PRINCIPLES OF PERSONAL DATA PROTECTION IN ENTERPRISE GROUP “BALTONA”
 

Dear Sir/Madam,

 

Due to the fact that Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) took effect on 25 May 2018 and it is our desire to remain fully transparent, below you can find the information how your personal data are collected by enterprise Group “Baltona” and how they will be processed in accordance with applicable statutory regulations and implementing provisions.

 

INFORMATION CLAUSE
 

Below you can find general principles on which enterprise Group “Baltona” processes personal data. The specific purpose and lawful grounds for the processing are always provided in a separate information clause addressed to the data subjects. If any of the provisions below seems unclear to you or gives rise to any doubts, please contact our Personal Data Supervisor at e-mail address: rodo@baltona.pl or phone number +48 22 519 20 12.

 

According to Article 13 item 1-2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
 

Personal Data Controller:

 

 

 

Enterprise Group “Baltona”, in particular Przedsiębiorstwo Handlu Zagranicznego “Baltona” S.A.* having its registered office in Warsaw, ul. Marcina Flisa 4, 02-247 Warsaw, is your personal data controller.

 

 

Contact details:

 

You can contact your personal data controller via the contact form available at http://www.baltona.pl/kontakt, by calling +48 22 519 20 00 or writing to e-mail address: board.office@baltona.pl.

 

 

*Enterprise Group “Baltona”

 

More information is available at http://www.baltona.pl/index.php/firma/grupa-baltona/

 

 

PURPOSES OF PERSONAL DATA PROCESSING
 

Below you can find information concerning the purposes of processing and its lawful grounds. Your personal data will be processed in various business situations as well as those connected with the personal data controller’s ongoing business operations. The specific purpose and lawful grounds for the processing are provided in separate information clauses addressed to the data subjects.

 

Your personal data can be processed for the following purposes:  Lawful grounds for the processing:
 

Conclusion and performance of a contract and provision of services under a contract.

 

 

Data processing is necessary for conclusion and performance of a contract.

 

Article 6 item 1b) of the General Data Protection Regulation

 

 

For the Controller’s marketing purposes, including analytical purposes.

 

 

Granted consent and in some cases (e.g. contact in order to acquire consent) also the personal data Controller’s legitimate interest (e.g. for a better choice of services for the needs of the customers, overall optimization of our products, optimization of service processes, building knowledge about our customers, financial analyses of our enterprise Group, etc.).

 

Article 6 item 1 a and f) of the General Data Protection Regulation

 

 

For the Controller’s marketing purposes, including third-party analytical purposes, including the purposes of the Controller’s partners.

 

 

Granted consent. If consent was not granted, personal data are not processed for those purposes.

 

Article 6 item 1 a) of the General Data Protection Regulation

 

 

Pursuing or defending claims, pursuing claims connected with the contract concluded with you or the services provided.

 

Personal data processing is necessary for the purposes of legitimate interests pursued by the Controller; The Controller’s legitimate interest is its option to pursue or defend claims.

 

Article 6 item 1 f) of the General Data Protection Regulation

 

 

For evidence (archival) purposes connected the legal need to prove facts.

 

 

Personal data processing is necessary for the purposes of legitimate interests pursued by the Controller; The possibility of a legal need to prove facts is the Controller’s legitimate interest.

 

Article 6 item 1 f) of the General Data Protection Regulation

 

 

For the purposes of customer satisfaction polls.

 

 

Personal data processing is necessary for the purposes of legitimate interests pursued by the Controller; Collecting surveys from natural persons who agreed to provide answers is the Controller’s legitimate interest.

 

Article 6 item 1 f) of the General Data Protection Regulation

 

 

PERSONAL DATA STORAGE PERIOD
 

Dear Sir/Madame,

 

Regardless of the lawful grounds on which we process your personal data, they will be stored until claims under the contract/provision of services are time-barred or until expiration of our obligation to store the data under applicable regulations of the law, in particular the obligation to store bookkeeping documents concerning the contract.

 

Your personal data processing based on the Controller’s legitimate interests will be executed for the specific purpose until you object to such processing.

 

If personal data are processed on the basis of your consent, you have the right to revoke it anytime. If you do so, your personal data will be processed only until such revocation.

 

RECIPIENTS OF YOUR PERSONAL DATA
 

Your personal data can be shared with the subsidiaries of enterprise Group “Baltona”, our business partners, i.e. companies with which we cooperate (by e.g. presenting, describing and combining their products or services) for the purposes described above (for marketing purposes if you consent to specific marketing purposes for which personal data provision is necessary).

 

Moreover, your personal data can be shared with our subcontractors (processors), e.g. law firms, IT services providers, marketing agencies or courier firms, however such entities shall process them under personal data processing agreements, solely upon instruction from the Controller.

 

RIGHTS OF THE DATA SUBJECT
 

You have the right to access your personal data, demand their rectification, erasure or restriction of processing. You can object against the processing of personal data if the personal data processing is carried out on the basis of the Controller’s legitimate interest. In particular, you have the right to object to data processing for the purposes of direct marketing, including for analytical purposes.

 

If your personal data are processed on the basis of your consent, you have the right to revoke it. However, withdrawal of consent does not affect legality of any processing done on the basis of the consent before its withdrawal.

 

In the scope in which your personal data are processed for the purposes of conclusion and execution of contract/provision of services or under voluntary consent, you also have the right to data portability. If you want to exercise that right, you will receive your personal data in a structured, commonly used and machine-readable format. You can send the personal data which you received to another data controller.

 

If you decide that the processing violations the General Data Protection Regulation, you also have the right to complain with the President of the Data Protection Office, ul. Stawki 2, 00-193..

 

 

 

TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
 

Your personal data are not transferred outside the European Economic Area (EEA) or to international organizations.