What data do we mean?
Your Personal Data, including name, surname, correspondence address communicated in a request or complaint to the President of the Personal Data Protection Office.
Personal Data Controller.
The controller of your data is
• KRUK S.A., based in Wrocław (51-116), ul. Wołowska 8.
You may address your query to any of the above-mentioned Controllers by sending it to KRUK S.A., ul. Wołowska 8, 51-116 Wrocław, or to the e-mail address info@kruksa.pl.
Personal Data Officer.
We have appointed a Data Protection Officer whom you may reach for all matters concerning the processing of your personal data and your rights in this regard. You may write to him at the following address: Data Protection Officer, KRUK S.A. ul. Wołowska 8, 51-116 Wrocław, or contact by e-mail: dpo@kruksa.pl.
Why and on what basis do we process your personal data?
We process your personal data on the basis of Article 6(1)(c) GDPR because we are handling your request or complaint to the President of the Personal Data Protection Office.
How long do we keep your personal data?
We process your personal data in accordance with Article 189(g) of the PAC for a period of five years from the date on which we are obliged by law to process your request or from the date on which we conclude the proceedings before the President of the Personal Data Protection Office initiated at your request.
To whom may we pass your personal data?
Your data will not be passed on to other parties.
Do you have to give us your personal information?
The provision of personal data is voluntary, but is a condition for responding to your request or complaint received from the President of the Office for Personal Data Protection
From whom may we receive your data?
Your personal data you provided in your request or we received from the President of the Personal Data Protection Office as a result of your complaint.
Profiling and automated decision making.
Your data will not be processed in an automated manner in order to make a decision on an individual case.
Transfer of your personal data outside the European Economic Area (EEA).
We use suppliers and partners outside the EEA and it is therefore possible to transfer personal data to countries outside the EEA. Such transfer of personal data may take place on the basis of a decision stating the appropriate level of protection or subject to appropriate safeguards, Art. 45, 46 GDPR. Information on the EU Commission's adequacy decisions is available here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
What rights do you have in relation to your data and how can you exercise them?
In our business, we ensure that you can exercise your rights under the GDPR.
Under the GDPR you have the right to:
• Receive information about our processing of your personal data and a copy of it.
• Transfer the personal data provided by you in connection with the conclusion of a contract or processed by us on the basis of your consent.
• Object to the processing of your personal data (request to stop processing your personal data), in particular on grounds relating to your particular situation. Exercising the right to object generally prevents the processing of your data. Please note, however, that this effect will not occur where we demonstrate that there are valid, legitimate grounds for their processing overriding the grounds for objection, or we demonstrate that there are grounds for establishing, asserting or defending our claims that we have against you.
You can also request:
• Correction of your data if we have incorrect data, e.g. outdated or incomplete data.
• Erasure of your data ("right to be forgotten") when: the data are no longer necessary for the purposes for which they were collected or otherwise processed; the data will be unlawfully processed; the obligation to erase your data arises from the provisions of the law; you object to the processing of your data; you withdraw your consent to the processing of your data.
• Restriction of the processing of your personal data, i.e. mark your stored personal data to limit future processing, where: you question the accuracy of your personal data - for a period of time to allow us to check the accuracy of the data; the processing is unlawful but you do not want it deleted; you no longer need the data but need it to defend or assert your claims; you object to the processing of your data - until it is determined whether the legitimate grounds for processing override the reasons for the objection.
Where your consent is the basis for the processing of your personal data, you may withdraw it at any time. However, this will not affect the lawfulness of the Company's use of your data prior to the withdrawal of such consent.
If you wish to exercise the above rights, you may submit a request to us by:
• e-mail to: info@kruksa.pl
• by telephone by calling: 800 700 020
• by post to the following address: KRUK S.A., ul. Wołowska 8, 51-116 Wrocław
• in person, when contacting our advisor or at KRUK S.A.'s registered office in Wrocław at ul. Wołowska 8.
You also have the right to lodge a complaint with the data protection supervisory authority, i.e. The President of the Office for Personal Data Protection.