In this personal data protection policy we would like to provide you with detailed information concerning: the type of data we collect, for what purpose and how we use them, who we are and what are your rights. This policy aims at providing you with the information referred to in Article 13 section 1 & 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 r. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as „GDPR” which has been effective since 25 May, 2018. The information presented below is very important, therefore we ask you to read it carefully.
Who is the controller of your data and contact details:
NEWAG S.A. is the controller, i.e., an entity which decides how your personal data will be used. Newag S.A. is a company registered under KRS 0000066315 in the Entrepreneurs’ Register by Sąd Rejonowy [District Court] in Kraków, XII Business Division of the National Court Register, NIP [Tax Number] 7340009400, REGON [Corporate Number] 490490757, Share and paid-in capital PLN 11,250,000.25 (hereinafter “We”)
You can contact us:
The data protection officer and contact details:
We have appointed the data protection officer to whom you can address any questions or requests in all matters related to personal data. You can do it:
Detailed information about use of your personal data, your rights and conditions of their use is also available at www.newag.pl
What are the purposes of processing your personal data and on what legal basis do we process your personal data ?
We use your personal data obtained prior to entering into a contract and in the duration of the contract for the following purposes:
Do you have to give us your personal data?
Providing your personal data is voluntary. We need you to provide personal data which are necessary to enter into and perform a contract, with regard to each transaction. If we do not receive the necessary personal data, unfortunately, we will not be able to enter into a contract with you, and consequently, to start collaborating with you. If we are so required by the provisions of the law, we may need to require from you to provide other necessary data e.g., for tax purposes.
Who can we release your data to?
1) to our employees and associates who must have access to the data in order to perform our obligations;
2) to entities processing data on our behalf which participate in performing of our tasks:
3) to other data controllers processing data on their own behalf:
4) to public authorities e.g., courts, prosecutors, tax authorities.
How long can we store your data?
In transactions connected with performance of a contract – for the duration of the contract and for the time as long as it is possible to enforce claims arising out of contract performance, entered into as a result of the transaction, from the date these transactions were done or until the date when the court judgment becomes final and absolute.
Regarding compliance with provisions of the law, your personal data will be stored for the periods set forth in applicable laws e.g., tax laws.
In the period during which we can be liable for non-compliance with an obligation, we will store your data for the duration of this period.
What are your rights?
You have the following rights resulting from our processing of your personal data:
You can exercise the above listed rights at any time by making an appropriate request. You can send requests concerning the above-described situations to our data protection officer using the contact information provided above.
We have an obligation to inform you on steps undertaken due to your request without undue delay but in any case within one month of receipt of your request.
When necessary, the above period may be extended by two further months due to complexity and the number of requests received. However, we must notify you of such extension within one month providing reasons for the delay.
If we do not undertake any action on your request then we will immediately, without undue delay and in any event within one month of receipt of your request, notify you of the reasons for not undertaking any action and of the possibility to lodge a complaint to Prezes Urzędu Ochrony Danych Osobowych [Chair of the Personal Data Protection Office] as well as of seeking a judicial remedy before courts.
We will provide you with the information referred to above in writing by, upon our discretion,:
All communication and actions undertaken by us related to your request as set forth above are free of charge. However, if your demands are manifestly unfounded or excessive e.g., because of their repetitive character, we may:
We shall inform each recipient of your personal data of the rectification or supplementing or removing or restricting processing of your personal data which we implemented upon your request. We will not be obligated to provide such information only when it proved impossible (e.g., the company was closed down) or if it involved excessive effort (the data was revealed a long time ago and we were unable to contact the recipient despite numerous attempts to do so.) When requested by you, we will inform you about the recipients which we notified of the rectification or erasure or restriction on processing of your personal data as well as of the recipients which we were unable to notify.
Your personal data will not be transferred to any third country or any international organisation.
Your personal data will not be subject to profiling or any automated decision-making.