Polityka prywatności
ELECTROTILE PRIVACY POLICY
YOUR PERSONAL DATA – WHAT IS IT?
By personal data we mean data of a living person who can be identified through the use of such data. Our processing of your personal data is governed by the General Data Protection Regulation 2016/679 (GDPR). This Privacy Policy explains how we protect and process the personal data of our contractors and potential contractors, their representatives and job applicants.
WHO ARE WE?
We are the controller of your personal data. This means that we decide how and for what purposes your personal data that you have provided to us, or that has been provided to us with your consent, is processed. We want you to know that we make every effort to keep your personal data safe.
HOW TO CONTACT US?
If you have any questions about our processing of your personal data please contact us using the contact details below:
ELECTROTILE Sp. z o. o., 427 Pulawska St., 02-801 Warsaw, e-mail: bok@electrotile.com, telephone: +48 729 879 798
HOW DO WE PROCESS YOUR PERSONAL DATA?
In connection with our business, we process the personal data of different individuals for different purposes, to different extents and on different legal bases as defined in the GDPR. In order to provide you with the clearest possible information, we have grouped this information by reference to the purpose for which we process your personal data.
CONTRACTORS AND POTENTIAL CONTRACTORS
Purpose of processing
We process your personal data in order to perform the contract binding us or to carry out the cooperation between us.
Period of processing
We process your personal data for this purpose until the termination of the contract linking us, the settlement of mutual obligations and for the period of limitation applicable to the type of contract concluded.
Legal basis
Necessity for the performance of the contract or our cooperation (Article 6(1)(b) GDPR).
Purpose of processing
We process your personal data in order for us to comply with our legal obligation to keep accounting records, in the form of VAT invoices or other regulatory requirements. This obligation is imposed on us by the applicable Accounting Act.
Processing period
We process your personal data for this purpose for a period of 5 years from the beginning of the year following the financial year in which such records were created.
Legal basis
Fulfilment of a legal obligation (Article 74(2)(8) of the Accounting Act in conjunction with Article 6(1)(c) GDPR).
Purpose of processing
We process your personal data for the purpose of assessing your payment reliability in connection with the conclusion and performance of a contract or binding cooperation between us, if necessary.
Period of processing
We process your personal data for this purpose for the duration of the contract between us or the performance of the agreement concluded.
Legal basis
Our legitimate interest in verifying and assessing the reliability of our contractors (Article 6(1)(f) GDPR).
Categories of recipients of your personal data
Accounting service providers
We use entities that provide professional accounting and billing services.
IT service providers
We use entities that provide professional IT services. We are committed to keeping your personal data secure, up-to-date and ensuring its confidentiality.
Professional legal advisers and debt collectors
We use entities that provide us with professional auditing, legal assistance and debt collection services arising from the legal relationships between us and our contractors.
Entities providing storage and archiving services
We use the services of entities that are professionally engaged in providing storage services for our records.
Document and media destruction service providers
We use professional shredding service providers for the secure destruction of our records and other media.
Postal or courier services
We use the services of entities which professionally provide postal or courier services.
REPRESENTATIVES OF CONTRACTORS AND POTENTIAL CONTRACTORS
Categories of personal data
We only process your personal data such as your name, surname, position, employment address, business telephone and business email.
Source of personal data
Your personal data has been made available to us by an entity with which we have entered into a contract or agreement and of which you are an employee or representative. We provide you with data concerning this entity when you first contact us.
Purpose of processing
We process your personal data in order for us to fulfil our obligations arising from the legal relationship with the entity of which you are an employee or representative.
Period of processing
We process your personal data for this purpose until the termination, settlement and expiry of the limitation period relating to our relationship with the entity of which you are an employee or representative, or until you raise an objection and we acknowledge its legitimacy.
Legal basis
Our legitimate interest in the performance of our contracts and legal relationship with the entity of which you are an employee or representative (Article 6(1)(f) GDPR).
Categories of recipients of your personal data
IT service providers
We use entities that are professionally engaged in the provision of IT services. We are committed to keeping your personal data secure, up-to-date and ensuring its confidentiality.
Professional legal advisers
We use entities that provide us with professional services related to legal assistance.
Entities providing storage and archiving services
We use entities that are professionally engaged in providing storage services for records of donations made.
Document and media destruction service providers
We use professional shredding service providers for the secure destruction of records and other media.
Postal or courier companies
We use the services of entities that are professionally engaged in the provision of postal or courier services.
JOB APPLICANTS
Purpose of processing
We process your personal data in the form of your first name(s), surname, the names of your parents, date of birth, place of residence (mailing address), your education and previous employment history for the purpose of the recruitment process.
Processing period
We will process your personal data for this purpose until the recruitment process is completed, resulting in your acceptance or refusal.
Legal basis
Fulfilment of a legal obligation (Article 221 § 1 of the Labour Code in conjunction with Article 6(1)(c) GDPR).
Purpose of processing
We process your personal data, other than those listed above, indicated by you in your submitted recruitment application in order to carry out the recruitment process.
Period of processing
We process your personal data for this purpose until the end of the recruitment process resulting in your acceptance or refusal of the job application, or until you withdraw your consent to the processing of your personal data for this purpose.
Legal basis
Voluntary consent (Article 6(1)(a) GDPR).
Purpose of processing
We process your personal data for future recruitment processes.
Period of processing
We process your personal data for this purpose until the end of our recruitment processes for positions that match your interests, experience and educational background, or until you withdraw your consent to the processing of your personal data for this purpose.
Legal basis
Voluntary consent (Article 6(1)(a) GDPR).
Categories of recipients of your personal data
Recruitment providers
We use the services of entities that provide a secure and convenient way to carry out the recruitment process, in accordance with the service regulations of these entities.
IT service providers
We use entities that are professionally engaged in the provision of IT services. We are committed to keeping your personal data secure, up-to-date and ensuring its confidentiality.
WHAT ARE YOUR RIGHTS IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA?
We ensure that your rights indicated below are exercised. You can exercise your rights by making your request using the contact details we have indicated.
Right to withdraw consent
You have the right to withdraw any consent you have given us for the processing of your personal data at any time. The withdrawal of your consent has effect from the moment of withdrawal. The withdrawal of your consent does not affect the processing we lawfully carried out prior to your withdrawal.
The withdrawal of consent does not entail any negative consequences for you. However, it may prevent us from continuing to perform our activities for you or to use our functionalities that we can lawfully provide only with your consent.
Legal basis: article 7(3) GDPR.
Right to object to the use of your personal data
You have the right to object at any time to the use of your personal data if we process your data based on our legitimate interest.
If your objection proves to be valid and we have no other legal basis for processing your personal data, we will delete your data against the use of which you have objected.
Legal basis: article 21 GDPR.
Right to erasure of personal data (“right to be forgotten”)
You have the right to request the erasure of all or some of your personal data.
Despite a request to erase your personal data, due to an objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the purposes of establishing, asserting or defending possible claims relating to the processing of your personal data. This applies in particular to personal data including: your name and information about your consents or activity history, which we retain for the purposes of investigating complaints and claims relating to our processing of your personal data in connection with the legal relationship between us. We will process your personal data for this purpose for a period of 10 years after the end of the legal relationship between us. The legal basis for our processing of your personal data for this purpose is our legitimate interest (Article 6(1)(f) GDPR).
Legal basis: article 17 of the GDPR.
Right to restrict the processing of your personal data
You have the right to request the restriction of the processing of your personal data. If you make such a request, we will prevent you from using certain functionalities or services, the use of which will involve the processing of the data covered by the request, until the request is processed. We will also not send you any additional communications.
Legal basis: article 18 of the GDPR.
Right of access to your personal data
You have the right to obtain confirmation from us as to whether we are processing your personal data and, if this is the case, you have the right to:
gain access to your personal data;
be informed about the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of that data, the intended period of storage of your data or the criteria for determining that period, your rights under the GDPR and your right to lodge a complaint with a supervisory authority, the source of that data, automated decision-making, including profiling, and the safeguards applied in relation to the transfer of that data outside the European Union;
obtain a copy of your personal data.
Legal basis: article 15 of the GDPR.
Right to rectification of your personal data
You have the right to request us to rectify your personal data when it is not in accordance with the facts and to complete it (if it is incomplete).
Legal basis: article 16 of the GDPR.
Right to personal data portability
You have the right to receive your personal data that you have provided to us and then send it to another personal data controller of your choice.
You also have the right to request that we send your personal data directly to such another controller, insofar as this is technically possible.
Legal basis: article 20 of the GDPR.
Right to lodge a complaint
You can make complaints, queries and requests to us about the processing of your personal data and the exercise of your rights.
If you believe that your data protection rights or other rights granted to you under the GDPR have been violated, you have the right to lodge a complaint with the Inspector General for Personal Data Protection (in future the President of the Data Protection Authority).
Legal basis: article 13(2)(d) GDPR.
IS IT MANDATORY TO PROVIDE YOUR PERSONAL DATA?
It is not mandatory for you to provide your personal data. However, it is necessary in order to provide the services in accordance with the Terms and Conditions.
Without your consent to receive information about our new initiatives, activities, offers to the email address you have provided, we will not be able to send you such information.
WILL YOUR PERSONAL DATA BE SHARED WITH COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA?
We do not share your personal data outside the European Economic Area (EEA). The processors we use and with whom we have relevant agreements in place, in compliance with the GDPR, are exclusively companies within the EEA.
WILL YOUR PERSONAL DATA BE USED FOR PROFILING OR OTHER AUTOMATED DECISION-MAKING?
In the process of providing services in accordance with the Terms and Conditions, we make decisions in an automated manner based on the data we hold about you: your email address, your position, the company and address of your employer or the company and address of your business. Based on this information, we assign you a personal profile relevant to our ability to offer you our services or those of our partners relevant to your industry and scope of your business. These decisions are made automatically on the basis of [algorithms and statistical analyses]. Decisions made in this automated manner affect the products and services offered to you depending on what we believe you may need.
Profiling means the processing of personal data involving the use of your personal data to evaluate certain of your characteristics, in particular to analyse or forecast your interests or location. We profile you for the purposes of matching our offerings to your preferences.
CHANGES TO THE PRIVACY POLICY
We may amend and supplement the Privacy Policy as appropriate. We will notify you of any changes or additions by posting relevant information on our website: https://electrotile.com/privacy-policy-electrotile/ and in the event of material changes we may also send you a separate notice to your email address or make the Privacy Policy otherwise available to you.
