GDPR

GDPR – General Data Protection Regulation of European Parliament and the EU Council 2016/679 of 27.04.2016 on the protection of personal data, the provisions of which concern the protection of individuals’ personal data in connection with their processing.

PDPI – (Personal Data Protection Inspector) – the person whose main duty is to verify that the procedures adopted by a company/business concerned with regard to personal data comply with the requirements of the Regulation.

Personal data are data about a natural person which allow for the determination of their identity, in particular on the basis of identifiers such as:

• first name and surname,
• identification (ID) number,
• location data,
• the Internet identifier,
• others allowing identification of a person.

In addition to personal data, the GDPR also specifies data concerning health, political opinions, sexual orientation. These are sensitive data which should be protected in a special way.

Processing of personal data – means any action related to the use of personal data, including but not limited to recording, copying, storing, viewing, adaptation, modification, dissemination, deletion or destruction by automated and non-automated means.

With regard to the processing of personal data, the GDPR sets out the rules for obtaining consent from individuals. The most important of these rules are:

• consent to the processing of personal data must be given to a specific entity,
• the statement of consent to the processing of personal data should be worded in a simple way so as to make explicit that consent to data processing is given,
• the consent to data processing must be voluntary,
• consent must specify the Intended use for which it is given, the place where the data are processed as well as the period for which it is valid,
• the person who gives consent to the processing of personal data should be informed of who the controller of his or her personal data is and of the possibility of withdrawing such consent.

A person’s rights in relation to the processing of personal data:

• the right to object,
• the right of access to personal data,
• the right to the rectification of the data,
• the right to have your data deleted – the so-called ” the right to be forgotten”,
• the right to restrict the processing of personal data,
• the right to the transfer of the data,
• the right to lodge a complaint with the supervisory authority, i.e. to the President of the Office for Personal Data Protection if the processing of personal data violates legal provisions.

Pursuant to Article 13 sections 1, 2 and 3 of the RODO/GDPR concerning the processing of personal data in ZPRE “JEDLICZE” Sp. z o. o. I would like to inform you that

1. the administrator of the processed personal data is ZPRE “JEDLICZE” Sp. z o. o., 86 Kurkowskiego Street; 38-460 JEDLICZE
2. The administrator has appointed the Personal Data Protection Inspector; contact: iodo@zpre-jedlicze.com.pl
3. We process the data only for purposes related to the performance of our services (execution of contracts) and to take any necessary actions prior to the conclusion of a contract, including marketing activities.
4. The legal basis for your personal data processing is the currently applicable law.
5. The recipient(s) of the personal data are, in accordance with the applicable law, the entities processing them on our behalf and the entities entitled to obtain the data on the basis of the applicable law.
6. The data collected will not be disclosed to other entities.
7. The data collected will not be transferred to a third country or an international organisation.
8. The processed data resulting from the performance of the service (contract) will be processed for the period necessary for the correct performance of the service and will be deleted in accordance with the applicable legal regulations.
9. You have the right to request access to your data, rectification, deletion or restriction of their processing. You may withdraw your consent to the processing of your personal data at any time without affecting the compliance with the processing, object to the processing and you have the right to transfer the data. You will be notified of the rectification or deletion of your personal data or the restriction of processing. You may lodge a complaint with the supervisory authority.
10. The disclosure of the aforementioned data is/is not* a statutory requirement; where it is not a statutory obligation, it is contractual.
11. You are not obliged to provide the data and if you fail to do so, it will not be possible to provide a service (conclude a contract).
12. The data collected from you will not be used for any profiling process.

Accordingly, I consent / do not consent* to the processing of my data for the purpose set out above. I declare that giving this consent is voluntary and I know that I can withdraw it at any time, but that withdrawal of consent will not affect the lawfulness of the processing based on consent, before its withdrawal.