to received inquiries (Article 6(1)(f) GDPR).

    Providing your personal data is necessary to respond to your inquiries.

  4. Individuals participating in webinars organized by Hishoo:

    • Organizing and allowing participation in the webinar (Article 6(1)(b) GDPR);
    • Ensuring the technical functioning of the webinar (Article 6(1)(f) GDPR);
    • Direct marketing of our services and products (Article 6(1)(f) GDPR).

    Providing your personal data is necessary for your participation in the webinar.

  5. Customers or potential customers of Hishoo:

    • Entering and performing service agreements or taking necessary actions to conclude agreements (Article 6(1)(b) GDPR);
    • Fulfilling legal obligations under tax and accounting laws for proper payment processing (Article 6(1)(c) GDPR);
    • Protecting Hishoo’s legitimate interests, such as debt recovery, legal claims, and defending against claims related to services (Article 6(1)(f) GDPR);
    • Direct marketing of our services and products (Article 6(1)(f) GDPR);
    • Managing service quality, including customer satisfaction surveys (Article 6(1)(f) GDPR).

    Providing your personal data is not legally required but is necessary for contract conclusion and service provision.

  6. Representatives of Hishoo’s business partners (advisors or consultants, contractors, and service providers):

    • Contacting employees of business partners (legal entities) (Article 6(1)(f) GDPR);
    • Contacting our business partners conducting individual business activities (Article 6(1)(b) GDPR);
    • Defending and pursuing claims arising from agreements with our business partners (Article 6(1)(f) GDPR).

    Providing your personal data is necessary to establish and maintain business cooperation with Hishoo.

  7. Candidates for employment at Hishoo:

    • Conducting recruitment processes and evaluating your qualifications, skills, and suitability for the position you are applying for (Article 6(1)(b) GDPR and Article 6(1)(a) GDPR);
    • Storing application documentation for future recruitment processes, provided you give your consent (Article 6(1)(a) GDPR);
    • Fulfilling legal obligations under labor law and other Polish employment regulations (Article 6(1)(c) GDPR).

    Providing your personal data is necessary as specified by labor law for recruitment purposes. Any additional data is voluntary and not a condition for participating in the recruitment process.

  8. Subscribers to our newsletter:

    • Informing about products and services offered by Hishoo and building a positive image (Article 6(1)(f) GDPR);
    • Promoting educational content related to Hishoo’s areas of activity (Article 6(1)(f) GDPR);
    • Direct marketing of Hishoo’s services (Article 6(1)(f) GDPR).

    Providing your personal data is necessary for receiving the newsletter.

5. Data Retention Period

We retain personal data based on the type of individuals and the data being processed:

  1. Visitors and users of our Websites:

    • IP addresses are stored as long as they are archived in server logs;
    • Information stored in cookies is retained according to the retention periods in the cookie section of the Policy.

  2. Individuals who visit or follow Hishoo profiles on social media platforms:

    • Data is stored as long as you follow or interact with our profiles. Your interactions (e.g., comments, likes) may remain visible after you stop following us until they are removed.

  3. Individuals contacting Hishoo via online forms, telephone, email, or other communication channels:

    • Data is stored as long as necessary to resolve your inquiry;
    • Data required for legal defense or claims are stored for the legally prescribed periods.

  4. Participants of Hishoo webinars:

    • Data is retained as long as legally required for claim limitation periods;
    • If you consent to receive marketing information during webinar registration, data is stored until you withdraw your consent.

  5. Customers or potential customers of Hishoo:

    • Data is stored throughout the contract’s duration and thereafter for the legally required retention periods for tax and accounting documentation or for claim limitation periods.

  6. Representatives of Hishoo’s business partners:

    • Data is stored as long as required by tax law;
    • Additional data for legal defense or claims arising from agreements with partners is stored as long as legally necessary for claim limitation periods.

  7. Candidates for employment at Hishoo:

    • If you do not consent to processing your personal data for future recruitment, the data is deleted immediately after the recruitment process for the specific position ends;
    • If you consent to future recruitment processes, your data is stored for no longer than 2 years or until you withdraw your consent;
    • If your candidacy is referred by an employee within a referral program, and you do not complete the application form sent to your email, your data is deleted within 30 days or after the recruitment closes.

  8. Newsletter subscribers:

    • Data is stored until you withdraw your consent to receive the newsletter.

6. Who We May Disclose Your Personal Data To

Below is a list of entities to whom we may disclose your personal data:

  1. Individuals visiting and using our Websites:

    • IT service and system providers, including analytical tools used to manage our website and analyze user statistics;
    • Legal advisors and consultants supporting Hishoo, to the extent that disclosure of data is necessary to use their services.

  2. Individuals visiting or following Hishoo profiles on social media platforms (Facebook, LinkedIn, YouTube) and interacting with them:

    • Social media operators;
    • Entities contracted to manage our social media profiles;
    • IT service and system providers used to manage social media profiles;
    • Legal advisors and consultants supporting Hishoo, to the extent that disclosure of data is necessary to use their services.

  3. Individuals contacting Hishoo via online forms, telephone, email, or other communication channels:

    • Email service operators;
    • IT service and system providers used to manage email and our website;
    • Legal advisors and consultants supporting Hishoo, to the extent that disclosure of data is necessary to use their services;
    • Entities providing business support services, such as courier companies and postal operators;
    • Entities providing direct marketing support for Hishoo, if you have consented to receive marketing information from us.

  4. Participants of webinars organized by Hishoo:

    • IT service and system providers used to organize and manage webinars;
    • Entities providing direct marketing support for Hishoo, if you have consented to receive marketing information from us.

  5. Customers or potential customers of Hishoo:

    • IT service and system providers used to manage the business;
    • Legal advisors and consultants supporting Hishoo, to the extent that disclosure of data is necessary to use their services;
    • Payment operators, limited to information related to payments for services purchased from Hishoo;
    • Entities providing business support services, such as courier companies and postal operators;
    • Entities providing direct marketing support for Hishoo, if you have consented to receive marketing information from us.

  6. Representatives of Hishoo’s business partners (advisors or consultants, contractors, and service providers):

    • Accounting and financial service providers supporting Hishoo;
    • IT service and system providers used to manage the business;
    • Legal advisors and consultants supporting Hishoo, to the extent that disclosure of data is necessary to use their services;
    • Entities providing business support services, such as courier companies and postal operators.

  7. Candidates for employment at Hishoo:

    • IT service and system providers used to manage recruitment processes;
    • Recruitment agencies contracted by Hishoo;
    • Legal advisors and consultants supporting Hishoo, to the extent that disclosure of data is necessary to use their services;
    • Entities providing business support services, such as courier companies and postal operators;
    • If your candidacy is submitted through an internal referral program, the employee who refers you.

  8. Newsletter subscribers:

    • IT service and system providers used to send newsletters.

Since we use the services of Google Cloud Poland Sp. z o.o. (Google Analytics, Google Tag Manager, and Google Ads), Facebook Ireland Limited (Facebook Pixel), Microsoft Corporation (MS Clarity), and GetResponse S.A. (GetResponse), your personal data may be transferred by these entities outside the European Economic Area (EEA) based on standard contractual clauses (Article 46(2)(c) GDPR) or other appropriate safeguards as provided by the GDPR. All inquiries regarding data transfers outside the EEA should be addressed directly to these entities. More information can be found at:

7. Your Rights

In connection with the processing of your personal data, you have the following rights:

  • Right to access and rectify your personal data: You have the right to access information about yourself and to rectify any inaccurate data.

  • Right to delete personal data or limit processing: At your request, we will delete personal data collected about you after fulfilling the purpose for which the data was collected. You have the right to request at any time that we delete your data or limit its processing.

  • Right to data portability: Where personal data is processed automatically for the purpose of contract performance (Article 6(1)(b) GDPR) or based on your consent (Article 6(1)(a) GDPR or Article 9(2)(a) GDPR), you have the right to receive your personal data in a structured, commonly used, machine-readable format and the right to transmit that data to another data controller without obstruction from us.

  • Right to object to data processing: Where personal data is processed for Hishoo’s legitimate interests (Article 6(1)(f) GDPR), you have the right to object to the processing of your personal data.

  • Right to lodge a complaint with a supervisory authority: If you believe that the processing of your personal data violates applicable data protection laws, you have the right to file a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office in Warsaw.

  • Right to withdraw consent: If we process personal data based on your consent, you have the right to withdraw the given consent at any time, without affecting the legality of the processing carried out on the basis of consent before its withdrawal.

If you wish to exercise any of your rights, please contact us via email at wm@hishoo.me or in writing at our address: Hishoo Prosta Spółka Akcyjna, 15A Żniwna St., 81-586 Gdynia, with the note “GDPR.”

8. Automated Decision-Making

We do not use any information you provide to make automated decisions within the meaning of Article 22 of the GDPR.

9. Analytical and Marketing Tools

We use various tools and solutions for analytical and marketing purposes. Below are basic details about these tools. For more specific information, you can consult the privacy policies of the respective partners.

  • Facebook Page Insights: We use Facebook’s Page Insights feature on our fanpage. This feature allows us to view aggregated and anonymized data about users visiting our fanpage and to understand user actions. Data processed in this feature is co-controlled by Facebook Ireland Limited. All questions regarding this feature should be directed to Facebook. More details can be found here.

  • Google Analytics: We use Google Analytics on our Websites. Google Analytics cookies are used by Google to analyze how users interact with our Websites and to create statistics and reports on their functioning. Google does not use the collected data to identify users or combine it for identification purposes. More information on data collection and its rules can be found here.

  • Google Tag Manager: We use Google Tag Manager on our Websites. This system manages JavaScript and HTML tags, which are small pieces of code used to measure website traffic and analyze visitor behavior. More information on privacy practices for Google Tag Manager can be found here.

  • Google Ads: We use Google Ads on our Websites to measure the effectiveness of marketing campaigns carried out by Hishoo. This platform allows us to analyze data, such as keywords and unique users, and display our ads to individuals who have visited our Websites. More information can be found here.

  • Facebook Pixel: We use Facebook Pixel on our Websites. This tool measures the effectiveness of marketing campaigns on Facebook, providing advanced data analysis for optimizing our activities. More details can be found here.

  • Hotjar and MS Clarity: We use Hotjar and MS Clarity on our Websites. These tools allow us to monitor user traffic, create click maps, and analyze user pathways. More information on Hotjar’s data collection can be found here and for MS Clarity here.

10. Social Media

We process personal data of users who follow Hishoo profiles on social media platforms such as Facebook, LinkedIn, and YouTube, and interact with those profiles. Detailed information on how data is processed by individual platforms can be found at the following links:

11. Changes to the Privacy Policy

The provisions of the Hishoo Privacy Policy may be subject to improvements and changes. The most recent versions will always be published on our website, and they will be marked with the date of the last update. This policy is effective as of September 13, 2024.