In connection with the implementation of the requirements of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation “RODO”), and the Act of May 10, 2018 on the protection of personal data (Journal of Laws of 2018, item 1000), we inform you about the principles of personal data processing and your rights related thereto. The following rules apply as of May 25, 2018:
The administrator of the personal data is: Slawomir Więsyk conducting business activity under the name Optimal System Slawomir Więsyk with the seat in Łuszczów Drugi 107, 20-258 Lublin 62, NIP no. 946-117-12-82, REGON no. 431239581, e-mail: sekretariat@optimalpoland.pl, tel. +48 518 729 252,
If a person believes that his or her personal data is being processed in violation of the requirements of the law, he or she has the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection.
Personal data will be processed primarily for the preparation of an offer, proper execution of a contract, for recruitment purposes, for marketing purposes related to the business, and may also be processed for the assertion of claims under civil law, if any. Provision of personal data is voluntary.
The legal basis for data processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU. L. of 2016 No. 119, p. 1) – hereinafter RODO, (i.e. processing is necessary for the performance of a contract to which a person is a party or to take action at the request of a person prior to entering into a contract), Article 6(1)(c) of the RODO (i.e. processing is necessary for the fulfillment of a legal obligation, such as an archiving obligation), and Article 9(2)(f) of the RODO (i.e. processing is necessary to establish, assert or defend claims).
Recipients of personal data will be entities to which the Administrator is obliged to transfer data under applicable laws, including, for example, the Tax Office, as well as entities providing postal services to the Administrator, suppliers of services or products acting on behalf of the Administrator, subcontractors, companies cooperating in the execution of contracts, in particular to entities providing legal, IT services to the Administrator.
In connection with the processing of personal data, you have the following rights:
The right of access to personal data, including the right to obtain a copy of such data;
The right to request rectification (amendment) of personal data – in case the data is incorrect or incomplete;
The right to request deletion of personal data (the so-called right to be forgotten), in the event that:
data are no longer necessary for the purposes for which they were collected or otherwise processed,
the data subject has objected to the processing of personal data,
the data subject has withdrawn his or her consent to the processing of personal data, which is the basis for the processing, and there is no other legal basis for the processing,
Personal data is processed illegally,
Personal data must be deleted in order to comply with legal obligations;
The right to request restriction of personal data processing – in case:
The data subject questions the accuracy of the personal data,
processing is unlawful and the data subject objects to the erasure of the data, requesting instead that the data be restricted,
The controller no longer needs the data for its purposes, but the data subject needs the data to establish, defend or pursue a claim,
the data subject has objected to the processing, until it is determined whether the legitimate grounds on the part of the controller override the grounds for the objection;
The right to data portability – if the following conditions are met together:
the processing of data is carried out on the basis of a contract concluded with the data subject or on the basis of consent expressed by the data subject,
processing is carried out by automated means;
The right to object to the processing of data – if the following conditions are met together:
there are reasons related to the special situation of the data subject,
processing is necessary for the purposes of legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Exercise of the rights referred to above can be done by indicating your requests sent to the e-mail address: sekretariat@optimalpoland.pl
Where the processing of personal data is based on a person’s consent to the processing of personal data (Article 6(1)(a) of the RODO), the person has the right to revoke that consent at any time. Such revocation shall not affect the compliance of the processing carried out on the basis of the consent before its revocation with the applicable law.
Where the processing of personal data is based on the consent of the data subject, the provision of personal data by the person to the Administrator is voluntary, but necessary for the performance of the contract.
Provision of personal data is mandatory when the premise for the processing of personal data is a provision of law or a contract concluded between the parties.
Personal data will be processed by the Administrator for the duration and performance of the contract, and after its termination – until the expiration of the statute of limitations for possible claims under the contract and in connection with the implementation of the 5-year archiving obligation. The Administrator may keep personal data for a longer period than indicated only if it results from the obligation imposed on the Administrator by generally applicable laws.
The data controller has no intention to transfer personal data to a third country or international organization.
