Information Clause on Personal Data Processing
Due to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as: GDPR, we inform you that:
1.
The Controller of your personal data is PBS IT Sp. z o.o. with its registered office in Odrano-Wola (05-825), Błękitna 21C, a company registered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw, XIV Commercial Division of the National Court Register under number 0000382284, NIP 5291793780, REGON 142876771 (hereinafter referred to as: the Controller);
2.
The Controller has appointed Kinga Seweryn as the Data Protection Officer, who can be contacted at the e-mail address: iod@probs.pl or by sending correspondence to the Controller's registered office with the note "DPO";
3.
Your personal data is processed by PBS IT Sp. z o.o. based on:
- Article 6(1)(a) GDPR if such consent is required in a given process,
- Article 6(1)(b) GDPR in the scope of:
- activities aimed at concluding a contract (including preparing commercial information),
- concluding a contract and its subsequent handling,
- conducting identification or verification and checking identity in connection with the concluded contract,
- making current settlements, considering possible complaints and claims.
- Article 6(1)(c) GDPR in the case of:
- documenting contract settlements for tax and balance sheet purposes,
- Article 6(1)(f) GDPR in the scope of:
- pursuing the Controller's legitimate interest consisting in the possible establishment or pursuit of claims or defense against claims.
4.
Your personal data will not be transferred to other entities, except for entities authorized to process it under applicable law and entities providing services necessary for current operations, with which the Controller has concluded data processing agreements in accordance with Article 28 GDPR;
5.
Your personal data will be processed:
- until consent is withdrawn and/or no longer than until the case during which the data was collected on the basis of consent is completed,
- for the period resulting from concluded contracts, as well as for the period necessary for their settlement, reporting possible claims,
- for a period not longer than 5 years from the end of the calendar year in which the final contract settlement occurred,
6.
You have the right to:
- access personal data, in accordance with Article 15 GDPR,
- rectify your personal data, in accordance with Article 16 GDPR,
- request the Controller to restrict the processing of personal data, in accordance with Article 18 GDPR, however, subject to the cases referred to in Article 18(2) GDPR,
- withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal in relation to data processed on the basis of consent given by you, based on Article 6(1)(a) GDPR,
- delete personal data, in accordance with Article 17 GDPR, in the scope of data to which you have given consent,
- object to data processing, for reasons related to your particular situation, in the case when your data processing will be based on the premise specified in Article 6(1)(f) GDPR, taking into account the provisions of Article 21 GDPR,
- lodge a complaint with the President of the Personal Data Protection Office when you consider that the processing of personal data violates applicable law;
- the telephone number provided in the contact form is used only for informational contact from the Controller, and consent to its use may be withdrawn by you at any time by e-mail to kontakt@probs.pl.
7.
At the same time, you do not have the right to data portability, as specified in Article 20 GDPR, in the scope of data processing covered by the purpose specified in point 3(a) and (b) of this information, due to the fact that your data will not be processed in an automated manner;
8.
Providing your data:
- is voluntary in the scope of data collected on the basis of consent, and the consequence of not providing it will be the inability to use some communication channels with the Controller;
- is a voluntary contractual requirement, and the consequence of not providing it will be the inability to conclude a contract;
9.
Your personal data will not be used to make decisions based solely on automated processing, including profiling.
