AllAboutIn short
We contacted you as a representative of a company - by e-mail, via LinkedIn or by phone - about the AllAbout app. We did not obtain your contact details from you, so under Article 14 GDPR we are letting you know where we got them, what we use them for and how long we keep them.
Don't want to hear from us? Just reply "no" to our message or write to office@expansio.pl. You do not need to give a reason. We will stop contacting you about our services.
1. What this notice covers
This notice applies to people working at companies and other organisations with whom we establish or maintain business contact about our services - above all the AllAbout employee communication app - where we reach out first (by e-mail, via LinkedIn or by phone) and obtained your contact details from sources other than you.
It does not apply to users of the AllAbout app or to people who filled in a form on this website themselves - those situations are covered by the Privacy Policy.
2. Who the data controller is
The controller of your personal data is Expansio Sp. z o.o., with its registered office in Poznań (60-685), ul. Królewska 21/8, Poland, entered in the register of entrepreneurs of the National Court Register kept by the District Court Poznań - Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register, under KRS number 0000611872, NIP (tax ID) 9721262893, REGON 364151889, share capital PLN 5,000 ("Expansio", "we").
3. Contact on personal data matters
- by e-mail: office@expansio.pl,
- by post: Expansio Sp. z o.o., ul. Królewska 21/8, 60-685 Poznań, Poland.
Expansio has not appointed a data protection officer within the meaning of Article 37 GDPR, as it is not required to do so. Personal data matters are handled by a designated data protection specialist, who can be reached at the e-mail address above.
4. Where we got your data
Your data may come from one or more of the following sources:
- publicly available professional profiles, mainly on LinkedIn,
- company websites and other publicly available company materials (e.g. press releases, information about conference talks),
- providers of B2B contact databases (e.g. Lusha, Apollo.io),
- people from your company or our business contacts who pointed to you as the right person for the matter,
- previous correspondence or conversations with you or your company.
If you would like to know which source your data came from, write to office@expansio.pl - we will tell you if we know.
5. What data we process
- first name and last name,
- job title and the name of your employer (the company you work for), and your place of work or plant if it appears in these sources,
- business e-mail address and business phone number,
- your LinkedIn profile address and the professional information publicly visible on that profile, including posts you have published publicly and information about a change of job title or employer,
- the content of your correspondence with us and our notes from conversations (e.g. what was agreed, the date of the next contact, the fact that you declined).
We do not intentionally collect special categories of data (e.g. health data) or information about your private life unrelated to your professional role.
6. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Establishing and maintaining business contact with company representatives about our services (the AllAbout app), including presenting our offer and arranging a call or demo | Article 6(1)(f) GDPR - Expansio's legitimate interest in direct marketing of its own services to businesses (B2B) and in communicating with representatives of existing and potential business partners |
| Respecting your objection - so that we do not contact you again | Article 6(1)(f) GDPR - legitimate interest in demonstrating and complying with the objection |
| Establishing, exercising or defending legal claims | Article 6(1)(f) GDPR |
We send e-mails and make calls about our services only to business contact details and only on matters related to your professional role.
7. Who we share data with
We do not sell your data or share it with other companies for their own marketing. Your data is accessible to authorised people at Expansio and to the IT service providers we use to handle correspondence and our contact database - only to the extent needed to provide those services:
- Google (Google Workspace) - e-mail for the expansio.pl domain,
- Hostinger - e-mail for the zadbajokomunikacje.pl and expans.io domains,
- ClickUp - the CRM system in which we keep our contact database and notes from conversations,
- LinkedIn - when we contact you through LinkedIn, the correspondence is processed by its operator, also under its own terms described in the LinkedIn privacy policy,
- Apify - a tool we use to retrieve publicly available information from LinkedIn profiles and posts,
- OVH - the server on which we keep working lists of contacts and correspondence,
- Anthropic - the provider of an artificial intelligence tool we use to organise our contact database and prepare correspondence,
- entities authorised by law (e.g. courts, law enforcement authorities) - only upon their lawful request.
8. Transfers outside the European Economic Area
Some of the providers listed above (in particular ClickUp, LinkedIn, Google and Anthropic) are based in or process data in the United States, so using their services may involve transferring data outside the European Economic Area. Such transfers are based on the European Commission's adequacy decision under the EU-US Data Privacy Framework - for providers participating in that programme - or on the standard contractual clauses approved by the European Commission, as applied in the data processing terms of the provider concerned.
You can find out which safeguard applies to a specific provider and obtain a copy of those safeguards by writing to office@expansio.pl.
9. How long we keep data
| Situation | Retention period |
|---|---|
| No reply from you | until you object or until the contact is no longer current (e.g. a change of employer); we review the contact database at least once a year and delete outdated entries |
| You object | we stop using your data to contact you about our services; we keep only the data needed to make sure we do not contact you again (name, company name, e-mail address or LinkedIn profile address, date of the objection) |
| Your company and Expansio start working together | in line with the terms of that cooperation - for its duration and then for the limitation period for claims |
| Data needed to establish, exercise or defend legal claims | until the claims become time-barred |
10. Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy, including information about the source we got it from,
- rectification of inaccurate or incomplete data (e.g. if you have changed your job title or employer),
- erasure of data - in the cases set out in Article 17 GDPR,
- restriction of processing - in the cases set out in Article 18 GDPR,
- object to processing for direct marketing - at any time and without giving a reason. Simply reply "no" to our message or write to office@expansio.pl. Once you object, we no longer use your data for that purpose,
- object to processing based on legitimate interest for the other purposes - on grounds relating to your particular situation,
- lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl, or with the supervisory authority in the EU country where you live or work.
To exercise these rights, write to office@expansio.pl or reply to our message. We respond without undue delay and at the latest within one month; in particularly complex cases this period may be extended by a further two months, in which case we will let you know.
11. Do you have to provide data
No. We do not ask you to provide any data - it was obtained from the sources listed in section 4. You are under no obligation to reply to our message or give us any additional information.
12. Automated decisions
We do not take decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR). Whether and when we contact you is decided by a person.
13. Changes to this notice
We may update this notice when our data sources, providers or the law change. The current version is always available at zadbajokomunikacje.pl/information-for-business-contacts.html. The version date is given at the beginning of the document. In the event of any discrepancy, the Polish version prevails.
This notice is provided under Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).
Expansio Sp. z o.o. ul. Królewska 21/8, 60-685 Poznań, Poland KRS 0000611872 · NIP 9721262893 · REGON 364151889 office@expansio.pl