Fulfilling the information obligations arising from Art. 13 section 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Journal of Laws .UE. L. of 2016, No. 11, as amended) (hereinafter: GDPR) we inform that:

1. Name and contact details of the data controller:

The administrator of your personal data is
Computers&Control Sp. z o. o. (KRS number 0000532533)
St. Hutnicza 10, 40-241 Katowice
Tel. 32 204 25 28, e-mail: cc.biuro@candc.pl

2. Types of personal data

The following personal data will be processed by Computers&Control Sp. z o. o.
a) identifying data (e.g. name, surname)
b) contact details (e.g. e-mail address, telephone number, fax number)
c) data regarding functions and positions

3. Purpose and basis for processing your data

We will process your personal data for the purposes of:
a) conclusion, execution and monitoring of the performance of the Agreement with the C&C Contractor, in particular for purposes such as communication, performance of information obligations, cooperation and other obligations arising from the Agreement – for the period preceding the conclusion of the Agreement and for the period of execution of the Agreement [legal basis: Art. 6, section . 1 letter f) Regulations – implementation of the legally justified interest of the administrator in the form of performance of the Agreement with the C&C Contractor];
b) archiving to the extent necessary to fulfill legal obligations, in particular tax regulations and accounting regulations – for the period resulting from these regulations [legal basis: Art. 6 section 1 letter c) Regulations – fulfillment of the obligation imposed by law];
c) possible determination and pursuit of claims or defense against claims, including the sale of receivables – for the duration of the proceedings and the limitation period for potential claims [legal basis: Art. 6 section 1 letter f) Regulation – implementation of the legally justified interest of the administrator in the form of pursuing claims and defending against claims related to the Agreement];
d) creating analyzes of the results of our business activities for internal purposes – for a period no longer than that indicated in points b) and c) [legal basis: Art. 6 section 1 letter f) Regulation – implementation of the legally justified interest of the administrator in the form of optimization of business activity].

4. We received your personal data from your employer or the entity you represent or because you provided it to us yourself. Providing your personal data is voluntary, but necessary to contact your employer / the entity you represent.

5. Processing of personal data pursuant to Art. 6 section 1 f) of the Regulation, i.e. the implementation of a legitimate interest, was preceded by a verification of the existence of a legitimate legal interest and the risk of violating your rights or interests in the form of a balancing test. You have the right to access the conclusions of this test. For further information please contact us.

6. Data storage period

We will process your data:
a) for the period of cooperation between us and your employer/entity you represent
b) in the case of processing your data for the purposes of establishing, pursuing or defending claims – for the period after which these claims become statute-barred,
c) if we process your data in order to fulfill our legal obligations – for the period resulting from the relevant legal provisions.

7. Your rights:
a) the right to access personal data,
b) the right to rectify data,
c) the right to delete data,
d) the right to limit the processing of personal data,
e) the right to transfer data,
f) the right to object.

8. The administrator may transfer your personal data to the following entities:
a) processing entities in connection with tasks commissioned by the Administrator and performed on its behalf;
b) cooperating entities, contractors and subcontractors;
c) postal/courier operators that will deliver the parcels;
d) law firms commissioned by the Administrator, e.g. to conduct possible court proceedings or provide other assistance as part of legal services;
e) entities or bodies authorized under the law.

9. Data recipients

Your data may be transferred:
a) entities handling our company’s IT infrastructure, such as e-mail service providers, production and customer relations software providers (for service purposes)
b) entities conducting postal, courier, forwarding or transport activities;
c) entities providing legal assistance to us,
d) entities conducting debt collection activities or purchasers of receivables

In addition, we may share selected information about you with relevant state authorities, e.g. law enforcement agencies, courts, bailiffs, tax offices, Central Statistical Office, or third parties who submit such a request based on the applicable legal basis. We would like to emphasize that all transferred data is protected with the utmost care and in accordance with applicable personal data protection regulations. We ensure that each data recipient is obliged to comply with strict data protection procedures and to apply appropriate technical and organizational measures to ensure and protect the confidentiality of your personal data. All operations on personal data are carried out in a way that ensures full information security, including protection against unauthorized access, loss or destruction.

10. Data processing area

We would like to emphasize that your personal data is processed only within the European Economic Area (EEA). If in the future there is a need to transfer your personal data outside the EEA, we undertake to immediately inform you about this fact, present the legal basis for such transfer and measures to ensure the protection of your data in accordance with the requirements of the GDPR. Regardless of the above rights, if your personal data is processed on the basis of our or a third party’s legitimate interest, you have the right to object to the processing of your data, if this is justified by your particular situation. You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office, if you believe that your personal data is being processed by us in violation of the law.