In fulfilling the obligation set out in Articles 13 and 14 of the GDPR, we inform you that we protect your personal data and of the rights to which you are entitled.
Personal data administrator:
The controller of your personal data is HH Poland Spółka Akcyjna with its registered office in Gliwice, ul. Toszecka 101, 44-100 Gliwice
Contact regarding personal data:
In matters relating to processing in HH Poland S.A. personal data and the exercise of rights related to their processing, you can contact us as follows:
by email: hhpoland@hhpoland.com.pl
by phone: +48 32 279 07 50 from 9 a.m. to 3 p.m. on weekdays,
or by post to the following address: HH Poland S.A., ul. Toszecka 101, 44-100 Gliwice.
Purposes and basis of personal data processing:
Contact form
If you complete the contact form, send us an email, or send us a letter, we will process your data to contact you and correspond with you. We also use your contact details to send you important communications, such as changes to the website's operation, changes to the terms and conditions, etc. This data, along with the correspondence itself, will be archived by us. The legal basis for processing is our legitimate interest as a controller, which is to conduct business-related correspondence and the right to archive such correspondence and to provide information about business activities (Article 6, paragraph 1, letter f of the GDPR).
Ordering goods or services
If your data was provided in connection with an order for goods or services, we will process it to conclude and perform the contract you are interested in. The legal basis for processing is Article 6(1)(b) of the GDPR, i.e., the necessity of processing the data for the performance of the contract or the necessity of processing the data to take steps at your request prior to entering into the contract.
Call
In the case of a telephone call, we only ask for personal data when it is necessary to resolve the matter you are calling about, and we process it only for that purpose. The legal basis for processing is our legitimate interest as a controller, which is the need to resolve matters related to our business activities, pursuant to Article 6(1)(f) of the GDPR.
Agreement
In some cases, if we ask for your consent to process your personal data, we process your data based on your consent and only for the purpose we specify when requesting your consent. Providing your data is voluntary, but failure to do so will prevent us from achieving the purpose of processing, such as contacting you or concluding a contract. Where the purpose of data processing is to perform a contract, providing the necessary data is necessary to conclude the contract, pursuant to Article 6(1)(b) of the GDPR.
Period of storage of personal data
If you consent to the processing of your data, we will process it until you withdraw your consent. If we process your data to perform a contract, it will be processed until the statute of limitations for claims related to the performance of the contract expires. If data processing is necessary to take steps at your request prior to entering into a contract, we process the data for this purpose until the contract is concluded or until it becomes apparent that the contract will not be concluded (Article 6, paragraph 1, letter a). Personal data will be processed and stored until you withdraw your consent or for a period of 5 years after the controller's legitimate interests are fulfilled (Article 6, paragraph 1, letter f of the GDPR), including in connection with:
conducted tender procedures,
marketing activities,
contracts implemented in connection with business activities,
fulfillment of other obligations arising from legal provisions regulating economic transactions,
achieving other goals related to business activity,
other purposes related to the administrator's activities.
The legal basis for the processing of personal data of the other Party by HH Poland SA is also:
taking steps to conclude and perform the Agreement in accordance with Article 6(1)(b) of the GDPR,
fulfillment of legal obligations in accordance with Article 6(1)(c) of the GDPR, related to, among others, tax and accounting regulations.
Data recipients
Personal data may be transferred to entities processing personal data at the request of HH Poland SA, including, among others, those operating IT systems used for the implementation of the Agreement, providing postal, archiving and legal services, and such entities process data on the basis of an agreement concluded with HH Poland S.Aand only in accordance with its instructions. Data may also be made available to entities authorized by law, including tax authorities. Furthermore, if required to achieve the purpose for which it was obtained, it may be made available to contractors, clients, other business entities, capital market entities, public administration offices and bodies, other organizational units, and individuals. In connection with the controller's business activities, data may also be transferred outside the EEA.
Rights related to the processing of personal data
You have the right to request access to your personal data (Article 15 of the Regulation), rectification (Article 16 of the Regulation), data portability (Article 20 of the Regulation), and, in the cases specified in the Regulation, the right to erasure (Article 17 of the Regulation) and restriction of processing (Article 18 of the Regulation). Pursuant to Article 21 of the Regulation, you have the right to object to the processing of your personal data. Filing an objection will result in the inability to process your personal data and will be treated as a waiver of contact with the Controller.
You have the right to lodge a complaint with the supervisory authority responsible for personal data protection, i.e. the President of the Personal Data Protection Office.
Pursuant to Article 7 of the Regulation, you have the right to withdraw your consent to the processing of your personal data. Withdrawal of consent involves submitting a request to HH Poland S.A. in bankruptcy, a message in paper or electronic form, similar to the way in which you granted your consent, with a clear indication in the content of the document of the information about the withdrawal of consent to the processing of personal data.