Information for Clients (GDPR)

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”), we hereby inform you about the rules of your personal data processing and your respective rights.

The following rules shall apply from 25 May 2018:

1. The Administrator of your Personal Data is:

NTI Sp. z o.o. Nowoczesne Techniki Instalacyjne, 67-200 Głogów, Portowa 1, Tax ID NIP 6931005669, entered into the National Court Register under KRS number 0000113105.

1. The representative of your personal data Administrator is: Mr Tomasz Łętkowski, e-mail: biuro@strefatws.pl

who may be contacted in writing about any matters related to your rights and any matters directly related to processing of your personal data by the Administrator.

1. Your personal data shall be processed on the basis of your consent, the purpose of which is to respond to any inquiry made to the Administrator over the telephone or electronically (by e-mail) – pursuant to Article 6(1)(a) of the General Data Protection Regulation of 27 April 2016. The provision of your contact details is voluntary, but it is necessary to answer your inquiry.

2. Your personal data will be stored for the period necessary to achieve the purposes set out in point 3, and after that time, for the period and to the extent required by generally applicable law.

3. In connection with the processing of your personal data, you have the following rights:
4. a) the right to access your personal data, including the right to obtain a copy of such data;
5. b) the right to request rectification (correction) of your personal data – if the data is incorrect or incomplete;
6. c) the right to request deletion of your personal data (the so-called right to be forgotten), in the following cases:

– the data is no longer necessary for the purposes for which it was collected or otherwise processed,

– the data subject has objected to the processing,

– the data subject has withdrawn consent to their personal data processing, which constituted the basis for the data processing and there is no other legal basis for the data processing,

– the personal data has been processed in breach of the law,

– the data must be deleted in order to fulfil an obligation resulting from legal provisions,

1. d) the right to request restriction of the personal data processing, in the following cases:

– the data subject questions the correctness of personal data,

– the data processing is unlawful, and the data subject opposes the deletion of the data, requesting restriction of its use instead,

– the Administrator no longer needs the data for its purposes, but the data subject needs the data to establish, defend or pursue claims,

– the data subject has objected to the data processing until it is determined whether the legitimate grounds on the part of the Administrator override the grounds of objection;

1. e) the right to data transferring – if the following conditions are met jointly:

– the data processing takes place under a contract concluded with the data subject or on the basis of a consent expressed thereby,

– the processing is carried out by automated means.

1. f) the right to object to personal data processing – if the following conditions are met jointly:

– the data processing is necessary for purposes arising from a legitimate interest pursued by the Administrator or by a third party, except when the interest or fundamental rights and freedoms of an individual data subject, especially a child, requiring personal data protection, prevail over those interests.

4. In the event that the personal data is processed pursuant to the data subject’s consent to the data processing (Article 6(1)(a) GDPR), the data subject has the right to withdraw such consent at any time. Such withdrawal does not affect the compliance of the above data processing with the applicable law, at the time when the data has been processed upon the data subject’s consent before the withdrawal.
5. If the Client becomes aware of unlawful processing of their personal data, the Client shall have the right to lodge a complaint with the supervisory authority competent in matters of personal data protection.

6. When the personal data is processed pursuant to the consent of the data subject, the provision of your personal data to the Administrator is voluntary.

7. Providing your personal data is mandatory if the premise for the personal data processing is a legal provision or a contract concluded between the parties.
8. Your personal data may be processed in an automated manner and will not be profiled, and the processed data will not be transferred outside the territory of the European Union.