Data Protection on the Website | MAN Shared Services Center

1. General information

This policy applies to the website operating at the following URLs: manssc.pl, manssc.eu, manssc.com.pl, manssc.de, manssc.com
The website operator and data controller is: MAN Shared Services Center Sp. z o.o., ul. Kolorowa 6, 60-198, Poznań, NIP: 525-23-50-920
The operator’s email contact address: man.ssc@man.eu
The operator is the controller of your personal data in relation to the data provided on the website.
The Website uses personal data for the following purposes:
- Presentation of offers or information
The Website collects information about users and their behaviour in the following ways:

- - Through data voluntarily entered into forms, which is then fed into the Operator’s systems.
  - By storing cookies on end-user devices.

The processing of your data is justified on the following legal bases:

- Consent: The data subject has consented to the processing of their personal data.
- The controller’s legitimate interests.

Login pages and areas where personal data is entered are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the destination server.
The Operator periodically changes its administrative passwords.
To minimise the risk of unauthorised access to data, the Operator uses complex passwords comprising lower-case and upper-case letters, numbers and special characters, and no shorter than 8 characters.
A key element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular involves regular updates to software components.
To protect data, the Operator regularly performs backups.

The website is hosted (technically maintained) on the Operator’s server: cyberFolks.pl
To ensure technical reliability, the hosting provider maintains logs at server level. The following may be logged:
- resources identified by a URL (addresses of requested resources – pages, files),
- the time the request was received,
- the time the response was sent,
- the client’s hostname – identified via the HTTP protocol,
- information about errors that occurred during the HTTP transaction,
- the URL of the page previously visited by the user (referrer link) – where the user accessed the Website via a link,
- information about the user’s browser,
- information about the IP address,
- diagnostic information relating to the process of self-ordering services via the order forms on the website,
- information relating to the handling of emails sent to the Operator and sent by the Operator.

In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to fulfil the contract concluded with you or to fulfil the Controller’s obligations. This applies to the following groups of recipients:
- a hosting provider acting as a data processor
- authorised employees and associates who use the data to fulfil the purpose of the website
Your personal data is processed by the Controller for no longer than is necessary to carry out the related activities specified in separate regulations (e.g. on accounting). (the section on marketing activities has been removed here)

In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to fulfil the contract concluded with you or to fulfil the Controller’s obligations. This applies to the following groups of recipients:
- a hosting provider acting as a data processor
- authorised employees and associates who use the data to fulfil the purpose of the website
Your personal data is processed by the Controller for no longer than is necessary to carry out the related activities specified in separate regulations (e.g. on accounting). (the section on marketing activities has been removed here)

In certain situations, the Controller is entitled to disclose your personal data to other recipients if this is necessary to perform the contract concluded with you or to fulfil the Controller’s obligations. This applies to the following categories of recipients:
- a hosting provider acting on a data processing basis
- authorised employees and associates who use the data to fulfil the purpose of the website
Your personal data is processed by the Controller for no longer than is necessary to carry out the related activities specified in separate regulations (e.g. on accounting). (the section on marketing activities has been removed here)
You have the right to request from the Controller:
- access to your personal data,
- rectification of such data,
- erasure,
- restriction of processing,
- and data portability.
To the extent that the basis for the processing of your personal data is the controller’s legitimate interest, you have the right to object to the processing of your personal data; however, this right to object cannot be exercised where there are valid legitimate grounds for processing, which override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.

A complaint regarding the Controller’s actions may be lodged with the President of the Office for Personal Data Protection, ul. Stawki 2,
00-193 Warsaw.
Your personal data will not be subject to profiling.
The Controller does not transfer your personal data to a third country or to an international organisation.
Providing personal data is voluntary, but necessary for the operation of the Website.

The Website collects information provided voluntarily by the user, including personal data, where such data is provided.
The Website may record information about connection parameters (timestamps, IP address).
Data provided in a form is processed for the purpose specified by the function of that particular form, e.g. to process a service request. In each case, the context and description of the form clearly state its purpose.

Information about users’ behaviour on the website may be logged. This data is used for the administration of the website.

The cookie policy can be found at: Cookie Policy

If a user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for processes such as authentication, security and the maintenance of user preferences may hinder, and in extreme cases prevent, the use of websites.
To manage your cookie settings, select the web browser you use from the list below and follow the instructions:
- Edge
- Internet Explorer
- Chrome
- Safari
- Firefox
- Opera

Mobile devices: