RODO ENG

GDPR at ACATOM

In connection with the provisions of the Regulation of the European Parliament and of the Council of the European Union 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (hereinafter referred to as ” GDPR “), we are obliged to provide the following information regarding the protection of personal data:

INFORMATION ON THE PROCESSING OF PERSONAL DATA IN ACATOM

Pursuant to Art. 13 and 14 of the Regulation of the European Parliament and & nbsp; Of the Council (EU) 2016/679 of 27 April 2016 & nbsp; on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, the so-called GDPR, ACATOM SP. Z O.O. SP.K. announces that:

Data Administrator:

The administrator of personal data is ACATOM SP. Z O.O. SP.K. with headquarters at ul. Christo Botewa 14, 30-798 Krakow.

Categories of personal data processed:

JOB CANDIDATES:

Personal data is processed:

– in order to conclude an employment contract or at the request of the data subject before concluding an employment contract pursuant to art. 6 sec. 1 lit. b GDPR;

– on the basis of the candidate’s consent pursuant to Art. 6 sec. 1 lit. a GDPR and art. 9 sec. 2 lit. a GDPR, which may also include the processing of personal data for the purposes of subsequent recruitment processes.

The scope of the processed data is limited to the information the obligation to provide results from the provisions of labor law, necessary to conclude a contract (name (s) and surname, date of birth, contact details indicated by such a person, education, professional qualifications, previous employment history ), as well as provided voluntarily by the job applicant (e.g. image-photo, other contact details,).

The processing of personal data is necessary to take part in the recruitment for work for the Administrator.

To the extent that the basis for the processing of personal data is consent, providing personal data is completely voluntary.

Personal data is processed during the recruitment process, and after its completion, as long as the consent to the processing of personal data is not withdrawn, but not longer than for a period of one year.

Each job applicant is entitled to:

pursuant to Art. 15 GDPR, the right to access personal data;

pursuant to Art. 16 GDPR, the right to rectify personal data;

pursuant to Art. 17 GDPR, the right to request the deletion of personal data, subject to the exceptions provided for in Art. 17 sec. 3 GDPR;

pursuant to Art. 18 GDPR, the right to request the restriction of the processing of personal data, subject to the cases referred to in art. 18 sec. 2 GDPR; & nbsp;

pursuant to Art. 20 GDPR, the right to transfer personal data only to the extent that personal data are processed in an automated manner;

the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Rates 2, 00 & ndash; 193 Warsaw, if it is found that the processing of personal data violates the provisions of the GDPR.

In the case of processing personal data on the basis of consent, the job applicant has the right to withdraw it, which, however, does not affect the validity of actions performed on the basis of consent in the period between its granting and its withdrawal.

The candidate for work does not have the right to object to the processing of personal data pursuant to art. 21 GDPR, as the legal basis for the processing of personal data is not Art. 6 sec. 1 lit. e or f of the GDPR.

GUESTS:

The scope of personal data includes data necessary for identification, data recorded by monitoring and vehicle data (optional data).

Personal data is processed on the basis of art. 6 sec. 1 letter f of the GDPR solely for the purpose of ensuring the safety of persons and protection of property, production control and ensuring the confidentiality of information, which is the legitimate interest of the Administrator.

Providing the data is necessary – failure to provide it will result in the inability to identify, and thus enter the Company’s premises.

Therefore, it is necessary to present an identity card in order to issue a pass & ndash; however, the ID card will not be photocopied, scanned or photographed.

Personal data is processed as long as required by law to ensure the safety of persons and protection of property in the field of establishing, investigating or defending claims.

Data recorded by video surveillance is stored for a period not exceeding 14 days.

Every person is entitled to:

pursuant to Art. 15 GDPR, the right to access personal data;

pursuant to Art. 16 GDPR, the right to rectification;

pursuant to Art. 17 GDPR, the right to delete data subject to the exceptions provided for in art. 17 sec. 3 GDPR;

pursuant to Art. 18 GDPR, the right to request the administrator to limit the processing of personal data, subject to the cases referred to in art. 18 sec. 2 GDPR; & nbsp;

the right to lodge a complaint to the President of the Personal Data Protection Office if it is found that the processing of personal data violates the provisions of the GDPR.

In the event that Art. 6 sec. 1 lit. f GDPR, pursuant to art. 21 GDPR, you have the right to object to the processing of personal data.

& nbsp;

You do not have the right to transfer personal data referred to in art. 20 GDPR.

Recordings from video surveillance may not be improved for technical reasons and are not subject to the right to obtain a copy, where this could violate the rights and freedoms of other people who may be on the recording.

CUSTOMERS AND CONTRACTORS:

The scope of personal data includes identification data, contact details and data contained in publicly available registers and sources or provided by the Client / Contractor, including data of persons authorized to represent and data of proxies and details of contact persons.

Personal data is processed depending on the legal basis linking the Parties in order to:

conclusion of a contract or performance of its provisions pursuant to art. 6 sec. 1 lit. b GDPR;

to take action before concluding the contract, at the request of the data subject, in particular to prepare an offer pursuant to art. 6 sec. 1 lit. b GDPR;

fulfillment of the legal obligation in the field of tax and accounting obligations pursuant to art. 6 sec. 1 lit. c GDPR;

implementation & nbsp; the Administrator’s legitimate interest in marketing his own goods, conducting correspondence or answering inquiries made using the Administrator’s contact details and conducting debt collection activities and considering complaints, if necessary, pursuant to art. 6 sec. 1 lit. f GDPR.

In the event of concluding a contract with a commercial company or institution, the Administrator will process the personal data of persons authorized to represent them and persons indicated for contact only for purposes related to the conclusion and performance of contracts and conducting possible complaint and debt collection activities, which is legally justified the Administrator’s interest pursuant to art. 6 sec. 1 lit. f GDPR. In this case, personal data includes identification data, contact details, position held and other data available in publicly available registers (e.g. KRS, CEIDG) or provided by the company or institution for the purpose of concluding and performing the contract.

Providing personal data is necessary for the conclusion and performance of the contract.

Your personal data will be processed for the time necessary to perform the contract or the limitation of claims, as well as to fulfill the legal obligation incumbent on the Administrator, in particular with regard to tax and accounting obligations.

Every person is entitled to:

pursuant to Art. 15 GDPR, the right to access personal data;

pursuant to Art. 16 GDPR, the right to rectify personal data;

pursuant to Art. 17 GDPR, the right to request the deletion of personal data, subject to the exceptions provided for in Art. 17 sec. 3 GDPR;

pursuant to Art. 18 GDPR, the right to request the restriction of the processing of personal data, subject to the cases referred to in art. 18 sec. 2 GDPR; & nbsp;

pursuant to Art. 20 GDPR, the right to transfer personal data only to the extent that personal data are processed in an automated manner and on the basis of a contract;

In the case of data processing pursuant to Art. 6 sec. 1 lit. f GDPR, i.e. in order to implement legitimate interests, the client / contractor has the right to object to the processing of data.

CONTACT / CORRESPONDENCE

Personal data is processed in order to answer a question asked using the contact form or e-mail, which is the legitimate interest of the Administrator pursuant to art. 6 sec. 1 lit. f GDPR.

Providing data is necessary to answer a question asked using the contact form or by mail.

Your personal data is processed for the time necessary for the limitation of claims.

Everyone is entitled to:

pursuant to Art. 15 GDPR, the right to access personal data;

pursuant to Art. 16 GDPR, the right to rectify personal data;

pursuant to Art. 17 GDPR, the right to request the deletion of personal data, subject to the exceptions provided for in Art. 17 sec. 3 GDPR;

pursuant to Art. 18 GDPR, the right to request the restriction of the processing of personal data, subject to the cases referred to in art. 18 sec. 2 GDPR; & nbsp;

pursuant to Art. 20 GDPR, the right to transfer personal data only to the extent that personal data are processed in an automated manner and on the basis of a contract;

In the case of data processing pursuant to Art. 6 sec. 1 lit. f GDPR, i.e. in order to implement the legitimate interests of the sender or addressee of correspondence, he / she has the right to object to the processing of data.

Personal data transfers outside the European Economic Area:

Personal data is not transferred outside the European Economic Area or to organizations & nbsp; international.

Profiling:

Personal data is not used in automated decision-making processes, in particular profiling.

Recipients of personal data:

Personal data may be disclosed to state authorities in connection with their proceedings under applicable law.

In the remaining scope, access to personal data is also available to trained and authorized employees or associates of the Administrator, including entities providing services in the field of personal and property protection, legal, advisory, IT, accounting, courier or postal, auditing, programming and insurance services .

In order to exercise the rights, please contact us by letter to the address of the Administrator’s seat, tel./fax. 12 659 16 35, tel. 12 659 16 59 or e-mail: biuro@acatom.pl .

We ensure that the Personal Data Administrator makes every effort to ensure physical, technical and organizational measures to protect personal data against accidental or deliberate destruction, loss, alteration, unauthorized disclosure, use or access in accordance with applicable regulations.