From May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons applies in all European Union countries in connection with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the so-called GDPR). In light of the above, and with care to ensure transparency of information and protection of your personal data. Clima Polska Sp. z o. o. informs that:
- in connection with our business activity, we process the personal data of our clients, job candidates, employees, associates, contractors or business partners and their employees for one or more purposes specified in the information obligations;
- we always inform about the processing of personal data at the time of their collection, specifying the purpose and legal basis for their processing;
- we make sure that the scope of processed personal data is adequate to the purpose of their processing, and that personal data is stored for the period it is necessary.
- we ensure the security and confidentiality of processed personal data to an extent adequate to the risk and potential impact of a data breach on a person;
- we ensure the implementation of the rights of a natural person under the provisions of the GDPR, whose data we process. What rights do you have under the provisions of the GDPR? read here and how to submit a request for the exercise of the right, read here.
- in the event of a breach of personal data protection, which will result in negative consequences for the person affected by the breach, we will inform you about the occurrence of such an event in the form of:
-
- sms to the given phone number;
- electronic message to the e-mail address provided;
- by post to the given address of residence;
- or by posting information on the website www.climapolska.com.pl.
Information obligation regarding:
- Our current, former and potential clients and their employees – read here,
- For job applicants - read here,
- For guests visiting the office covered by video monitoring - read here,
- To senders of electronic correspondence - read here.
What is the information obligation?
The legal basis for the information obligation is Art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "Regulation" or "GDPR".
INFORMATION ON THE RIGHTS OF A NATURAL PERSON UNDER THE PROVISIONS OF THE GDPR
The right to access data
You have the right to request access to your personal data, including in particular information whether we process your personal data and the scope of data we hold, the purposes of data processing or categories of recipients of your data, if possible, the planned period of data storage, your rights regarding personal data, information about the sources of obtaining them in a situation where they have not been collected from you. You also have the right to obtain a copy of the data.
The right to rectify data
In a situation where your personal data held by us is inconsistent or incorrect, you have the right to request their rectification.
Right to erasure (right to be forgotten)
You have the right to request the deletion of your data if one of the following circumstances occurs:
- personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- You have filed an effective objection to the processing;
- personal data was processed unlawfully;
- personal data must be deleted in order to comply with a legal obligation;
- You have withdrawn your consent to the processing of personal data, and personal data were processed on the basis of your consent and there is no other legal basis for their processing.
However, you will not be able to exercise the right to delete data, among others, if such data is necessary to establish or pursue claims or defend against claims, or when the processing is based on the provisions of applicable law.
The right to limit data processing
You have the right to request restriction of processing in the following cases:
- if you question the correctness of personal data - for a period allowing to check the correctness of this data;
- the processing is unlawful and you oppose the removal of personal data, requesting the restriction of their use instead;
- we no longer need personal data, but you need it to establish, investigate or defend against claims;
- if you raise an objection - until it is determined whether the legitimate grounds on our part override the grounds for your objection.
Right to data portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format and you have the right to send this personal data to another administrator if:
- the processing is based on your consent or on the basis of a contract with you, a
- at the same time, the processing is carried out in an automated manner.
At the same time, you have the right to request that your personal data be sent directly to another data administrator, if it is technically possible.
The right to object to data processing
You have the right to object at any time - for reasons related to your particular situation - to the processing of your data, if the legal basis for processing is the legitimate interest of the Administrator.
As a result of the objection, we will stop processing your personal data, unless we demonstrate the existence of valid, legally justified grounds for processing, overriding your interests, rights and freedoms, or grounds for establishing, pursuing claims or defending against claims.
If personal data is processed for direct marketing purposes, you can object to such processing, including profiling, at any time, without having to prove reasons related to your particular situation.
Right to withdraw consent
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal.
The right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that we process your personal data in violation of the law. You will find all the necessary information on www.uodo.pl.
INFORMATION ABOUT SUBMITTING A REQUEST TO IMPLEMENT THE LAW UNDER THE PROVISIONS OF THE RODO
Submitting requests related to the implementation of rights
An application regarding the exercise of rights can be submitted:
- in writing to the address: Al. National Education Commission 90 lok. U-7 02-777 Warsaw
- by e-mail to the following address: info@clima.com.pl
The application may be submitted in person or through a proxy (e.g. a family member). Due to data security, we encourage you to use a power of attorney in a form certified by a notary public or an authorized legal adviser or attorney, which will significantly speed up the verification of the authenticity of the application.
The application should contain the data of the reporting person, contact details and details of the request.
The application is considered:
- within one month from the date of receipt of the request,
- if the Customer's request or the number of requests is complex, the response time may be extended by another two months; within one month of receiving the request, the Data Protection Officer will inform the Customer by letter about the extension of the deadline, specifying the reasons for the delay,
- in the event of failure to take action in connection with the Customer's request, the Data Protection Officer will immediately - at the latest within one month of receiving the request, inform the Customer by letter about the reasons for not taking action and the possibility of lodging a complaint with the supervisory authority and using legal protection measures before the court.
The deadline for examining the application starts from the date of its receipt.
The response is provided via traditional mail, unless the request was submitted electronically or a response was requested in electronic form.
In a situation where we consider that we are unable to identify the person submitting the application on the basis of the submitted application, we may ask the applicant for additional information that will enable us to do so.
Charging Policy
The procedure regarding submitted applications is, as a rule, free of charge.
However, if we prove that the applicant's request is manifestly unjustified or excessive, in particular due to its repetitive nature, we may:
- charge remuneration up to the cost of providing the answer or
- refuse to take action in relation to the submitted request.
In the event of questioning the decision to impose the fee, the applicant may submit a complaint to the President of the Office for Personal Data Protection.
Information obligation in connection with the processing of personal data of customers, former customers and/or potential customers by Clima Polska Sp. z o. o
Who is the Personal Data Administrator?
The administrator of the processed personal data of Customers, former Customers and/or potential Customers is Clima Polska Sp. z o. o. with its registered office in Warsaw (02-777) at al. Commission of National Education 90, room U-7. The administrator can be contacted electronically by writing to the following e-mail address: info@clima.com.pl or traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, room U-7 02-777 Warszawa with the note Personal Data Protection.
Data Protection Officer
The protection of processed personal data is extremely important to us. That is why we have appointed a Data Protection Officer, Mr. Ryszard Chmurski, whom you have the right to contact on the subject of personal data protection by e-mail: data protection@clima.com.pl or traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, location U-7 02-777 Warsaw with the note: Data Protection Inspector.
Purposes and legal grounds for processing personal data?
| Purpose of processing | Data type | The basis of the law | Who the data relate to |
| Basic Processing Purposes | |||
| taking actions aimed at concluding a sales contract (I) | name and surname, address of residence, address of the collection point, contact details (telephone number / address e-mail), commercial data | taking action before concluding the contract
(Article 6(1)(b)) |
Potential customer - a natural person |
| name of the entity, registration data, address of the collection point, details of the person representing the entity (name and surname, position), contact details (telephone number / address e-mail), commercial data | Potential customer - a legal person and a person representing the customer | ||
| conclusion and performance of the sales contract (II) | name and surname, address of residence, address of the collection point, PESEL number, NIP number, customer number, telephone number, contract data, transaction data, real estate data, communication data | performance of the contract
(Article 6(1)(b)) |
Customer - a natural person |
| name of the entity, registration data, address of the delivery point, data of the person representing the entity authorized to conclude the contract (name and surname, position), data of the contact person in connection with the performance of the subject of the contract (name and surname, position, telephone number, e-mail address), contract data, transaction data, real estate data, communication data | Client – a legal person and a person representing the Client and the contact person in the relationship with the performance of the contract |
||
| Other purposes of personal data processing | |||
| sending billing documents electronically (e-invoice) |
e-mail adress | agreement
(Article 6(1)(a)) |
Klient |
| conducting administrative activities | indicated in point II data to the extent necessary to ensure the proper performance of concluded contracts and compliance with internal rules established in the company, improving the quality and standards of service, optimizing commercial activities, preparing internal summaries and reports | the legitimate interest of the Administrator
(Article 6(1)(f)) |
Klient |
| keeping sales documentation | indicated in point II data to the extent necessary to fulfill the legal obligations incumbent on the Administrator | the law
(Article 6(1)(c)) tax code anti-money laundering and financing of terrorism Act |
The customer |
| customer satisfaction survey, including quality determination and satisfaction with services or products | customer data, such as: name and surname / name of the entity, contact details of the person representing the customer (telephone number and e-mail address), assessment obtained | the legitimate interest of the Administrator
(Article 6(1)(f)) |
The client or a person representing him |
| conducting marketing of own products or services during the term of the sales contract | Customer name, customer number, mailing address and in the case of expressing a separate consent to the sending of content in electronic form: telephone number or e-mail address |
the legitimate interest of the Administrator
(Article 6(1)(f)) |
The client or a person representing him |
| the need to establish, pursue or defend against claims and the need to retain evidence that may be a security against the claims made | data indicated in point II to the extent necessary to establish the facts in connection with the resulting claim | the legitimate interest of the Administrator
(Article 6(1)(f)) |
The client or a person representing him |
Voluntary or obligation to provide personal data?
| Purpose of processing | Duty or voluntary |
| taking action before concluding the contract | providing data is voluntary, but necessary to take action to conclude a sales contract
failure to provide the indicated data may result in the inability to present a dedicated commercial offer |
| conclusion and performance of the sales contract | providing data is mandatory for the conclusion of the contract and its performance
failure to provide the indicated data will result in the inability to sign the sales contract |
How long do we keep personal data?
| Purpose of processing | processing time |
| taking action before concluding the contract | 3 years - when for independent reasons the sales contract has not been concluded, and in the event of its conclusion, for the duration of the contract and 5 years from the year following the year of termination of the contract |
| conclusion and performance of the sales contract | 5 years from the year following the year of termination of the contract |
| sending billing documents electronically (e-invoice) | to withdraw the consent granted or to complete the purpose of processing no longer than 5 years from the year following the year of termination of the contract or withdrawal of consent for evidence purposes |
| conducting administrative activities | 5 years from the year following the year of termination of the contract |
| keeping sales documentation | 5 years from the year following the year of termination of the contract |
| customer satisfaction survey, including determining the quality and satisfaction with services or products | 3 years - after this period, personal data from the survey are anonymized |
| conducting marketing of own products or services during the term of the sales contract | to object to the processing of data for the indicated purpose or until the end of the purpose of their processing, no longer than 5 years from the year following the year of termination of the contract |
| the need to establish, pursue or defend against claims and the need to retain evidence that may be a security against the claims made | for the duration of the claim or its limitation period under the law |
Do we share personal data and with whom?
Personal data may only be disclosed when:
- recipients are other entities performing services for Clima Polska Sp. z o. o only within the scope of the service provided in accordance with the concluded contract,
- recipients are other entities in the scope of:
-
- striving to meet the requirements of applicable law, regulations, legal processes or valid demands of state institutions;
- to detect and prevent fraud and to resolve other fraud, security and technical issues;
- protection of property rights or security of the Personal Data Administrator and other persons in a manner required or permitted by law.
We do not intend to transfer personal data to the so-called third countries (i.e. outside the European Economic Area including the European Union, Norway, Liechtenstein and Iceland). However, if the need arises, we can do so by ensuring an appropriate level of protection and applying appropriate legal provisions.
What rights do you have in connection with the processing of your personal data?
| Purpose of processing | Your rights |
| taking action before concluding the contract |
|
| conclusion and performance of the sales contract |
|
| sending billing documents electronically (e-invoice) |
|
| keeping sales documentation |
|
| conducting administrative activities
customer satisfaction survey, including determining the quality and satisfaction with services or products conducting marketing of own products or services during the term of the sales contract the need to establish, pursue or defend against claims and the need to retain evidence that may be a security against the claims made |
|
| Any information about the above-mentioned rights under the provisions of law on the protection of personal data you will find here. |
|
How can I exercise certain rights?
You can bring the above-mentioned rights to us at any time. Please read the necessary information regarding the procedure that you will find here.
Application forms:
- in writing to the following address: Clima Polska Sp. z o. o al. Commission of National Education 90, room U-7 02-777 Warsaw
- by e-mail to the following address: info@clima.com.pl.
You have the right to complain to the President of the Office for Personal Data Protection. You will find all the necessary information on www.uodo.gov.pl.
Is the data subject to automated processing?
Some data in connection with the provision of services may be processed in an automated manner (e.g. e-invoice or reminder service). However, these data are not subject to profiling that produces legal effects or significantly affects the data subject.
Where do we obtain personal data from?
We obtain personal data mainly from the data subject (this means from you).
However, we may, in justified cases, e.g. in order to confirm data or verify submitted statements, obtain data from:
- Register of Entrepreneurs of the National Court Register;
- Central Register of Economic Activity.
Information obligation in connection with the processing of personal data of job candidates by Clima Polska Sp. z o. o
Who is the Personal Data Administrator?
The administrator of the processed personal data of job candidates Clima Polska Sp. z o. o. with its registered office in Warsaw (02-777) at al. Commission of National Education 90, room U-7. The administrator can be contacted electronically by writing to the following e-mail address: info@clima.com.pl or traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, room U-7 02-777 Warsaw with the note Personal Data Protection.
Data Protection Officer
The protection of processed personal data is extremely important to us. That is why we have appointed a Data Protection Officer, Mr. Ryszard Chmurski, whom you have the right to contact on the subject of personal data protection by e-mail: data protection@clima.com.pl or traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, location U-7 02-777 Warsaw with the note: Data Protection Inspector.
Purposes and legal grounds for processing personal data?
| Purpose of processing | Data type | The basis of the law | Who the data relate to |
| Basic Processing Purposes | |||
| selecting a candidate for a specific job position | name and surname, contact details, contact details (e.g. telephone number / e-mail address), education, professional qualifications, previous employment history | the law
(Article 6(1)(c)) labor code |
Job candidate |
| other data provided in the recruitment documents | agreement
(Article 6(1)(a)) |
||
| checking the specific qualifications desired for a given position listed in the job advertisement | information on specific qualifications required for a given position | agreement
(Article 6(1)(a)) |
Job candidate |
| Other purposes of personal data processing | |||
| taking the candidate's participation in future recruitments | name and surname, contact details, contact details (e.g. telephone number / e-mail address), education, professional qualifications, previous employment history | agreement
(Article 6(1)(a)) |
Job candidate |
| responding to letters and requests | data provided as part of a given application, necessary for its consideration | the legitimate interest of the administrator
(Article 6(1)(f)) |
Job candidate |
| taking care of safety at the workplace through the use of video monitoring | image data in the form of monitoring recordings and other information captured by the camera (e.g. car registration number) | the legitimate interest of the administrator
(Article 6(1)(f)) |
Job candidate |
| the need to establish, pursue or defend against claims and the need to retain evidence that may be a security against the claims made | data indicated in the above sections to the extent necessary to establish the facts in connection with the resulting claim | the legitimate interest of the administrator
(Article 6(1)(f)) |
Job candidate |
Voluntary or obligation to provide personal data?
| purpose of processing | obligation or voluntary |
| selecting a candidate for a specific job position | Providing personal data specified in art. 221 of the Labor Code is mandatory as part of the recruitment process - failure to provide them results in the rejection of the candidature for a given position. Providing other data is voluntary, and failure to provide it does not affect the assessment of the candidate. |
| checking the specific qualifications desired for a given position listed in the job advertisement | Providing personal data is voluntary, but failure to provide it may result in rejection of the candidate in the recruitment process |
How long do we keep personal data?
| Purpose of processing | processing time |
| selecting a candidate for a specific job position | 3 months in the case of data processed under the provisions of the Labor Code |
| in the case of data processed on the basis of consent - until its withdrawal | |
| taking the candidate's participation in future recruitments | 12 months or until consent is withdrawn |
| sending billing documents electronically (e-invoice) | to withdraw the consent granted or to complete the purpose of processing no longer than 5 years from the year following the year of termination of the contract or withdrawal of consent for evidence purposes |
| taking care of safety at the workplace through the use of video monitoring | 30 days |
| customer satisfaction survey, including determining the quality and satisfaction with services or products | 3 years - after this period, personal data from the survey are anonymized |
| responding to letters and requests | pending consideration of the case |
| the need to establish, pursue or defend against claims and the need to retain evidence that may be a security against the claims made | for the duration of the claim or its limitation period under the law (usually 6 years) |
Do we share personal data and with whom?
Personal data may only be disclosed when:
- recipients are other entities performing services for Clima Polska Sp. z o. o only within the scope of the service provided in accordance with the concluded contract,
- recipients are other entities in the scope of:
-
- striving to meet the requirements of applicable law, regulations, legal processes or valid demands of state institutions;
- to detect and prevent fraud and to resolve other fraud, security and technical issues;
- protection of property rights or security of the Personal Data Administrator and other persons in a manner required or permitted by law.
We do not intend to transfer personal data to the so-called third countries (i.e. outside the European Economic Area including the European Union, Norway, Liechtenstein and Iceland). However, if the need arises, we can do so by ensuring an appropriate level of protection and applying appropriate legal provisions.
What rights do you have in connection with the processing of your personal data?
As a data subject, you have the following rights:
- access to your data;
- obtain a copy of the data;
- rectification of data;
- request deletion of data (right to be forgotten);
- processing restrictions;
- withdrawal of consent;
- lodging a complaint with the Supervisory Body.
You also have the right to object pursuant to Art. 21 sec. 1 of the GDPR to personal data processed on the basis of art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator).
Any information about the above-mentioned rights under the provisions of law on the protection of personal data you will find here.
How can I exercise certain rights?
You can bring the above-mentioned rights to us at any time. Please read the necessary information regarding the procedure that you will find here.
Application forms:
- in writing to the following address: Clima Polska Sp. z o. o al. Commission of National Education 90, room U-7 02-777 Warsaw
- by e-mail to the following address: info@clima.com.pl.
You have the right to complain to the President of the Office for Personal Data Protection. You will find all the necessary information on www.uodo.gov.pl.
Is the data subject to automated processing?
Some of your data may be processed automatically, however, they will not be subject to profiling, and the data processing does not have negative legal effects or does not affect you in any other way.
Where do we obtain personal data from?
We obtain personal data mainly from the data subject (this means from you).
Information obligation towards guests visiting Clima Polska Sp. z o. o. in connection with the processing of personal data of persons located in the monitored area
Who is the Personal Data Administrator?
The administrator of the processed personal data of persons located in the monitored area of Clima Polska Sp. z o. o. with its registered office in Warsaw (02-777) at al. Commission of National Education 90, room U-7. The administrator can be contacted electronically by writing to the following e-mail address: info@clima.com.pl or traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, room U-7 02-777 Warsaw with the note Personal Data Protection.
Data Protection Officer
The protection of processed personal data is extremely important to us. That is why we have appointed a Data Protection Officer, Mr. Ryszard Chmurski, with whom you have the right to contact on the subject of personal data protection by e-mail: rekrutacjadanych@clima.com.pl or by traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, location U-7 02-777 Warsaw with the note: Data Protection Inspector.
Purposes and legal grounds for processing personal data?
| Purpose of processing | Data type | The basis of the law | Who the data relate to |
| Basic Processing Purposes | |||
| taking care of safety at the workplace through the use of video monitoring | image data in the form of monitoring recordings and other information captured by the camera (e.g. car registration number) | the legitimate interest of the administrator
(Article 6(1)(f)) |
A person in the monitored area |
Voluntary or obligation to provide personal data?
| Purpose of processing | Duty or voluntary |
| taking care of safety at the workplace through the use of video monitoring | providing data is voluntary and takes place by entering the monitored area
failure to provide this data makes it impossible to enter this area |
How long do we keep personal data?
| Purpose of processing | processing time |
| taking care of safety at the workplace through the use of video monitoring | 30 days |
Do we share personal data and with whom?
Personal data may only be disclosed when:
- recipients are other entities performing services for Clima Polska Sp. z o. o only within the scope of the service provided in accordance with the concluded contract,
- recipients are other entities in the scope of:
-
- striving to meet the requirements of applicable law, regulations, legal processes or valid demands of state institutions;
- to detect and prevent fraud and to resolve other fraud, security and technical issues;
- protection of property rights or security of the Personal Data Administrator and other persons in a manner required or permitted by law.
We do not intend to transfer personal data to the so-called third countries (i.e. outside the European Economic Area including the European Union, Norway, Liechtenstein and Iceland). However, if the need arises, we can do so by ensuring an appropriate level of protection and applying appropriate legal provisions.
What rights do you have in connection with the processing of your personal data?
As a data subject, you have the following rights:
- access to your data;
- obtain a copy of the data;
- rectification of data;
- request deletion of data (right to be forgotten);
- processing restrictions;
- lodging a complaint with the Supervisory Body.
You also have the right to object pursuant to Art. 21 sec. 1 of the GDPR to personal data processed on the basis of art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator).
Any information about the above-mentioned rights under the provisions of law on the protection of personal data you will find here.
How can I exercise certain rights?
You can bring the above-mentioned rights to us at any time. Please read the necessary information regarding the procedure that you will find here.
Application forms:
- in writing to the following address: Clima Polska Sp. z o. o al. Commission of National Education 90, room U-7 02-777 Warsaw
- by e-mail to the following address: info@clima.com.pl.
You have the right to complain to the President of the Office for Personal Data Protection. You will find all the necessary information on www.uodo.gov.pl.
Is the data subject to automated processing?
Some of your data may be processed automatically, however, they will not be subject to profiling, and data processing does not have negative legal effects or does not affect you in any other way.
Where do we obtain personal data from?
We obtain personal data mainly from the data subject (this means from you).
Information obligation in connection with the processing of personal data of senders and recipients of electronic correspondence by Clima Polska Sp. z o. o
Who is the Personal Data Administrator?
The administrator of the processed personal data of senders and recipients of electronic correspondence The administrator of the processed personal data of customers, former customers and/or potential customers is Clima Polska Sp. z o. o. with its registered office in Warsaw (02-777) at al. Commission of National Education 90, room U-7. The administrator can be contacted electronically by writing to the following e-mail address: info@clima.com.pl or traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, room U-7
02-777 Warszawa with the note Personal Data Protection.
Data Protection Officer
The protection of processed personal data is extremely important to us. That is why we have appointed a Data Protection Officer, Mr. Ryszard Chmurski, whom you have the right to contact on the subject of personal data protection by e-mail: data protection@clima.com.pl or traditional form by sending correspondence to the address of Clima Polska Sp. z o. o. al. Commission of National Education 90, location U-7 02-777 Warsaw with the note: Data Protection Inspector.
Purposes and legal grounds for processing personal data?
| Purpose of processing | Data type | The basis of the law | Who the data relate to |
| Basic Processing Purposes | |||
| enabling e-mail contact with us and making contact with addressees, including documenting the arrangements made in the form of electronic archiving of employee files and documents | name and surname, e-mail address, other data contained in the correspondence | the legitimate interest of the Administrator
(Article 6(1)(f)) |
Sender/recipient of electronic correspondence |
| Implementation of the concluded contract | performance of the contract
(Article 6(1)(f)) |
Sender/recipient of electronic correspondence | |
| Other purposes of personal data processing | |||
| responding to letters and requests | data provided as part of a given application, necessary for its consideration | the legitimate interest of the administrator
(Article 6(1)(f)) |
Sender/recipient of electronic correspondence |
| the need to establish, pursue or defend against claims and the need to retain evidence that may be a security against the claims made | data indicated in point II to the extent necessary to establish the facts in connection with the resulting claim | the legitimate interest of the Administrator
(Article 6(1)(f)) |
Sender/recipient of electronic correspondence |
Voluntary or obligation to provide personal data?
| Purpose of processing | Duty or voluntary |
| implementation of the concluded contract | providing data is voluntary, but necessary to take action to perform the contract
failure to provide the indicated data may result in the inability to perform the contract |
| enabling e-mail contact with us and making contact with addressees, including documenting the arrangements made in the form of electronic archiving of employee files and documents | providing data is voluntary, but necessary to take action on the correspondence
failure to provide the indicated data may result in the inability to exchange electronic correspondence or perform certain activities for the sender of the correspondence |
How long do we keep personal data?
| Purpose of processing | processing time |
| enabling e-mail contact with us and making contact with recipients including documenting the arrangements made in the form of electronic archiving of employee files and documents | until an objection is raised, no longer than for a period of 3 years - the limitation period for claims. |
| performance of the concluded contract | for a period of 5 years after the end of the contract |
| responding to letters and requests | pending consideration of the case |
| the need to establish, pursue or defend against claims and the need to retain evidence that may be a security against the claims made | for the duration of the claim or its limitation period under the law (usually 6 years) |
Do we share personal data and with whom?
Personal data may only be disclosed when:
- recipients are other entities performing services for Clima Polska Sp. z o. o only within the scope of the service provided in accordance with the concluded contract,
- recipients are other entities in the scope of:
-
- striving to meet the requirements of applicable law, regulations, legal processes or valid demands of state institutions;
- to detect and prevent fraud and to resolve other fraud, security and technical issues;
- protection of property rights or security of the Personal Data Administrator and other persons in a manner required or permitted by law.
We do not intend to transfer personal data to the so-called third countries (i.e. outside the European Economic Area including the European Union, Norway, Liechtenstein and Iceland). However, if the need arises, we can do so by ensuring an appropriate level of protection and applying appropriate legal provisions.
What rights do you have in connection with the processing of your personal data?
As a data subject, you have the following rights:
- access to your data;
- obtain a copy of the data;
- rectification of data;
- request deletion of data (right to be forgotten);
- processing restrictions;
- lodging a complaint with the Supervisory Body.
You also have the right to object pursuant to Art. 21 sec. 1 of the GDPR to personal data processed on the basis of art. 6 sec. 1 lit. f) GDPR (legitimate interest of the administrator).
Any information about the above-mentioned rights under the provisions of law on the protection of personal data you will find here.
How can I exercise certain rights?
You can bring the above-mentioned rights to us at any time. Please read the necessary information regarding the procedure that you will find here.
Application forms:
- in writing to the following address: Clima Polska Sp. z o. o al. Commission of National Education 90, room U-7 02-777 Warsaw
- by e-mail to the following address: info@clima.com.pl.
You have the right to complain to the President of the Office for Personal Data Protection. You will find all the necessary information on www.uodo.gov.pl.
Is the data subject to automated processing?
Some data in connection with the provision of services may be processed in an automated manner (e.g. e-invoice or reminder service). However, these data are not subject to profiling that produces legal effects or significantly affects the data subject.
Where do we obtain personal data from?
We obtain personal data mainly from the data subject (this means from you).