GDPR

GDPR information obligation

On May 25, 2018 new rules on personal data protection came into force, resulting from Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

We would like to assure you that we take special care when processing personal data, operate in accordance with the law, and implement appropriate technical and organizational measures to ensure the security of personal data entrusted to our company. We take care of personal data protection already during the design of new activities.

Personal data administrator

Elpolap limited liability company with its registered office in Zalasewo (62-020), at ul. Orzechowa 21, registered in the Register of Entrepreneurs by the District Court Poznań Nowe Miasto-Wilda in Poznań, under KRS number 0000998412, NIP 777 339 64 75,

Entity processing personal data

Elpolap Limited Liability Company also processes personal data entrusted for processing by other controllers, in particular when orders are carried out in which Elpolap Limited Liability Company is a subcontractor. In such cases, Elpolap Limited Liability Company acts as a personal data processor.

Legal basis and purposes of personal data processing

Elpolap Limited Liability Company processes personal data only when at least one of the following conditions is met:

1. The data subject has given consent to the processing of their personal data (Article 6(1)(a) of the GDPR),
2. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract (Article 6(1)(b) of the GDPR).
3. Processing is necessary for compliance with a legal obligation to which Elpolap spółka z ograniczoną odpowiedzialnością is subject (Article 6(1)(c) of the GDPR);
4. Processing is necessary to protect the vital interests of the data subject or another natural person (Article 6(1)(d) of the GDPR);
5. Processing is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) of the GDPR),
6. Processing is necessary for the purposes of the legitimate interests pursued by Elpolap spółka z ograniczoną odpowiedzialnością or by a third party (Article 6(1)(f) of the GDPR).

The processing of data provided to Elpolap spółka z ograniczoną odpowiedzialnością via email or the form on the website is based on Article 6(1)(a)(b), c) or f) of the GDPR and includes, among other things, data such as: first name, last name, e-mail address, telephone number, and other data that will be provided in electronic correspondence. This data is processed for the purpose for which it was provided.

Data processed on the basis of consent (Article 6(1)(a) of the GDPR), in particular first name, last name, email address, and telephone number, are used for the purpose for which consent was given and are processed until consent is withdrawn or until the purpose for which consent was given is fulfilled.

Data processed in connection with the conclusion of a contract pursuant to Article 6(1)(b) of the GDPR includes, in particular, first name, last name, address, telephone number, e-mail address, tax identification number/personal identification number, bank account number, and other data resulting from the specific nature of a particular contract, and is used for the purpose of performing that contract.

The data of persons through whom our contractors perform contracts concluded with Elpolap spółka z ograniczoną odpowiedzialnością (limited liability company) are processed on the basis of Article 6(1)(f) of the GDPR and include, among others, first name, last name, e-mail address, and telephone number. These data are used for the purpose of performing the contract.

Data entrusted for processing by other controllers, in particular for the purpose of performing services provided by Elpolap spółka z ograniczoną odpowiedzialnością, are processed on the basis of Article 6(1)(c) or (1)(f) of the GDPR and include, among others: first name, last name, correspondence address, e-mail address, PESEL number, and other data necessary for the performance of services, depending on their type. Processing is carried out for the purpose of performing the requested service.

Obligation to provide data and consequences of not providing data

Providing personal data in connection with the contract is voluntary, but necessary for the conclusion and performance of the contract and for related financial settlements.

Consent to the processing of personal data, in particular for marketing or informational purposes, is voluntary, and consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Providing your email address and other data in electronic correspondence is voluntary. Withdrawing your consent to data processing will result in the inability to continue email correspondence.

Period of storage of personal data 

Personal data obtained for the purpose of performing a contract is stored until the expiry of the limitation period for claims arising from the contract or until the expiry of the data storage obligation under the law, in particular the obligation to store financial, accounting, or employee documents.

Where consent is the sole basis for processing, withdrawal of consent will result in the cessation of data processing, without affecting the lawfulness of processing based on consent before its withdrawal.

Rights of data subjects

The data subject has the right to access their personal data, the right to rectify it, request its deletion, as well as the right to restrict its processing, the right to transfer data, and the right to object to the processing of personal data.

Where the legal basis for the processing of personal data is consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

Furthermore, if you believe that the processing of your personal data violates the provisions of the EU GDPR, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office. (uodo.gov.pl/pl/p/kontakt).

Recipients of personal data

Personal data may be disclosed to third parties with the consent of the data subject.

Furthermore, personal data may be disclosed when required for the performance of a contract between the parties or for the fulfillment of the obligations of the Personal Data Controller.

In the case of personal data processing on behalf of third parties, Elpolap Limited Liability Company acts as a processor, and the data is made available in accordance with the rules specified by the Personal Data Administrator.

Depending on the category of data, the entities to which data may be disclosed include: entities processing personal data on behalf of Elpolap spółka z ograniczoną odpowiedzialnością, subcontractors of the Administrator, IT service providers, entities providing accounting services, entities conducting health and safety training, entities concluding insurance contracts, and other institutions authorized by law, such as the Tax Office, Court, or Social Insurance Institution (ZUS).

Profiling

Elpolap Limited Liability Company may automatically tailor certain content to the needs of customers and persons who have provided their data via a form on the website or by email, as well as other entities that have consented to the processing of personal data, i.e., perform profiling using the personal data provided by them.

Profiling primarily involves automatically assessing which products these individuals may be interested in based on their previous online activities, including those on the websites of Elpolap spółka z ograniczoną odpowiedzialnością, and displaying product advertisements tailored to their profiles.

Profiling carried out by Elpolap spółka z ograniczoną odpowiedzialnością does not result in decisions being made that have specific legal effects on these individuals or affect them in a similarly significant manner.

Information on automated decision-making 

The data will not be subject to profiling, which means that it will not be used as a basis for automatically assigning specific properties or characteristics, nor will it be used to predict behavior or preferences.

Contact details

You can contact us in the following ways:

• korespondencyjnie na adres siedziby: Elpolap spółka z ograniczoną odpowiedzialnością z siedzibą w Zalasewie (62-020), przy ul. Orzechowa 21
• by phone at +48 724 967 482
• by email, email address: biuro@elpolap.com.pl