Skip to main content
Kanri by CSHARK

PRIVACY POLICY

I. Your Data Administrator and Processor

Your Data Administrator is CSHARK sp. z o.o., with its registered office in Wrocław, Poland, Wyspa Słodowa 7, 50-266
Wrocław (hereinafter referred to as “CSHARK”).

To exercise your rights, grant or withdraw consent, and discuss all aspects of your Personal Data security, please contact
us at: privacy@cshark.com or send a letter to the above address.

II. Sources of Personal Data

We process data that we receive directly from you, via email sent through our website and in CVs that you send to us. In
such cases, you have full control over the amount of data you disclose to us. We may also process your data disclosed by
third parties (e.g., recruitment agency, our clients).

III. Why, On What Legal Basis and For How Long We Process Your Data

As part of our activities, we may process personal data for the following purposes:

Mail Handling

If you contact us via email, website, or traditional mail, we may process your data based on legitimate interest in
responding to your inquiry.

We process your data for the period necessary to handle correspondence, and we may continue processing for the limitation
period of possible claims.

Disclosure of your data is voluntary but necessary to enable us to contact you in response to your inquiry.

Maintaining Business Relationships

We may process your data as part of our contractual obligations towards you or to take actions at your request before
signing a contract with you or your employer. After concluding the contract, your personal data is processed in connection
with the performance of the contract.

Additionally, we may process your data to fulfill our legal obligation arising from tax law provisions and financial
reporting regulations.

Based on our legitimate interest, we may process your data to pursue or defend possible claims arising from the contract
we signed with you.

We process your data for the period necessary to perform or conclude the contract and to limit the period of possible
claims.

Disclosure of your data is voluntary and necessary to enable you to sign a contract with us and perform the contract.

Recruitment

We may process your personal data listed in Article 22 [1] of the Labor Code as part of the current recruitment process.
In such case, the basis for data processing is actions taken before signing a contract. If you disclose more personal data,
the basis for their processing will be your consent.

Based on your consent, we may process your data for future recruitment purposes.

Your personal data will be processed for the duration of the given recruitment process (including possible pursuit or
defense of claims), and if you consent to participate in future recruitment processes – for a period of 5 years or until
withdrawal.

Disclosure of your data is voluntary, but to the extent resulting from Article 22 [1] of the Labor Code, it is necessary
to enable you to participate in recruitment.

Marketing and Advertising

We may process your personal data based on your consent for informing, promoting, and undertaking marketing activities by
CSHARK directed at current and potential company clients.

Data may be processed through social networks such as Facebook, Instagram, Twitter, YouTube, LinkedIn for marketing
purposes.

Your data may be processed until you withdraw your consent to their processing.

IV. What Are Your Data Protection Rights?

According to general principles, you have the following data protection rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing (when the basis for processing is CSHARK’s legitimate interest)
  • Right to withdraw consent (when the basis for processing is your consent)
  • Right to lodge a complaint with a supervisory authority

The exercise of the above rights depends on the conditions specified in Regulation (EU) 2016/679 of the European
Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal
data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR”. In case of
rejection of your request, you will receive a justified response.

Please note that:

The right to erasure will be granted only in cases listed in GDPR provisions, i.e.:

  • Data is no longer necessary for the purposes for which it was collected by CSHARK in the first place
  • You withdraw your consent to data processing
  • You object to the processing of your data
  • Your data is processed unlawfully
  • Your data must be erased to comply with a legal obligation

CSHARK may refuse to delete personal data if any of the conditions mentioned in GDPR is met, e.g., if data processing is
required to fulfill a legal obligation or for the establishment, exercise or defense of legal claims.

The right to restriction of processing will be granted only in cases listed in GDPR provisions, i.e.:

  • You notice that your data is incorrect – you can request restriction of its processing for the period necessary for
    verification
  • Your data is processed unlawfully, but you oppose its deletion, requesting restriction of its processing
  • Your data is no longer needed by us, but you may need it to defend or make claims
  • You object to the processing of your data – until it is determined whether our legitimate interests override the basis
    for your objection

The right to data portability will be granted only in cases where the legal basis for personal data
processing is consent or contract performance, and processing is carried out in an automated manner.

In some cases, we may refuse your objection to data processing based on CSHARK’s legitimate interest if there is a
legitimate basis for data processing that overrides the interests or fundamental rights and freedoms of the data subject, or
when there are grounds for establishing, pursuing or defending legal claims. CSHARK will not be entitled to such power if
data is processed for direct marketing purposes.

V. Recipients of Personal Data

Your personal data may be shared with third parties that process personal data on behalf of CSHARK, e.g., accounting
services, IT service providers – whereby these entities process data based on a contract with us and according to our
instructions. We may disclose your personal data to other recipients if necessary for a specific processing purpose, e.g.,
banks, postal operators, law firms, our clients, recruitment software providers. Your personal data may also be shared with
entities authorized by law, including judicial authorities.

VI. Social Media Processing and Data Co-Management

CSHARK processes personal data within profiles and accounts on social media such as Facebook, LinkedIn, Twitter, YouTube,
and Instagram. Personal data is processed for the purpose of:

  • Operating fan pages and groups on social networking sites Facebook, LinkedIn, or Instagram, in accordance with the
    conditions set by the administrators of these sites and in accordance with the rules and regulations of these sites
  • Communicating through fan pages and social media accounts about CSHARK’s activities and initiatives, including promoting
    events, services, and products
  • Communicating using available features of these services, such as responses to reactions, comments, and private
    messages
  • Analyzing the activity of users of our profiles, including collecting data on the number of likes, comments, and shares
    of our profile or content posted on it, for statistical and advertising purposes using tools provided by social networks

The basis for data processing is CSHARK’s legitimate interest in promoting its brand, maintaining its image, conducting
direct marketing, and providing contact opportunities and effective communication.

Service providers are joint controllers of personal data:

Joint management includes data processing for statistical and advertising purposes and data analysis to display statistics
on fan page user activity. The rules of joint data management and the principles of personal data processing by the
mentioned providers as independent data controllers are available on their websites.

VII. Automatic Data Collection

Cookies are small text files placed on your computer by websites you visit. They are widely used to ensure the proper
functioning of websites or make them more efficient, as well as to provide information to website owners.

Our website may use the following types of cookies:

  • Essential cookies – necessary for the proper functioning of our website. It is not possible to disable
    them as they are necessary for the provision of electronic services.
  • Analytical cookies – used to analyze your behavior on our website. They allow us to analyze traffic on
    our website and improve its effectiveness.
  • Marketing cookies – record your visit to our website, the pages you visit, and the links you click. The
    collected information helps us make our website and the content displayed on it (including marketing) more relevant to your
    interests and measure the effectiveness of marketing or information activities. We may share information with external
    entities for this purpose.

You can stop providing us with this data at any time by deleting cookies from your device. To do this, you need to change
your web browser settings. You can also enable cookie blocking for all or selected websites.

If you don’t know how to manage cookies, you can find this on your web browser’s page:

  • Google Chrome
  • Microsoft Edge
  • Mozilla Firefox
  • Microsoft Internet Explorer
  • Opera
  • Apple Safari

We analyze the data we collect using solutions provided by external providers. We currently use Google Analytics, provided
by Google Inc. (“Google”). Information generated by cookies relates to the use of our website and is not personally
identifiable due to anonymous IP address recording.

Additionally, we use social media plugins. Data collected in connection with social media plugins can only be transmitted
between your web browser and the selected social media operator. We have no way of knowing the collected and transmitted
data. Therefore, we encourage you to familiarize yourself with information about data processing on social media operators’
websites:

VIII. Transfer of Personal Data to Third Countries

CSHARK also cooperates with providers based outside the European Economic Area (EEA). Therefore, your personal data may be
transferred outside the EEA when necessary and an adequate level of protection is ensured. We ensure that standard
contractual clauses adopted by the European Commission under the screening procedure form the basis for any data
transfer.

IX. Changes to Our Privacy Policy

We may change this Privacy Policy at any time, especially when there is a change in regulations, technology, or the way
our website operates. You can always find the most current version of our Privacy Policy on our website.

Features

Production Manager

Supervisor

Operator

Get to know us

Contact

Request a demo

Kanri by CSHARK

CSHARK Sp. z o.o.
Wyspa Słodowa 7
50-266 Wrocław
NIP: 8971801698
cshark.com

Contact

office@kanrisoft.eu

Features

Meet Us

Kanri by CSHARK

Rynek 36/37
50-102 Wrocław
NIP: 8971801698

Contact

office@kanrisoft.eu

© 2025 Kanri by CSHARK ▪ Privacy Policy