Information clause

 

According to the article 13(1) and (2) and article 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of the 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation hereinafter referred to as GDPR), we inform you that:

 

1. The Data Controller of your personal data is Spółdzielnia.

2. With regards to your personal data you can write:
   - via post to:
   Spółdzielnia Socjalna Dalba ul.
   Helska 4, 84-100 Puck, Poland.
   - via e-mail to: spoldzielniadalba@gmail.com

3. We process your personal data:
   for the purposes related to the lawful business activities in order to perform the statutory purposes of Spółdzielnia, in particular
   for the purposes related to entering and performing the agreements and projects pursuant to the article 6(1) point (b) of the GDPR,
   for the purposes related to the recruitment process, start and course of the employment/cooperation/volunteering process, entering into a civil law contract etc. pursuant to the article 6(1) point (a) and article 9(2) points (a), (b) and (h) of the GDPR,
   for the purposes related to the compliance with a legal obligation, e.g. related to the tax law and other provisions to which the Data Controller is subject pursuant to the article 6(1) point (c) and article 9(2) point (b) of the GDPR,
   for the purposes related to the legitimate interests pursued by the Data Controller pursuant to the article 6(1) point (f) of the GDPR.
   The personal data may be processed for other purposes provided that the consent is given pursuant to the article 6(1) point (a), article 9(2) point (a) when the Data Collector asks you to give such consent.
   The consent may be withdrawn at any time, in the same manner as it was given.
   In order to withdraw your consent, you may also send an e-mail to spoldzielniadalba@gmail.com.

4. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
   Depending on the situation there may arise basis other than indicated in the articles 6 & 9 of the GDPR authorizing the personal data processing by the Data Controller.
   Your personal data may be handed over to the following categories of recipients:
   entities authorized by the law;
   entities entrusted with the processing of the personal data on behalf of the Data Controller, e.g. entities cooperating with the Data Controller, suppliers providing Spółdzielnia with technical and organizational solutions allowing conducting the business.
   To entrust the processing of the personal data by other entities, Spółdzielnia enters into agreements with those entities regarding the data processing;
   As stated in the GDPR, the personal data shall not be disclosed to a third-country or an international organization (i.e. outside of the European Union and to the countries not part of the European Economic Area).
   The Data Controller retains your personal data:
   in case of the personal data processing according to an agreement; the data processing period continues until the termination of said agreement,
   in case the Data Controller processes the personal data on a basis of a consent the data processing period continues until said consent is withdrawn,
   however, regardless of all the above, the retention of the personal data may be possible according to the provisions of the law during the periods indicated in those provisions in order for the Data Controller to fulfil its legal obligations, e.g. the obligations indicated by the tax law, social security,
   as well as in case of the personal data processing according to the Data Collector legitimate interest; the data processing period continues until said interest ceases to exist (e.g. prescription of a civil law claim pursuant to the Polish Civil Code provisions) or until a person whom the data concerns objects to such further processing – in situations when such objection is allowed by the law provisions,
   for the archiving purposes with regards to the necessary data, e.g. to show accountability, i.e. to demonstrate compliance with the law regarding the personal data processing, the Data Collector stores the data for a period in which it is obligated to store the data and documents containing it to document the compliance with the legal requirements and to allow a control of this compliance by the public authorities.
   The Data Collector guarantees the fulfilment of all rights pursuant to the GDPR and in scope indicated herein, i.e. the right of access, rectification or restriction to the personal data, the right to data portability, the right to object automated decision-making, including profiling, as well as the right to communication of an objection to the personal data processing.
   Currently, the Data Collector does not use automated decision-making, including profiling.
   Pursuant to the GDPR provisions, the Data Collector shall inform you about your right to lodge a complaint with a supervisory authority PUODO (Polish Data Protection Commissioner) with regards to the personal data processing.