SkyWest Sp. z o.o. Sp. k. respects the right of the Users of its services to privacy and guarantees them it will make available information that concerns them. We put forward our best effort to keep your information private, and to process the personal data of our Users according to the provisions of the Polish law and EU law in force, in particular GDPR (RODO)—General Data Protection Regulation of the European Parliament and the EU Council, no 2016/679 of the 27th of April 2016 in regard to the protection of natural persons as far as the processing of personal data is concerned and with regard to the free movement of such data, revoking Directive 95/46/WE (general ordinance on data protection).
We are publishing this Privacy Policy to explain the rules and methods we follow to gather, process, and use the information about the Users of our Internet Service, skywest.pl, and most of all:

• Who is the data administrator,
• What type of data is processed,
• What is the purpose of data processing,
• How we protect personal data,
• How long data may be processed,
• What rights are granted in regard to data processing,
• To whom we make the data available, and,
• Whether the data is transferred outside the EEA.

The data administrator is SkyWest Sp. z o.o. Sp. k., with its headquarters in Warsaw, entered into the register of entrepreneurs by the District Court for the capital city of Warsaw, based in Warsaw, XII Economical Department of the State Court Register, KRS: 0000559765, NIP: 527 273 73 55, REGON: 361599508.

It is the Administrator, the contractor of the Internet Service, who sets the purpose and use of data for processing, which determines how your data will be used.

For all matters concerning personal data processing, as well as fulfilling rights related to data processing, please contact by e-mail: oliwia.pawlega@skywest.pl; or by post to address: 51 Prosta Street, 00-838 Warsaw.

In our Internet Service, we collect the following personal data:

1. Registration
   Data introduced at registration will be used to create and run your account. Registration is a prerequisite for us to provide our marketing service.
2. Newsletter
   Data introduced during sign-up for our newsletter will be used exclusively for the purpose of sending it to the e-mail address given by you. At any given moment, however, you are free to unsubscribe from the newsletter.
3. Career
   Personal data collected during the recruitment process will be used to contact persons interested in our job offers. The collected data, including qualifications, will also be used during subsequent recruitment processes with your prior consent for future data processing.
4. Contact
   Information, in particular personal data, gathered during correspondence with you will be used to reply to a question, application, offer of cooperation, order for a conversation, refund request, occasional well-wishes, and so on.

Data we process in relation to our service include: name (names), surname, e-mail address, phone number, address, headquarters, and current position in your company.

During your activity on our Internet Service, the following data are collected: visited pages, duration of visit, clicks, browsing history, information about the end device and the browser, including its localisation—IP address, browser type.

Personal data are processed to:

• carry out the contract for a service provided (legal basis: art. 6 par. 1 lit. b) RODO),
• carry out legally justified administrator interests, which is the marketing of products and services as well as personalisation of the offer (legal basis: art. 6 par. 1 lit. a) and f) RODO),
• identity verification (of the person to whom the service is provided) (legal basis: art. 6 par. 1 lit. c) RODO),
• billing and financial statements (legal basis: art. 6 par. 1 lit. c) RODO),
• establishing, bringing, and defending claims, in principle, up to 10 years in view of the binding periods (art. 6 par. 1 lit f) RODO and art. 118 and following of the Civil Code).

We do our best to provide our services in a way that protects this information from accidental or purposeful destruction or loss:

• communication between our server and your computer while processing personal data is encrypted with the protocol SSL (Secure Socket Layer),
• our databases are protected from access by uncertified users,
• our Internet Service is placed on the servers of a trustworthy hosting company where the processing of personal data is exclusively conducted in hosting centres in Poland.

Your data will be stored/processed as long as there exists a basis for their processing, which is:

• in the case of granting consent until its removal or its restriction,
• in the case when data concerns a contract, during the contract and until the moment no claim can be made resulting from the contract (in principle: 3 years or 10 years + 1 year—in regard to personal data processed for the purpose of establishing, bringing, or defending claims, the length of the period depends on whether both sides are legal entrepreneurs or not),
• for tax purposes and accounting reporting, within and during the period(s) set by binding provisions,
• in the case when the basis for data processing is in the justified interest of the administrator, until the moment of filing an effective withdrawal of consent.

According to RODO regulations, every person is granted the following rights in regard to the processing of personal data:

• right to access data and to obtain a copy of the data,
• right to demand correction of data,
• right to transfer data,
• right to remove data,
• right to restrict data from further processing,
  • right to withdraw consent,
• right to file a dissent to processing of one’s personal data,
• right to file a complaint to a supervisory body on the protection of personal data.

Personal data may be made accessible to a minimal extent, indispensable for the accomplishment of the service and legal requirements, to subjects processing personal data on behalf of the Administrator, among which are: information-services providers, marketing agencies, carriers, and other subjects and contractors carrying out services for the Administrator according to concluded contracts. We ensure that such subjects process personal data based on a separate agreement with the Administrator, keeping intact the preservation of confidentiality and data security.

Your data may also be made accessible to subjects allowed to obtain them resulting from legal force, such as investigatory authorities or agencies that collect past-due payments, within the range authorised by law.

Data will not be transferred to a third country outside the European Economic Area (EEA).

• As for matters not regulated by the present Privacy Policy, the regulations on the protection of personal data are in force;
• Users will be notified about every modification introduced to the present Privacy Policy via e-mail;
• This Privacy Policy is in force from 25th of May 2018.