GDPR

Pursuant to Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union of 2016, L 119, item 1), we hereby inform you that:

1. The Controller of your personal data is: BrasiT, ul. Lubelska 46, 24-170 Kurów (hereinafter: BrasiT).
2. The Controller processes your personal data within a strictly defined, minimum scope necessary for the conclusion, proper performance, termination or undertaking of other activities necessary for the execution of concluded agreements, or for fulfilling obligations arising from legal regulations.
3. The legal basis for the processing of your personal data obtained by BrasiT is a service agreement, as well as a cooperation agreement related to BrasiT’s business activity. The legal basis for the processing of personal data also includes the legitimate interests pursued by BrasiT. In cases where the basis for data processing is consent, BrasiT informs that consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal of consent.
4. The purpose for which BrasiT processes personal data is the conclusion and performance of agreements related to BrasiT’s business activity. The purpose of processing also includes, among others, the implementation of legally justified interests pursued by BrasiT. Furthermore, the purpose of personal data processing by BrasiT includes: - pursuing potential claims related to damage suffered by BrasiT caused by the person whose data is being processed, as well as other matters pursued amicably or through court proceedings, - documenting the performance of agreements for tax purposes, - ensuring the highest quality of agreements.
5. In specific situations, the Controller may transfer/entrust your data to other entities. The basis for transferring data are legal regulations. BrasiT transfers personal data to the following categories of entities: - judicial authorities, - tax administration authorities and entities related to the operation of the social sphere (e.g. ZUS, PFRON), - institutions related to the operation of broadly understood European Union funds, - companies providing support services to BrasiT and supplying IT software, - law firms providing legal advisory and litigation services, - authorized institutions and supervisory authorities.
6. The basis for entrusting data are properly structured data processing entrustment agreements ensuring the security of personal data (e.g. with entities from the ICT and telecommunications sector, data processing entities).
7. Personal data processed by BrasiT shall be stored for the period necessary to achieve the purpose for which they were collected and in accordance with archiving periods specified by currently applicable legal regulations. In particular, personal data: - obtained in connection with a concluded agreement shall be processed by BrasiT for the limitation period of tax claims or civil law claims of the person whose data is processed, depending on which of these events occurs later, - obtained in connection with the implementation of BrasiT’s legitimate interest shall be processed for the period required by law, - obtained in connection with the implementation of other purposes shall be processed for the time necessary to achieve the purpose.
8. Every person whose data is processed by BrasiT - subject to exceptions provided by law - has the right to access their personal data stored in BrasiT’s database and to rectify, erase, restrict processing thereof, as well as the right to object to their processing. Access to data is possible at BrasiT’s registered office. BrasiT provides the e-mail address info@brasit.pl through which contact regarding personal data matters may be established.
9. Depending on the area in which personal data is processed by BrasiT, providing personal data is a statutory or contractual requirement. In specific cases, providing such data is a condition for concluding an agreement. Detailed information regarding the basis for collecting personal data and the possible obligation or voluntary nature of providing them, as well as the potential consequences of failing to provide data, shall be communicated to you by the relevant BrasiT departments.
10. Every person whose data is processed by BrasiT has the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
11. BrasiT does not make automated decisions based on personal data, including profiling.