Who is the controller of your data?

The administrator of your personal data is INFOV SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ registered in the Register of Entrepreneurs kept by the Court of Justice.

DISTRICT COURT FOR THE CAPITAL CITY OF WARSAW WARSAW IN WARSAW, XIV ECONOMIC DEPARTMENT OF THE NATIONAL REGISTER OF JUSTICE under the KRS number: 0000621574, NIP: 7123313875, REGON: 364635788, place of business and address for service: Aleja Krakowska 9, 05-090, Sękocin Nowy, Poland, electronic mail address (email): info@INFOV.eu, tel: + 48 22 290 49 05.

1. why do we process your Data?

Your personal data is processed on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation / RODO) as follows:

In terms of customers

1. A. In connection with the services to companies provided by the administrator, i.e. for the purpose of entering into or performing a contract (Article 6(1)(b) of the DPA), your data will be stored until the contract is performed. Provision of data is necessary for the conclusion and execution of the contract;
2. Fulfillment of any legal obligations in connection with the cooperation undertaken, e.g. related to accounting, tax law or anti-money laundering (Article 6(1)(c) of the RODO), personal data is processed for the period indicated by the law;
3. For the purpose of possible establishment, investigation or defense against claims, which is a legitimate interest of the administrator (basis of Article 6(1)(f) of the DPA). Data will be processed until the statute of limitations for claims;
4. In order to ensure the proper implementation of the services and improve their, quality, through the monitoring of your activities, which is a legitimate interest of the administrator (basis of Article 6(1)(f) RODO). Data will be processed until the statute of limitations for claims.

Regarding contractors, representatives and personnel of the contractor

A.    Verification of the correctness of the authorization to act on behalf of the Contractor, including verification of the data provided in public records, contacting on matters related to the execution of the contract and as legitimate interests pursued by the Administrator (the basis of Article 6(1)(b) and (f) RODO). The data will be processed until the execution of the contract, and in terms of their archiving until the statute of limitations for claims. Provision of data is necessary for the conclusion and execution of the contract;

B. Fulfilling any applicable legal obligations in connection with the cooperation undertaken, e.g. related to accounting, tax law or anti-money laundering (Article 6(1)(c) of the RODO), personal data is processed for the period indicated by the law;

C. Possible establishment, investigation or defense against claims, which is legally

legitimate interest of the Administrator(the basis of Article 6(1)(f) RODO). The data will be processed until the statute of limitations on claims; If you have not provided the data directly to the Administrator, they have been provided to the extent of contact and identification data by the Contractor who is a party to the contract with the Administrator.

In terms of subscribers

A. For the purposes of marketing and promotion of the products offered by the administrator, which is a legitimate interest of the administrator (Article 6(1)(f) RODO). Your data will be processed until you object;

B. To customize the marketing content of your activities, which is a legitimate interest of the administrator (basis of Article 6(1)(f) of the RODO). Data will be processed until the statute of limitations for claims;

C. Possible establishment, investigation or defense against claims, which is a legitimate interest of the administrator(the basis of Article 6(1)(f) of the RODO). Data will be processed until the statute of limitations for claims.

In terms of users of the administrator’s sites

A. In order to ensure proper implementation of services, improve, quality of services and ensure security, through monitoring of user.w activities, which is a legitimate interest of the administrator (basis of Article 6(1)(f) RODO). Data will be processed until the statute of limitations for claims;

B. For the purpose of establishing contact and answering questions, which is a legitimate interest of the administrator (basis of Article 6(1)(f) RODO). The data will be processed until questions are answered or claims expire. Provision of data is voluntary, however, it is necessary in order to establish contact and answer the questions asked;

C. Additional information about the principles of processing user data through cookies, is available in the cookie policy.

In terms of persons contacting the Administrator

A. In order to respond to inquiries made by email or telephone, which is a legitimate interest of the administrator (Article 6(1)(f) RODO). Personal data will be processed until claims expire. Provision of data is voluntary, however, it is necessary in order to establish contact and answer the questions asked;

B. Possible establishment, investigation or defense against claims, which is a legitimate interest of the administrator(the basis of Article 6(1)(f) of the RODO). Data will be processed until the statute of limitations for claims;

2 To whom will the data be shared?

A. Public authorities, to the extent that they do not receive data as part of a specific proceeding under the law;

B. Entities that process your personal data on behalf of the controller on the basis of a contract concluded with the controller for the entrustment of personal data processing (so-called processors). These will include, but are not limited to: IT specialists, archiving companies, banking and payment service providers, hosting companies;

C. Third-party data controllers (the so-called Parallel Administrator to whom your data is shared, e.g. legal advisors and attorneys, courier or postal service providers, debt buyers – in case you do not pay our invoices on time);

D. Entities located outside the EEA, but only when necessary and with an appropriate degree of protection, primarily through:

a. Cooperation with entities in countries for which the relevant decision of the European Commission has been issued;

b. Use of standard contractual clauses issued by the European Commission.

The controller always informs about the intention to transfer personal data outside the EEA at the stage of collection.

3. automated decisions?

As part of the services provided by the administrator, personal data may be subject to profiling. The administrator will inform about such activities in each case before processing the data through profiling.

4 What rights do you have?

A. The right of access to the personal data we process (Article 15 of the RODO);

B. The right to rectify the entrusted personal data, including the correction of such data (Article 16 of the RODO);

C. The right to delete personal data from our systems.in the so-called “right to be forgotten” – if, in your opinion, there are no grounds for processing your data you can request, their deletion (Article 17 RODO);

D. Right to restrict processing of personal data – you may request, restriction of processing of personal data only to storage or performance of activities agreed with you, in case the controller has inaccurate data about you, processed unjustifiably; or when you do not want, deletion, because you need it to establish, assert or defend claims; or for the duration of an objection lodged against the processing (Article 18 RODO);

E. Right to data portability – You have the right to receive from the controller in a structured, commonly used machine-readable format (e.g., “.csv” format) personal data concerning you that is held by the controller on the basis of a contract or consent you have given (Article 20 RODO);

F. The right to withdraw consent to the processing of personal data – at any time you have the right to withdraw consent to the processing of personal data that is processed on the basis of consent. Withdrawal of consent will not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal (Article 7(3) of the DPA);

G. Right to object – you may object to the processing of your

data if the basis for the use of the data is the legitimate interest of the controller. In such a situation, after considering your request, your data will not be within the scope of the objection on this basis, unless the controller demonstrates the existence of a legitimate basis for the processing of the data, which is deemed to override your interests, rights and freedoms (Article 21 RODO);

H. If, in your opinion, the processing of personal data violates the provisions of the RODO, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection.

5 Contact.

If you need additional information related to data protection or wish to exercise your rights, please contact us by email at: info@INFOV.eu