INFORMATION REGARDING DATA PROCESSING AUTO PODLASIE SP. Z O.O.
Pursuant to Art. 13 section 1 and section 2 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation , hereinafter referred to as „GDPR”), we would like to inform you that:
I. Designation of the administrator
1. The administrator of your personal data is Auto Podlasie Sp. z o. o., 08-110 Siedlce, street Terespolska 14.
2. In matters related to the protection of personal data, you can contact the Data Protection Inspector at the e-mail address iod@autopodlasie.pl and in writing to the address of the administrator’s registered office with the note „Data Protection Inspector”.
II. Purposes and legal basis for the processing of your personal data
Your personal data will be processed in order to provide comprehensive services related to the offering, sale and after-sales service of vehicles and other products, provision of maintenance services and fulfillment of legal obligations imposed on the administrator.
Depending on the purpose of processing, the legal basis for processing your data will be:
1. activities aimed at concluding and performing the concluded contract (Article 6(1)(b) of the GDPR);
2. documenting the service or contract provided for accounting purposes and fulfilling tax obligations (Article 6(1)(c) of the GDPR) – fulfillment of the legal obligation imposed on the administrator;
3. in connection with the provisions on product liability (Article 6(1)(c) of the GDPR) – fulfillment of the legal obligation of the administrator;
4. after-sales service (Article 6(1)(f) of the GDPR) – legitimate interest of the administrator;
5. handling customer requests and rights (Article 6(1)(f) of the GDPR) – legitimate interest of the administrator;
6. implementation of the legitimate interest of the data controller (Article 6(1)(f) of the GDPR), in particular in relation to post-sale research and processing for the purposes of determining, pursuing or defending against claims.
III. Information about the recipients of your personal data
Depending on the purposes of data processing, the scope of data will include only those whose processing is necessary to achieve the purposes.
Your data may be entrusted for processing to other entities providing services to the administrator. This applies in particular to companies providing IT services and customer service services, which are provided for and on behalf of the administrator. Each time, processing entities are bound by an entrustment agreement with the administrator, obliging the processing entity to properly protect your personal data and maintain secrecy.
Your personal data may be transferred to companies cooperating in the field of IT services, banking and accounting services, archiving services, market research and other services provided to the administrator indicated above, as well as companies supporting the organization and implementation of events.
IV. The period of processing your personal data
Your personal data are processed for the period necessary to achieve the purposes indicated in point II or the period indicated in the law.
Your data is processed:
1. For the period necessary to perform the contract/implementation or warranty and pursue or defend related claims, i.e. for a period of 10 years or until the claims expire;
2. In order to implement recall actions or other obligations arising from product safety – for a period of 10 years;
3. if the legal basis for processing is the legitimate interest of the administrator – until you object to the processing, subject to the need to process data until the end of the period necessary to establish, pursue or defend claims;
V. Rights of the data subject
We obtain data directly from you, as well as from other administrators, from documents, websites (cookies), and in the case of entities conducting business activities, also from public CEIDG and KRS registers.
You have the right to:
− access to your personal data,
− rectification of your personal data,
− deletion of your personal data (“right to be forgotten”)
− restrictions on the processing of your personal data,
− withdrawal of consent to the processing of personal data – if you have previously expressed such consent and the processing of your data is based on it,
− transferring your personal data,
− object to the processing of your personal data for related reasons
with your particular situation, in accordance with Art. 21 GDPR,
− objection to profiling,
− notwithstanding the above, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection, when you consider that
that the processing of your personal data violates the provisions of the GDPR.
Your personal data will not be processed in an automated manner (including in the form of profiling) in such a way that as a result of such automated processing any decisions could be made, other legal effects would be caused or it would otherwise significantly affect you. Your permissions.
Pursuant to Art. 21 section 4 GDPR, we would like to inform you that you have the right to object to the processing of your personal data. The objection should be submitted to the data protection officer whose contact details are indicated above. Pursuant to Art. 21 section 1 GDPR, when submitting an objection, you must indicate the reasons related to your particular situation.
Data Protection Inspector at Auto Podlasie Sp. z o. o. Paweł Kramarz was appointed. He can be contacted at the following e-mail address: iod@autopodlasie.pl