Information Clause

Information clause

Below you will find the information which must be provided to meet the obligation under art. 13  section 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - GDPR (Official EU.OJ.L 2016 No. 119, p. 1, as amended).

Who is the data controller of your personal data?

Corab S.A., ul. Mariana Bublewicza 8, 10-417 Olsztyn, [tax ID no.] NIP 739-020-77-57, [statistical no.] REGON 510519084, [National Court Register] KRS 0000950779, tel. 89 535 17 90, e-mail: corab@corab.com.pl

Who is as the data protection officer?

Tomasz Trzciałkowski
iod@corab.com.pl

For what purpose does the data controller process personal data and what is the legal basis for the processing?

Personal data shall be processed for the following purposes:

a) performance of the newsletter service provided electronically by the data controller;
b) sending of commercial information by the data controller;
c) final telecommunication devices, particularly within the scope of the use of interpersonal communication services
- for the purpose of sending commercial information;

The legal basis for the data processing is the conclusion of an agreement for the provision of the newsletter service as well as consent to the processing of data for the purposes indicated in item b) and c).

What are the legitimate interests pursued by the data controller or by a third party?

The processing of data on the basis of legitimate interest concerns special cases related to the defence or pursuit of claims in connection with the data processing and the agreement for the provision of the newsletter service.

Are there recipients of personal data? What are the categories of recipients?

Recipients of personal data shall be persons or entities processing personal data on behalf of and on instruction by the Data Controller. Data may also be made available to entities authorized based on provisions of the law.

Does the data controller transfer personal data to a third country or an international organization?

No. Personal data is processed only within the EEA.

For how long shall personal data be stored?

Personal data shall be processed until the purpose referred to above is achieved, and then stored in accordance with applicable provisions of the law. Personal data processed on the basis of consent shall be processed until its withdrawal.

What rights do you have under GDPR?

The data subject has the following rights resulting from the provisions of GDPR:

a) the right of access to personal data;
b) the right to rectify or supplement personal data;
c) the right to erase personal data;
d) the right to restrict the processing of personal data;
e) the right to object to the processing;
f) the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal;
g) the right not to be subject to profiling;
h) the right to data portability.

Click to open a form using which you can exercise your rights under art. 15-22 of GDPR, or file a complaint.

Do you have the right to withdraw your consent to data processing?

Yes. Voluntary consent may be withdrawn at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Where can you file a complaint?

If you believe that the data controller does not observe the provisions of GDPR, you can file a complaint with the supervisory authority. In Poland, it is the President of the Personal Data Protection Office. Detailed information on the procedure and manner of filing a complaint can be found on the website of the Personal Data Protection Office (https://uodo.gov.pl/pl/83/155) and at the contact point of the Data Protection Officer.

Is the provision of personal data a statutory or contractual requirement or a condition for entering into an agreement, and are you obliged to provide it and what are the possible consequences of not providing the data?

Provision of personal data is voluntary, it is a condition for entering into an agreement. Refusal to provide the data will prevent subscription to the newsletter service.

Is personal data used for automated decision-making or profiling?

Personal data shall not be used for automated decision-making, but it shall be profiled for analytical and statistical purposes, which has no legal consequences for the data subject and does not affect them in any significant way.