Information on Personal Data Processing at EXPLITIA S.A.
In connection with the processing of your personal data, and in accordance with Article 13(1) and (2) and Article 14(1) and (2) of the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, as well as the Polish Personal Data Protection Act of 10 May 2018 (Journal of Laws 2019, item 1781), we hereby inform you as follows:
I. DATA CONTROLLER.
The controller of your personal data is EXPLITIA S.A., located at ul. Pod Lipami 29, 41-940 Piekary Śląskie, email: contact@explitia.com.
For all matters related to personal data protection, you may contact us via email at contact@explitia.com or by writing to the address of the Controller’s office.
II. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA.
Your personal data is processed in connection with the Controller’s business activities and the provision of specified services.
III. GDPR-BASED GROUNDS FOR PROCESSING PERSONAL DATA:
- Execution of a contract to which you are a party or taking actions at your request prior to the conclusion of a contract,
- Exercising the rights and fulfilling the obligations of the Controller as specified by law,
- Fulfilling the legitimate interests of the Controller or a third party,
- Protection of your vital interests or those of another person,
- Actions taken in accordance with your expressed consent for specific purposes and scopes of data processing.
IV. CATEGORIES OF PERSONAL DATA.
The scope of your personal data processed by the Controller depends on the specific action undertaken.
V. RECIPIENTS OF PERSONAL DATA.
Recipients of your personal data may include public authorities and entities performing public tasks or acting on behalf of public authorities, as well as other entities that process data on behalf of the Controller based on relevant agreements.
VI. DURATION OF PERSONAL DATA STORAGE.
Your personal data will be stored only for the period necessary to achieve the purpose for which it was collected, until claims expire, and for the legally required archival period.
VII. RIGHTS OF DATA SUBJECTS, INCLUDING ACCESS TO PERSONAL DATA.
Under applicable laws, you have the right to:
- Access your personal data,
- Rectify your personal data,
- Erase your personal data,
- Restrict processing of your personal data,
- Transfer your personal data,
- Object to the processing of your data.
VIII. RIGHT TO WITHDRAW CONSENT.
Where consent is required for data processing, you have the right to refuse or withdraw consent at any time. Withdrawal of consent does not affect the legality of processing based on consent before its withdrawal.
IX. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY.
If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
X. INFORMATION ON DATA PROVISION REQUIREMENT/VOLUNTARY NATURE AND CONSEQUENCES OF NON-PROVISION OF PERSONAL DATA.
Providing your personal data may be a legal requirement, contractual requirement, condition for entering into a contract, or entirely voluntary. If you do not provide your data:
- Where there is a legal obligation, the Controller will be unable to fulfill it, potentially leading to legal consequences.
- If it is a condition for a contract, the Controller will be unable to conclude or fulfill it.
- If voluntary, certain actions may not be undertaken or completed.
XI. SOURCE OF PERSONAL DATA ORIGIN.
Your personal data is collected either directly or in another manner depending on the activity undertaken.
XII. AUTOMATED DECISION MAKING, INCLUDING PROFILING.
Your personal data will not be used for automated decision-making or profiling.