Information Clause

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we would like to inform you about the following principles of personal data processing:

 

Personal Data Administrator (ADO)
MCPOLSKA.PL Limited Liability Company limited partnership

Wschodnia 5A, 62-080 Swadzim

phone  : 61 822 65 61

Data Protection Officer (DPO)
Katarzyna Ślusarek, e-mail address: iod@mcpolska.pl

 

PDC processes your data in order to:

  1. Recruitmentand employees

Legal basis: Article 6(1)(b) of the GDPR, Article 22(1)  of the Labour Code, and Article 9(2)(b) of the GDPR (sensitive data).
Providing this data is a statutory requirement and necessary to achieve the purpose of recruitment. You are obliged to provide them, and the consequence of not providing them will be the inability to take part in the recruitment process.  Other personal data not required by law (e.g. interests) are processed on the basis of art. 6 par. 1 lit. a) GDPR, i.e. on the basis of your voluntary consent and their provision does not affect the possibility of participation in recruitment.

Period of storage of personal data: We process your personal data until the end of the recruitment process, and when you have agreed to participate in future recruitments no longer than for 12 months from the date of sending the application documents.

 

  1. Employedand employees

Legal basis: Article 6(1)(b) of the GDPR, Article 22(1) of the  Labour Code, and Article 9(2)(b) of the GDPR (sensitive data) – processing is necessary for the performance of the contract, Article 6(1)(c) of the GDPR – processing is necessary to fulfill a legal obligation, Article 6(1)(f) GDPR – the legal basis for processing is the legitimate interest of the Administrator,  anda rt. 6 par. 1 lit. a) GDPR – in the scope of personal data not required by law – the legal basis for processing is your consent.

Approximately thestorage of personal data: depending on the purpose for which the personal data are processed, the period of their storage is:  50 years or 10 years for contracts concluded after 01.01.2019 (depending on the date of employment) from the end of the year in which the employment relationship ended. For contracts concluded after 31 December 1998  and before 1 January 2019  the employer may submit to ZUS a special information report referred to in Article 4(6a) of the Act of 13 October 1998 on the social insurance system, in which case the period may be reduced to 10 years, counting from the end of the calendar year in which the information report was submitted.

 

  1. Cooperation with external companies with which ADO has signed a contract for the provision of services

Legal basis for processing: Art. 6 para. 1 lit.  b) GDPR – p management is necessary to perform the contract or take action before the conclusion of the contract, providing data is necessarye for cooperation.

Period of storage of personal data: for the period necessary to perform the concluded contracts and the rules set out therein.  Minimum 5 years from the end of the year in which the last invoice/accounting proof was issued.

 

  1. Performance of the contract

Source: Data of employees and associates provided as part of cooperation by the entity that is a party to the contract.

Legal basis for processing: Article 6(1)(f) of the GDPR, for the purposes of contact in matters related to the performance of the Main Agreement, for administrative purposes, including those related to the organization of cooperation and supervision over the performance of services or the performance of other obligations or rights performed under the Main Agreement, for evidential purposes related to the performance of the Main Agreement, in order to pursue claims related to the implementation of the Main Agreement. Period of storage of personal data: Your personal data will be stored by the Administrator at least for the duration of contracts concluded between companies, and if it is necessary for evidence purposes – personal data may also be stored until claims for business activity expire or court proceedings related to the above-mentioned contracts are terminated.
 

  1. Saleof services

Legal basis for processing: Article 6(1)(b) of the GDPR – processing is necessary for the purpose of ealizacjand the contract between you and  the Office, andRt. 6(1)(c) of the GDPR – for the purpose of accounting and tax documentation,  andRt. 6(1)(1)(a).  f) GDPR – to achieve the purpose related tothe determination of m, pursuing claims ordefending against claims.

Period of storage of personal data: Your data will be stored for the duration of the contract.  A maximum of 6 years from the end of the financial year in which the last invoice was issued.

 

  1. Futurepursuing claims

Legal basis for processing: Art. 6 para. 1 lit.  f) GDPR.
Period of storage of personal data: prye period of limitation of claims under the relevant type of contract: contract for specific work, orders – 2 years, cooperation agreement – 3 years.

  1. Conducting marketing activities related to the conducted business

Legal basis for processing: Art. 6 para. 1 lit.  a) GDPR and Article 6(1)(a)  f) GDPR. Providing data is voluntary.

Period of storage of personal data: Until the consent is withdrawn or the data subject objects.

 

  1. Answering questions sent by e-mail
    Legal basis for processing: 6 para. 1 lit. f) GDPR – legitimate interest of ADO. Providing data is voluntary.

Period of storage of personal data: dabout the moment of responding to the inquiry sent, maximum 12 months.

 

  1. Protection of persons and property staying in the ADO area

Source of data: monitoring data.
Legal basis for processing: Art. 6 para. 1 lit.  f) GDPR.
Period of storage of personal data: od the moment of recording for a period of max. 3 months.

In the event of a purpose other than the one mentioned above, the information obligation will be provided to you directly in the form or during the first action addressed to you.

Rights related to the processing of personal data:

  • If the legal basis is Art. 6 para. 1 lit. a or b GDPR:
  • the right of access to the content of the data
  • the right to rectification
  • the right to delete data (the right to be forgotten)
  • the right to restrict data processing
  • the right to data portability
  • If the legal basis is Art. 6 para. 1 lit. c GDPR:
  • the right of access to the content of the data
  • the right to rectification
  • the right to restrict data processing
  • If the legal basis is Art. 6 para. 1 lit. e or f GDPR:
  • the right of access to the content of the data
  • the right to rectification
  • the right to delete data (the right to be forgotten)
  • the right to restrict data processing
  • the right to object to the processing of data

 

Right to withdraw consent:
If the processing takes place on the basis of your consent (Article 6 (1) (a) of the GDPR), we will process the data until its withdrawal. The consent may be withdrawn at any time by sending an e-mail to the address indicated above or in person at the Administrator’s headquarters. Withdrawal of consent does not affect the lawfulness of processing, which was made on the basis of consent before its withdrawal.

After withdrawal of consent, the data will be processed in order to protect against claims (Article 6 (1) (f) of the GDPR) for a period consistent with the relevant legal provisions, amounting to a maximum of 3 years.

 

The right to lodge a complaint with the supervisory body:
If you see violations on the part of PDC as to the security of processing of this data, it is possible to lodge a complaint to the supervisory body dealing with the protection of personal data, i.e. to the President of the Office for Personal Data Protection. The current address of the supervisory authority is: President of the Office for Personal Data Protection, Stawki 2, 00-193 Warsaw.

 

Data security:
Your personal data will be processed, in accordance with the provisions of the GDPR, in writing or in electronic form, for the purposes stated above and using appropriate methods to guarantee the security and confidentiality of personal data in accordance with Article 32 of the GDPR.  Cooperation between our company and business entities is regulated by relevant legal regulations.

 

Recipients of data:

In connection with data processing, your personal data may be made available to other recipients or categories of recipients, such as:

  • Bodies and institutions as well as competent entities of public and local government administration in the scope and for purposes that result from the provisions of generally applicable law.
  • Companies providing services to PDC, in particular in the field of: personal data protection, entities performing audit services, IT services, computer software, financial, insurance, device service, correspondence.
  • Other entities which, on the basis of relevant agreements, process personal data for the administrator.

 

Your data will not be processed in an automated manner, including in the form of profiling. Your data is not processed outside the EEA.