Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as: GDPR, we inform you that:
The Controller of your personal data is SPARK CONTROL Spółka z ograniczoną odpowiedzialnością (Limited Liability Company) entered into the Register of Entrepreneurs kept by the District Court in Olsztyn, 8th Commercial Division of the National Court Register under KRS number: 0000727628, NIP: 7393913556, REGON: 36996764400000, with the place of business and correspondence address: 10-408 Olsztyn, ul. Lubelska 37E (Data Controller – DC)
Your personal data will be processed for the purpose of:
- Marketing of DC’s own products and services (Article 6(1)(f) of the GDPR – our legitimate interest is to inform about our commercial offer),
- Pursuing our legitimate interest consisting of possible determination or pursuit of claims or defense against claims (the legal basis for processing is Article 6(1)(f) of the GDPR),
- Telephone contact in order to handle your inquiry,
- Providing commercial information via electronic communication means sent by spark.pm and using electronic communication for marketing purposes.
Your personal data will be stored for the period necessary to fulfill the purpose for which you have given your consent, with regular evaluations of their relevance, no longer than 6 years from the date of their collection. In particular, they will be processed for the duration of the offer’s validity or contract duration, but not longer than the contract duration, and in the case of given consent – until the consent is withdrawn. To the extent that the data is processed for the purpose of marketing content delivery, it will be processed until consent is withdrawn or an objection is raised to such processing. The data processing period may each time be extended by the period of limitation of claims if the processing of personal data is necessary for the establishment or defense of claims by the DC. After this period, the data will be processed only to the extent and for the time required by law, including tax and accounting regulations.
Your data will not be transferred to other entities except for: DC’s IT system and IT service providers, entities providing services necessary to perform the contract concluded with you, including legal services, postal and courier operators, banks in the scope of payment processing, certain regulated professionals such as lawyers.
You have the right to: access your personal data, including requesting a copy and rectification, deletion (the right to be forgotten), restriction of processing, the right to data portability to another controller, the right to object to the processing of personal data, including profiling and for direct marketing purposes, to withdraw consent when your personal data is processed based on consent, at any time and in any form, without affecting the lawfulness of processing carried out based on consent before its withdrawal.
You have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of personal data violates the provisions of the GDPR.
You have the right to object to the processing of personal data for the purpose of marketing content delivery. Furthermore, regarding the processing of personal data for purposes resulting from the DC’s legitimate interest, you have the right to object for reasons related to your particular situation.
Providing your personal data is voluntary but necessary to place and fulfill an order or conclude a sales contract.
Your personal data will not be subject to profiling.