Respecting the rights and freedoms of individuals whose data we process, and fulfilling the obligation arising from the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), we inform:
WHO IS THE PERSONAL DATA ADMINISTRATOR
The personal data administrator is HRnest sp. z o.o. (hereinafter: Administrator or We) with its registered office in Gdynia at al. Zwycięstwa 96/98, TAX ID 5833293000. The Administrator has appointed a data protection officer, who can be contacted at the email address: iod@hrnest.pl
We will process your data only for the period during which we have a legal basis for it, i.e., depending on what happens later, until:
FOR WHAT PURPOSE AND HOW LONG DOES THE ADMINISTRATOR PROCESS PERSONAL DATA
| Whose data | For what purpose | Legal basis | Processing time |
|---|---|---|---|
| Representative,Contracting Parties | Preparation and execution of the contract of which you are a Party | Article 6(1)(b) of the GDPR | Duration of the contract |
| Representative of the Contracting Party,Proxy of the Contracting Party | Contact regarding matters related to the contract concluded with an entity of which you are the representative, or on whose behalf you act based on a granted power of attorney | Article 6(1)(f) of the GDPR | Duration of the contract |
| Representative,Representative of the Contracting Party,Proxy of the Contracting Party | Determination, pursuit, and defense against claims | Article 6(1)(f) of the GDPR | Until the expiration of the claims as specified in Polish law |
| Representative,Contract Party Representative,Client | Direct marketing of own products | Article 6(1)(f) of the GDPR | Until the term of the contract expires or an objection is made by the individual |
| All persons who chose to have a phone contact with HRnest sp. z o.o., within the framework of incoming and outgoing calls | Determination, pursuit, and defense against claims: documentation from agreements made by telephone communication | Article 6(1)(f) of the GDPR | 3 months from recording the conversation. The storage period may be extended if there is a likelihood of claims related to the subject of the conversation. |
| Individuals initiating a complaint procedure, including those submitting requests in the area of their personal data processing | Handling complaints and requests | Article 6(1)(f) of the GDPR | 3 years from providing the last effective response or until the expiration of the warranty if, as a result of the examined complaint, its duration is extended |
| Contractors, Subcontractors,Other entities participating in the bidding process | Conducting business negotiations or considering offers | Article 6(1)(f) of the GDPR | Until the decision is made regarding the choice of contractor or subcontractor or the submitted offer, or until an objection is raised by the individual |
| Individuals who purchased a service and requested the issuance of a warranty statement | Providing the warranty statement and archiving evidence of this activity to protect against claims | Article 6(1)(f) of the GDPR in conjunction with Article 577 of the Civil Code Act | 6 years from providing the warranty statement |
| Customers, potential customers | Conducting electronic correspondence on matters binding the sender and recipient of the message | Article 6(1)(f) of the GDPR | Until the purpose for which they were collected is achieved or until a valid objection to their processing is raised |
WHO CAN ACCESS THE PERSONAL DATA AND WHETHER WE TRANSFER THEM TO THIRD COUNTRIES
At every stage of data processing, we ensure their security. Therefore, only the following can access personal data:
1) our authorized employees and associates,
2) a legal counsel’s office, in connection with the process of establishing, pursuing, and defending against claims,
3) auditors, in connection with performing their duties in the audit area,
4) entities entitled to obtain personal data information based on the laws in force in the Republic of Poland,
5) entities supporting the IT software we use,
6) persons in the TO, CC, or BCC fields of electronic correspondence (if applicable). We do not transfer personal data to Third Countries (outside the European Economic Area) or international organizations.
WHAT RIGHTS CAN A PERSON HAVE WHOSE PERSONAL DATA IS PROCESSED BY THE ADMINISTRATOR?
When contacting us at the email address: iod@hrnest.pl, both the Client and a person authorized by the Client can exercise their rights:
a) to withdraw consent for the processing of personal data,
b) to access data within the scope specified by the GDPR regulations (Article 15 of the GDPR),
c) to rectify the data (Article 16 of the GDPR),
d) to request the deletion of data when one of the conditions indicated by the GDPR regulations is met (Article 17 of the GDPR),
e) to restrict the processing of data in cases specified by the GDPR regulations (Article 18 of the GDPR),
f) to transfer data (Article 20 of the GDPR),
g) to file a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (Article 77 of the GDPR).
Moreover, every person whose data is processed for purposes arising from legitimate interests pursued by the Administrator has the right to object to data processing for reasons related to their particular situation (Article 21 of the GDPR).
IS THE PROVISION OF PERSONAL DATA MANDATORY
Providing personal data is voluntary, but a lack of data will prevent the Administrator from fulfilling the contract.
DO WE MAKE DECISIONS IN AN AUTOMATED MANNER WHEN PROCESSING PERSONAL DATA
We do not use automatic decision-making based on personal data analysis.
HOW TO CONTACT THE ADMINISTRATOR
For all matters related to processing and protection of personal data, you can contact the Administrator:
- In person or by mail at:
HRnest sp. z o.o.
al. Zwycięstwa 96/98,
81-451 Gdynia - By electronic correspondence: iod@hrnest.pl