GDPR Information clause
Information clause for clients of Krajowy Rejestr Długów BIG S.A.
Who is the controller of my personal data?
The controller, i.e. the entity deciding how your personal data will be used, is Krajowy Rejestr Długów Biuro Informacji Gospodarczej S.A. (hereinafter: KRD BIG S.A.), having its registered office in Wrocław, ul. Danuty Siedzikówny 12.
Who can I contact for more information about the processing of my personal data by KRD BIG S.A.?
If you have questions regarding the processing of your personal data, please contact KRD BIG S.A. at iod@krd.pl. You can also contact the appointed data protection officer at iod@krd.pl.
What is the purpose of processing my personal data?
KRD BIG S.A. processes your personal data for the following purposes:
a) promoting the services of KRD BIG S.A.;
b) establishing a relationship with you, such as entering into a contract or performing actions prior to entering into a contract (at your request);
c) performing a contract;
d) accounting for a performed contract, including tax settlements;
e) preventing fraud, money laundering and terrorism financing;
f) performing analyses and tests;
g) pursuing and defending claims, including court, arbitration and mediation proceedings;
h) enforcing claims;
i) internal administrative purposes related to functioning as part of Kaczmarski Group;
j) statistical purposes;
k) archiving purposes;
l) ensuring accountability (demonstrating compliance).
Why may KRD BIG S.A. process my personal data?
KRD BIG S.A. has the right to process your personal data because it is necessary to take action at your request prior to entering into a contract, and subsequently necessary for performing and accounting for the contract. To the extent your personal data are processed for the purpose of making settlements with the competent authorities and archiving the respective documents as well as for the purpose of preventing money laundering and terrorism financing, the legal basis for the processing are the laws, including the provisions of the Tax Code, the Accounting Act and the Act on Preventing Money Laundering and Terrorism Financing.
KRD BIG S.A. also processes your personal data based on its legitimate interest, which consists in promoting the products and services of the controller or Kaczmarski Group companies, conducting analyses and studies, statistics, defending or enforcing claims, preventing fraud, internal data administration at Kaczmarski Group, archiving and ensuring accountability of personal data.
Based on your consent, KRD BIG S.A. also processes your personal data for the purpose of future marketing activities, including the promotion of the services of the controller and Kaczmarski Group companies. You have the right to withdraw your consent at any time. Doing so will not affect the lawfulness of processing based on consent before its withdrawal.
Am I required to disclose my personal data to KRD BIG S.A.?
Providing personal data is a contractual requirement only to the extent that it is necessary for performing the contract. The obligation to provide your data also arises to a certain extent from the law (e.g. data required for tax settlement). If you do not provide the required personal data, it may not be possible or it may be problematic to cooperate with you. Otherwise, the provision of your data is voluntary.
What are my rights towards KRD BIG S.A. with regard to the processing of my personal data?
With regard to the processing of your personal data, your rights towards KRD BIG S.A. are as follows: right to access your data, right to data rectification, erasure, restriction of processing, right not to be subject to automated decision-making, including profiling. You also have the right to object to the processing of your personal data.
You can exercise said right if:
• the data is inaccurate or incomplete (right to rectification);
• (right to erasure): the data are no longer required for the purposes for which they were collected by KRD BIG S.A.; you withdraw your consent to the processing of data; you object to the processing of the data in advance; the data are processed unlawfully; the data should be erased in order to fulfil a legal obligation;
• (demand to restrict processing): your data is inaccurate – for a period of time allowing KRD BIG S.A. to verify correctness of your data; your data is processed unlawfully, but you do not wish it to be erased; your data is no longer required by KRD BIG S.A., but may be needed by you to defend or assert claims; or you object to the processing of your data – until it is determined whether legitimate grounds prevail over the grounds for the objection;
• (data portability): the processing of your data is based on your consent or on a contract concluded with you, and such processing is automated.
You have the right to lodge a complaint in connection with the processing of your personal data by KRD BIG S.A. with the President of the Personal Data Protection Office.
In what situations can I object to the processing of my data?
You have the right to object to the processing of your personal data if:
• the processing of personal data is based on a legitimate interest, and/or for statistical purposes, and the objection is justified by your particular situation;
• your personal data is processed for purposes of direct marketing.
With whom does KRD BIG S.A. share my personal data?
KRD BIG S.A. has the right to make your personal data available to other entities in Kaczmarski Group within the scope of its authorisation, economic information, debt collection and factoring firms. KRD BIG S.A. shares your personal data with entities that support KRD BIG S.A., including providers of IT and organisational support to the controller. At the request of entities authorised under the law, KRD BIG S.A. shares personal data with public authorities.
How long does KRD BIG S.A. store my personal data?
KRD BIG S.A. stores your personal data for the duration of the contract and beyond:
• Data processed for tax and accounting purposes is retained for 5 years after the end of the year in which a tax payment deadline expires or after the end of the year in which operations or proceedings are terminated or time-barred;
• If KRD BIG S.A. has a reasonable suspicion that it may need to assert or defend a claim, the data will be stored until the claims expire (3 years in the case of business-related activities) or for the duration of legal proceedings, including the period for enforcing the judgment.
KRD BIG S.A. stores your personal data for marketing purposes based on your consent until you withdraw it.
KRD BIG S.A. stores data for statistical and archiving purposes for 5 years.
To which countries outside the European Economic Area does KRD BIG S.A. transfer my data?
KRD BIG S.A. does not transfer your data to a country outside the European Economic Area.
Does KRD BIG S.A. profile my personal data or process it automatically in a way that affects my rights?
Profiling of personal data means the automated processing of your data, which involves the use of your data to evaluate certain factors concerning, in particular, the analysis or forecasting of aspects relating to your work results, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement.
Your personal data will not be used for automated decision-making, and no profiling will be carried out based on the personal data received from you.
The controller, i.e. the entity deciding how your personal data will be used, is Krajowy Rejestr Długów Biuro Informacji Gospodarczej S.A. (hereinafter: KRD BIG S.A.), having its registered office in Wrocław, ul. Danuty Siedzikówny 12.
Who can I contact for more information about the processing of my personal data by KRD BIG S.A.?
If you have questions regarding the processing of your personal data, please contact KRD BIG S.A. at iod@krd.pl. You can also contact the appointed data protection officer at iod@krd.pl.
What is the purpose of processing my personal data?
KRD BIG S.A. processes your personal data for the following purposes:
a) promoting the services of KRD BIG S.A.;
b) establishing a relationship with you, such as entering into a contract or performing actions prior to entering into a contract (at your request);
c) performing a contract;
d) accounting for a performed contract, including tax settlements;
e) preventing fraud, money laundering and terrorism financing;
f) performing analyses and tests;
g) pursuing and defending claims, including court, arbitration and mediation proceedings;
h) enforcing claims;
i) internal administrative purposes related to functioning as part of Kaczmarski Group;
j) statistical purposes;
k) archiving purposes;
l) ensuring accountability (demonstrating compliance).
Why may KRD BIG S.A. process my personal data?
KRD BIG S.A. has the right to process your personal data because it is necessary to take action at your request prior to entering into a contract, and subsequently necessary for performing and accounting for the contract. To the extent your personal data are processed for the purpose of making settlements with the competent authorities and archiving the respective documents as well as for the purpose of preventing money laundering and terrorism financing, the legal basis for the processing are the laws, including the provisions of the Tax Code, the Accounting Act and the Act on Preventing Money Laundering and Terrorism Financing.
KRD BIG S.A. also processes your personal data based on its legitimate interest, which consists in promoting the products and services of the controller or Kaczmarski Group companies, conducting analyses and studies, statistics, defending or enforcing claims, preventing fraud, internal data administration at Kaczmarski Group, archiving and ensuring accountability of personal data.
Based on your consent, KRD BIG S.A. also processes your personal data for the purpose of future marketing activities, including the promotion of the services of the controller and Kaczmarski Group companies. You have the right to withdraw your consent at any time. Doing so will not affect the lawfulness of processing based on consent before its withdrawal.
Am I required to disclose my personal data to KRD BIG S.A.?
Providing personal data is a contractual requirement only to the extent that it is necessary for performing the contract. The obligation to provide your data also arises to a certain extent from the law (e.g. data required for tax settlement). If you do not provide the required personal data, it may not be possible or it may be problematic to cooperate with you. Otherwise, the provision of your data is voluntary.
What are my rights towards KRD BIG S.A. with regard to the processing of my personal data?
With regard to the processing of your personal data, your rights towards KRD BIG S.A. are as follows: right to access your data, right to data rectification, erasure, restriction of processing, right not to be subject to automated decision-making, including profiling. You also have the right to object to the processing of your personal data.
You can exercise said right if:
• the data is inaccurate or incomplete (right to rectification);
• (right to erasure): the data are no longer required for the purposes for which they were collected by KRD BIG S.A.; you withdraw your consent to the processing of data; you object to the processing of the data in advance; the data are processed unlawfully; the data should be erased in order to fulfil a legal obligation;
• (demand to restrict processing): your data is inaccurate – for a period of time allowing KRD BIG S.A. to verify correctness of your data; your data is processed unlawfully, but you do not wish it to be erased; your data is no longer required by KRD BIG S.A., but may be needed by you to defend or assert claims; or you object to the processing of your data – until it is determined whether legitimate grounds prevail over the grounds for the objection;
• (data portability): the processing of your data is based on your consent or on a contract concluded with you, and such processing is automated.
You have the right to lodge a complaint in connection with the processing of your personal data by KRD BIG S.A. with the President of the Personal Data Protection Office.
In what situations can I object to the processing of my data?
You have the right to object to the processing of your personal data if:
• the processing of personal data is based on a legitimate interest, and/or for statistical purposes, and the objection is justified by your particular situation;
• your personal data is processed for purposes of direct marketing.
With whom does KRD BIG S.A. share my personal data?
KRD BIG S.A. has the right to make your personal data available to other entities in Kaczmarski Group within the scope of its authorisation, economic information, debt collection and factoring firms. KRD BIG S.A. shares your personal data with entities that support KRD BIG S.A., including providers of IT and organisational support to the controller. At the request of entities authorised under the law, KRD BIG S.A. shares personal data with public authorities.
How long does KRD BIG S.A. store my personal data?
KRD BIG S.A. stores your personal data for the duration of the contract and beyond:
• Data processed for tax and accounting purposes is retained for 5 years after the end of the year in which a tax payment deadline expires or after the end of the year in which operations or proceedings are terminated or time-barred;
• If KRD BIG S.A. has a reasonable suspicion that it may need to assert or defend a claim, the data will be stored until the claims expire (3 years in the case of business-related activities) or for the duration of legal proceedings, including the period for enforcing the judgment.
KRD BIG S.A. stores your personal data for marketing purposes based on your consent until you withdraw it.
KRD BIG S.A. stores data for statistical and archiving purposes for 5 years.
To which countries outside the European Economic Area does KRD BIG S.A. transfer my data?
KRD BIG S.A. does not transfer your data to a country outside the European Economic Area.
Does KRD BIG S.A. profile my personal data or process it automatically in a way that affects my rights?
Profiling of personal data means the automated processing of your data, which involves the use of your data to evaluate certain factors concerning, in particular, the analysis or forecasting of aspects relating to your work results, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement.
Your personal data will not be used for automated decision-making, and no profiling will be carried out based on the personal data received from you.
Information clause for customers of KRD BIG S.A. who are consumers
Who is the controller of my personal data?
The controller, i.e. the entity deciding how your personal data will be used, is Krajowy Rejestr Długów Biuro Informacji Gospodarczej S.A. (hereinafter: KRD BIG S.A.), having its registered office in Wrocław, ul. Danuty Siedzikówny 12.Who can I contact for more information about the processing of my personal data by KRD BIG S.A.?
If you have questions regarding the processing of your personal data, please contact KRD BIG S.A. at iod@krd.pl. You can also contact the appointed data protection officer at iod@krd.pl.What is the purpose of processing my personal data?
KRD BIG S.A. processes your personal data for the following purposes:a) establishing a relationship with you, such as entering into a contract or performing actions prior to entering into a contract (at your request);
b) performing a contract;
c) accounting for a performed contract, including tax settlements;
d) processing and examining complaints, requests and letters from you to KRD BIG S.A.;
e) promoting the services of KRD BIG S.A.;
f) performing analyses and tests;
g) pursuing and defending claims, including court, arbitration and mediation proceedings;
h) enforcing claims;
i) internal administrative purposes related to functioning as part of Kaczmarski Group;
j) statistical purposes;
k) archiving purposes;
l) ensuring accountability (demonstrating compliance), in particular for the time required to secure claims in connection with performing a contract.
Why may KRD BIG S.A. process my personal data?
KRD BIG S.A. has the right to process your personal data because it is necessary to take action at your request prior to entering into a contract, and subsequently necessary for performing and accounting for the contract. The contract involves the provision to you of the services specified in KRD BIG S.A.’s Data Management Regulations, including the monitoring of your PESEL number.To the extent your personal data are processed to fulfil a legal obligation incumbent on KRD BIG S.A., including settlements with the competent authorities and archiving the respective, as well as processing and handling letters, including complaints, which are required to be accepted and considered under the applicable laws, the legal basis for the processing are the laws, including the provisions of the Tax Code, the Accounting Act and the Consumer Rights Act.
KRD BIG S.A. also processes your personal data when necessary for the purposes arising from legitimate interests, such as of promoting the controller’s products and services, carrying out analyses and studies, statistics, defending or asserting claims, preventing fraud, internal data administration at Kaczmarski Group, archiving, as well as ensuring the accountability of the controller and considering and handling requests and letters, where the obligation to accept and handle such communication does not result from the applicable laws.
Am I required to disclose my personal data to KRD BIG S.A.?
Providing personal data is a contractual requirement only to the extent that it is necessary for performing the contract. The obligation to provide your data also arises to a certain extent from the law (e.g. data required for tax settlement). If you do not provide the required personal data, it may not be possible or highly problematic to cooperate with you or respond to your complaints or letters. To the remaining extent, the provision of your data is voluntary.What are my rights towards KRD BIG S.A. with regard to the processing of my personal data?
With regard to the processing of your personal data, your rights towards KRD BIG S.A. are as follows: right to access your data, right to data rectification, erasure, restriction of processing, right not to be subject to automated decision-making, including profiling. You also have the right to object to the processing of your personal data.You can exercise said right if:
- right to rectification: the data is inaccurate or incomplete;
- right to erasure: the data are no longer required for the purposes for which they were collected by KRD BIG S.A.; you withdraw your consent to the processing of data; you object to the processing of the data in advance; the data are processed unlawfully; the data should be erased in order to fulfil a legal obligation; the personal data was collected in connection with offering information society services;
- demand to restrict processing: your data is inaccurate – for a period of time allowing KRD BIG S.A. to verify correctness of your data; your data is processed unlawfully, but you do not wish it to be erased; your data is no longer required by KRD BIG S.A., but may be needed by you to defend or assert claims; or you object to the processing of your data – until it is determined whether legitimate grounds prevail over the grounds for the objection;
- data portability: the processing of your data is based on your consent or on a contract concluded with you, and such processing is automated.
In what situations can I object to the processing of my data?
You have the right to object to the processing of your personal data if:•the processing of personal data is based on a legitimate interest, and the objection is justified by your particular situation;
• your personal data is processed for purposes of direct marketing
With whom does KRD BIG S.A. share my personal data?
KRD BIG S.A. has the right to make your personal data available to other entities in Kaczmarski Group within the scope of its authorisation, economic information and debt collection firms. KRD BIG S.A. shares your personal data with entities that support KRD BIG S.A., including providers of IT and organisational support to the controller as well as agents acting on its behalf by facilitating the use of the services provided by KRD BIG S.A. as well as advertising, promotional and marketing campaigns for KRD BIG S.A.’ services. At the request of entities authorised under the law, KRD BIG S.A. shares personal data with public authorities.How long does KRD BIG S.A. store my personal data?
KRD BIG S.A. retains your personal data for the duration of the contract and for the period of fulfilment of the resulting obligations, and:- Data processed for tax and accounting purposes is retained for 5 years after the end of the year in which a tax payment deadline expires or after the end of the year in which operations or proceedings are terminated or time-barred;
- If KRD BIG S.A. has a reasonable suspicion that it may need to assert or defend a claim, the data will be stored until the claims expire (3 years in the case of business-related activities) or for the duration of legal proceedings, including the period for enforcing the judgment;
- If complaints, requests or letters are lodged after the end of the contract, the data will be stored for 1 year after the closure of the case, unless processing is necessary for other purposes.
KRD BIG S.A. stores data for statistical and archiving purposes for 5 years.
To which countries outside the European Economic Area does KRD BIG S.A. transfer my data?
In principle, KRD BIG S.A. does not transfer your data to a country outside the European Economic Area. One exception is the data of the users of the chat at krd.pl. To the extent disclosed in the chat, this data may be transmitted to the USA. The data is transferred based on a data processing agreement containing standard contractual clauses. Information on the processing of personal data by the provider of livechat tool, LiveChat, Inc. is available at: https://www.livechat.com/privacy-policy/.
Does KRD BIG S.A. profile my personal data or process it automatically in a way that affects my rights?
Profiling of personal data means the automated processing of your data, which involves the use of your data to evaluate certain personal factors concerning, in particular, the analysis or forecasting of aspects relating to your work results, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement.
Your personal data will not be used for automated decision-making, and no profiling will be carried out based on the personal data.
Information clause for potential customers
Who can I contact for more information about the processing of my personal data by Joint Controllers?
If you have questions regarding the processing of your personal data, please contact the Joint Controllers at iod@kaczmarskigroup.pl. You can also contact the appointed data protection officer at iod@kaczmarskigroup.pl.
What is the purpose of processing my personal data?
The Joint Controllers process your personal data for the following purposes:
a) establishing a relationship with you, such as for promoting the services of the Joint Controllers, or entering into a contract or performing actions prior to entering into a contract with you (at your request), or with an entity you represent;
b) performing analyses and tests;
c) internal administrative purposes related to functioning as part of Kaczmarski Group;
d) statistical purposes;
e) archiving purposes;
f) ensuring accountability (demonstrating compliance).
Why may the Joint Controllers process my personal data?
The Joint Controllers process your personal data on the basis of legitimate interest, which is to seek to establish a relationship with you or the entity you represent in respect of a business activity. The Joint Controllers have the right to process your personal data based on your consent.
If, at your request, the Joint Controllers take action in connection with preparing or concluding a contract, your personal data will be processed based on the requirement to take action prior to the conclusion of the contract.
The Joint Controllers process your personal data based on its legitimate interest, which consists in conducting analyses and studies, statistics, internal data administration at Kaczmarski Group, archiving and ensuring accountability of personal data.
Am I required to disclose my personal data?
You provide your personal data on a voluntary basis. To the extent your personal data will be processed for entering into or preparing a contract, the provision of personal data will be mandatory for drawing up such contract.
What are my rights towards the Joint Controllers with regard to the processing of my personal data?
With regard to the processing of your personal data, your rights towards the Joint Controllers are as follows: right to access your data, right to data rectification, erasure, restriction of processing, right not to be subject to automated decision-making, including profiling. You also have the right to object to the processing of your personal data.
You can exercise said right if:
• the data is inaccurate or incomplete (right to rectification);
• (right to erasure): the data are no longer required for the purposes for which they were collected by the Joint Controllers; you withdraw your consent to the processing of data; you object to the processing of the data in advance; the data are processed unlawfully; the data should be erased in order to fulfil a legal obligation;
• (demand to restrict processing): your data is inaccurate – for a period of time allowing the Joint Controllers to verify correctness of your data; your data is processed unlawfully, but you do not wish it to be erased; your data is no longer required by the Joint Controllers, but may be needed by you to defend or assert claims; or you object to the processing of your data – until it is determined whether legitimate grounds prevail over the grounds for the objection;
• (data portability): the processing of your data is based on your consent or on a contract concluded with you, and such processing is automated.
You have the right to lodge a complaint in connection with the processing of your personal data by the Joint Controllers with the President of the Personal Data Protection Office.
In what situations can I object to the processing of my data?
You have the right to object to the processing of your personal data if:
• the processing of personal data is based on a legitimate interest, and/or for statistical purposes, and the objection is justified by your particular situation;
• your personal data is processed for purposes of direct marketing.
To whom do the Joint Controllers disclose your personal data?
The Joint Controllers share your data with other entities in Kaczmarski Group within the scope of their authorisation. The Joint Controllers share your personal data with entities supporting the Joint Controllers, including entities providing IT, ICT and organisational services. At the request of entities authorised under the law, the Joint Controllers share personal data with public authorities.
How did the Joint Controllers obtain your personal data?
The Joint Controllers have obtained your personal data from publicly available sources, such as the Central Register and Information on Business Activity, the National Court Register (KRS) or Eniro. Data obtained from these sources includes: given name, surname, company name and address, phone number, e-mail address, object of business activity and business history.
How long do the Joint Controllers store my personal data?
The Joint Controllers will retain your personal data until you object to the processing or you withdraw your consent to the processing of your personal data. If actions aimed at entering into a contract are taken, your personal data will be processed for the duration of the preparation and performance of the contract.
The Joint Controllers store data for accountability, statistical and archiving purposes for 5 years.
To which countries outside the European Economic Area do the Joint Controllers transfer my data?
In principle, the Joint Controllers do not transfer your data to a country outside the European Economic Area. One exception is the data of the users of the chat on webpages owned by the Joint Controllers. To the extent disclosed in the chat, this data may be transmitted to the USA. The data is transferred based on a data processing agreement containing standard contractual clauses. Information on the processing of personal data by the provider of livechat tool, LiveChat, Inc. is available at: https://www.livechat.com/privacy-policy/.
Do the Joint Controllers profile my personal data or process it automatically in a way that affects my rights?
Profiling of personal data means the automated processing of your data, which involves the use of your data to evaluate certain factors concerning, in particular, the analysis or forecasting of aspects relating to your work results, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement.
Your personal data will not be used for automated decision-making, and no profiling will be carried out based on the personal data received from you.
If you have questions regarding the processing of your personal data, please contact the Joint Controllers at iod@kaczmarskigroup.pl. You can also contact the appointed data protection officer at iod@kaczmarskigroup.pl.
What is the purpose of processing my personal data?
The Joint Controllers process your personal data for the following purposes:
a) establishing a relationship with you, such as for promoting the services of the Joint Controllers, or entering into a contract or performing actions prior to entering into a contract with you (at your request), or with an entity you represent;
b) performing analyses and tests;
c) internal administrative purposes related to functioning as part of Kaczmarski Group;
d) statistical purposes;
e) archiving purposes;
f) ensuring accountability (demonstrating compliance).
Why may the Joint Controllers process my personal data?
The Joint Controllers process your personal data on the basis of legitimate interest, which is to seek to establish a relationship with you or the entity you represent in respect of a business activity. The Joint Controllers have the right to process your personal data based on your consent.
If, at your request, the Joint Controllers take action in connection with preparing or concluding a contract, your personal data will be processed based on the requirement to take action prior to the conclusion of the contract.
The Joint Controllers process your personal data based on its legitimate interest, which consists in conducting analyses and studies, statistics, internal data administration at Kaczmarski Group, archiving and ensuring accountability of personal data.
Am I required to disclose my personal data?
You provide your personal data on a voluntary basis. To the extent your personal data will be processed for entering into or preparing a contract, the provision of personal data will be mandatory for drawing up such contract.
What are my rights towards the Joint Controllers with regard to the processing of my personal data?
With regard to the processing of your personal data, your rights towards the Joint Controllers are as follows: right to access your data, right to data rectification, erasure, restriction of processing, right not to be subject to automated decision-making, including profiling. You also have the right to object to the processing of your personal data.
You can exercise said right if:
• the data is inaccurate or incomplete (right to rectification);
• (right to erasure): the data are no longer required for the purposes for which they were collected by the Joint Controllers; you withdraw your consent to the processing of data; you object to the processing of the data in advance; the data are processed unlawfully; the data should be erased in order to fulfil a legal obligation;
• (demand to restrict processing): your data is inaccurate – for a period of time allowing the Joint Controllers to verify correctness of your data; your data is processed unlawfully, but you do not wish it to be erased; your data is no longer required by the Joint Controllers, but may be needed by you to defend or assert claims; or you object to the processing of your data – until it is determined whether legitimate grounds prevail over the grounds for the objection;
• (data portability): the processing of your data is based on your consent or on a contract concluded with you, and such processing is automated.
You have the right to lodge a complaint in connection with the processing of your personal data by the Joint Controllers with the President of the Personal Data Protection Office.
In what situations can I object to the processing of my data?
You have the right to object to the processing of your personal data if:
• the processing of personal data is based on a legitimate interest, and/or for statistical purposes, and the objection is justified by your particular situation;
• your personal data is processed for purposes of direct marketing.
To whom do the Joint Controllers disclose your personal data?
The Joint Controllers share your data with other entities in Kaczmarski Group within the scope of their authorisation. The Joint Controllers share your personal data with entities supporting the Joint Controllers, including entities providing IT, ICT and organisational services. At the request of entities authorised under the law, the Joint Controllers share personal data with public authorities.
How did the Joint Controllers obtain your personal data?
The Joint Controllers have obtained your personal data from publicly available sources, such as the Central Register and Information on Business Activity, the National Court Register (KRS) or Eniro. Data obtained from these sources includes: given name, surname, company name and address, phone number, e-mail address, object of business activity and business history.
How long do the Joint Controllers store my personal data?
The Joint Controllers will retain your personal data until you object to the processing or you withdraw your consent to the processing of your personal data. If actions aimed at entering into a contract are taken, your personal data will be processed for the duration of the preparation and performance of the contract.
The Joint Controllers store data for accountability, statistical and archiving purposes for 5 years.
To which countries outside the European Economic Area do the Joint Controllers transfer my data?
In principle, the Joint Controllers do not transfer your data to a country outside the European Economic Area. One exception is the data of the users of the chat on webpages owned by the Joint Controllers. To the extent disclosed in the chat, this data may be transmitted to the USA. The data is transferred based on a data processing agreement containing standard contractual clauses. Information on the processing of personal data by the provider of livechat tool, LiveChat, Inc. is available at: https://www.livechat.com/privacy-policy/.
Do the Joint Controllers profile my personal data or process it automatically in a way that affects my rights?
Profiling of personal data means the automated processing of your data, which involves the use of your data to evaluate certain factors concerning, in particular, the analysis or forecasting of aspects relating to your work results, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement.
Your personal data will not be used for automated decision-making, and no profiling will be carried out based on the personal data received from you.
Information clause for representatives and contact persons of the counterparty
Who is the Controller of my personal data?
The Controller of your personal data is Krajowy Rejestr Długów Biuro Informacji Gospodarczej S.A., with its registered office in Wrocław, ul. Danuty Siedzikówny 12, 51-214 Wrocław.If you have questions regarding the processing of your personal data, please contact the data protection officer at iod@krd.pl.
How did we obtain your personal data?
Your personal data:- given name(s) and surname;
- job position;
- e-mail, phone number or other contact details necessary for communication;
What is the purpose and basis for our processing of your personal data?
The Controller uses your personal data for the purpose of its legitimate interests (based on Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: General Data Protection Regulation));- The Controller’s legitimate interests consist in:
- appointing a representative authorised to act on behalf of the Contractor/Counterparty.
- maintaining contact in matters related to the performance of the contract between the Controller and the Contractor/Counterparty.
- establishing, asserting or defending any claims in connection with concluding and performing the above contract.
- internal administrative purposes of the Controller, including in connection with audits and internal controls carried out by the Controller.
To whom may we disclose your personal data?
Your personal data may be disclosed to Kaczmarski Group companies (https://kaczmarskigroup.pl/grupa), providers of ICT and organisational services, providers of services to the Controller, including advisory services and legal assistance, and other parties specified in universally binding laws, including public authorities.The Controller will not transfer your data to any country outside the European Economic Area.
What are my rights towards the Controller with regard to the processing of my personal data?
As the Controller uses your personal data, you have the following rights:- to obtain access to your personal data;
- to rectify your personal data if you notice it is inaccurate or incomplete;
- to erase your personal data if:
b) you object to the processing of your personal data and there are no overriding legitimate grounds for the processing, or you object to the processing of personal data for the purposes of direct marketing;
c) the personal data has been unlawfully processed;
d) the personal data has to be erased for compliance with a legal obligation or the personal data have been collected in relation to the offer of information society services to a minor;
The right to erase personal data does not apply to data processed on the basis of applicable law or data processed for the establishment, exercise or defence of legal claims;
to restrict the processing of your personal data if:
- you notice that your personal data is inaccurate, for a period enabling the Controller to verify the accuracy of the personal data;
- the processing is unlawful but you do not want the data to be erased;
- the Controller no longer needs the personal data but it is required by you for the establishment, exercise or defence of legal claims;
- you have objected to the processing of personal data pending the verification whether the legitimate grounds of the Controller override yours;
- to object to processing if the processing is based on legitimate interest of the Controller;
- to data portability if the processing is based on your consent or on a contract to which you are party and the processing is carried out by automated means;
- not to be subject to a decision based solely on automated processing, including profiling, provided that in the course of performance of the contract concluded with the Contractor/Counterparty the personal data obtained from you will not be used for automated decision-making or profiling;
- to lodge a complaint with a supervisory authority, i.e. with the President of the Polish Office of Competition and Consumer Protection (address: Biuro Prezesa Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa or via the electronic form available at the Office’s website).