Information on the processing of personal data
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ EU. L. 2016.119.1), hereinafter referred to as GDPR, we inform you that:
Data controller and relevant categories of data
The controller of your personal data, collected in connection with the concluded agreement or ongoing business relations, is Kancelaria Staniek & Partners Spółka Komandytowo-Akcyjna, with its registered office in Wrocław, KRS 0000939090, NIP: 8992913267 (hereinafter referred to as the Controller).
Personal data may have been collected from you in various situations, particularly during previous cooperation, the signing or performance of a contract, as a result of an inquiry, by e-mail, by phone, or provided by the entity employing you. In connection with our relationship, we may process the following data: identification data, contact details, data concerning the job position, or other data provided to us during cooperation or contact.
Providing your personal data is voluntary and results from the concluded contract and ongoing business cooperation. The consequence of not providing data may be the partial or complete inability of the Controller to perform the contract.
Purpose of processing
Your personal data will be processed for the following purposes:
• Establishing cooperation
• Concluding and performing a contract
• Settling contracts
• Responding to any inquiries or requests and conducting further correspondence/contact
• Marketing and contact regarding other information and services of the Controller
• Defending against potential claims or pursuing claims
• Fulfilling legal obligations of the Controller (e.g., tax, accounting, complaint handling)
If, as part of the contract, you have provided us with the personal data of your employees or collaborators, we inform you that this information also applies to them and should be made available to them by you.
Legal basis for processing
The legal basis for processing your personal data includes:
• The necessity to perform a contract or to take action prior to its conclusion at the request of the data subject (Article 6(1)(b) of the GDPR)
• Fulfillment of legal obligations imposed on the Controller (Article 6(1)(c) of the GDPR)
• The legitimate interest of the Controller in marketing products and services of the Controller or third parties, maintaining contact, including correspondence, and defending against potential claims (Article 6(1)(f) of the GDPR)
Data retention period
Personal data collected for the purposes of concluding and performing a contract will be processed for the duration of the contract or until you object to the processing based on a legitimate interest. However, legal regulations (e.g., archiving, tax, accounting) may require us to process the data for a longer period, or we may store them for a longer period in the event of potential claims, based on the statute of limitations, whichever is longer.
Data recipients
The recipients of your personal data will include entities that support us in administrative and organizational matters, marketing activities, IT systems support, shipment services, and communication with contractors and customers.
Data transfer outside the EEA
Your data will not be transferred outside the European Economic Area (EEA).
Your rights
You have the right to:
• Access your data and request its rectification, deletion, or restriction of processing
• Object to the processing of your personal data where the legal basis is the legitimate interest of the Controller
• Withdraw your consent at any time, to the extent that consent is the basis for processing your data (withdrawal does not affect the legality of the processing before its withdrawal)
• Transfer personal data, i.e., to receive information from the Controller about the personal data being processed in a structured, commonly used, machine-readable format, to the extent that your data is processed for the purpose of contract conclusion or on the basis of consent
• Lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates GDPR provisions.