GDPR information clause

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”), we provide the basic information regarding the protection of your personal data.

1. The controller of your personal data is InterMedia - Dawid Pieron, ul. Zawiła 17, 32-005 Niepołomice, Poland, hereinafter referred to as the “Controller”. Controller contact details: [email protected], phone: (+48) 505 104 397.
2. Your personal data may be processed by the Controller for the following purposes:
   1. For the performance of an agreement concluded with you, or in order to take steps at your request prior to entering into such agreement, in particular in order to respond to questions regarding our services, offer, or pricing (legal basis: Article 6(1)(b) GDPR).
   2. For compliance with legal obligations imposed on the Controller, arising in particular from accounting and tax regulations, including obligations related to storing information and documents after the end of the agreement (legal basis: Article 6(1)(c) GDPR).
   3. For the purposes of the legitimate interests pursued by the Controller, in particular for archiving, internal statistics, creating backups necessary to ensure the security of personal data, and for establishing, pursuing, or defending legal claims, as well as - where applicable - conducting dispute proceedings or proceedings before public authorities (legal basis: Article 6(1)(f) GDPR).
3. The storage period of your personal data depends on the purpose for which the data was collected and processed, as well as on applicable legal provisions, namely:
   1. For purposes related to an agreement with the Controller - for the duration of that agreement. If the agreement is not concluded - for a period of 3 years from the date the data was collected, with effect at the end of the calendar year.
   2. Where necessary to comply with legal obligations - for a period of 5 years resulting from accounting and tax law, unless longer retention periods are required by law in specific cases.
   3. For the purposes of the legitimate interests of the Controller described above - for a period of 10 years (unless shorter periods apply under the law) where the party to the agreement is a natural person, or 3 years where the party is an entrepreneur.
4. Your data may be disclosed to the following categories of recipients:
   1. Entities processing data on behalf of the Controller (e.g. hosting service providers such as webh.pl, ul. Piotrkowska 148/150, 90-063 Łódź), solely on the basis of an agreement with the Controller. Such entities process data only as subcontractors and only in accordance with the Controller’s instructions.
   2. Public authorities and entities performing public tasks, to the extent and for the purposes resulting from legal regulations, e.g. tax offices or fiscal control authorities.
   3. Entities and authorities necessary for pursuing possible claims arising from the agreement, such as law firms, bailiff offices, debt collection companies, courts, or prosecutors, where relevant proceedings are conducted.
5. In connection with the processing of personal data, you have the following rights under the GDPR:
   1. The right to access your personal data, including the right to obtain a copy of such data.
   2. The right to request rectification of personal data where such data is inaccurate or incomplete.
   3. The right to request erasure of personal data (the “right to be forgotten”) where the data is processed without proper legal basis and unlawfully, in particular where:
      • the data is no longer necessary for the purposes for which it was collected,
      • you have objected to the processing of personal data,
      • you have withdrawn consent and there is no other legal basis for processing,
      • the personal data is being processed unlawfully,
      • the data must be erased in order to comply with a legal obligation.
   4. The right to request restriction of processing where:
      • you contest the accuracy of the data,
      • the processing is unlawful and you oppose erasure and request restriction instead,
      • the Controller no longer needs the data for its own purposes, but you need it for the establishment, exercise, or defense of legal claims,
      • you have objected to the processing - pending verification whether the Controller’s legitimate grounds override your objection.
   5. The right to data portability where processing is based on consent or an agreement and is carried out by automated means, i.e. the right to request that the personal data be transmitted to another controller where technically feasible.
   6. The right to object to the processing of your personal data where the legal basis for processing is the legitimate interest of the Controller.
   7. The right to lodge a complaint with the supervisory authority responsible for personal data protection in Poland (currently the President of the Personal Data Protection Office) if you believe that the processing of personal data violates the GDPR.
6. Providing data for purposes related to entering into and performing an agreement is voluntary. However, failure to provide such data will make it impossible to answer your question and impossible to conclude and perform the agreement. Providing personal data is necessary to conclude an agreement with the Controller.