Information clause on personal data protection in LAD Transport company
Information clause on personal data protection in LAD Transport company. Due to the implementation of the requirements of European Parliament and Council (EU) 2016/679 regarding the protection of personal data of natural persons in relation to the processing of personal data and on the free movement of such data as well as the repeal of Directive 95/46/EC (in general General Data Protection Regulation, further referred to as GDPR), based on Art. 13 paragraphs 1 and 2 as well as Art. 14 paragraphs 1 and 2 LAD Transport Rafał Skrzypczyński with its registered office at ul. Popowicka 96/1, 54-238 Wrocław presents the following information on the means and goals in which it processes your personal data (further referred to as: „personal data”), as well as your rights regarding data protection:
I. Personal data administrator and their personal data
Your personal data administrator is LAD Transport Rafał Skrzypczyński with its registered office at ul. Popowicka 96/1, 54-238 Wrocław (further referred to as „Company” or „Administrator”).
You can contact the Administrator using the following e-mail address: firstname.lastname@example.org or by letter: ul. Popowicka 96/1, 54-238 Wrocław.
II. Personal data processing categories
The scope of your personal data is as following: identification data, address data and contact data.
III. Goals and the legal basis for data processing
Your data will be processed by the Company in order to:
a) undertake all the neccessary actions related to conclusion of the contract with the Company and to undertake all the actions requested by you before the conclusion of the contract – the legal basis for personal data processing in this scope is Art. 6 paragraph 1 point b) of GDPR;
b) undertake and perform all necessary actions regarding the execution of the concluded contract in relation to which the personal data were given to the Company, e.g. in order to establish the cooperation, leasing, contract or other trade agreements depending on circumstances – the legal basis on personal data processing in this scope is Art. 6 paragraph 1 point b) of GDPR;
d) verify the identity of clients and their representatives, monitor timely payments and risk management in the Company – legal basis for data processing in this scope is Art. 6 paragraph 1 points b) and f) of GDPR;
e) perform statistical analysis not resulting in personal data and the result of which is not a basis for making decisions regarding specific natural persons – the legal basis for personal data processing in this scope is Art. 6 paragraph 1 point f) of GDPR;
f) perform statistical analysis and internal reporting – the legal basis for personal data processing in this scope is Art. 6 point f) of GDPR;
g) direct marketing by the Company during the term of the contract – the legal basis for personal data processing in this scope is Art. 6 paragraph 1 point f) of GDPR;
h) direct marketing by the Company after the termination, expiry or withdrawal from the contract – the legal basis for personal data processing in this scope is your consent, i.e. Art. 6 paragraph 1 point a) of GDPR;
i) determine and subsequently vindicate claims of the Company or to defend against reported claims including claims related to economic activity conducted by the Company (including but not limited to recovery) as well as to ensure information security of the Company – the legal basis for personal data processing is Art. 6 paragraph 1 point f) of GDPR;
j) satisfy the legal and regulatory requirements including but not limited to answering official inquiries by the duly empowered public or judicial authority, perform duties in accordance with tax legislation – the legal basis for personal data processing in this scope is Art. 6 paragraph 1 points c) and f) of GDPR.
Moreover, we process your personal data based on your consent (legal basis: Art. 6 paragraph 1 point a) of GDPR) given to us in order to meet defined goals.
IV. Source of personal data
Information pertains to personal data acquired by means other than from the person whom such data concern. Your personal data may come from legal representative, principal who has been granted power of proxy, an employer, a contract party, a credit information bureau as well as from widely available sources, especially from public databases and registers: PESEL, National Court Register (NCR), the Business Activity Central Register and Information Record (CEIDG), REGON, VAT register. These sources pertain to, among others, data such as client’s identification data, contact data, data regarding existing obligations.
V. Information pertaining to the recipients of personal data or categories of recipients
Personal data may be made available to other recipients in order to execute the contract, perform a legal duty, based on your consent or to achieve the goals resulting from legally justified interests of the Company or a third party.
Personal data are used by the Company and may be given to the following recipients:
a) authorised employees of the Company as well as other persons acting on behalf of the Company;
b) entities processing your personal data as requested by the Company and persons acting on their behalf when such entities process data based on the contract concluded with the Company and exclusively in accordance with the instructions of the Company and under condition of maintaining discretion, including professional and insurance secrecy which are specific obligations of information protection resulting from specific legal provisions. The entities performing actions on behalf and in the interest of the Company are those providing information, legal, accounting, auditing services and alike;
c) tax offices,
d) Social Insurance Fund,
e) insurance companies,
f) other institutions entitled to receive your data based on existing legal provisions when they request such data on a legal basis.
VI. Time for which personal data will be kept (processed)
Your data will be kept (processed) for time neccesary to achieve goals of data processing described in point III of this Information Clause on personal data protection, i.e.
a) in the scope of contract execution – to the time of contract expiry, termination or withdrawal of the contract and afterwards for a period required by legal provisions or to execute possible claims, no longer, however, than till the end of the limitation period;
b) in the scope of fulfilling legal obligations of the Company regarding conducting economic activity and execution of concluded contracts – till said duties will be fulfilled by the Company;
c) in the scope of data processing based merely on consent – to the time of immediate data removal based on your request;
d) d) to the time of fulfillment of legally justified interests of the Company being the basis for processing or to the time of your objection towards such processing unless there is a legally justified basis for further data processing.
VII. Rights of persons whom data concern
Due to the fact that the Company processes your personal data, you are entitled to the following:
a) requesting access to your personal data as well as requesting the correction of such data, limiting the processing of your data or removal of such data based on conditions resulting from GDPR,
b) in the scope in which consent is the basis of data processing – you may withdraw your previous consent provided such withdrawal shall not influence the accordance with the right to process executed based on consent given before its withdrawal,
c) in the scope in which the basis for personal data processing results from legally justified interests of the Company – objecting to personal data processing,
d) in the scope in which the basis for personal data processing is the execution of the contract or consent – transferral of personal data, i.e. the right to obtain personal data from the Company in a structured, standardised, machine-readable form and sending such data to a different administrator if technically possible.
If you believe that processing of your personal data violates the provisions of universally binding law, including GDPR, you may bring an action to the competent supervisory authority.
VIII. Automatic decision-making, including profiling
The Company shall not make automatised decisions based on personal data, including decisions resulting from profiling in the sense of GDPR.
IX. Duty to deliver personal data and results of not fulfilling it
In the scope in which your data processing in order to perform requested actions before or during the time the contract or concluding and executing the agreement with the Company is in effect, providing the Company with your data is voluntary, however it is a condition of performing requested actions before or during the time the contract is in effect or concluding and executing the contract with the Company. In case of not providing the Company with the necessary personal data the Company will not be able to perform requested actions or conclude and execute the contract with you.
COMPANY LAD Transport
1 Information Clause regarding personal data protection of natural persons, natural persons conducting economic activity (including partners of a civil partnership), natural persons representing a client, representatives and natural persons named by this entity as persons to contact / coordinators / persons responsible for execution of the contract.