Privacy
Privacy
Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “General Regulation”) or GDPR), we inform you that:
1. The co-controllers of your data are:
The first co-administrator: Rafał Gulajski conducting business activity under the name: Firma Gulajski Rafał Gulajski ul. 1-go Maja 7e, 42-674 Kopienica, with NIP: 969-031-13-36, entered into the Central Registration and Information on Business of the Republic of Poland.
Second co-controller: OWD TECH Spółka z ograniczoną odpowiedzialnością sp.k. with its registered office: 1-go Maja 7e, 42-674 Kopienica, conducting business activity on the basis of an entry in the National Court Register kept by the District Court in Gliwice, X Commercial Division of the National Court Register, KRS no.: 0000713976, NIP: 645-255-44-21.
As part of the joint controllership agreement between the joint controllers, we have agreed on the scope of our responsibilities regarding the fulfilment of obligations under the GDPR:
– The first of the Joint Controllers is responsible for the performance of the information obligation. The Data Owner will receive detailed information on the obligations regarding the processing of personal data by the Joint Controllers by contacting any of them
– Each of the Joint Controllers is responsible for enabling the exercise of the rights of the Owner of personal data, and the First Joint Controller is responsible for fulfilling the requests of the Owner of personal data.
2. We have established a common point of contact. The co-controllers can be contacted in writing, by traditional mail to the following address: 1-go Maja 7e, 42-674 Kopienica or by e-mail: monika@gulajski.pl or in person at the premises of the joint controllers.
3. Personal data will be processed for the purpose of:
Purpose of processing | Legal basis and retention period | Legitimate interest (Article 6(1)(f) of the GDPR), if there is a |
Activities aimed at concluding and performing a contract with a customer or contractor | Article 6(1)(B) (for customers) Article 6(1)(f) of the GDPR (applies to persons cooperating with us on behalf of the client/contractor) In the case of offers and inquiries that have not been implemented for a period of 6 months. In the case of contracts and performance – for a period of 5 years from the issuance of the final invoice in accordance with accounting regulations or for the period of warranty and guarantee. Until the statute of limitations for possible claims expires. Depending on which period is longer. | The need to contact employees/associates of customers and contractors in connection with the actions taken to conclude and perform the contract and after-sales service |
Handling of complaints, requests and complaints | Article 6(1)(b), (c) and (f) of the GDPR For the duration of the contract or until the warranty expires or the warranty is settled | The need to contact customers’ employees/associates in connection with the handling of complaints, requests and complaints. |
Establishing, pursuing and defending claims | Article 6(1)(f) of the GDPR For the time until the expiry of the limitation periods for claims arising from the agreement – in accordance with the applicable law | Processing of data of customers or contractors and their employees/associates in connection with the establishment, investigation and defense of claims |
Settlements, accounting and financial reporting | Article 6(1)(c) of the GDPR For the period until the expiry of the obligations regarding the storage of data, resulting from the provisions of law, in particular the storage of accounting documents (as a rule, for 5 years after the year in which the legal event that obliged to issue the accounting document occurred) | |
Keeping statistics | Article 6(1)(f) of the GDPR For the duration of another processing operation indicated in this table. We do not store personal data only for statistical purposes. | Improve your business with insights from statistical activities |
Monitoring at the data controller’s headquarters in order to increase work safety and property protection and maintain information secrecy | Article 6(1)(f) of the GDPR Image recordings are processed only for the purposes for which they were collected and stored for a period not exceeding 3 months from the date of recording or until a justified objection is raised, unless the recording constitutes evidence in the proceedings – then until the final conclusion of the proceedings | Pursuant to Article 222 of the Labour Code – in the case of employees |
Contact form on the website | Article 6(1)(f) of the GDPR The data will be processed until an objection to the processing of data is raised | Handling inquiries, preparing offers |
Processing of cookies | Article 6(1)(f) of the GDPR The Administrator uses necessary cookies to enable the operation of basic functions of the website. In addition, in the case of conducting statistical research, marketing or saving user preferences with the use of cookies, the administrator will obtain consent to save cookies on the user’s device. In this case, the data will be processed until an objection to the processing of data is raised. Objection can only be made by clicking on the “Change cookie consents” option. | To enable the basic functions of the website. Adapting the content of websites to the needs of users, including for marketing and statistical purposes, optimization of the use of websites |
Management of human resources – employees and associates as well as apprentices | Article 6(1)(a), (b), (c) and (f) of the GDPR In accordance with the applicable regulations obliging us to archive documents in the field of labour law, i.e. we store personal files for 50 or 10 years. The 10-year retention period for documentation in matters related to the employment relationship and the employee’s personal files is applied to all employees hired after 1 January 2019. In the case of employees hired after 31 December 1998 and before 1 January 2019, documentation related to the employment relationship and the employee’s personal files will be stored for 50 years from the date of termination or expiry of the employment relationship. If the retention period for selected documents is shorter, the administrator will respect this shorter period. Civil law contracts will be stored until the expiry of the limitation periods for claims arising from them. We store ECP data for a period of 4 years. | Dissemination of the image on the basis of copyright consent |
Recruitment | Article 6(1)(a), (b) and (c) of the GDPR Up to 6 months from the end of the recruitment process, and in the case of consent for further recruitment processes, no longer than one year. |
If the deadlines for storing documents indicated in the column “Settlements, accounting and financial reporting” are longer than the deadlines appropriate for pursuing possible claims, longer periods shall apply.
4. Data recipients
In connection with their business, the joint controllers will disclose your personal data to the following entities:
– State authorities or other entities authorized to receive data on the basis of legal provisions
– Entities supporting us in our activities on our behalf, in particular: occupational medicine clinics, External Accounting and Bookkeeping Office, external health and safety service, entity managing the website, insurance companies – group insurance, Investment Fund Company – PPK, Polish Post, courier companies, external IT service, insurance and debt collection companies, attorneys and legal advisors.
– customers or their representatives, hotels, suppliers, contractors, subcontractors
– In the case of job candidates – to online portals posting job advertisements
5. Right to process data and voluntary provision
Each person whose data is processed by the joint controllers has the right to:
– access your data and receive a copy of it,
– rectify (correct) their data,
– delete your data,
– limit the processing of your data,
– transfer their data – if the basis for processing is consent (Article 6(1)(a) or Article 9(2)(a) of the GDPR)
– object to the processing of their personal data – if the legal basis for their processing is a legitimate interest (Article 6(1)(f) of the GDPR),
– withdraw consent at any time, without affecting the lawfulness of the processing that was carried out on the basis of consent before its withdrawal
For more information on your rights as a data subject, please refer to Articles 12-23 of the GDPR.
In addition, the person whose data is processed by the co-controllers has the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection , 2 Stawki Street, 00-193 Warsaw.
6. Necessity to provide your data
Providing data is necessary to conclude contracts, orders, perform the offer and settle the business conducted by the co-controllers in accordance with the requirements of the law. This means that if you want to purchase the products and services we offer, become our contractor (supplier) or employee/collaborator, you must provide your personal data.
In the remaining scope, providing data is voluntary.
7. Transfer of data to third countries
We do not transfer data outside the Polish/EU\European Economic Area
8. Processing of personal data by automated means
Your personal data will not be used for the purpose of automated decision-making (including in the form of profiling) in such a way that as a result of such automated processing, any decisions could be made that would have legal effects or similarly affect any effects on customers, contractors, their employees/associates, as well as employees/associates of the administrator or job candidates.