Information Clause
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”), we hereby inform you that:
1. The Controller of your personal data processed in connection with business relations, which may include sending an offer, concluding and performing a contract, fulfilling an order, or conducting a recruitment process, is Automationstechnik Sp. z o. o., with its registered office at ul. Rzemieślnicza 20A, 30-363 Kraków, NIP: 6791168790, entered into the Register of Entrepreneurs maintained by the District Court for Kraków – Śródmieście in Kraków, 11th Commercial Division, under KRS number 0000191568; REGON 003915177 (hereinafter: the Controller).
2. The Controller can be contacted via email at: biuro@automationstechnik.pl, by phone: +48 12 263 77 55, or by post: ul. Rzemieślnicza 20B, 30-363 Kraków.
3. If you did not provide your personal data directly to the Controller, your data were provided to the Controller by the entity on whose behalf you act or by an entity that transferred your personal data as necessary for concluding or performing a contract for the benefit of that entity or for the purpose of business relations between the parties. Additionally, your personal data may be obtained from publicly available sources such as databases and registers (including CEIDG, KRS), websites, LinkedIn, Facebook, Instagram.
4. The legal basis for processing your personal data is:
a. your consent, including for sending offers and marketing information, or for processing the data of a job applicant in connection with current and future recruitment processes (Article 6(1)(a) GDPR),
b. performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR),
c. compliance with a legal obligation to which the Controller is subject after a contract is concluded (Article 6(1)(c) GDPR),
d. the Controller’s legitimate interests, including maintaining business relations or establishing, exercising, or defending claims (Article 6(1)(f) GDPR).
5. Your personal data are processed in connection with the content you send (submit) in electronic messages (i.e., emails). Depending on the subject of the message received, we process your personal data for the following purposes:
a. responding to your correspondence, including answering questions and providing information you request, as well as continuing communication with you,
b. handling the matter you address to us,
c. concluding and performing a contract or taking steps prior to its conclusion,
d. recruiting job candidates.
Your data may also be used for direct marketing purposes—upon obtaining your separate consent—or for establishing or defending claims, within the Controller’s legitimate interest.
6. The following categories of personal data will be processed:
a. basic identification data such as name and surname,
b. contact details enabling communication by post, phone, or email, such as phone number, company address or correspondence address, and email address,
c. identification numbers for precise identification,
d. other data such as job position and company details,
e. data necessary for the recruitment process.
7. Personal data will be stored for the period necessary to conduct correspondence with you on a given matter and thereafter for the period required by legal obligations imposed on the Controller.
8. Personal data processed for the purpose of concluding and performing a contract will be stored for the duration of the contract and after its termination for the period required by law, i.e., no longer than 6 years after the end of cooperation. After a contract expires or cooperation ends, data will be processed solely for archival, tax, or claim-related purposes.
9. Personal data processed for recruitment purposes will be stored for the duration of the recruitment process and for 6 months after its completion for the purpose of pursuing claims.
If consent is provided for future recruitment, data will be stored for up to 12 months from the date of submission.
10. Personal data may be disclosed to persons authorized by the Controller, the Controller’s business partners, entities providing services to the Controller— including technical and organizational services, email services — as well as other entities/persons/authorities to the extent and on the terms specified by law.
11. Personal data may be transferred to the United States or any other country where Microsoft operates and stored or processed there. This results from the Controller’s use of Microsoft systems and applications. Microsoft, as the IT service provider, ensures all safeguards required under data protection laws applicable in the European Economic Area and Switzerland regarding the collection, use, transfer, storage, and other processing of personal data.
12. You have the right to request access to your personal data and the right to rectify them.
13. If your data are processed on the basis of your consent, you have the right to withdraw your consent at any time by sending such information to: biuro@automationstechnik.pl. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
14. In cases specified by law, you have the right to request erasure of personal data, restriction of processing, data portability, and the right to object to the processing of personal data.
15. You have the right to lodge a complaint with the supervisory authority for data protection if you believe that the Controller has violated data protection regulations.
16. Personal data will not be used for automated decision-making, including profiling.
17. As your personal data are processed by the Controller for purposes arising from its legitimate interests, you have the right to object to such processing on grounds relating to your particular situation.