Synthos S.A.
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 12th Commercial Department of the National Court Register under the KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS SA as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
The purpose of processing your personal data are activities related to the pursuit of conclusion and implementation of the contract with the Counterparty. The legal basis for processing your personal data is legitimate interest pursued by the Controller – contact regarding the conclusion of the contract and its implementation, as well as establishing, investigating and defending mutual claims in the event of their occurrence (pursuant to art.6 para.1 (f) GDPR). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller, in particular those arising from tax law and financial reporting (pursuant to art.6 para.1 (c) GDPR). Providing personal data is voluntary, but necessary to conclude a contract.
4. Source of personal data
Your personal data could have been obtained by the Controller from a cooperation agreement or made available by the Counterparty with whom you have an employment contract or a civil law contract. In connection with the implementation of the contract, the Controller processes your personal data, among others: identification data (name and surname), contact details (e-mail address), other data (place of employment).
5. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law.
Your data shall not be transferred to a third country.
6. Period of personal data storage
Your personal data will be processed for the duration of the contract with the Counterparty, and after its expiry for the period until the limitation of mutual claims arising from the contract. The personal data contained in the agreement will also be processed for the period resulting from the applicable laws, including tax regulations and financial reporting.
7. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
8. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
9. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 12th Commercial Department of the National Court Register under the KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS S.A. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
The purpose of processing your personal data are activities related to ensuring security and identification of persons staying in the area of the Controller’s activity, as well as the security of property located in the area of the Controller’s activity, as well as possible determination, investigation or defence of claims in the event of their occurrence – personal data processing activities are carried out as a legitimate interest pursued by the Controller (pursuant to art.6 para.1 (f) GDPR). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller (pursuant to art.6 para.1 (c) GDPR).
4. Recipients of personal data
The Controller informs that the recipients of your personal data will be::
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law.
Your data shall not be transferred to a third country.
5. Period of personal data storage
Your personal data will be processed for a period not exceeding 3 months from the date of their recording. In a situation where the video recordings constitute evidence in proceedings conducted on the basis of law or the Controller has become aware that they can constitute evidence in proceedings, the deadline is extended until the final completion of the proceedings.
6. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
7. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
8. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 12th Commercial Department of the National Court Register under the KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS S.A. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
Your personal data will be processed in connection with the need to identify persons staying on the Controller’s premises in order to ensure the safety of persons and property in the Controller’s area of activity, as well as to determine, investigate or defend any claims – the processing of personal data is carried out as legitimate interest carried out by the Controller (pursuant to art.6 para.1 (f) GDPR). Providing personal information is voluntary. Failure to provide data will result in the inability to enter the Controller’s area of activity.
4. Source of personal data
Your personal data could have been be obtained by the Controller from the cooperation agreement and/or made available by the Counterparty with whom you have an employment contract or a civil law contract. In connection with the implementation of the contract, the Controller processes your personal data, among others: identification data (name and surname).
5. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law. Your data shall not be transferred to a third country.
6. The period of personal data storage
Your personal data on the pass will be deleted immediately after it is returned to the Controller; data contained in the IT system used to issue passes will be processed for the period necessary for the possible determination, investigation or defence of claims with systematic control of their suitability.
7. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
8. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
9. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 12th Commercial Department of the National Court Register under the KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS S.A. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
We process your personal data only for the purpose of answering a question directed via the contact form available on the Controller’s website or via public Controller’s e-mail boxes – personal data processing activities are carried out as a legitimate interest pursued by the Controller (pursuant to art.6 para.1 (f) GDPR). Providing personal data is voluntary, but necessary to receive a response to a question asked via available electronic means.
4. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law.
Your data shall not be transferred to a third country.
5. Period of personal data storage
Your personal data will be stored for the period necessary to answer the question asked via available electronic means, and after that period for the purposes and for the period and to the extent required by law or to determine, defend or assert any claims.
6. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
7. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
8. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 12th Commercial Department of the National Court Register under the KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS S.A. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
Your personal data will be processed solely for the purpose of:
a) implementation of the recruitment process, including recruitment activities aimed at selecting persons to work from among candidates, in particular on the basis of:
-
Art. 6 paragraph 1 (b) GDPR – i.e. to take action at the request of the data subject before the conclusion of the contract;
-
Art. 6 clause 1 (c) GDPR – in the scope of exercising the employer’s rights under Article 221 § 1 of the Labour Code (i.e. name and surname, date of birth, contact details indicated by such a person, as well as when it is necessary to perform work of a specific type or in a specific position – education, professional qualifications, previous employment);
-
Art. 6 clause 1 (a) GDPR – consent, which may be withdrawn at any time, if you provide data in the recruitment application to a wider extent than the one to which the Controller is authorized by the Labour Code.
b) determination, investigation or defence against possible claims between you and the Controller – pursuant to art. 6 clause 1 (f) GDPR;
The Controller will process your personal data, including in subsequent recruitment processes, if you express your consent (legal basis: art.6 para.1 (a) GDPR), which can be withdrawn at any time.
If you take part in the recruitment process (regardless of the recruitment process selected), your personal data will also be processed for the purposes of personnel administration in a group of enterprises, in particular in order to implement operational activities in the field of planning and personnel policy (e.g. employment planning in Synthos Group, budget planning, etc.) – based on art. 6 clause 1 (f) GDPR.
Providing personal data is voluntary, while not providing personal data indicated in art. 22¹ § 1 of the Labour Code means that the received application documents of candidates for work will not be considered by the Controller.
4. Recipients of personal data
Personal data will be made available to employees and entities participating in this recruitment process and employees of the Controller.
Personal data will not be transferred to other entities, except for those that:
- are entitled to obtain them pursuant to the provisions of applicable law or
- provide the Controller with services requiring access to data, such as:
- recruitment agencies;
- entities providing services in the field of recruitment tests;
- entities belonging to the same Group of enterprises, i.e. SYNTHOS SA and its subsidiaries, as well as MS Galleon AG based in Vienna and Black Forest Sicav Sif Societe Anonyme seated in Luxembourg, based on recital 48 of the GDPR – to enable employees in companies associated with SYNTHOS S.A., participation in the recruitment process to the extent provided for in internal procedures (personnel administration in the Synthos Group);or
- are covered by the scope of consent that you have given.
Your data shall not be transferred to a third country.
5. Period of personal data storage
Your personal data will be stored for the duration of the recruitment process, but no longer than for a period of 12 months from its completion, and after that period for the purposes and for the period and to the extent required by law or to secure any claims and until their limitation period.
In the event of your consent to the use of personal data for the purposes of future recruitment processes, your personal data will be stored until the consent is withdrawn, but not longer than for a period of 36 months from the end of the year in which the personal data was provided. The Controller may process personal data longer as long as the law requires the storage of data or for the period of limitation of any claims.
6. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to transfer data, including receiving from the Controller in a structured, commonly used data format, which it provided to the Controller if the basis for processing was the consent of the data subject (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) GDPR), or data processing is necessary for the performance of a contract to which the data subject is party or to take action at the request of the data subject prior to its conclusion (Article 6 (1) (b) of the GDPR). The right also applies when the processing takes place in an automated manner.
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
- the right to withdraw consent to the processing of your data at any time, if the processing takes place on the basis of consent to the processing of data (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR).
7. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
8. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing including profiling.
-
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 12th Commercial Department of the National Court Register under the KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS S.A. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
Your personal data will be processed by the Controller in the scope of conducting marketing activities, performed using telecommunications terminal equipment and automatic calling systems, in accordance with art. 172 of the Telecommunications Law to build a brand, servicing the newsletter, as well as sending commercial information by means of electronic communication. The legal basis for the processing of personal data in the field of marketing of own services is Art. 6 clause 1 (a) (f) GDPR. The legal basis for the processing of personal data in the scope of sending commercial information is Art. 6 clause 1 (a) GDPR. Providing personal information is voluntary.
4. Source of personal data
Your personal data could have been be obtained by the Controller from the cooperation agreement and/or made available by the Counterparty with whom you have an employment contract or a civil law contract. In connection with the implementation of the contract, The Controller processes your personal data, among others: identification data (name and surname), contact details (e-mail address), other data (place of employment).
5. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law. Your data shall not be transferred to a third country.
6. Period of personal data storage
Your personal data processed in connection with the implementation of the above purpose will be processed until you withdraw your consent or object to the processing of personal data. In order to exercise your rights to withdraw your consent and raise an objection, please contact us at:
7. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to transfer data, including receiving from the Controller in a structured, commonly used format the data that it provided to the Controller if the basis for processing was the consent of the data subject (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) a GDPR), or data processing is necessary to perform a contract to which the data subject is party or to take action at the request of the data subject prior to its conclusion (Article 6 (1) (b) of the GDPR). The right also applies when the processing takes place in an automated manner.
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
- the right to withdraw consent to the processing of your data at any time, if the processing takes place on the basis of consent to the processing of data (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR).
8. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
9. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing including profiling.
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered in the register of entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, 12th Economic Division of the National Court Register under KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS S.A. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
The purpose of processing your personal data are activities related to the pursuit of the conclusion and implementation of the contract to which you are a party. The legal basis for processing your personal data is performance of activities related to the conclusion of the contract and its subsequent implementation, as well as establishing, investigating and defending mutual claims in the event of their occurrence – personal data processing activities are carried out as a legitimate interest pursued by the Controller (pursuant to art.6 para.1 (b) (f) GDPR). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller (pursuant to art.6 para.1 (c) GDPR). Providing personal data is voluntary, but necessary to conclude a contract.
4. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law. Your data shall not be transferred to a third country.
5. Period of personal data storage
Your personal data will be processed for the duration of the contract with the Controller, and after it expires until the limitation of mutual claims arising from the contract. Personal data contained in the contract will also be processed for the period resulting from applicable law, including tax regulations and financial reporting.
6. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to transfer data, including receiving from the Controller in a structured, commonly used format the data that it provided to the Controller if the basis for processing was the consent of the data subject (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) a GDPR), or data processing is necessary to perform a contract to which the data subject is party or to take action at the request of the data subject prior to its conclusion (Article 6 (1) (b) of the GDPR). The right also applies when the processing takes place in an automated manner.
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
7. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
8. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing including profiling.
-
1. Personal Data Controller
The Controller of your personal data is SYNTHOS S.A. with its registered office in Oświęcim 32-600 at ul. Chemików 1, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków – Śródmieście in Kraków, 12th Commercial Department of the National Court Register under the KRS number: 0000038981, REGON: 070472049, NIP: 549-000-21-08, share capital 39 697 500 PLN fully paid up. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
SYNTHOS SA as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
In connection with the implementation of the Responsible Supplier project, organized by Synthos SA, and the invitation to participate in it to the entity you represent, your personal data will be processed for the purpose and to the extent necessary for the proper implementation of the above purpose, based on the legitimate interest pursued by the Controller (Article 6.1.f RODO), which is the invitation to participate and contact in the project of Synthos SA, in terms of sustainable development of the entity you represent, which cooperates with the Controller. For the purpose, we use your personal data that we have in connection with the implementation of business cooperation. Personal data may also be processed for the purpose of establishing, investigating or defending against possible claims and for the accountability of the Administrator’s actions, as referred to in Article 5(2) of the RODO (for the realization of the legitimate interest pursued by the Controller in the form of securing claims and ensuring accountability, based on Article 6(1)(f) of the RODO.
4. Source of personal data
Your personal data in the scope of name, surname, e-mail address, telephone number, position. processed by the Data Controller, could have been obtained by the Controller from a cooperation agreement or made available by the Counterparty with whom you have an employment contract or a civil law contract.
5. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law.
As a general rule, personal data will not be transferred to a third country or international organization outside the European Economic Area. However, in certain situations, due to the cooperation of the data controller with service providers, there may be transfers of personal data to countries outside the European Economic Area, however, the data controller will take care of all formalities related to the proper safeguarding of personal data, including, among others, the use of standard contractual clauses adopted by the Commission (EU).
6. Period of personal data storage
Your personal data will be processed only for the purposes in point 3 and for the period of time necessary for their implementation: to carry out the invitation and to contact you within the framework of the Responsible Supplier project. If your personal data will be processed in connection with claims, the period of processing of your personal data will be based on generally applicable laws.
7. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
8. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
9. Profiling
SYNTHOS S.A. as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.