Data Processing Connected With Business Relationships and Contact
In fulfilment of the obligation under Article 13(1)-(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”), we inform you as follows:
AboutHR Polska sp. z o.o. (hereinafter: AboutHR) is the Data Controller for personal data if you enter into a contract or business relationship with AboutHR or make contact via phone, email, using a form on the website, linkedin.com web-site or other web-pages dedicated to getting in contact for business relationships.
Contact data of AboutHR: email: firstname.lastname@example.org, correspondence address: AboutHR Polska Sp.z o.o. ul. Księcia Witolda 49 lok. 15, 50-202, Wrocław, Poland
In connection with these relationships, AboutHR may process the following personal data: identification data, contact details, job and professional qualification data and other personal data provided in connection with the cooperation or contact.
The above data is collected directly from you and from others, such as your employer / contractor.
In connection with the above relationship, AboutHR processes personal data for the following purposes:
- establishing a business relationship;
- conclusion and performance of a contract;
- respond to any inquiries or requests made and maintain further correspondence/contact in this regard;
- to defend against potential claims, and if necessary, to refer claims;
- To comply with the Data Controller’s legal obligations (e.g. tax, accounting, claims handling).
Personal data processing is based on:
- necessity for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR);
- necessity for compliance with a legal obligation to which the Data Controller is subject (Article. 6(1)(c) GDPR);
- legitimate interest pursued of the controller to establish contact, including correspondence and responding to potential clains or investigations (Article 6(1)(f) GDPR).
As a rule, providing personal data is voluntary. However, it may be necessary in order to conclude or execute a contract, or to answer an inquiry or for correspondence purposes.
Personal data collected for the purpose of entering into and performing an agreement will be processed for the duration of the agreement or until you object to processing, even where processing is carried out based on the legitimate interest of the Data Controller, unless the provisions of law (e.g. archiving, tax, accounting) oblige AboutHR to process the data longer or AboutHR stores data longer in case of potential claims, for the period of their limitation specified by law. In case of varying limitation periods the longer one shall preavail.
Your personal data provided during contact with AboutHR, will be processed for the period necessary to respond and correspond, if any, and thereafter until the expiration of the limitation period for any potential claims.
Personal data processed by AboutHR may be transferred, among others, to entities that provide IT services, courier and postal services, banks – in case of financial settlements.
Your data may be transferred by the Data Controller to processing partners outside the European Economic Area (EEA), mainly in the United States (USA), but only to the extent necessary for to the provision of services by these partners, especially IT services (e.g. cloud storage) and in accordance with safeguards which fulfill GDPR requirements.
In any case, you have the right to:
- access personal data,
- request rectification and place restrictions on processing of personal data,
- erasure of personal data,
- transfer personal data previously provided to the Data Controller for automated data processing based on consent or contract to another data administrator;
- object to the processing of personal data, even when it is necessary in pursuit of legitimate interests pursued by the controller or by a third party, including personal data processing for marketing purposes;
- lodge a complaint with the Data Protection Commissioner.
If the processing of personal data is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing carried out prior to consent being withdrawn.