RODO

Information for subjects directly/indirectly cooperating

Based on the art. 13 point 1 and 2 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereafter GDPR), we inform that:

  1. The administrator of the personal data is: Boryszew S.A. Maflow Branch in Tychy with Head Office in Tychy, Serdeczna street 42, 43-100 Tychy (hereafter the Branch).
  2. The Branch does not hold an assigned inspector for data protection, due to the fact that as a result of the analysis conducted, such an assignment of a data protection inspector is not necessary, however, in order to have  a contact with the Branch you may send  a correspondence to the address: Boryszew S.A. Maflow Branch in Tychy, ul. Serdeczna 42, 43-100 Tychy, with a note “Human Resources and Administration Department” or by sending an e-mail to: rodo@maflow.com.
  3. Personal data is processed by the Branch:
    -Based upon approval – solely in the extent of the approval provided by the client or the employee (art. 6 point 1 letter a GDPR),
    -In order to take up activities before the signature of the contract or before the execution of the contract, based on art. 6 point 1 letter b GDPR,
    -In order to ensure security of the employees of the Branch and of other individuals who reside in the Branch, based on art. 6 point 1 letter f GDPR,
    -In order to transmit the personal data within the capital group for internal administrative purposes, based on art. 6 point 1 letter f GDPR,
    -For other purposes related to the business activity, to prosecute a claim related to the Branch’s activities or to fulfill the legally justified purposes of the Branch, based on art. 6 point 1 letter f GDPR.
  4. In relation to the processing of data for the purposes and on the basis described in point 2, personal data may be shared with the following categories of recipients, especially:
    -Subjects which participate in the processes necessary for the appropriate conducting of the Branch’s business activity, including subjects which guarantee the payment services, electronically provided services, subjects which operate our IT systems or which support those systems;
    -Subjects linked with Boryszew Maflow Branch in Tychy, including those belonging to the Boryszew S.A. Capital Group, Organs authorized to obtain data based on legal provisions, including public administration organs.
  5. The Branch may transmit data outside of the European Economic Area (EEA). The transmission of your personal data takes place based on binding corporate rules or standard contractual clauses adopted by the European Commission.
  6. Personal data will be kept during the period of the contract and after its expiry in order to fulfill the legal duty of the Branch, for a period of time in accordance with the rules in force, including also in order to set, assert  a claim or defend from claims if such claims concern the business activity of the Branch, and, in the case of legally justified objectives of the Branch, including sale unless the approval of the Client is revoked. The personal data of the Employees, the Clients and other people residing in the Branch, gathered by the monitoring are processed during 3 months.
  7. Every person whose data is processed has the right to access the content of the data and correct it, delete it, limit its processing, transfer it, lodge an objection, revoke the approval in any given moment without any influence on the right for processing (if the processing takes place based on the approval) made on the basis of the approval before its revoking.
  8. Every person whose data is being processed has the right to file a claim to the Office of Personal Data Protection.
  9. Providing personal data depending on the objective defined in point 3 is a legal requirement, a contractual requirement, or a contractual condition. In relation to the data processing and based on the approvals given, the provision of data is voluntary. Non-provision of data may result in (depending on the justification for personal data processing) e.g. the impossibility to conclude a contract, the impossibility to enter the premises of one of the Branch.
  10. Personal data will not be processed automatically, nor through profiling.