Pursuant to Article 13 (1) and (2) of Regulation ( EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter - RODO), I inform you that:
1. Personal data controller
The administrator of your personal data is Invena S.A. based in Koszalin, 75-209 Grabskiego 3 Street (hereinafter referred to as the Administrator). You may contact the Administrator in the following ways:
1) by mail to the address: ul. Grabskiego 3 , 75-209 Koszalin;
2) by e-mail: firstname.lastname@example.org
2. Data Protection Inspector
The Administrator has appointed a Data Protection Officer with whom you can contact in all matters concerning the processing of personal data and the exercise of rights related to data processing. The Supervisor can be contacted by email: email@example.com;
3. The purposes of the processing and the legal basis for the processing
Your data is processed for the purposes of :
1) to take actions aimed at investigating the complaint, as well as those related to the implementation of the complaint, including contact by phone or email to enable the examination of the item, making settlement proposals, etc.,
2) replying to your letters, requests and complaints,
3) responding to pending proceedings, including before the Ombudsman
The legal basis for the processing of your personal data as a result of filing and investigating a complaint are:
1) the necessity to perform the guarantee obligation (Article 6.1.b RODO),
2) provisions of the Civil Code relating to the warranty for defects of goods and guarantee of quality and provisions of the Accounting Act (Article 6(1)(c) of the DPA),
3) Necessity for the purposes arising from the legitimate interests pursued by the Administrator in the form of proper handling of claims, control of the correctness of the complaint procedure, defence of the Administrator's interests (Article 6(1)(f) of the RODO),
4. Storage period of personal data
Personal data will be processed for the period necessary to achieve the above-mentioned purposes, taking into account the term of the agreement, the warranty period, the period of limitation of claims under warranty and quality guarantee, as well as the storage periods specified in separate regulations, including accounting regulations and the period necessary to defend the interests of the Administrator. Data are stored for a maximum period of 6 years from the date of their collection
5. Data recipients
The Administrator may make your personal data available to entities with which it has entered into an agreement for the entrustment of personal data only in situations necessary for the purposes indicated above. This group includes:
a) GetResponse Sp. z o.o. with its registered office in Gdańsk at Arkońska 6/A3, 80-387 Gdańsk, within the scope of logistic services provided to the Administrator, such as maintenance of IT infrastructure and monitoring systems , destruction of documents, etc.
6. Transfer of data to a third country
Your data will not be transferred to third countries.
7. Rights in relation to the processing of personal data and automated decision-making
You have the following rights related to the processing of personal data:
1) the right of access to your personal data,
2) The right to have your personal data rectified,
3) The right to demand erasure of your personal data, where the processing is not carried out for the purpose of complying with an obligation arising from a legal provision,
4) The right to request restriction of processing of your personal data.
5) The right to withdraw consent to the use of your personal data by us. However, withdrawal of consent will not affect the fact that we could use the personal data for the entire period of validity of the consent, i.e. the legality of the processing performed on the basis of consent before its withdrawal
To exercise the above rights, please contact the Data Protection Officer or the Controller.
8. Right to lodge a complaint to the authority
You also have the right to lodge a complaint to the supervisory authority dealing with personal data protection, i.e. the President of the Office for Personal Data Protection.
9. Requirement to provide data
Providing personal data is voluntary, but their failure may result in a refusal to consider the complaint.
10. Your data will not be subject to decision-making automation and will not be profiled.