PRIVACY POLICY

1. INTRODUCTION

1.1. We respect the right to privacy and we care about data security. Data protection is carried out in accordance with the requirements of generally applicable laws, in particular the GDPR. Data is stored on secure servers, computers, mobile devices and in secure rooms. We have implemented appropriate technical and organizational safeguards, introduced and use appropriate procedures, policies and instructions to enable the proper functioning of the data processing. We train our staff in the field of data protection, we also control and verify the data protection system in our company.

1.2. For the purposes of this Privacy Policy of PCC Synteza S.A. we use the following abbreviations:

“Policy” – means this Privacy Policy of PCC Synteza S.A.
“We” – means the Personal Data Controller referred to in 2.1;
“You” – means you, the natural person whose data is processed by us;
“Data” – means personal data;
“Customers” – means those who purchase goods and services included in our commercial offer;
“Contractors” – means entities providing goods and services to us;
“GDPR” – means Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC.

2. PERSONAL DATA CONTROLLER

2.1. The Personal Data Controller is PCC Synteza S.A. with headquarters in Kędzierzyn – Koźle at 15 Szkolnej Street, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Opole under KRS number 0000089685, NIP 749-18-88-664, REGON: 531686911.

2.2. In matters of protecting your data and exercising your rights, you can contact us by e-mail: , telephone: 77 4051110 or by sending a letter to the address indicated in 2.1.

3. OBJECTIVES, LEGAL BASIS FOR DATA PROCESSING, DATA RETENTION PERIOD, TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

3.1. Parameters such as: purposes of data processing, legal grounds for data processing, data retention period, transfer of data to third countries or international organizations – for individual categories of persons, are indicated in the tabs to which the following references lead.

3.2. If the data processing is based on the legitimate interest of the Personal Data Controller, we try to analyse and balance our interest and the potential impact on the data subject (positive and negative) and the rights of that person under data protection law. We do not process data if the impact on the data subject outweighs our interests (unless we have the appropriate consent or the law requires or permits it).

3.3. We have also prepared for you the information about the parameters listed in 3.1. To view it, click on the category that applies to you. The list of categories can be found below:

The purposes of data processing:

Your data is processed in order to handle relations and settlements between you and us, including the conclusion and performance of a contract for the sale of goods or services, issuing accounting documents, contracts and orders management, execution and receipt of deliveries, organization of transport, handling complaints, confirmation of the balance, payment monitoring, debt collection, dispute management, as well as for analytical and statistical purposes, conducting quality of service surveys, targeting marketing content to you.

Legal basis for data processing:

  • implementation of a contract concluded between you and us or taking action before its conclusion – art. 6 par. 1 letter b) GDPR,
  • provisions of generally applicable law, i.e. tax and accounting regulations – art. 6 par. 1 letter c) GDPR,
  • our legitimate business interest – art. 6 par. 1 lit. f) GDPR- i.e.:
    • ensuring the correct implementation of cooperation with you,
    • establishing, investigating or defending claims,
    • direct marketing of our goods and services (by e-mail to your address or text to your telephone number – if you agreed to it),
    • conducting analysis of the results of your business activity,
    • receiving feedback about the level of satisfaction with the transaction we carry out.

Transfer of data to third countries or international organizations

We do not transfer your data outside of Poland or to international organizations.

Data retention period

Your data contained in the documentation (paper and electronic) is stored for no longer than 10 years, in the scope regulated by law – in accordance with applicable regulations. Data from video monitoring will be kept for a maximum of 3 months from the date of recording. In the case where the image recordings are evidence in proceedings conducted under the law or we have received a message that they may constitute evidence in the proceedings, the storage period is extended until the final conclusion of the proceedings. Following the periods referred to in the preceding sentences, image recordings obtained from monitoring containing data are destroyed, unless separate provisions provide otherwise.

Data collection:

We only collect data necessary for the fulfilment of the tasks listed below and we ask for personal data only when it is necessary. In case we need to process personal data in order to carry out cooperation with our Clients and Contractors, we ask them to provide the data of the persons participating on behalf of these Clients and Contractors, including contact persons regarding the implementation of the contract or order and related with it auxiliary services (e.g. transport). As a rule, we collect this personal data from our clients and contractors or from third parties acting in accordance with the instructions of a given customer or contractor. Personal data may include name, employer or client name, position, telephone number, e-mail address, vehicle registration number and ID number (in terms of vehicle traffic records and the drivers) and other business contact details.

The purposes of data processing:

Your data is processed in order to handle relations and settlements between us and our client or contractor with whom you are associated, including the conclusion and performance of a contract for purchase – sale of goods or services, issuing accounting documents, contracts and orders management, execution and collection of deliveries, organization of transport, complaint handling, confirmation of the balance, payment monitoring, debt collection, dispute management, as well as for analytical and statistical purposes, conducting service quality tests, marketing content management.

Legal basis for data processing:

  • provisions of generally applicable law, e.g. tax and accounting regulations – art. 6 par. 1 letter c) GDPR,
  • our legitimate business interest – art. 6 par. 1 lit. f) GDPR – i.e.:
    • ensuring the correct implementation of cooperation with the client or contractor with whom you are associated,
    • establishing, investigating or defending claims,
    • direct marketing of our goods and services to our client or contractor with whom you are associated,
    • conducting analysis of the results of business activity,
    • receiving feedback about the level of satisfaction with the transaction we carry out.
  • consent, if we have requested the consent of the data subject – art. 6 par. 1 lit. a) GDPR.

Transfer of data to third countries or international organizations

We do not transfer your data outside of Poland or to international organizations.

Data retention period:

Your data contained in the documentation (paper and electronic) is stored for no longer than 10 years, in the scope regulated by law – in accordance with applicable regulations. Data from video monitoring will be kept for a maximum of 3 months from the date of recording. In the case where the image recordings are evidence in proceedings conducted under the law or we have received a message that they may constitute evidence in the proceedings, the storage period is extended until the final conclusion of the proceedings. Following the periods referred to in the preceding sentences, image recordings obtained from monitoring containing data are destroyed, unless separate provisions provide otherwise.

Data collection and transfer:

We only collect data necessary for the fulfilment of the tasks listed below and we ask for personal data only when it is necessary. In case we need to process personal data in order to carry out cooperation with our Clients and Contractors, we ask them to provide the data of the persons participating on behalf of these Clients and Contractors, including contact persons regarding the implementation of the contract or order and related with it auxiliary services (e.g. transport). As a rule, we collect this personal data from our clients and contractors or from third parties acting in accordance with the instructions of a given customer or contractor. Personal data may include name, employer or client name, position, telephone number, e-mail address, vehicle registration number and ID number (in terms of vehicle traffic records and the drivers) and other business contact details. The area of our company and facilities located on it are subject to security measures, including the monitoring and access control system. Your image is processed in this regard. The appropriate signs placed at our facilities inform about the operation of the monitoring system. Materials recorded as part of video monitoring are stored in a secure manner, and access to them can only be obtained in exceptional cases (e.g. to investigate the incident). We require formalities at the entry gate (entry into the register, confirmation of identity) from the guests (especially drivers of delivery vehicles). Providing personal data by you is voluntary. Not submitting data may result in refusal of access to our company’s premises. Your data is provided to the entity involved in the protection and control of entries and exits to the premises of our company. Data from video monitoring can also be accessed by a company that maintains a monitoring system and a company that deals with the destruction of data carriers on the basis of contracts concluded with us.

The purposes of data processing:

Your data has been provided to us to provide you with access to our company and is processed to ensure the safety of persons and property.

Legal basis for data processing:

  • our legitimate interest – art. 6 par. 1 lit. f) GDPR – i.e.:
    • the need to ensure traffic control on the premises, including ensuring the presence of people invited by us to the premises,
    • the need to ensure the safety of persons and property.

Transfer of data to third countries or international organizations

We do not transfer your data outside of Poland or to international organizations.

Data retention period:

Data from video monitoring will be kept for a maximum of 3 months from the date of recording. In the case where the image recordings are evidence in proceedings conducted under the law or we have received a message that they may constitute evidence in the proceedings, the storage period is extended until the final conclusion of the proceedings. Following the periods referred to in the preceding sentences, image recordings obtained from monitoring containing data are destroyed, unless separate provisions provide otherwise.
Documentation (paper and electronic) regarding visitors’ traffic is kept for three years from your last visit to us. This documentation is securely stored, and access to it can only be obtained in exceptional cases (e.g. to investigate an incident).

The purposes of data processing:

Your data is processed in order to process your recruitment and your application for employment in our company.

Legal basis for data processing:

  • provisions of the generally applicable law, i.e. in particular art. 221 of the Labour Code – art. 6 par. 1 letter c) GDPR,
  • our legitimate interest – art. 6 par. 1 lit. f) GDPR – i.e.:
    • ensuring the proper conduct of the recruitment process,
    • ensuring an adequate level of employment, selection of personnel to achieve high quality of work, as well as the proper functioning of our company.
  • If the candidate has consented to the processing of his or her data, the basis for processing is also the consent given – art. 6 par. 1 lit. a) GDPR.

Transfer of data to third countries or international organizations

We do not transfer your data outside of Poland or to international organizations.

Data retention period

Your data contained in the documentation (paper and electronic) is stored for a maximum of 6 months from the date of receipt. Data from video monitoring will be kept for a maximum of 3 months from the date of recording. In the case where the image recordings are evidence in proceedings conducted under the law or we have received a message that they may constitute evidence in the proceedings, the storage period is extended until the final conclusion of the proceedings. Following the periods referred to in the preceding sentences, image recordings obtained from monitoring containing data are destroyed, unless separate provisions provide otherwise.

4. PERSONS TO WHOM DATA IS SUBMITTED

Recipients of your personal data may be competent Tax Offices and other law enforcement bodies, regulatory authorities and other government authorities or third parties, if required by applicable law (the transfer of data will take place in accordance with these provisions). In addition, your data is submitted to entities entrusted with the provision of legal services, to our auditors, entities involved in the delivery or service of our IT system or provide us with other IT services, entities responsible for controlling entries and exits to our area, as well as entities that destroy data carriers on the basis of contracts concluded with us and providing us with other services or goods that support our business.

5. YOUR RIGHTS

5.1. You have:

5.1.1. The right to access your data and receive a copy.

5.1.2. The right to rectify (correct) your data.

5.1.3. The right to delete data.
If you feel there is no reason to process your data, you can request that we remove it. This law may not be enforceable if the processing of data by us is compulsory or we have a different basis for processing it than your consent.

5.1.4. The right to limit data processing
You can request that we limit the processing of your personal data only to its storage or to perform actions agreed upon with you, if in your opinion the data is incorrect or we process it unjustifiably; you do not want us to remove it, because it is needed for determination, investigation or defence of claims; or for the duration of your opposition to data processing. This law may not be enforced if the processing of data by us is compulsory (that is, legally required) or we have a different basis for processing it than your consent.

5.1.5. The right to object to data processing.
Individuals have the right to limit the processing or object to the processing of their data at any time, due to their special situation, unless the processing is required by law. In this case, we will not process the data further or we will limit processing as long as we are able to demonstrate a legitimate basis for processing or establishing, exercising or defending our rights.

5.1.6. The right to data transfer:
You have the right to receive from us in a structured, commonly used machine-readable format (“.csv” format), personal data about you that you provided to us on the basis of a contract or your consent, or you may have us send this data directly to another entity. This law may not be enforceable if the processing of data by us is compulsory or we have a different basis for processing it than your consent or contract, and also if your data is processed only in paper form.

5.1.7. The right to lodge a complaint.
The protection of your data is our priority. However, if you feel that we are processing your data unlawfully and you want to file a complaint about the use of your data by us, please send an email with details of the complaint to the e-mail address indicated in 2.2. Any complaints received will be reviewed and we will respond to them. You can file a complaint to the President of the Office for Personal Data Protection (formerly Inspector General for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw).

5.1.8. The right to withdraw consent to data processing.
At any time, you have the right to withdraw your consent to the processing of personal data, which we process on the basis of your consent. Withdrawal of consent will not affect the lawfulness of the processing which had been carried out on the basis of your consent prior to its withdrawal. This law may not be enforceable if the processing of data by us is compulsory or we have a different basis for processing it than your consent.

5.2. In order to exercise your rights, please send a request to the e-mail address indicated in 2.2., call the number indicated in 2.2. or report to the address indicated in 2.1. The application form is available here: APPLICATION FORM

5.3. Remember that before exercising your rights, we will have to confirm your identity – that is, identify you accordingly.

6. DATA PROFILING

Your data is not profiled by us. Profiling, according to GDPR, means the form of automated data processing, which consists in the use of data to assess some of the natural person’s personal factors, in particular to analyse or forecast aspects of the effects of this individual’s work, his/her economic situation, health, personal preferences, interests, credibility, behaviour, location or movement.

7. COOKIES

7.1. This website, for your convenience, uses cookies. Cookies are small text files sent by the website that you visit to your device.

7.2. The website uses performance cookies, which are used to collect information about how to use the website to make it work better, and functional, which allows the website to “remember” user settings (e.g. language, font size).

7.3. By using our website, you agree to our use of cookies in order to provide you with convenience when browsing the Policy. The settings of these files can be changed at any time in the browser settings.

7.4. Cookie files referred to in paragraph 9 above may come from the following companies:
Google – more information regarding Google’s privacy policy and data collection can be found on the website: https://policies.google.com/privacy?hl=en.

7.5. The administrator of this website uses Google services:

1. Google Analytics – a service that enables data to be collected for the purpose of analysing website visit statistics. Detailed information on how data is processed by Google Analytics can be found on the website: https://support.google.com/analytics/answer/6004245?hl=en. The User can prevent the collection of their data by installing the following browser add-on that blocks the transfer of data to Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en.