Based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinunder: "GDPR") we wish to advise you of the following:

 

[Data Controller and his contact details]

1. Your Data Controller is GTC AMG sp. z o.o. having its registered address in Warsaw, ul. Rolna 155A, 02-729 Warszawa, Company Register Number KRS 0000141779, with the company registration files kept by the Warsaw District Court, 13th Business Section of the National Court Register, with the Authorised Share Capital of PLN 125,000.00, Tax Identification Number (NIP) 1180114897, Statistical Identification Number (REGON) 011675790 (hereinunder: 'Data Controller').
2. The Data Controller’s contact details
   (a) postal address - ul.Rolna 155A, 02-729 Warszawa or
   (b) e-mail address - office@inveni.re or
   (c) telephone number - +48 22 241 16 24.
3. The Data Controller designed a Data Protection Officer, who is available for any queries concerning the protection of your personal data. The Data Protection Officer’s contact details:
   (a) postal address - ul.Rolna 155A, 02-729 Warszawa or
   (b) e-mail address - office@inveni.re or
   (c) telephone number - +48 22 241 16 24.

[Purpose and legal basis for processing personal data]

4. Your personal data will be processed for the following purpose:
   (a) execution and implementation of an agreement between yourself and the Data Controller - under the GDPR art. 6.1(b), i.e. the processing is necessary for the performance of the agreement, involving the following data: your first name(s) and your last name, your contact details as indicated by yourself, your education profile, your professional qualifications and your professional track record to date;
   (b) the Data Controller’s compliance with his statutory obligations under Social Security Law – under the GDPR art. 6.1(c), i.e. the processing is necessary for compliance with a legal obligation to which the Data Controller is subject under Social Security Law;
   (c) executing tax payments and returns, and keeping accounting records - under the GDPR art. 6.1(c), i.e. the processing is necessary for compliance with a legal obligation to which the Data Controller is subject under Tax and Accounting Law;
   (d) establishment, exercise or defence of claims between yourself and the Data Controller - under the GDPR art. 6.1(f), i.e. for the purposes of a legitimate interest pursued by the Data Controller, this legitimate interest being the capacity to establish, exercise or defend claims;
   (e) in every case of request for consent - under the GDPR art. 6.1(a), i.e. based on your voluntary consent;
5. You are free to decide whether you should provide your personal data insofar as they are necessary to execute and implement the agreement between you and the Data Controller. However, providing such data is indispensable for the execution and implementation of such an agreement, i.e. failure to provide such data makes the execution and implementation of such an agreement impossible between yourself and the Data Controller. You are free to decide whether you should provide other data based on our request for consent. Please note that such other data are not indispensable for the execution or implementation of the agreement.
6. No automated decisions shall be applied to you, including by profiling.

[Categories of data receipients]

7. Your personal data may be disclosed to the following recipients: Data Controller’s customers and business partners, suppliers of IT services, consultants, lawyers, banks.
8. Your personal data may be disclosed to recipients authorised to process such data in accordance with rules of law, including, but not limited to Tax Authorities, Social Security Authority, National Labour Inspection, National Sanitary Inspection, courts of law, bailiffs, the Police.
9. The Data Controller does not intend to transfer your personal data to any country outside the European Economic Area or to any international organisation.
10. Your personal data will be processed only for as long as they are needed for the purposes of processing (see point 3), or until an objection is lodged (insofar as the basis for processing is the Data Controller’s legitimate interest), or until your consent is withdrawn (insofar as the processing is based on consent), whichever is the earliest.
11. After that date, the Data Controller will store such data until the claims fall under the statute of limitations or the data storage obligation expires in accordance with the applicable law (e.g. Tax Law or Social Security Law), whichever is the latest.

[Rights]

12. You have the right of access to your personal data, as well as the right to obtain their rectification, erasure or processing restriction.
13. You have the right to transfer your personal data, i.e. the right to obtain from the Data Controller your personal data which you have provided to the Data Controller in a structured, commonly used and machine-readable format. You may request the Data Controller to transmit such data to another data controller.
14. Insofar as the processing of your personal data is based on consent you have the right to withdraw such a consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
15. Insofar as the processing of your personal data is based on the Data Controller’s legitimate interest you have the right to object against the processing of your personal data.
16. To exercise one of the above rights you should contact the Data Controller using the aforementioned contact details (the aforementioned contact details - see point 2).
17. If you believe that any data are processed in breach of the GDPR you also have the rigth to lodge a complaint with the Supervisory Authority in charge of the Personal Data Protection (Chairman of the Personal Data Protection Office). For information on how to lodge such a complaint please click on the following link https://uodo.gov.pl/pl/83/155