Acting on the basis of Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) - hereinafter "RODO", I inform you that:
1. The administrator of the personal data is SYCOPE S.A., 19 Goraszewska St., 02-910 Warsaw, tel. 48695444803, e-mail: dane.osobowe@sycope.com
2. Personal data may be processed for:
a) conclusion and performance of obligations under the contract,
b) To carry out obligations under the law,
c) implementation of marketing activities,
d) customer satisfaction surveys,
e) Ensure the security of property and employees (including through video surveillance),
f) communication with contractors,
g) To establish, assert or defend claims,
h) conducting educational activities.
3. The legal basis for data processing is:
a) Entering into and performing a contract with the administrator (Article 6(1)(b) of the DPA),
b) Performing legal obligations (Article 6(1)(c) of the RODO),
c) Consent, to the extent that the data are not necessary for the conclusion and performance of a contract with the controller, in particular for marketing activities (Article 6(1)(a) RODO),
d) The administrator's legitimate interest in marketing activities, customer satisfaction surveys, ensuring the safety of property and employees, establishing, asserting or defending claims, and communicating with contractors (Article 6(1)(f) of the DPA);
4. Recipients of personal data may be:
a) Entities to which the controller will outsource services related to the processing of personal data, such as company associates, implementers of IT, accounting, legal, auditing services, as well as companies, bodies and institutions to which the controller will direct correspondence or inquiries on behalf of the parties,
b) Authorities authorized by law, including courts and other public administration bodies;
c) entities with whom the controller cooperates and to whom it shares personal data acting for a purpose arising from the legitimate interest of the controller or a third party.
5. Personal data will be stored for the period required by law and until the termination of the contract with the controller and the statute of limitations for claims arising therefrom and in the case of data processed on the basis of consent until such consent is withdrawn; data processed as part of the monitoring system will be kept for up to 3 months after recording, and in the case of a customer satisfaction survey until the party objects;
6. If the processing is based on consent, the party has the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal;
7. The party has the right of access to the content of its data and the right to rectification, erasure, restriction of processing, the right to data portability and the right to object - exclusively under the terms of the RODO;
8. A party has the right to lodge a complaint with the President of the Office for Personal Data Protection if it considers that the processing of personal data violates the provisions of the RODO;
9. Providing personal data is voluntary, but to the extent that data processing is necessary for the purpose of entering into and performing a contract with the administrator, the consequence of failing to provide such data will be the inability to enter into a contract with the administrator;
10. In case of intention to transfer data to a third country or international organization, information about this intention will be provided by a separate communication.
