Based on article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, OJ L no. 119, p. 1, as amended, further: GDPR), we inform you that:
1. Information on Joint Controllers of data
Because of business operations being carried out by them as Related Parties and due to the shared IT systems and servers, the Joint Controllers of your personal data are:
The Joint Controllers can be contacted by e-mail at: daneosobowe@tomczykowscy.pl, in person or by post at the registered office address, in all matters connected with processing personal data and with exercising rights vested under the GDPR.
The Joint Controllers have made joint arrangements, the essential part of which is made available to data subjects and can be found in the Privacy Policy at: https://tomczykowscy.pl/polityka-prywatnosci/. The entity responsible for all personal data protection matters will be Tomczykowski Tomczykowska Sp. z o.o., with its registered office in Warsaw.
2. Data processing purposes
Your personal data (such as first, surname, e-mail address, and other data provided in your message) are processed in order to enable contacts by electronic means or by contact form available on web page https://tomczykowscy.pl/kontakt/. In addition, upon your consent, data will be processed in order to send to the provided e-mail address industry-specific and commercial information (including the newsletter), and they will be kept on the database of contacts of the company Tomczykowski Tomczykowska sp. z o. o. and its Related Parties indicated in point 1.
3. Data processing grounds
The grounds for processing your personal data are as follows: article 6 section 1 letter a of the GDPR, i.e. granted consent and the provisions of the Act on Providing Electronic Services, as well as article 6 section 1 letter f of the GDPR, i.e. processing is necessary for the purposes of legitimate interests pursued by a Joint Controller, where pursuing and defending against claims is deemed to be the Joint Controllers’ legitimate interest.
4. Data recipients
Your personal data are not commercially made available to any entities. Personal data may be accessed by the Related Parties’ (Joint Controllers’) employees and collaborators, entities authorised under the law, and entities to which data processing is entrusted in accordance with article 28 of the GDPR. The Joint Controllers inform the Users that the recipients category may include: providers of IT infrastructure solutions; subcontractors or suppliers of and entities cooperating with the Joint Controllers, which provide administration, accounting and financial, HR or advisory services, or other services contracted by the Joint Controllers.
5. Data retention period
Your personal data will be retained until you withdraw your consent to data processing, about which we should be notified at daneosobowe@tomczykowscy.pl. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Your personal data will be retained until the lapse of terms arising from generally applicable regulations (including the limitation periods provided for in the Civil Code).
6. Data subjects’ rights
You have a right to:
7. Data are necessary / provided voluntarily
You provide personal data voluntarily but they are necessary in order for us to contact you and render services.
8. Further Information
Your personal data are not wilfully and intentionally transferred by the Joint Controllers to any third country or international organization. The data are not used for automated decision-making or profiling.