INFORMATION CLAUSE – INFORMATION CLAUSE – GDPR

D.R.E. Sp. z o.o., with its registered office in Gronowo Górne, 82-300 Elbląg, ul. Nefrytowa 4, as the controller of your personal data acting in compliance with the General Data Protection Regulation (GDPR), processes personal data solely for lawful purposes. Our aim is also to duly inform you about matters related to the processing of personal data. You may contact us at ochrona.danych@dre.pl or by telephone at +48 55 236 42 58.

We process the personal data of our customers as well as contractors because this is necessary for the purpose of performing a contract and for the purposes of legal provisions requiring us to process personal data for tax and accounting purposes.

The legal basis for processing is also the proper and best possible performance of the concluded contract, as well as obligations arising from legal provisions (e.g. tax law or accounting regulations), and the legitimate interest of the controller for the purposes of defending against potential claims or for the purposes of pursuing claims.

The period for which we process personal data depends on the legal basis constituting the lawful premise for the processing of personal data by D.R.E. Sp. z o.o. The period of personal data processing also results from the performance of contracts concluded between D.R.E. Sp. z o.o. and our customers or contractors.

Where D.R.E. Sp. z o.o. processes personal data on the basis of the legitimate interest of the data controller, the processing period lasts until the aforementioned interest ceases (e.g. the limitation period for civil-law claims) or until the person whose data is concerned objects to such further processing – in situations where such objection is granted under the law.

Where D.R.E. Sp. z o.o. processes personal data because this is necessary due to applicable legal provisions, the periods of data processing for this purpose are specified by those provisions.

Recipients of the personal data which D.R.E. Sp. z o.o. processes as the controller of personal data may be:

• entities processing personal data under personal data processing agreements,
• entities providing hosting services,
• entities carrying out marketing or sales campaigns on behalf of D.R.E. Sp. z o.o.,
• other subcontractors of D.R.E. Sp. z o.o. providing services in the scope of software delivery, software or hardware maintenance services used by D.R.E. Sp. z o.o., as well as suppliers of goods and services whose assistance we use,
• debt collection companies,
• auditors and statutory auditors, legal advisers, tax advisers,
• administration authorities within administrative proceedings.

Each natural person whose personal data we process is entitled to the following rights:

• the right of access to data,
• the right to rectification of their data,
• the right to withdraw consent without affecting the processing of data prior to its withdrawal,
• the right to restriction of processing,
• the right to restriction of processing,
• the right to erasure of personal data,
• the right to data portability.

The above rights of the person shall be exercised after consideration of all premises and obligations incumbent on D.R.E. Sp. z o.o., as well as after positive verification of the identity of the person who requests the exercise of their rights.

Personal data shall not be subject to automated processing, including profiling.

In connection with the processing of personal data, each person has the right to lodge a complaint with the supervisory authority.