Based on article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, OJ L no. 119, p. 1, as amended, further: GDPR), the Joint Controllers inform you that:
1. Information on Joint Controllers of data
Because of business operations being carried out by them as Related Parties and due to the shared IT systems and servers, the Joint Controllers of your personal data are:
Yhe Joint Controllers can be contacted by e-mail at: daneosobowe@tomczykowscy.pl, in person or by post at the registered office address, in all matters connected with processing personal data and with exercising rights vested under the GDPR.
The Joint Controllers have made joint arrangements, the essential part of which is made available to data subjects and can be found in the Privacy Policy at: https://tomczykowscy.pl/en/gdpr/information-clause/. The entity responsible for all personal data protection matters will be Tomczykowski Tomczykowska Sp. z o.o., with its registered office in Warsaw.
2. Data processing purposes
Your personal data (such as the first name, surname, business name, address, telephone number, and other data provided) will be processed in order to provide Related Parties’ (Joint Controllers’) services. In addition, upon your consent, data will be processed in order to send to the provided e-mail address industry-specific and commercial information (including the newsletter) and will be kept on the Joint Controllers’ database of contacts.
3. Data processing grounds
The grounds for processing your personal data is article 6 section 1 letter b of the GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; article 6 section 1 letter c of the GDPR: processing is necessary for compliance with a legal obligation to which the joint controller is subject (including the compliance with Tax Consultancy Act, Act on Attorneys-at-Law, Law on Advocates, and other industry-specific regulations); your consent (including in terms of sending the newsletter – article 6 section 1 letter a of the GDPR and the Act on Providing Electronic Services); and article 6 section 1 letter f of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by the Joint Controllers, where pursuing and defending against claims is deemed to be the Joint Controllers’ legitimate interest.
4. Data recipients
Your personal data are not commercially made available to any entities. Personal data may be accessed by the Related Parties’ (Joint Controllers’) employees and collaborators, entities authorised under the law, entities to which data processing is entrusted in accordance with article 28 of the GDPR. The Joint Controllers inform the Users that the recipients category may include: providers of IT infrastructure solutions; subcontractors or suppliers of and entities cooperating with the Joint Controllers, which provide administration, accounting and financial, HR or advisory services, or other services contracted by the Joint Controllers.
5. Data retention period
Your personal data will be retained until the lapse of terms arising from generally applicable regulations (including the terms set forth in the Accounting Act and the limitation periods provided for in the Civil Code).
6. Data subjects’ rights
You have a right to:
7. Data necessary / provided voluntarily
You provide personal data voluntarily but they are necessary in order for us to render services.
8. Further information
Your personal data are not wilfully and intentionally transferred by the Joint Controllers to any third country or international organization. The data are not used for automated decision-making or profiling.