Informational translation. The binding version of this document is the Polish one, available at Polityka prywatności i Cookies. In the event of any discrepancy, the Polish wording prevails.
Information clause on the processing of personal data
In accordance with art. 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we inform you that:
1. Controller of personal data
The controller of your personal data is Karolina Bisek, conducting business under the name: KAROLINA BISEK KANCELARIA PRAWNO-KSIĘGOWA, address: ul. Ludwika Solskiego 4/6, 52-416 Wrocław, Poland.
Contact details of the controller:
e-mail: biuro@bisek-kancelaria.pl
tel.: 665 280 382 / (71) 31 98 319
NIP (tax ID): 898-201-19-94, REGON: 022091221
2. Your personal data will be processed for the following purposes:
a) to conclude and properly perform the contract for services;
b) for tax purposes;
c) to enable the proper provision of accounting, tax, payroll and HR, legal, training and advisory services;
d) to provide, where necessary, debt collection, litigation and enforcement services, the pursuit of claims arising from legal provisions, and verification of payment credibility;
e) to handle enquiries via the contact form, e-mail and telephone;
f) to keep statistical data and prepare summaries and analyses;
g) to ensure proper technical support;
h) to store data for tax and accounting purposes and for archiving;
i) to survey the quality of service and client satisfaction;
j) to perform the legal obligations incumbent on the controller, in particular towards tax offices and tax authorities;
k) marketing;
l) financial settlements, including the issuing of accounting documents.
The legal basis for processing the personal data you provide is art. 6(1)(a), (b), (c) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and, as to the remaining scope, the consent granted by you. The processing of personal data is necessary to achieve the purposes indicated above and the legitimate interests of the controller corresponding to those purposes. Providing personal data is voluntary but necessary in order to perform the activities / the contract for the provision of services referred to above. Despite being voluntary, the consequence of not providing personal data will be the impossibility of performing those activities / the contract for the provision of services.
As a rule, your personal data will not be transferred to countries outside the European Economic Area or to international organisations. A transfer of your personal data outside the EEA may nevertheless take place where this is necessary in order to perform the contract for services between us.
3. We inform you that your personal data will be disclosed to the following recipients:
a) other entities / other recipients to whom we are obliged to transfer data under applicable law, including the tax office and the courts;
b) entities providing us with accounting, legal, tax, transport, hosting and IT services, courier and postal delivery services, and other subcontractors;
c) other independent recipients, in particular commercial partners whose offer complements our own.
4. Your personal data will be stored for the entire period of performance of the concluded contract for the provision of services offered by the controller. After its termination, it is justified to store the data for a further 3 years or 10 years (for the period of limitation of claims), or until the completion of any debt collection, court or enforcement proceedings. At the same time, in order to satisfy the accountability principle, we may retain the data for as long as required of us by public authorities and tax legislation.
5. You have the right of access to your personal data, the right to rectify and erase it, as well as the right to restrict its processing / the right to withdraw consent, the right to data portability and the right to object to the processing of your personal data.
6. You have the right to lodge a complaint with the supervisory authority within the meaning of the GDPR if, in your opinion, the processing of your personal data infringes the provisions of the EU GDPR.
7. Your data may be processed in an automated manner, but this will not produce any legal effects concerning you.
8. You may be subject to a decision based solely on automated processing of personal data, including profiling, where an applicable provision of law authorises us to do so or where you have previously given your consent.