Information on the rights of natural persons under the GDPR provisions
Right of access to the data
You have the right to request access to your personal data, including, in particular, information about whether we process your personal data, the scope of data held by us, the purposes of data processing or categories of recipients of your data, if possible, the planned duration of data retention, your rights regarding personal data, and information about the sources of their collection in the event that they have not been collected from you. You also have the right to obtain a copy of the data.
Right to rectification
If your personal data held by us are incorrect or inaccurate, you have the right to request their rectification.
Right to erasure (right to be forgotten)
You have the right to request the erasure of your data in one of the following circumstances:
1. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
2. you have raised an effective objection to the processing;
3. the personal data have been unlawfully processed;
4. personal data must be erased in order to comply with a legal obligation;
5. you have revoked your consent to the processing of your personal data, and your personal data have been processed on the basis of your consent and there is no other legal basis for their processing.
However, you will not be able to exercise your right to erasure, inter alia, if such data are necessary to establish or assert claims or defend against claims or if the processing is based on the provisions of applicable law.
Right to restriction of processing
1. if you question the correctness of your personal data – for a period making it possible to verify the correctness of the data;
2. the processing is unlawful and you oppose the erasure of the personal data demanding the restriction of their use instead;
3. we no longer need your personal data, but you need them to establish, assert or defend against claims;
4. in the event that you raise an objection – until it has been determined whether the legitimate grounds on our part override the grounds for your objection.
Right to data portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and you have the right to send such personal data to another controller if:
1. the processing takes place on the basis of your consent or on the basis of a contract with you, and
2. at the same time, the processing is carried out by automated means.
You also have the right to request at the same time that your personal data be sent directly to another data controller, if technically possible.
Right to object to data processing
You have the right to object – on grounds relating to your particular situation – at any time to the processing of your personal data if the legal basis for the processing is a legitimate interest of the Controller.
As a result of your objection, we will stop processing your personal data unless we can prove that there are compelling legitimate grounds for processing which override your interests, rights and freedoms or grounds for establishing, asserting or defending against claims.
If personal data are processed for the purposes of direct marketing, you may object at any time to such processing, including profiling, without having to demonstrate any grounds relating to your particular situation.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that we are processing your personal data in violation of the law. All the necessary information can be found on www.uodo.gov.pl.