Privacy Policy

1. Data Administrator

The administrator of the Customer’s personal data is ABC Czepczyński Spółka z ograniczoną odpowiedzialnością spółka komandytowa with its registered office in Międzychód (64-400), at 20 Wigury Street, entered in the register of entrepreneurs kept by the District Court Poznań Nowe Miasto and Wilda in Poznań, IX Economic Department of the National Court Register under KRS number: 0000294373 (NIP: 5951442504, REGON: 300725946), (hereinafter referred to as the “Company” or “Administrator”).

2.Data Protection Officer

Data Protection Officer
Supervision of compliance with data protection is exercised by the appointed data protection officer: Piotr Sowa. The inspector can be contacted on all matters relating to the processing of personal data by the Company and the exercise of rights related to the processing of personal data. You can contact the inspector via e-mail address: rodo @abc-czepczynski.pl or in writing: ABC Czepczyński Sp. z. o.o sp. k. with its registered office in Międzychód (64-400), at 20 Wigury Street.

3. Information for customers (sole proprietors)

3.1 Purpose of processing and legal basis for processing

 

Purpose of processing	Legal basis for processing from Regulation No. (EU) 2016/679 of the European Parliament and of the Council (GDPR)	Document retention period
Establishing business relationships	Processing is necessary for the purposes of the administrator’s legitimate interests (Article 6(1)(f) RODO) – consisting in the pursuit of sales of services.	until an effective objection / request for deletion is made
Verification of the financial and commercial credibility of the potential customer	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the Company’s interests, maintaining liquidity.	3 years from the acquisition of the data or until an effective objection / request for deletion is made
Establishment of the legal relationship and execution of the contract between the Company and the customer	Processing is necessary for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) of the DPA).	until the contract is terminated
Maintenance of shipping records	The processing is necessary for the fulfillment of a legal obligation (Article 6 (1) (c) of the RODO in connection with Article 38 of the Transport Law, Article 6 of the Convention on the Contract for the International Carriage of Goods by Road (CMR) and in connection with the applicable local law for cabotage transport.	5 years, counting from the beginning of the year following the fiscal year
Maintenance of accounting and tax records	Processing is necessary to fulfill a legal obligation (Article 6(1)(c) RODO) in conjunction with Article 74 of the Accounting Act.	5 years, counting from the beginning of the year following the fiscal year
Sending invoices and CMRs electronically	Processing is based on consent (Article 6(1)(a) RODO). Use of electronic invoices requires acceptance – in connection with Article 106n para. 2 of the Value Added Tax Act.	Until you withdraw your consent or object
Conducting conventional marketing activities of own services	Processing is necessary for purposes arising from the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the interests and good image of the Company, promoting its own activities.	until an effective objection / request for deletion is made
Running conventional marketing of partners’ services	Processing is necessary for the purposes of the administrator’s legitimate interests (Article 6(1)(f) RODO) – Promoting and selling partner services.	until an effective objection / request for deletion is made
Conducting marketing activities of own services using electronic communication means	Processing is carried out on the basis of consent (in conjunction with the Act of July 18, 2002 on the provision of electronic services and the Telecommunications Law of July 16, 2004).	Until you withdraw your consent or object
Handling complaints, complaints, requests	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Caring for the interests and good image of the Company.	until the statute of limitations for possible claims
Collection of receivables	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the Company’s interests, maintaining liquidity.	pending full settlement
Confirmation of balances, verification of processed data	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the RODO) – Taking care of the Company’s interests, taking care of legal compliance in terms of inventory obligation (confirmation of balances), taking care of the accuracy of counterparty data.	until the statute of limitations for possible claims
Insurance coverage and claims reporting	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the company’s interests in the event of damage, the right to insurance and claim settlement.	3 years from the date of the accident
Possible establishment, enforcement or defense of claims	Processing is necessary for purposes arising from the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	until the statute of limitations for possible claims

3.2 Source and categories of data

We only process the usual categories of data (identification, contact, registration and business) that come from publicly available sources or from companies with personal and capital ties.

3.3 Recipients of data

The Administrator may transfer your data only to trusted recipients such as state authorities or other entities authorized under the law, in order to perform the Company’s obligations, IT service providers, mail hosting, information systems, entities providing insurance, postal or courier services, transportation, forwarding, financial, legal and economic consulting (who provide services to the Company). Data is also transferred to the shipper and receiver of outsourced transportation, as well as personal and capital related companies.

3.4 Data storage time

The Administrator is obliged to keep documents containing the Customer’s personal data for the entire duration of the contract and during the mandatory period of retention of documentation related to the purposes specified above, determined in accordance with separate regulations. To the extent that the processing of the Customer’s personal data is carried out on the basis of consent – until it is revoked. To the extent that the Customer’s data will be processed for the realization of the Company’s legitimate interests – the establishment, investigation or defense against claims raised in court proceedings, enforcement proceedings, or before other state authorities, the Customer’s data may be stored by the Company until the statute of limitations for possible claims. To the extent that the Client’s data will be processed for the realization of the Company’s legitimate interests – conducting marketing activities to promote its business, the Client’s data may be stored by the Company until the Client objects to the processing.

3.5 Transfer of data to third countries

In the case of an order for international transport services outside the European Union, your data (to the extent necessary for the execution of the order) will be transferred to third countries where RODO does not apply. In this case, other legal safeguards and appropriate guarantees for the protection of your personal data are applied.

3.6 States of law

As the Company processes your personal data, you have the right to: gain access to the content of your personal data, request rectification (in case it is incorrect), deletion or restriction of processing, portability of personal data (which the Client has consented to or which is processed under contract). To the extent that the processing of personal data is based on consent, the Customer has the right to withdraw consent at any time without affecting the legality of the processing. If you consider that the Company’s processing of your personal data violates the provisions of the RODO, you have the right to lodge a complaint with a supervisory authority (the President of the Office for Personal Data Protection).

You have the right to object to processing aimed at the legitimate interests of the controller (Article 6(1)(f) RODO). Each request for the exercise of Customer Rights will be evaluated and verified by the Company and responded to promptly.

3.7 Obligation to provide data

Provision of personal data is voluntary, but necessary to establish, shape the content, change or dissolve the legal relationship between the Company and the Customer, implement the contract between the Company and the Customer, settlement of business conducted by the Company. Failure to provide personal data will be associated with the inability to establish, shape the content, change or dissolve the legal relationship between the Company and the Customer, the implementation of a contract between the Company and the Customer, settlement of the Company’s business.

4. Information for carriers

4.1 Purpose of processing and legal basis for processing

Purpose of processing	Legal basis for processing from Regulation No. of the European Parliament and of the Council (EU) 2016/679 (RODO)	Storage period
Establish a business relationship with a potential carrier	Processing is necessary for the purposes of the administrator’s legitimate interests (Article 6(1)(f) RODO) – Use of services provided by subcontractors necessary for the business.	until an effective objection / request for deletion is made
Analysis of the carrier’s authority, competence and capacity	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the RODO) – Taking care of the company’s interests, securing the performance of the contract concluded with the principal or potential principal; organizing transportation as required by law including Article 55a of the Transport Law and in conjunction with Article 3 of the Convention on the Contract for the International Carriage of Goods by Road (CMR).	6 years from the acquisition of the data or until an effective objection / request for deletion is made
Establishment of the legal relationship and performance of the contract between the Company and the carrier	Processing is necessary for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) of the DPA).	until the contract is terminated
Maintenance of shipping records	The processing is necessary for the fulfillment of a legal obligation (Article 6 (1) (c) of the RODO in connection with Article 38 of the Transport Law, Article 6 of the Convention on the Contract for the International Carriage of Goods by Road (CMR) and in connection with the applicable local law for cabotage transport.	5 years, counting from the beginning of the year following the fiscal year
Maintenance of accounting and tax records	Processing is necessary to fulfill a legal obligation (Article 6(1)(c) RODO) in conjunction with Article 74 of the Accounting Act.	5 years, counting from the beginning of the year following the fiscal year
Insurance coverage and claims reporting	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the company’s interests in the event of damage, the right to insurance and claim settlement.	3 years from the date of the accident
Possible establishment, enforcement or defense of claims	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	until the statute of limitations for possible claims

4.2 Source and categories of data

We only process the usual categories of data (identification, contact, registration and business data) that come from publicly available sources or from entities involved in the transportation service such as your employer, the carrier contracting you to perform the service, and affiliated companies.

4.3 Recipients of data

The Administrator may transfer your data only to trusted recipients such as state authorities or other entities authorized under the law, in order to perform the Company’s obligations, IT service providers, mail hosting, information systems, entities providing insurance, postal or courier services, transportation, forwarding, financial, legal and economic consulting (who provide services to the Company). Data is also transferred to the shipper and receiver of outsourced transportation, as well as personal and capital related companies.

4.4Data storage time

The Administrator is obliged to keep documents containing personal data for the entire duration of the contract and during the mandatory period of retention of documentation related to the purposes specified above, established in accordance with separate regulations. To the extent that your data will be processed for the realization of the Company’s legitimate interests, your data may be kept by the Company until the statute of limitations for any claims.

4.5 Transfer of data to third countries

In the case of an order for international transport services outside the European Union, your data (to the extent necessary for the execution of the order) will be transferred to third countries where RODO does not apply. In this case, other legal safeguards and appropriate guarantees for the protection of your personal data are applied.

4.6 Rule of law

As the Company processes your personal data, you have the right to: gain access to the content of your personal data, request rectification (if incorrect), deletion or restriction of processing, portability of your personal data (which are processed under contract). If you consider that the Company’s processing of your personal data violates the provisions of RODO, you have the right to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

You have the right to object to processing aimed at the legitimate interests of the controller (Article 6(1)(f) RODO).

4.7 Obligation to provide data

Provision of personal data is voluntary, but necessary for the conclusion of the contract, performance of the contract, settlement of the business conducted. Failure to provide personal data will entail the inability to conclude a contract or perform a contract.

5. Information for service providers

5.1 Purpose of processing and legal basis for processing

 

Purpose of processing	Legal basis for processing from Regulation No. of the European Parliament and of the Council (EU) 2016/679 (RODO)	Storage period
Establishment of the legal relationship and performance of the contract	Processing is necessary for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) of the DPA).	until the contract is terminated
Maintenance of accounting and tax records	Processing is necessary to fulfill a legal obligation (Article 6(1)(c) RODO) in conjunction with Article 74 of the Accounting Act.	5 years, counting from the beginning of the year following the fiscal year
Possible establishment, enforcement or defense of claims	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	until the statute of limitations for possible claims

5.2 Recipients of data

The Administrator may transfer your data only to trusted recipients such as state authorities or other entities authorized under the law, in order to perform the obligations incumbent on the Company, providers of IT services, mail hosting, information systems, entities providing postal or courier services, transportation, forwarding, financial, legal advice.

5.3 Data storage time

The Administrator is obliged to keep documents containing personal data for the entire duration of the contract and during the mandatory period of retention of documentation related to the purposes specified above, established in accordance with separate regulations. To the extent that your data will be processed for the realization of the Company’s legitimate interests, your data may be kept by the Company until the statute of limitations for any claims.

5.4 States of law

As the Company processes your personal data, you have the right to: gain access to the content of your personal data, request rectification (if incorrect), deletion or restriction of processing, portability of your personal data (which are processed under contract). If you consider that the Company’s processing of your personal data violates the provisions of RODO, you have the right to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

You have the right to object to processing aimed at the legitimate interests of the controller (Article 6(1)(f) RODO).

5.5 Obligation to provide data

Provision of personal data is voluntary, but necessary for the conclusion of the contract, performance of the contract, settlement of the business conducted. Failure to provide personal data will entail the inability to conclude a contract or perform a contract.

6. Information for correspondents and those using the contact form

6.1 Purpose of processing and legal basis for processing

Purpose of processing	Legal basis for processing from Regulation No. of the European Parliament and of the Council (EU) 2016/679 (RODO)	Storage period
Managing electronic correspondence	Managing electronic correspondence Processing is necessary for the purposes of the administrator’s legitimate interests (Article 6(1)(f) of the RODO – consisting of correspondence in connection with business activities and the resolution of a possible case to which the correspondence relates.	6 years from sending or receiving correspondence
Possible establishment, enforcement or defense of claims	Processing is necessary for purposes arising from the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	until the statute of limitations for possible claims

6.2 Recipients of data

The Administrator may transfer your data only to trusted recipients such as state authorities or other entities authorized under the law, in order to perform the obligations of the Company, IT service providers, mail hosting, IT systems, entities providing postal or courier services, transportation, forwarding, legal and economic consulting (who provide services to the Company). Data is also transferred to companies with personal and capital affiliations.

6.3 Data storage time

Once the communication has ended, we will keep the data to defend against possible claims and to pursue possible claims until the statute of limitations (about 6 years).

6.4 Your rights

As the Company processes your personal data, you have the right to: gain access to the content of your personal data, request rectification (in case it is incorrect), deletion or restriction of processing. If you consider that the Company’s processing of your personal data violates the provisions of the RODO, you have the right to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

You have the right to object to processing aimed at the legitimate interests of the controller (Article 6(1)(f) RODO). Each request for the exercise of Customer Rights will be evaluated and verified by the Company and responded to promptly.

6.5 Obligation to provide data

Provision of personal data is voluntary, while necessary for correspondence. Failure to provide personal data will entail the inability to conduct correspondence.

7. Information for contractor representatives 

7.1 Purpose of processing and legal basis for processing

Purpose of processing	Legal basis for processing from Regulation No. of the European Parliament and of the Council (EU) 2016/679 (RODO)	Storage period
Establish a business relationship with the entity the person represents	Processing is necessary for the purposes of the administrator’s legitimate interests (Article 6(1)(f) RODO) – consisting in the pursuit of sales of services.	until an effective objection / request for deletion is made
Establishment of a legal relationship and execution of a contract with the entity the person represents	Processing is necessary for the purposes of the administrator’s legitimate interests (Article 6(1)(f) RODO) – consisting of the right to enter into contracts.	until the statute of limitations for possible claims
Keeping accounting and tax records if the contract is for a business activity	Processing is necessary to fulfill a legal obligation (Article 6(1)(c) RODO) in conjunction with Article 74 of the Accounting Act.	5 years, counting from the beginning of the year following the fiscal year
Handling complaints, complaints, requests	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Caring for the interests and good image of the Company.	until the statute of limitations for possible claims
Collection of receivables	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the Company’s interests, maintaining liquidity.	pending full settlement
Insurance coverage and claims reporting	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the company’s interests in the event of damage, the right to insurance and claim settlement.	3 years from the date of the accident
Possible establishment, enforcement or defense of claims	Processing is necessary for purposes arising from the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	until the statute of limitations for possible claims

7.2 Recipients of data

The Administrator may transfer your data only to trusted recipients such as state authorities or other entities authorized under the law, in order to perform the Company’s obligations, IT service providers, mail hosting, IT systems, entities providing insurance services, postal or courier services, transportation, forwarding, financial, legal and economic consulting (who provide services to the Company).

7.3 Data storage time

The Administrator is obliged to keep documents containing personal data on which the data of the contractor’s representative appears for the entire duration of the contract and during the mandatory period of retention of documentation related to the purposes specified above, established in accordance with separate regulations. To the extent that the data of the contractor’s representative will be processed for the realization of the Company’s legitimate interests – the establishment, investigation or defense against claims filed in court proceedings, enforcement proceedings, or before other state authorities, the Client’s data may be stored by the Company until the statute of limitations for possible claims.

7.4 Transfer of data to third countries

In the case of execution of an order for international transport services outside the European Union, and if it is necessary for the execution of the terms of the concluded contract, your data (to the extent necessary for the execution of the contract) will be transferred to third countries in which RODO does not apply. In this case, other legal safeguards and appropriate guarantees for the protection of your personal data are applied.

7.5 Your rights

As the Company processes your personal data, you have the right to: gain access to the content of your personal data, request rectification (in case it is incorrect), deletion or restriction of processing, portability of personal data (which the Client has consented to or which is processed under contract). To the extent that the processing of personal data is based on consent, the Customer has the right to withdraw consent at any time without affecting the legality of the processing. If you consider that the Company’s processing of your personal data violates the provisions of the RODO, you have the right to lodge a complaint with a supervisory authority (the President of the Office for Personal Data Protection).

You have the right to object to processing aimed at the legitimate interests of the controller (Article 6(1)(f) RODO). Each request for the exercise of Customer Rights will be evaluated and verified by the Company and responded to promptly.

7.6 Obligation to provide data

Provision of personal data is voluntary, but necessary to establish, shape the content, change or dissolve the legal relationship between the Company and the contractor, implement the agreement between the Company and the contractor, settle the business conducted by the Company. Failure to provide personal data will be associated with the inability to establish, shape the content, change or dissolve the legal relationship between the Company and the contractor, the implementation of the agreement between the Company and the contractor, settlement of business conducted by the Company.

8. Information for shippers and receivers of shipments (participants in the forwarding process)

8.1 Purpose of processing and legal basis for processing

Purpose of processing	Legal basis for processing from Regulation No. of the European Parliament and of the Council (EU) 2016/679 (RODO)	Storage period
Maintenance of shipping records	The processing is necessary for the fulfillment of a legal obligation (Article 6 (1) (c) of the RODO in connection with Article 38 of the Transport Law, Article 6 of the Convention on the Contract for the International Carriage of Goods by Road (CMR) and in connection with the applicable local law for cabotage transport.	5 years, counting from the beginning of the year following the fiscal year
Maintenance of accounting and tax records	Processing is necessary to fulfill a legal obligation (Article 6(1)(c) RODO) in conjunction with Article 74 of the Accounting Act.	5 years, counting from the beginning of the year following the fiscal year
Insurance coverage and claims reporting	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the company’s interests in the event of damage, the right to insurance and claim settlement.	3 years from the date of the accident
Possible establishment, enforcement or defense of claims	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	until the statute of limitations for possible claims

8.2 Source and categories of data

We process only the usual categories of data (address, contact) that come from those involved in the transportation service: our principals.

8.3 Recipients of data

The Administrator may transfer your data only to trusted recipients such as state authorities or other entities authorized by law to perform the obligations of the Company, providers of IT services, mail hosting, information systems, entities providing insurance services, postal or courier services, transportation, forwarding, financial, legal and economic consulting (who provide services to the Company). Data is also transferred to the shipper and receiver of outsourced transportation, as well as personal and capital related companies.

8.4 Data storage time

The Administrator is obliged to keep documents containing personal data for the mandatory period of retention of documentation related to the purposes specified above, established in accordance with separate regulations. To the extent that your data will be processed for the realization of the company’s legitimate interests, your data may be kept by the Company until the statute of limitations for possible claims.

8.5 Transfer of data to third countries

In the case of an order for international transport services outside the European Union, your data (to the extent necessary for the execution of the order) will be transferred to third countries where RODO does not apply. In this case, other legal safeguards and appropriate guarantees for the protection of your personal data are applied.

8.6Your rights

As the Company processes your personal data, you have the right to: gain access to the content of your personal data, request rectification (if incorrect), deletion or restriction of processing, portability of your personal data (which is processed under contract). If you consider that the Company’s processing of your personal data violates the provisions of RODO, you have the right to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

You have the right to object to processing aimed at the legitimate interests of the controller (Article 6(1)(f) RODO).

8.7 Obligation to provide data

Provision of personal data is voluntary, but necessary for the conclusion of the contract, performance of the contract, settlement of the business conducted. Failure to provide personal data will entail the inability to conclude a contract or perform a contract.

9. Information for drivers involved in the shipping process

9.1 Purpose of processing and legal basis for processing

Purpose of processing	Legal basis for processing from Regulation No. of the European Parliament and of the Council (EU) 2016/679 (RODO)	Storage period
Organization of transport – advising, identification of the driver at the place of pickup and delivery of the load.	Processing is necessary for the purposes of legitimate interests pursued by the administrator or a third party (principal, shipper, consignee) (Article 6(1)(f) of the DPA) – Improving the performance of the forwarding service, preventing damage and ensuring the safety of the entrusted property.	until the statute of limitations for possible claims
Insurance coverage and damage reporting in the event of a claim	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) of the DPA) – Taking care of the company’s interests in the event of damage, the right to insurance and claim settlement.	3 years from the date of the accident
Possible establishment, enforcement or defense of claims	Processing is necessary for the purposes of the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	until the statute of limitations for possible claims

9.2 Source and categories of data

We process only the usual categories of data (name, ID card no., pesel, phone no.) from entities involved in the transportation service: Your employer, the carrier contracting you to perform the service, and from affiliated companies and companies with personal and capital ties.

9.3 Recipients of data

The Administrator may transfer your data only to trusted recipients such as state authorities or other entities authorized under the law, in order to perform the obligations of the Company, providers of IT services, mail hosting, information systems, entities providing insurance services, postal or courier services, transportation, freight forwarders, entities operating transshipment hubs, entities operating cargo release and pickup points, entities of legal counsel (who provide services to the Company). Data is also transferred to the shipper and consignee of outsourced transportation, as well as to affiliated companies.

9.4 Data storage time

The Administrator is obliged to keep documents containing personal data for the mandatory period of retention of documentation related to the purposes specified above, established in accordance with separate regulations. To the extent that your data will be processed for the realization of the company’s legitimate interests, your data may be kept by the Company until the statute of limitations for possible claims.

9.5 Transfer of data to third countries

In the case of an order for international transport services outside the European Union, your data (to the extent necessary for the execution of the order) will be transferred to third countries where RODO does not apply. In this case, other legal safeguards and appropriate guarantees for the protection of your personal data are applied.

9.6 Your rights

As the Company processes your personal data, you have the right to: gain access to the content of your personal data, request rectification (if incorrect), deletion or restriction of processing, portability of your personal data (which is processed under contract). If you consider that the Company’s processing of your personal data violates the provisions of RODO, you have the right to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

You have the right to object to processing aimed at the legitimate interests of the controller (Article 6(1)(f) RODO).

10. Information for job applicants

10.1 Consent to data processing

By clicking “Apply”, “Apply now” or otherwise sending a recruitment application to the Company*, you consent to the processing of the personal data you provide for the purpose of the recruitment process for the position for which you are applying.

If you wish your personal data to be used by the Company also for FUTURE RECRUITMENT PROCESSES, please include the following clause in your resume: “I consent to the processing of my personal data contained in the recruitment application for the purposes of future recruitment processes conducted by ABC Czepczynski.”

10.2 Information about the processing of your personal data

10.2.1 Purposes, legal basis, data storage period

 

Purpose of processing	Scope of data	Legal basis for processing from Regulation No. of the European Parliament and of the Council (EU) 2016/679 (RODO)	Storage period
Conducting the recruitment process for the position you are applying for	The scope of data provided for in Article 22 of the Act of June 26, 1974, Labor Code (Journal of Laws 2018, item 917, as amended) and §1 of the Regulation of the Minister of Labor and Social Policy of May 28, 1996 on the scope of employers’ record-keeping in matters related to the employment relationship and the manner of keeping employee personnel files (Journal of Laws 2017, item 894, as amended);	Processing is necessary for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) of the DPA).	Until objection / request for deletion / 6 months from the end of the recruitment process
	Other data provided by you, including contact information.	The legal basis for data processing will be your consent (Article 6(1)(a) RODO).	Until withdrawal of consent / 6 months from the end of the recruitment process
Conducting future recruitment, provided that you have given your consent to the processing of personal data for this purpose	All data provided by you, including contact information.	The legal basis for data processing will be your consent (Article 6(1)(a) RODO).	Until you withdraw your consent, not more than one year
Possible establishment, enforcement or defense of claims	After deletion of application documents: Name, recruiter’s notes, relationship history: dates of scheduled meetings and interviews held.	Processing is necessary for purposes arising from the legitimate interests of the administrator (Article 6(1)(f) RODO) – Establishing, investigating, or defending against claims made as part of actions taken prior to the initiation of proceedings, in court proceedings, enforcement proceedings, or before other state authorities.	Until the statute of limitations for possible claims, not more than 3 years.

The Company will process your personal data to the extent indicated in the labor legislation in order to carry out the recruitment process for the position for which you are applying (Article 6(1)(b) of the DPA), while additional data including contact details on the basis of consent (Article 6(1)(a) of the DPA), which may be revoked at any time. Submitted application documents will be deleted 6 months after the end of the recruitment process. If you consent to the processing of your personal data for future recruitment, your data will be processed until you withdraw your consent, no longer than one year after the end of the recruitment process. The Company will process your personal data to a minimized extent for the purpose of possibly establishing, investigating or defending against claims (Article 6(1)(f) of the DPA) for the period of the statute of limitations for possible claims, but no longer than 3 years, unless the Company receives information about the claims within this period.

10.2.2 Data recipients.

Data will be shared with: the law firm providing legal services and entrusted to IT and hosting service providers

10.2.3 Your rights

You have the right to access the content of your personal data, to request rectification, erasure, restriction of processing, to object to processing, to object to the transfer of personal data (for which you have given your consent). To the extent that the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing performed before its withdrawal. If you consider that the Company’s processing of your personal data violates the provisions of the RODO, you have the right to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).

Provision of personal data within the scope of the provisions of the Labor Code and regulatory acts is necessary for the recruitment process and has been prescribed by law. Failure to provide this data will entail the inability to consider your candidacy in the ongoing recruitment process. Provision of additional personal data is voluntary.

You may easily withdraw your consent at any time. To do so, please send an e-mail to rodo@abc-czepczynski.pl

11. Information on video surveillance (20 Wigury Street, 64-400 Miedzychód).

The administrator of the video surveillance system installed at 20 Wigury Street, 64-400 Międzychód and the processed personal data is ABC-CZEPCZYŃSKI Sp. z o.o. sp. k. The video surveillance is conducted on the basis of Article 6(1)(f) RODO – the administrator’s legitimate interest – in order to ensure security and protect property.

Video surveillance covers the following areas:
– the premises of the workplace at 20 Wigury Street, including, including the premises: corridors and staircase,
– the area including the sidewalk along and parts of the streets along the areas where the Company’s building is located,
– parking area on the Company’s premises;
– entrances to the Company’s building;

For matters concerning the processing of personal data derived from the monitoring, you may contact the Data Protection Officer via the address: rodo @abc-czepczynski.pl.

Your data recorded by means of video surveillance, in justified cases, may be made available to the insurance company, the injured person and employees of state authorities in connection with the investigation.

The person whose data is contained in the materials obtained from video surveillance has the right to access the content of personal data, request their deletion or restrict their processing (protection against overwriting).

Your personal data is stored for a period not exceeding 5 days. After this period, the recordings are overwritten and it will not be possible to carry out a request to view or obtain a copy of the recording. In justified cases, the recordings may be kept longer for the purpose of possible establishment, investigation or defense against claims (Article 6(1)(f) of the RODO), i.e. for the period of the statute of limitations for possible claims, the duration of judicial or administrative proceedings.

The data subject has the right to object to the processing at any time. Any request for the exercise of Rights will be evaluated and verified by the Administrator and answered promptly.

If you consider that the processing of your personal data violates the provisions of RODO, you have the right to lodge a complaint to the supervisory authority (President of the Office for Personal Data Protection).