INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA
In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR”), and the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000), we inform you about the principles of personal data processing and your rights related to it.
The following rules shall apply from 25 May 2018:
- The administrator of personal data is:
Sławomir Więsyk conducting business activity under the name EUROPLAST Sławomir Więsyk with its registered office in Łuszczów Drugi 107, 20-258 Lublin 62, NIP 946-117-12-82, REGON number 431239581, e-mail: sekretariat@optimalpoland.pl, tel. 734 855 399, - If a person considers that their personal data is processed contrary to the requirements of the law, they have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection.
- Personal data will be processed primarily for the purpose of preparing an offer, proper performance of the contract, for recruitment purposes, for marketing purposes related to the conducted business activity, and may also be processed for pursuing claims arising from civil law provisions, if any. Providing personal data is voluntary.
- The legal basis for data processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L of 2016 No. 119, p. 1) – hereinafter GDPR, (i.e. processing is necessary for the performance of a contract to which the person is a party or to take action at the request of the person prior to the conclusion of the contract), Article 6(1)(c) of the GDPR (i.e. processing is necessary for compliance with a legal obligation, such as an archiving obligation) and Art. 9 para. 2 lit. f GDPR (i.e. processing is necessary for the establishment, exercise or defence of legal claims).
- The recipients of personal data will be entities to which the Administrator is obliged to provide data under applicable law, including, for example, the Tax Office, as well as entities providing postal services to the Administrator, service or product providers acting on its behalf, subcontractors, companies cooperating in the implementation of contracts, in particular entities providing legal services to the Administrator, IT.
- In connection with the processing of personal data, you have the following rights:
a) the right of access to personal data, including the right to obtain a copy of such data;
b) the right to request rectification (correction) of personal data – if the data is
incorrect or incomplete;
c) the right to request the deletion of personal data (the so-called right to be forgotten), in the case of when:
the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
the data subject has objected to the processing of personal data,
the data subject has withdrawn consent to the processing of personal data, which is the basis for data processing and there is no other legal basis for data processing,
personal data are processed unlawfully,
personal data must be erased in order to comply with an obligation arising from legal provisions;
d) the right to request the restriction of the processing of personal data – if:
the accuracy of the personal data is contested by the data subject,
the processing is unlawful and the data subject opposes the erasure of the data and requests their restriction instead,
The administrator no longer needs the data for his purposes, but the data subject needs them to establish, defend or pursue claims,
the data subject has objected to the processing of data until it is determined whether the legitimate grounds on the part of the administrator override the grounds for objection;
e) the right to transfer data – if the following conditions are met jointly:
data processing takes place on the basis of a contract concluded with the data subject or on the basis of the consent expressed by that person,
the processing is carried out by automated means;
f) the right to object to the processing of data – if the following conditions are met jointly:
- there are reasons related to the particular situation of the person whose data is processed,
- processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except for situations where these interests are overridden by the interests or fundamental rights and freedoms of the data subject requiring protection of personal data, in particular when the data subject is a child.
7. The rights referred to above may be exercised by indicating their requests sent to the following e-mail address: sekretariat@optimalpoland.p.
8. If the processing of personal data is based on the person’s consent to the processing of personal data (Article 6(1)(a) of the GDPR), the person has the right to withdraw this consent at any time. This withdrawal does not affect the compliance of the processing, which was made on the basis of consent before its withdrawal, with applicable law.
9. In a situation where the processing of personal data takes place on the basis of the consent of the data subject, providing personal data to the Administrator by the person is voluntary, but necessary to perform the contract.
10. Providing personal data is mandatory if the prerequisite for the processing of personal data is a legal provision or a contract concluded between the parties.
11. Personal data will be processed by the Administrator for the duration and performance of the contract, and after its completion – until the expiry of the limitation period for possible claims arising from the contract and in connection with the implementation of the 5-year archiving obligation.
12. The Administrator may store personal data for a longer period than indicated only when it results from the obligation imposed on the Administrator by the provisions of generally applicable law.
The data controller does not intend to transfer personal data to a third country or an international organization.
13. The data will not be profiled.
