Privacy Policy

1.Personal data controller

The controller of your personal data, that is, the entity that decides how your data is used, is:

In the remainder of this document, we refer to this company as the “Controller,” “we” or the “Company.”

2.Contact regarding personal data

For any matters concerning the processing of personal data and the exercise of your rights, you can contact us:

• by e-mail: inspektor@coreconsulting.pl (Data Protection Officer),
• by post: at the Company's registered office address indicated in section 1.

The Controller has appointed a Data Protection Officer, whom you can contact in all matters concerning the processing of your personal data:

3.What data we collect and where we obtain it

The scope of data we process depends on how you use our website.

3.1. Free label audit order form

When you fill in the audit order form, we process: your first and last name, business e-mail address, phone number and the content of your message and any other data you voluntarily include in it (e.g. company name, description of the issue).

3.2. Label supplier selection checklist

When you use the interactive checklist and want to reveal your result, we process your business e-mail address, as well as information about the answers you provided in the checklist and the score obtained - in order to send you the result and, if you request it, related materials.

3.3. Direct contact

If you contact us by phone or e-mail, we process the data you provide to us (e.g. contact details and the content of the correspondence).

3.4. Technical data and website usage data

When you use the website, technical data is collected automatically, such as your IP address, browser type and version, operating system, date and time of the visit, pages visited, and data from cookies and similar technologies (see section 8).

4.Purposes and legal bases of processing

We process your data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter “GDPR”):

Purpose of processing	Legal basis
Handling audit requests, the checklist and contact - replying to and fulfilling your enquiry	Art. 6(1)(b) GDPR (steps taken prior to entering into or performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest - handling correspondence)
Direct marketing of our own products and services (including sales contact)	Art. 6(1)(f) GDPR (legitimate interest); in respect of electronic and telephone channels - based on your consent (Art. 172 of the Polish Telecommunications Law / Art. 10 of the Polish Act on Providing Services by Electronic Means)
Analytics, statistics and measuring website effectiveness (analytics and marketing cookies)	Art. 6(1)(a) GDPR (consent given in the cookie banner)
Establishing, pursuing or defending against claims, and legal obligations (e.g. tax)	Art. 6(1)(f) and (c) GDPR

5.Data retention period

• data from enquiries and the checklist - for the period necessary to reply and handle the request, and thereafter for the limitation period of potential claims; for marketing purposes - until you object or withdraw your consent;
• data related to a concluded contract - for the duration of the contract and for the limitation period of claims and the period resulting from tax regulations;
• data processed on the basis of consent - until the consent is withdrawn;
• data from cookies - for the period indicated in section 8 or until deleted by the user.

6.Data recipients

Your data may be shared with trusted entities that process it on our behalf (processors), in particular:

• entities providing IT services - providers of hosting, IT infrastructure and e-mail;
• providers of tools for handling requests and customer communication;
• providers of analytics and advertising tools - Google Ireland Ltd. (Google Analytics, Google Tag Manager) and LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag);
• entities providing accounting, legal or advisory services - to the extent necessary;
• public authorities - where required by law.

7.Transfers of data outside the EEA

In connection with the use of Google and LinkedIn tools, your data may be transferred to countries outside the European Economic Area, including the United States. The transfer takes place on the basis of appropriate safeguards provided for in the GDPR - standard contractual clauses approved by the European Commission or the Data Privacy Framework mechanism, where the given recipient has joined it.

8.Cookies and tracking technologies

The website uses cookies and similar technologies to ensure that the site functions properly and, with your consent, for analytics and marketing purposes.

Types of cookies used:

• Necessary - required for the website to function properly; they do not require consent.
• Analytics - Google Analytics 4, deployed via Google Tag Manager, used to measure traffic and how the website is used.
• Marketing - LinkedIn Insight Tag and other tags deployed via Google Tag Manager, used to measure the effectiveness of advertising and for remarketing.

We activate analytics and marketing cookies only after you give your consent in the cookie banner. You can change your choice or withdraw your consent at any time by clicking the “Cookie settings” link in the page footer. You can also delete and block cookies in your browser settings - this may result in the loss of the ability to use some features of the website.

Main third-party cookies:

Provider and files	Purpose and retention period
Google Analytics 4 (Google Ireland Ltd.): _ga, _ga_*	distinguishing users and visit statistics; up to 2 years
LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company): bcookie, lidc, li_sugr, UserMatchHistory, AnalyticsSyncHistory	measuring ad effectiveness and remarketing; from 1 day to 1 year

You can check the cookies currently in use and their validity period at any time in your browser settings.

9.Your rights

In connection with the processing of data, you have the following rights:

• the right of access to your data and to obtain a copy of it,
• the right to rectification (correction) of data,
• the right to erasure of data (“right to be forgotten”),
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing based on legitimate interest, including to direct marketing,
• the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before the withdrawal),
• the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (UODO) (ul. Stawki 2, 00-193 Warsaw, Poland).

10.Voluntary provision of data

Providing data is voluntary, but necessary to use selected features of the website - e.g. without a business e-mail address we cannot send you the checklist result, and without contact details we cannot process an audit order. In line with our B2B cooperation policy, we ask for business e-mail addresses.

11.Automated decision-making and profiling

Your data is not used for automated decision-making that produces legal effects concerning you. We may use profiling for analytics and marketing purposes (e.g. tailoring ad content), which, however, does not produce legal effects concerning you or similarly significantly affect you.

12.Changes to the privacy policy

We reserve the right to make changes to this privacy policy. The current version is always published here, together with the date of the last update.