Acting pursuant to Article 13(1)–(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1), which enters into force on 25 May 2018 (hereinafter referred to as the “Regulation” or “GDPR”), we hereby inform you that:
The controller of your personal data is:
EAE Elektronik Spółka z o.o. ul. Przemyska 24d, 38-500 Sanok, Poland
(hereinafter also referred to as the “Company”) Company’s contact details: tel.: +48 133 067 100 fax: +48 133 067 100 e-mail: info@eae-elektronik.eu website: www.eae-elektronik.pl
The current Data Security Officer of the Company shall become the Data Protection Officer (DPO) as of 25 May 2018. You may contact the DPO in all matters related to the protection of personal data processed by the Company by calling +48 133 067 100 or emailing: info@eae-elektronik.eu
The Company processes your personal data for the following purposes:
If, as of 25 May 2018, you have a contract with the Company: a) to take steps at your request prior to entering into a contract (Art. 6(1)(b) of the GDPR), b) to perform a contract concluded with the Company (Art. 6(1)(b) of the GDPR), c) to comply with legal obligations incumbent upon the Company in connection with its business and the execution of concluded contracts (Art. 6(1)(c) of the GDPR), d) for marketing and promotion of the Company’s products and services (Art. 6(1)(a) of the GDPR), e) for the establishment, exercise or defence of legal claims (Art. 6(1)(f) of the GDPR), f) for the Company’s internal administrative and statistical purposes (Art. 6(1)(f) of the GDPR).
If, as of 25 May 2018, you do not have a contract with the Company: a) to take steps at your request prior to entering into a contract (Art. 6(1)(b) of the GDPR), b) for marketing and promotion of the Company’s products and services (Art. 6(1)(a) of the GDPR), c) to comply with legal obligations incumbent upon the Company in connection with its business activities (Art. 6(1)(c) of the GDPR), d) for the Company’s internal administrative and statistical purposes (Art. 6(1)(f) of the GDPR).
In connection with the processing of your personal data, such data may be shared with the following recipients: a) National Labour Inspectorate (PIP), b) Social Insurance Institution (ZUS), c) competent Tax Offices, d) entities providing occupational health services for the Company, e) relevant District Labour Offices (PUP), f) entities providing employee training services, j) Sagitum Sp. z o.o., k) Medycyna Pracy Sanok.
Your personal data will be processed for the period necessary to achieve the purposes stated above, specifically:
for the duration of the contract with the Company and thereafter as required by applicable law or for the purposes of securing possible claims, or—where consent is given—for as long as such consent is not withdrawn,
to comply with statutory obligations—until these obligations are fully fulfilled by the Company,
for marketing purposes—until you withdraw your consent,
for internal administrative purposes—until the Company’s legitimate interests justifying such processing are fully pursued or until an objection is lodged.
In connection with the processing of your personal data, you have the following rights:
7–12. right to access your data (Art. 15 of the GDPR), right to rectification (Art. 16 of the GDPR), right to erasure (“right to be forgotten”) under the conditions set forth in Art. 17 of the GDPR, right to restriction of processing under the conditions set forth in Art. 18 of the GDPR, right to object to processing (Art. 21 of the GDPR), right to data portability (Art. 20 of the GDPR).
Where data processing is based on your consent (Art. 6(1)(a) of the GDPR), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.
If you believe that your personal data is being processed in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority (until 25 May 2018: the Inspector General for the Protection of Personal Data, thereafter: its legal successor).
Please note that where the processing of your personal data is necessary for entering into or performing a contract with the Company, providing your data is voluntary but necessary. Failure to provide the data will result in the inability to conclude or perform a contract with the Company.
Finally, we inform you that if as of 25 May 2018 you have a contract with the Company or steps are being taken at your request to conclude such a contract, your personal data may be processed in an automated manner. This means that decisions may be made automatically or based on profiling, in particular:
in the process of assessing the ability to perform obligations under the contract, based on the data you provide and information obtained by the Company during that assessment. As a result of such evaluation, an automated decision may be made to approve, reject or require individual assessment regarding the conclusion of a contract.
