Synthos Dwory 2 spółka z ograniczoną odpowiedzialnością SD4 sp.k.

1. Personal Data Controller

The Controller of your personal data is Synthos Dwory 2 spółka z ograniczoną odpowiedzialnością SD4 spółka komandytowa  with its registered seat at Oświęcim 32-600, Chemików 1, Poland, registered (entered) in the Commercial Register administered by the District Court for Kraków – Śródmieście in Kraków, XII Commercial Division of the National Court Register under KRS number 0000625819, NIP 5492402800. The Controller can be contacted via correspondence data or by email to the following address: 

2. Data Protection Officer

Synthos Dwory 2 spółka z ograniczoną odpowiedzialnością SD4 spółka komandytowa as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address: 

3. Purpose and legal basis for personal data processing

The purpose of processing your personal data are activities related to the pursuit of conclusion and implementation of the contract with the Counterparty. The legal basis for processing your personal data is legitimate interest pursued by the Controller – contact regarding the conclusion of the contract and its implementation, as well as establishing, investigating and defending mutual claims in the event of their occurrence (pursuant to art.6 para.1 (f) GDPR). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller, in particular those arising from tax law and financial reporting (pursuant to art.6 para.1 (c) GDPR). Providing personal data is voluntary, but necessary to conclude a contract.

4. Source of personal data

Your personal data could have been obtained by the Controller from a cooperation agreement or made available by the Counterparty with whom you have an employment contract or a civil law contract. In connection with the implementation of the contract, the Controller processes your personal data, among others: identification data (name and surname), contact details (e-mail address), other data (place of employment).

5. Recipients of personal data

The Controller informs that the recipients of your personal data will be:

• entities from the Synthos group;
• entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
• entities to which the Controller is required to provide data under applicable law.

Your data shall not be transferred to a third country.

6. Period of personal data storage

Your personal data will be processed for the duration of the contract with the Counterparty, and after its expiry for the period until the limitation of mutual claims arising from the contract. The personal data contained in the agreement will also be processed for the period resulting from the applicable laws, including tax regulations and financial reporting.

7. Rights of data subjects

You have the rights related to the processing of personal data by the Controller:

• the right to request access to the content of your data;
• the right to rectify personal data;
• the right to delete your personal data (“being forgotten”);
• the right to limit data processing by the Controller;
• the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.

8. The right to lodge a complaint with the Supervisory Body

In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155

9. Profiling

Synthos Dwory 2 spółka z ograniczoną odpowiedzialnością SD4 spółka komandytowa as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.

1. Personal Data Controller

The Controller of your personal data is Synthos Dwory 2 spółka z ograniczoną odpowiedzialnością SD4 spółka komandytowa  with its registered seat at Oświęcim 32-600, Chemików 1, Poland, registered (entered) in the Commercial Register administered by the District Court for Kraków – Śródmieście in Kraków, XII Commercial Division of the National Court Register under KRS number 0000625819, NIP 5492402800. The Controller can be contacted via correspondence data or by email to the following address: 

2. Data Protection Officer

Synthos Dwory 2 spółka z ograniczoną odpowiedzialnością SD4 spółka komandytowa as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address: 

3. Purpose and legal basis for personal data processing

The purpose of processing your personal data are activities related to the pursuit of the conclusion and implementation of the contract to which you are a party. The legal basis for processing your personal data is performance of activities related to the conclusion of the contract and its subsequent implementation, as well as establishing, investigating and defending mutual claims in the event of their occurrence – personal data processing activities are carried out as a legitimate interest pursued by the Controller (pursuant to art.6 para.1 (b) (f) GDPR). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller (pursuant to art.6 para.1 (c) GDPR). Providing personal data is voluntary, but necessary to conclude a contract.

4. Recipients of personal data

The Controller informs that the recipients of your personal data will be:

• entities from the Synthos group;
• entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
• entities to which the Controller is required to provide data under applicable law. Your data shall not be transferred to a third country.

5. Period of personal data storage

Your personal data will be processed for the duration of the contract with the Controller, and after it expires until the limitation of mutual claims arising from the contract. Personal data contained in the contract will also be processed for the period resulting from applicable law, including tax regulations and financial reporting.

6. Rights of data subjects

You have the rights related to the processing of personal data by the Controller:

• the right to request access to the content of your data;
• the right to rectify personal data;
• the right to delete your personal data (“being forgotten”);
• the right to limit data processing by the Controller;
• the right to transfer data, including receiving from the Controller in a structured, commonly used format the data that it provided to the Controller if the basis for processing was the consent of the data subject (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) a GDPR), or data processing is necessary to perform a contract to which the data subject is party or to take action at the request of the data subject prior to its conclusion (Article 6 (1) (b) of the GDPR). The right also applies when the processing takes place in an automated manner.
• the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.

7. The right to lodge a complaint with the Supervisory Body

In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155

8. Profiling

Synthos Dwory 2 spółka z ograniczoną odpowiedzialnością SD4 spółka komandytowa as the Controller does not make decisions regarding the processing of your personal data based on automated processing including profiling.