GDPR Information Notice
In fulfilment of the information obligation arising from Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we hereby inform you that:
1. Data controller
The controller of your personal data is ALGREN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Aleja Obrońców Tobruku 7, 10-092 Olsztyn, KRS: 0000835284, NIP: 7393938817, REGON: 385835597.
Contact: e-mail: kontakt@deyee.eu, phone: +48 604 555 624.
2. Purposes and legal bases for processing
Your personal data (first and last name, phone number, e-mail address, type of business, referral source) is processed for the following purposes and on the following legal bases:
- Handling the contact form and scheduling a robot demonstration – Article 6(1)(b) GDPR – processing is necessary in order to take action at the request of the data subject prior to entering into a contract.
- Pursuit of the Controller’s legitimate interests – Article 6(1)(f) GDPR – in particular with respect to replying to enquiries, handling commercial enquiries, and establishing, pursuing or defending claims.
- Fulfilment of the Controller’s legal obligations – Article 6(1)(c) GDPR – in particular obligations arising from tax and accounting regulations.
3. Data recipients
Data may be transferred to:
- entities processing data on the Controller’s behalf (providers of IT, hosting and e-mail services),
- entities providing accounting, legal and advisory services,
- state authorities entitled under separate regulations.
4. Transfer of data to third countries
As a rule, personal data is not transferred outside the European Economic Area. Where IT tools requiring such a transfer are used, it takes place on the basis of appropriate safeguards referred to in Article 46 GDPR (e.g. standard contractual clauses).
5. Data retention period
Personal data will be stored for a period:
- necessary to handle the enquiry and any performance of the contract,
- required by law (e.g. 5 years for tax purposes),
- until claims arising from the commercial relationship become time-barred,
- until an effective objection is raised – in the case of processing based on a legitimate interest.
6. Rights of data subjects
In accordance with the GDPR, you have the right to:
- access your personal data (Article 15 GDPR),
- rectify incorrect data or complete incomplete data (Article 16 GDPR),
- erase data – in the cases set out in Article 17 GDPR,
- restrict processing – in the cases set out in Article 18 GDPR,
- portability of data – in the cases set out in Article 20 GDPR,
- object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR),
- withdraw consent at any time – without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal,
- lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl).
7. Requirement to provide data
Providing personal data in the contact form is voluntary but necessary to schedule a robot demonstration and to reply to your enquiry. The consequence of not providing the data is the inability to process your submission.
8. Automated decision-making
Your personal data will not be used for automated decision-making, including profiling, within the meaning of Article 22 GDPR.
9. Source of data
Personal data is obtained directly from the data subjects, by completing the contact form on the Controller’s website.