INFORMATION CONCERNING PROCESSING OF PERSONAL DATA
BY TLC SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (INFORMATION CLAUSE)
Personal Data Administrator/Administrator – a person or entity which (unilateraly or jointly with other administrators) decides for what purpose and how he will process the personal data;
Personal Data – information that identify (or make it possible to identify) a natural person, in particular: name and surname, address, telephone number, e-mail address, date of birth, tax identification number, social security number, etc.;
Personal data processing – activities related to personal data, in particular: collecting, recording, organizing, organizing, storing, downloading, browsing, using, sharing, deleting, destroying, etc.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Regulation on data protection).
2. Personal Data Administrator
The administrator of personal data processed by us in connection with conducting business activity is TLC Limited Liability Company seated in Gorlice, ul. Chopina 25N, 38-300 Gorlice(hereinafter “TLC”).
In all matters regarding the processing of personal data, in particular exercising your rights related to the processing of personal data, you can contact TLC by:
a) email address: firstname.lastname@example.org
b) phone: +48 505 140 140
c) in writing to the address of the TLC office.
3. Main principles for the processing of personal data
TLC represents and guaranties that:
a) personal data are processed in accordance with current regulations, including the GDPR, in a fair and transparent manner;
b) personal data are collected for specific, explicit and legitimate purposes and is processed only to the extent consistent with those purposes;
c) TLC makes the utmost care that the personal data it processes are truthful, current and accurate;
d) personal data are stored in a form that enables identification of the data subject for no longer than it is necessary for the purposes for which the data are processed,
e) personal data are processed in a manner that ensures adequate security, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate organizational, technical and technological measures.
4. Purposes and basics of personal data processing
In connection with its business activity, TLC processes the data of entities with which it has business relations, as well as the data of their employees and associates, data of persons transferred as part of the implementation of orders and contracts, data of persons making contact by means of remote communication (telephone, email).
The purpose of processing personal data by TLC is:
a) conclusion and implementation of contracts (legal basis for processing – art.6 sec.1 letter b of the GDPR);
b) determining and pursuing possible claims by TLC or defense against claims raised against TLC (legal basis for processing – Article 6 sec. 1 letter f of the GDPR);
c) performance of tax and accounting obligations (legal basis for processing – art.6 sec.1 letter c of the GDPR);
d) realization of promotional and marketing activities (legal basis for processing – art.6 sec.1 letter a of the GDPR).
Providing data is voluntary, however, TLC reserves that in some situations, providing it may be necessary to conclude and perform the contract, answer queries, conduct correspondence, and perform obligations arising from provisions of law.
5. Data storing term
TLC processes personal data for the time necessary to achieve the purpose of processing. TLC applies the principle of limiting the storage of personal data, which protects data against processing for an unlimited period. When the processing purpose is achieved, TLC deletes or anonymizes the data. The exceptions are situations when data storage is necessary under separate provisions.
TLC deletes or anonymizes data in particular when:
a) any claims will be matured;
b) deadlines that result from legal provisions (e.g. the Accounting Act) have expired;
c) the data subject withdraws consent to the processing of personal data (concerns cases where consent was the basis for processing);
d) the data subject effectively opposes further processing (if the basis for processing was the legitimate interest of TLC as the Administrator).
6. Data recipients
Personal data processed by TLC in connection with business relations may be transferred to the following categories of entities:
a) subcontractors, contractors and business partners as part of cooperation on a given project, solely for the purpose and to the extent necessary to implement the rights and obligations arising from cooperation,
b) entities providing accounting, accounting, legal, IT and marketing services to TLC,
c) entities from TLC Group, whose offer supplements the offer of TLC,
d) public authorities – in cases specified by law.
7. Rules for the transfer of data outside Poland
In the justified circumstances, TLC may transfer personal data to entities in the European Economic Area (EEA).
TLC may transfer personal data to a third country (outside the EEA) if it guarantees at least such data protection as is applicable in Poland. In practice, such a guarantee is that a given country has been recognized by the European Commission as a country that provides adequate protection.
If data is transferred outside the EEA, TLC will take appropriate steps to ensure data protection, in particular through the use of contractual clauses that have been approved by the European Commission.
8. Entitlements related to the personal data processing
In accordance with applicable law, you have:
a) the right to access personal data and receive a copy thereof,
b) the right to rectify (correct) your data,
c) the right to delete data,
d) the right to limit data processing,
e) the right to object to data processing,
f) the right to transfer data,
g) the right to file a complaint to the supervisory body (the President of the Office for Personal Data Protection),
h) the right to withdraw consent to the processing of personal data.
If the data processing is based on your consent, you have the right to withdraw your consent to the processing of this personal data at any time. Withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal.
In order to exercise your rights, please send request the contact details indicated above.
If you have additional questions, please contact us.