Information on the processing of personal data
In accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 […] we inform:
Information clause regarding the protection of personal data of persons from whom data was obtained directly
Pursuant to Art. 13 of the GDPR, we inform that:
- The data controller is BT International – Barbara Turska, with its registered office in Rybnik at ul. Gliwicka 177a, Tax ID (NIP) 642-249-89-65.
- Data will be processed for the purpose of providing services and pursuing the Controller’s legitimate interest for marketing purposes (subject to consent), for the conclusion and performance of a Contract with the Controller, to comply with requests from law enforcement authorities and for the purposes of court proceedings, for the purpose of potential insurance, for archival (evidentiary) purposes as a pursuit of the Controller’s legitimate interest in securing information in case of a legal need to prove facts, for the purpose of potential establishment, exercise or defense of legal claims, to fulfill the Controller’s tax and accounting obligations resulting from generally applicable law, for customer satisfaction surveys, determining service quality and our Clients’ satisfaction level with products and services, and for analytical, audit, and supervisory purposes (better selection of services for our Clients’ needs, general optimization of our products, optimization of service processes, building knowledge about our Clients, financial analysis).
- The legal grounds for data processing are: Art. 6(1)(a), (b), (c) and (f) of the GDPR.
- Data recipients may include: persons or entities to whom the proceedings documentation will be made available based on Art. 8 and Art. 96(3) of the Act of January 29, 2004 – Public Procurement Law (only in the case of contracts concluded under the Public Procurement Law regime), institutions specified by law to the extent necessary for contact purposes and exercising ownership supervision, partners and contractors of the Controller to the extent necessary for contact purposes, processors who provide services to the Data Controller and to whom these data are entrusted, including entities providing IT services, ongoing supervision of IT systems, and data security services.
- Personal data, as a rule, will not be transferred outside the European Economic Area (hereinafter: EEA). However, bearing in mind the services provided, the Controller may outsource certain activities or IT tasks to recognized subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA. Individual countries outside the EEA where your personal data will be processed provide an adequate level of personal data protection in accordance with EEA standards, as per the decision of the European Commission. In the event of data processing in the territory of countries for which the European Commission has not determined an adequate level of personal data protection (compliant with EEA standards), the Controller enters into agreements with the recipients of such data to ensure an appropriate level of protection. The agreements referred to above are based on standard contractual clauses issued by the European Commission in accordance with Art. 46(2)(c) of the GDPR. A copy of the standard contractual clauses mentioned above can be obtained from the Controller.
- Personal data will be processed for the following periods: for the performance of a contract – until the statute of limitations for claims arising from it has expired, for the time necessary to exercise or defend such claims (only in the case of contracts concluded with natural persons and civil law partnerships); for the period of processing based on legal provisions and for the duration resulting therefrom; for the period of processing based on the Controller’s legitimate interest – for the time necessary to achieve the purpose or until an effective objection is lodged or consent is withdrawn, but no longer than for a period of 10 years, unless applicable laws provide otherwise.
- Every person whose data is processed has the right to access, rectify, delete, and transfer their data, as well as the right to request restriction of processing due to their particular situation, and to lodge a complaint with the Office for Personal Data Protection. In the event that consent has been given, the individual has the right to withdraw it at any time, although the withdrawal of previously granted consent will not affect the lawfulness of processing based on consent before its withdrawal. If providing data is a contractual requirement, failure to provide it will prevent the provision of services by BT International – Barbara Turska.
- Data is not subject to profiling or automated processing.
For matters regarding personal data protection, contact: biuro@btinternational.pl