Information clause for the contact form
Pursuant to Art. 13 section 1 and section 2 Regulation (EU) 2016/679 of the European Parliament and of the Council
of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), we would like to inform you that:
Personal Data Administrator.
The administrator of your personal data is Al. Capone Sp. z o. o. based at ul. KRAKOWSKA 1, 33-113 ZBYLITOWSKA GÓRA.
Regarding personal data, you can contact the Administrator:
– in writing to the following address: ul. KRAKOWSKA 1, 33-113 ZBYLITOWSKA GÓRA
– by e-mail to: Daneosobowe@alejacapone.pl
Purpose of data processing and legal basis.
Personal data of job candidates.
Personal data is processed for the purpose of recruitment, on the basis of applicable legal provisions, in particular the Labor Code (Article 6(1)(c) of the GDPR) and on the basis of the consent granted by you in connection with your participation in the recruitment (Article 6 section 1(a) of the GDPR).
Personal data of the Administrator’s employees.
Employees’ personal data are processed:
– in order to conclude and perform an employment contract, including in connection with the Employer’s obligation to fulfill obligations related to the employment of employees (including social security obligations and tax obligations); performance by the Employer of activities in the field of labor law and other regulations detailed, including related (Article 6(1)(c) of the GDPR),
– based on the legally justified interest pursued by the Employer related to the implementation of the above employment objectives, not resulting directly from the employment contract or legal provisions, e.g. monitoring (Article 6(1)(f) of the GDPR);
– based on consent (Article 6(1)(a) of the GDPR).
Personal data of former employees/collaborators of the Administrator.
The purpose and legal basis for the processing of personal data is the obligation to archive documents containing personal data (Article 6(1)(c) of the GDPR) resulting from separate regulations (including the Labor Code, the Act on the Social Insurance System, the Act on pensions and Social Insurance Fund) and the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), i.e. possible investigation or defense against claims.
Personal data of customers, persons representing customers or persons indicated to contact on their behalf.
The purpose and legal basis for the processing of personal data is to take actions aimed at concluding a contract, concluding a contract and its proper implementation (Article 6(1)(b) of the GDPR); the need to fulfill legal obligations, including those arising from the Accounting Act (Article 6(1)(c) of the GDPR); the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), maintaining contacts with customers, proper communication and possible investigation or defense against claims;
Personal data of contractors (suppliers, service recipients) and contractors’ representatives.
Personal data is processed in connection with:
– performance of the contract concluded between you and the Administrator (Article 6(1)(b) of the GDPR);
– implementation by the Administrator of obligations arising from legal provisions, including e.g. tax law provisions (Article 6(1)(c) of the GDPR);
– implementation of legally justified interests pursued by the Administrator, including pursuing possible claims (Article 6(1)(f) of the GDPR).
Data of persons running sole proprietorships.
The purpose and legal basis for the processing of personal data is the correct implementation of the contract/order, fulfillment of legal obligations imposed by tax regulations, as well as possible investigation or defense against claims arising from civil law provisions (Article 6(1)(b), c, f of the GDPR). );
Monitoring.
The purpose and basis for the processing of personal data in the form of image is the use of video monitoring on the premises of sales points run by the Administrator in order to ensure the safety of persons, based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR).
Data of people participating in games and competitions.
personal data of competition and game winners are processed by the Administrator on the basis of the consent granted (Article 6(1)(a) of the GDPR), in order to issue, receive and settle prizes and related legal provisions, in particular accounting and bookkeeping provisions, as well as archiving obligation (Article 6 of the GDPR(1)(c) of the GDPR)
Recipients of personal data.
The recipients of personal data may be entities with which the Administrator cooperates under concluded entrustment agreements, including: an IT company, an accounting office and entities to which the Administrator is obliged to provide personal data under applicable law;
Data transfer outside the European Economic Area.
Personal data will not be transferred to international organizations or third countries located outside the European Economic Area.
Personal data storage period.
Depending on the purpose of data processing, they will be stored for the period:
– required by law under separate regulations, in particular tax and accounting regulations, regarding the storage of personal files and payroll documents;
– for the time necessary to secure any claims – until their limitation period expires;
– in the case of consent, for the period for which the consent was granted or until it is withdrawn;
– in the case of monitoring – for a period of up to 3 months or until the end of the proceedings if the monitoring recording serves as evidence in the proceedings.
– in the case of recruitment, until the end of the recruitment process or the end of the period for which consent was granted in the case of future recruitment;
Automated decision making.
Personal data will not be processed in an automated manner for the purpose of making decisions, including profiling.
Rights of persons whose data is processed.
Persons whose data are processed have the right to request from the Administrator:
– access to the content of your data;
– rectification of data;
-deletion of data (if they are no longer necessary for the purposes for which they were collected and the Administrator has no grounds to process them);
– processing restrictions;
Data subjects also have the right to:
– data transfer;
– object to processing;
-withdraw your consent at any time; however, this does not affect the lawfulness of processing that was carried out before the consent was withdrawn;
– submit a complaint to the supervisory authority (President of the Personal Data Protection Office) when the person considers that the processing of personal data concerning him violates the provisions of the General Data Protection Regulation of April 27, 2016;
Provision of personal data by the data subject.
Providing personal data that is regulated by law is obligatory. In other cases, it is voluntary, although failure to provide it may prevent contact with a given person, providing information as well as initiating activities aimed at concluding a contract.
Therefore, if you click “I AGREE” – you consent to the processing, after May 25, 2018, of your personal data collected as part of your use of our services, including the website, and the collection of cookies.
Expressing consent is voluntary
