In connection with the entry into force of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter “GDPR,” we hereby inform you:
- The controller of your personal data is APA Polska sp. z o.o. sp. k.
with its registered office in Kobylnica, ul. Szkolna 19A, 62-006 Kobylnica, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000363111, whose registration files are kept by the District Court for Poznań-Nowe Miasto
and Wilda in Poznań, 8th Commercial Division. - You can contact us via email at biuro@apapolska.pl or by calling 0048 / 61 81 50 881.
- Your personal data will be processed for the following purposes:
a. to conclude and perform a contract, including ensuring the proper quality of services—the basis for processing your personal data is the contract concluded with you, (Article 6(1)(b) of the GDPR)
b. to fulfill the Controller’s legal obligations, including issuing and storing invoices, and responding to complaints – the basis is the Controller’s legal obligation, (Article 6(1)(c) of the GDPR)
c. establishing and pursuing claims – based on the Controller’s legitimate interest, (Article 6(1)(f) of the GDPR)
d. direct marketing – based on the Controller’s legitimate interest, (Article 6(1)(f) of the GDPR)
e. sending you commercial information via electronic means of communication – based on your consent, (Article 6(1)(a) of the GDPR)
f. sending the newsletter to the email address you provided – based on your consent (Article 6(1)(a) of the GDPR),
g. conducting email correspondence – based on the Controller’s legitimate interest in handling correspondence addressed to it in connection with its business activities. - Your personal data will be transferred to entities processing data on behalf of the Controller, participating in the performance of the Controller’s activities, i.e., among others, entities operating IT systems, providing access to IT systems, entities providing accounting services, entities providing advisory, consulting, and auditing services, as well as legal and tax assistance and hosting services. In addition, your data will be made available to other controllers, such as entities providing postal or courier services.
- Your personal data will not be transferred to a third country.
- Your personal data will be processed for the duration of the contract concluded with you, as well as after its termination for the purposes of pursuing claims related to the performance of the contract for a period after which claims arising from the concluded contract expire, fulfilling obligations under applicable law (in particular tax and accounting obligations), preventing abuse and fraud, and for statistical and archival purposes.
- Your personal data processed on the basis of your consent will be processed until such consent is withdrawn or until the Controller determines that the data has become outdated.
- Your personal data will be stored for direct marketing purposes (to the extent that does not require your consent) for the duration of the contract or until you object, whichever occurs first.
- Your personal data related to correspondence will be stored until the Controller’s legitimate interest is fulfilled and, if applicable, for the period of limitation of claims related to the correspondence.
- You have the right to:
a. access your data – Article 15 of the GDPR,
b. rectification – Article 16 of the GDPR,
c. erasure – Article 17 of the GDPR,
d. restriction of processing – Article 18 of the GDPR,
e. data portability – Article 20 of the GDPR,
f. the right to object – Article 21 of the GDPR. - If data is processed based on your consent, you have the right to withdraw your consent at any time without affecting the processing carried out prior to withdrawal.
- You have the right to lodge a complaint regarding the processing of your personal data by the Controller with the supervisory authority, which is the President of the Personal Data Protection Office.
- If a contract is concluded, providing your personal data is necessary for the conclusion of the contract. If you wish to subscribe to the newsletter or receive commercial information via email, providing personal data is not mandatory; however, failure to provide it will prevent you from using the aforementioned services.
- Your personal data will not be used for automated decision-making or profiling.
Furthermore, if we process your data as employees of our Client/Contractor, provided to us for the purposes of ongoing contract administration, a legal relationship binding us, in connection with the performance of the concluded contract, we inform you that:
- APA Polska sp. z o.o. sp.k. will process your personal data provided in connection with the performance of the contract as the data controller. For the purposes of this notice, “employees” refers to persons employed under an employment contract or a civil law contract.
- The processing of your personal data is necessary to achieve the purposes arising from the Controller’s legitimate interests. These purposes are related to the performance of the contract concluded with your employer/client and include:
a. performing tasks arising from the concluded contract,
b. ensuring the safety of persons and property,
c. ongoing communication regarding the concluded contract,
d. protection against claims and debt collection,
e. potentially internal administrative, analytical, and statistical purposes. - Your personal data will be transferred to entities processing data on behalf of the Controller, participating in the performance of the Controller’s activities, i.e., among others, entities operating IT systems, providing access to IT systems, and entities providing advisory, consulting, auditing, legal, tax, and hosting services. In addition, your data will be made available to other controllers, including entities providing postal or courier services.
- Your personal data will not be transferred to a third country.
- Your personal data will be processed until the legitimate interests forming the basis for such processing are fulfilled or until you object to such processing. In the event of a dispute or ongoing proceedings, particularly court proceedings, the above period will be calculated from the date of the dispute’s resolution or the final conclusion of the proceedings.
- The Controller collects your personal data from your employer/client or directly from you.
- The Controller may, in particular, process the following categories of personal data, including first and last name, mailing address, phone number, ID number, data regarding the form of employment, and possibly audiovisual data, e.g., video recordings for security purposes.
- You have the right to access your data, rectify it, delete it, restrict processing, the right to data portability, and the right to object.
- You have the right to lodge a complaint regarding the processing of your personal data by the Controller with the supervisory authority, which is the President of the Personal Data Protection Office.
- Providing your personal data is necessary for the performance of the contract between your employer/client and the Controller.
- Your personal data will not be used for automated decision-making or profiling.