Information on the protection and processing of personal data
Pursuant to Articles 13(1)-(2) and 14(1)-(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119, p. 1) – hereinafter GDPR – we inform you that:
1. The controller of your personal data is:
Jerry’s Jarosław Sobkowiak ul. Polanka 18e/9, 61-131 Poznań, NIP 7821281713,
e-mail address: firstname.lastname@example.org
phone: +48 501 666 424
2. Purposes and grounds for processing your personal data:
Your personal data will be processed in order to:
- to perform the agreement concluded with the Landlord, hereinafter referred to as the Administrator, as well as to take action at your request prior to its conclusion, in particular to respond to queries concerning the services provided (basis: Article 6(1)point(b) GDPR,
- to comply with legal obligations incumbent on the Administrator, in particular those under the Accounting Act – in order to fulfil reporting and accounting obligations (basis: Article 6(1)point(c) GDPR,
- resulting from the legitimate interests of the Administrator: to conduct direct marketing of goods or services and to establish, defend and assert claims (basis: Article 6(1)point(f) GDPR,
In other cases, your personal data will be processed only on the basis of the previously granted consent for the purpose and to the extent resulting from the content of this consent.
3. Information about the acquisition of your personal data:
The Administrator receives your contact data directly from you (e.g. when you use our services) or via other persons (e.g. other intermediaries offering our services to whom you have made your data available). In the case of direct contact, you have full control over the extent of the data shared with the Administrator. In the case of data provided by another person, the Administrator usually collects only the basic contact data, including: name, surname, e-mail address, telephone number and possibly other data resulting from the contract or order in connection with which the personal data is provided.
4. Information on recipients of personal data:
The recipients of your personal data may be the Administrator’s subcontractors, entities providing accounting, IT, advertising, marketing, auditing, consulting, legal, transport, courier services to the Administrator.
5. Period for which the data will be stored:
Your personal data will be processed for the period necessary for the performance of the contract, as well as for the period during which claims related to this contract may arise, and furthermore for the period required by applicable law in connection with the need for us to comply with our tax obligations.
6. Information on your rights:
You have the right to:
- request access to your personal data (including obtaining a copy),
- request the rectification of your personal data if it is inaccurate or incomplete,
- to request the erasure of your personal data (“right to be forgotten”) where one of the following circumstances applie:
– the data are not necessary for the purposes for which they were collected or otherwise processed,
– the data subject has withdrawn the consent on which the processing is based and there is no other basis for the processing,,
– the data subject has objected to the processing,
– the data are processed unlawfully,
– the data must be erased in order to comply with a legal obligation,
- request the restriction of the processing of your personal data where one of the following circumstances applies:
– the data subject contests the accuracy of the personal data,
– the processing is unlawful and the data subject opposes the erasure, requesting instead a restriction,
– the controller no longer needs the data for its purposes, but the data subject needs the data for the establishment, defence or assertion of claims,
– the data subject has objected to the processing – until such time as it is established whether the legitimate grounds on the part of the controller override the grounds for the objection,
- to the portability of your personal data, where:
– the processing is carried out on the basis of the data subject’s consent or on the basis of a contract concluded with the data subject,
– the processing is carried out by automated means
- to object to the processing of your personal data where:
– there are reasons related to your particular situation,
– the data are processed on the basis of Article 6(1) point f, i.e. necessity for the purposes of the legitimate interests pursued by the controller
To the extent that you have given your consent to the processing of your personal data, you have the right to withdraw your consent to the processing of your personal data at any time without affecting the lawfulness of the processing carried out on the basis thereof prior to the withdrawal.
7. Information about the right to lodge a complaint with a supervisory authority:
You have the right to lodge a complaint with a supervisory authority (i.e. the President of the Office for the Protection of Personal Data) if, in your opinion, the processing of your personal data violates the provisions of the GDPR.
8. Information whether the provision of data is a statutory/contractual requirement/condition for entering into a contract/about an obligation to provide data:
The provision of data is voluntary; however, your failure to provide data will prevent us from entering into a contract and providing a service to you.
9. Transfer of data to a third country (i.e. outside the European Economic Area)/international organisation:
Your personal data will not be transferred to a third country (i.e. outside the European Economic Area) or an international organisation.
10. Information on automated decision-making:
Your personal data are not subject to automated decision-making, including profiling.