1. General Provisions

Skyline Invest Sp. z o.o. (hereinafter referred to as the “Company” or “Controller”) acts in accordance with applicable laws and attaches particular importance to the protection of personal data and privacy of natural persons. All actions of the Company concerning personal data are treated as a priority. The Company exercises due diligence to protect the interests of data subjects and ensures that the data are processed in compliance with the provisions of the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and relevant national legislation.
This Privacy Policy defines the principles of personal-data processing, in particular within and in connection with the use of the Company’s website — www.skylineinvest.pl.

2. Definitions

For the purposes of this Policy:
• Controller — Skyline Invest Sp. z o.o., NIP 8133898004, REGON 525347088, KRS 0001036592, with its registered office at ul. Bernardyńska 2, 35-069 Rzeszów, Poland, determining the purposes and means of processing personal data.
• Personal Data — any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified directly or indirectly by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to that natural person’s physical, physiological, genetic, mental, economic, cultural or social identity.
• Website — the website operated by the Controller at www.skylineinvest.pl.
• GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
• User — any natural person visiting the Website or using one or more of its functionalities.

3. Scope and Purpose of the Policy

This Policy applies to all personal data processed by Skyline Invest in connection with:
• browsing or using the Website,
• expressing interest in the Company’s services or partnership,
• contacting the Company via forms, telephone or e-mail,
• recruitment processes,
• activity on the Company’s social-media profiles.
The Website is addressed exclusively to adults. Skyline Invest does not intentionally process data of persons under 18 years of age.

4. Categories of Data and Purposes of Processing

4.1. Website Users

The Company may process information regarding the User’s activity on the Website (e.g. cookies, IP addresses, browser data). Such data are not used to identify Users personally and are processed for:
• analytics and statistics to improve Website functionality — Article 6(1)(f) GDPR (legitimate interest);
• direct marketing of the Company’s own services — Article 6(1)(f) GDPR.

4.2. Clients and Interested Persons

When using the contact form or communicating electronically, Users may provide identifying and contact details (name, e-mail address, telephone number, city). These data are processed for:
• presenting offers of products and services of the Controller and its partners — Article 6(1)(a) GDPR (consent);
• performing direct marketing activities — Article 6(1)(f) GDPR (legitimate interest);
• fulfilling legal obligations — Article 6(1)(c) GDPR;
• archiving purposes — Article 6(1)(f) GDPR.

4.3. Business Partners and Contractors

Skyline Invest processes identification and contact data of business partners and their representatives for:
• conclusion and performance of contracts — Article 6(1)(b) GDPR;
• business communication and relationship management — Article 6(1)(f) GDPR;
• compliance with statutory obligations — Article 6(1)(c) GDPR.

4.4. Job Applicants

The Company processes personal data contained in application documents solely for recruitment purposes, in accordance with Article 6(1)(a), (1)(b) and (1)(f) GDPR, depending on the form of cooperation.

4.5. Correspondence and Communication

When contacting the Company by e-mail or telephone, identifying and contact details (and, in the case of calls, also voice data) are processed for:
• communication and handling of the enquiry — Article 6(1)(f) GDPR (legitimate interest);
• record-keeping and archiving — Article 6(1)(f) GDPR.

5. Cookies

Cookies are small text files stored on the User’s device when using the Website. They enable the Controller to collect statistical data on User activity and analyse Website use to improve its content and structure.
The Website uses:
• session cookies, which are deleted upon closing the browser or ending the session;
• persistent cookies, which are stored for a defined period or until manually removed.
Users may modify cookie settings at any time through their browser settings. Failure to change those settings shall be deemed consent to the use of cookies as described herein.

6. Google Analytics

The Company uses Google Analytics for measurement, analysis and statistical assessment of User activity on the Website. Data obtained in this way are anonymous and not used to identify Users personally.

7. Data Retention and Security

Personal data are retained only for as long as necessary to fulfil the purposes for which they were collected or to meet statutory requirements. Skyline Invest applies appropriate technical and organisational measures to protect data against unauthorised access, loss, or destruction. Entities entrusted with data processing are bound by data-processing agreements ensuring equivalent security standards.

8. Rights of Data Subjects

Each Data Subject has the right to:
• obtain access to their data (Art. 15 GDPR);
• request rectification of inaccurate data (Art. 16 GDPR);
• request erasure of data (“right to be forgotten”) — Art. 17 GDPR;
• request restriction of processing (Art. 18 GDPR);
• exercise data portability (Art. 20 GDPR);
• object to processing, including profiling or direct marketing (Art. 21 GDPR);
• withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Requests may be submitted to the e-mail address kontakt@skylineinvest.pl. The Controller shall respond without undue delay and no later than within one month from receipt, subject to extension pursuant to Article 12(3) GDPR.

9. Contact Details

Controller: Skyline Invest Sp. z o.o. ul. Bernardyńska 2, 35-069 Rzeszów, Poland kontakt@skylineinvest.pl +48 880 212 688
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) or any other competent supervisory authority.

10. Amendments

This Privacy Policy may be updated to reflect changes in legislation or internal procedures. The current version is always available on the Company’s website.