INFORMATION CLAUSE ON PERSONAL DATA PROTECTION

„Energopomiar” Sp. z o.o. with its registered office in Gliwice (44-100), ul. gen. Józefa Sowińskiego 3, Poland, provides the following information relating to personal data protection:
According to Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the GDPR), we hereby inform you that:

The Controller of Personal Data is „Energopomiar” Sp. z o.o. with its registered office in Gliwice (44-100), ul. gen. Józefa Sowińskiego 3, Poland.

For further information on personal data protection, please contact the Data Protection Officer: iod@energopomiar.com.pl

Purposes and lawfulness of data processing.

Personal data will be processed pursuant to:
a. Article 6 (1)(b) of the GDPR – processing is necessary for entering a contract or in order to take steps prior to entering a contract;
b. Article 6 (1)(f) of the GDPR – for the purposes of the legitimate interests pursued by the Controller, in particular, for correspondence;
c. Article 6 (1)(f) of the GDPR – in order to possibly establish, investigate or defend against claims due to pursuing the legitimate interests of the Controller;
d. Article 6 (1)(f) of the GDPR – for archiving (evidence) purposes due to pursuing the legitimate interest in securing information in the event of a legal need to prove facts;
and in case of public procurement proceedings:
e. Article 6 (1)(c) of the GDPR – processing is necessary for compliance with a legal obligation to which the Controller is subject, based on the Public Procurement Law.

Duration of personal data processing

is related to their processing purposes mentioned above. Hence, personal data will be processed for the period during which the Controller is legally obliged to store them or for the limitation period for introducing possible claims which require access to the data.

Rights of the data subject.

In the cases and according to the principles set forth in the generally applicable regulations on personal data protection, a person whose personal data will be processed is entitled to access his / her data, obtain their copy, rectify (correct) the data, delete them, restrict their processing or raise objections to their processing, transfer the data and lodge a complaint with the President of the Personal Data Protection Office, if he / she considers that the processing of his / her personal data violates the provisions of the GDPR.

Recipients of the personal data.

Personal data will be transferred to legally authorized institutions and to entities, which render processing services for the Controller and which are entrusted with the data. Personal data will not be transferred to a third country or an international organization.

Personal data provision.

The provision of data is voluntary, but if they are not provided, it will not be possible to perform the Contract.

Automated decision making.

As regards the processing of personal data mentioned above, no decisions will be made by automated means and the data will not be processed for profiling.