Information on data processing
INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA
In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation “RODO”), we would like to inform you about the principles for the processing of your personal data and about your rights in relation thereto.
The following rules apply as of 25 May 2018.
(1) The controller of your processed personal data is Przedsiębiorstwo Gospodarki Komunalnej “Eko-Strug” Sp. z o.o. with its registered office in Tyczyn, 6 Kościuszki Street, 36-020 Tyczyn (“PGK”).
(2) If you have questions concerning the manner and scope of processing of your personal data within the scope of the PGK operations, as well as your rights, you may contact the appointed Data Protection Officer by e-mail: iod@ekostrug.pl.
(3) The Data Controller processes your personal data on the basis of:
1) the consent you have given (Art. 6(1)(a) RODO)
2) the action necessary for the conclusion of a contract with you and its subsequent performance (Art. 6(1)(b) RODO)
3) legal obligations incumbent on the Administrator, in particular the performance of the obligations set out in:
– the Act of 13 September 1996 on maintaining cleanliness and order in communes
– the Act of 7 June 2001 on collective water supply and collective sewage disposal (Art. 6(1)(c) RODO)
4) the necessity of the processing for the performance of a task carried out in the public interest (Art. 6(1)(e) RODO)
5) legitimate interest of the Administrator, in particular the processing of personal data for the purpose of handling complaints, requests, petitions, possible determination, investigation or defence against claims (Art. 6(1)(f) RODO
(4) your personal data shall be processed for the purpose(s):
– fulfilment of legal obligations incumbent on PGK;
– to perform contracts concluded with PGK’s contractors;
– in other cases, your personal data are processed only on the basis of your previously granted consent within the scope and purpose specified in the content of the consent.
(5) In connection with the processing of data for the purposes referred to in points 3 and 4, the recipients of your personal data may be:
– public authorities and entities performing public tasks or acting on commission of public authorities, to the extent and for the purposes which result from the provisions of generally applicable law;
– other entities which, on the basis of relevant agreements signed with PGK, process personal data for which PGK is the Administrator.
(6) Your personal data will be stored for the period necessary to achieve the objectives set out in points 3 and 4, and thereafter for the period and to the extent required by generally applicable laws, i.e. the provisions of the Act of 14 July 1983 on the national archival resource and archives and executive acts thereto, and by the statute of limitations for potential claims, as well as for the period specified in the Uniform List of Files functioning in PGK.
(7) In connection with the processing of your personal data, you have the following rights:the right of access to your personal data, including the right to obtain a copy of that data;
– The right to request the rectification (amendment) of your personal data – where the data is inaccurate or incomplete;
– the right to request the erasure of personal data (the so-called right to be forgotten), where:
– the data are no longer necessary for the purposes for which they were collected or otherwise processed,
– the data subject has objected to the processing of personal data,
– the data subject has withdrawn consent to the processing of personal data which is the basis for the processing and there is no other legal basis for the processing,
– the personal data is processed unlawfully,
– the personal data must be erased in order to comply with a legal obligation;
The right to request the restriction of the processing of personal data – where:
– the data subject contests the accuracy of the personal data,
– the processing is unlawful and the data subject objects to the erasure of the data, requesting instead that the data be restricted,
– the controller no longer needs the data for its purposes, but the data subject needs the data for the establishment, defence or assertion of claims,
– the data subject has objected to the processing of the data, until it is established whether the legitimate grounds on the part of the controller override the grounds for the objection;
the right to data portability – where the following conditions are cumulatively met:
– processing is carried out on the basis of a contract concluded with the data subject or on the basis of consent given by the data subject,
– processing is carried out by automated means;
The right to object to data processing – where the following grounds are cumulatively met:
– there are reasons related to your particular situation, in case of processing based on a task carried out in the public interest or in the exercise of public authority by the Controller,
– processing is necessary for the purposes of the legitimate interests pursued by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
(8) Where the processing of personal data is based on the data subject’s consent to the processing of personal data (Article 6(1)(a) RODO), you have the right to withdraw that consent at any time. Such revocation shall not affect the compatibility with the applicable law of the processing carried out on the basis of consent before its revocation.
(9) In the event that you become aware of unlawful processing of your personal data at PGK, you shall have the right to lodge a complaint with the supervisory authority competent in matters of personal data protection.
(10) Where the processing of personal data is based on the data subject’s consent, your provision of personal data to the Administrator is voluntary.
Providing personal data is obligatory when the prerequisite for the processing of personal data is provided by law or a contract concluded between the parties. Failure to provide the data will result in the impossibility to handle the case in accordance with the submitted application / request.
(12) Your data will not be processed in an automated manner and will not be profiled.