GDPR policy

GDPR POLICY OF
AIR TECH BUD Sp. z o.o.

This GDPR Policy defines:

1. Who is the Controller of your personal data?
2. How can you contact us as the Controller of your personal data?
3. What are the goals, basics, period of processing of your personal data and who are their recipients, if you are:
3.1. our (potential) contractor or employee of our (potential) contractor;
3.2. in contact with us on a different matter;
3.3. participant of our employee recruitments.
4. Do we process other types of data?
4.1. Where can you find information on how we process data related to conclusion and performance of the agreement?
4.2. Do we process other types of data?
5. Do we transfer your data outside the EEA?
6. What are your rights regarding the processing of your personal data by us?
6.1. What are the exact rights you are entitled to?
6.2. How to exercise them?

1. DATA CONTROLLER

The Controller of your data is:

AIR TECH BUD Sp. z o.o.

with its registered office in Bochnia (address: Partyzantow Street No. 26, 32-700 Bochnia), entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Cracow - Srodmiescie in Cracow, XII Commercial Division of the National Court Register under KRS number: 0000171626, holding NIP number: 8681003706 and REGON number: 850364907 .

2. CONTACT WITH THE CONTROLLER

You can contact us on all matters related to the processing of your personal data, as follows:

2.1. by e-mail to the following address: rodo@airtechbud.pl
2.2. by traditional mail to the following address: Partyzantow Street No. 26, 32-700 Bochnia, POLAND

3. DATA PROCESSED BY AIR TECH BUD Sp. z o.o.

In this GDPR Policy, we included information about the processing of personal data as part of:

3.1. SUPPORT OF CONTACT WITH OUR (POTENTIAL) CONTRACTORS AND STAFF OF OUR (POTENTIAL) CONTRACTORS

3.1.1. Purposes for processing your personal data

If you are our (potential) contractor or contact person from our (potential) contractor, your personal data will be processed by us in order to contact you on current issues, in particular to respond to your inquiries and possibly to continue contact, accept and present offers, conduct negotiations, as well as conclude and perform agreements between us and you or your employer/entity who you represent and maintain relations with them.

3.1.2. Legal grounds for processing of your personal data

If you are our potential contractor, the ground for processing of your personal data is the performance of the agreement or taking steps aimed at its conclusion (art. 6 par. 1 let. b of the GDPR).

If you are an employee or associate of our (potential) contractor, designated for contact, then the legal ground for processing of your personal data is our legitimate interest (art. 6 par. 1 let. f of the GDPR), consisting in the maintenance of relations and contacting our contractors.

3.1.3. Source of acquisition of your personal data

We may acquire your personal data if:
you provided your personal data to us;
data was provided in a publicly available source, in particular on the website of your company or the company of your employer/entity you represent;
your employer/entity you represent as our (potential) contractor provided it to us, indicating you as a contact person on his/her part.

If you are an employee or associate of our (potential) contractor designated for contact, we process your personal data only for contact with you and we do not process other data than your name, surname, position, telephone number and e-mail address.

If you are our (potential) contractor and we take steps aimed at conclusion of the agreement, then we process your data necessary to conclude a future agreement, i.e. business address, correspondence address, NIP number and REGON number. Other data may be processed by us only if we obtain it from you.

The provision of your personal data is voluntary, but we only collect the data we need, so without it we will not have the technical possibility to contact you or conclude the agreement with you or your employer/entity you represent.

3.1.4. Storage period of your personal data

We will process your personal data for the duration of ongoing communication - answering questions and possible further communication, preparation of offers, exchanging further correspondence, etc. After this period, as well as in the case of conclusion of the agreement with you or your employer/entity you represent, your data may be processed until the limitation of possible claims.

In terms of data processed by us on the basis of a legitimate interest, the data may be deleted earlier if you object to its processing.

3.1.5. Recipients of your data

We will only share your personal data with entities with whom we cooperate in the conduct of our activities (service providers), in particular, providers of accounting, legal, IT, hosting, etc. services.

3.2. SUPPORT OF CONTACT/CORRESPONDENCE IN OTHER MATTERS

3.2.1. Purposes of processing of your personal data

If you contact us or we contact you on other matters than in order to cooperate with us as our contractor or contact person from our contractor, your personal data will be processed by us only to settle the matter related to contact.

3.2.2. Legal grounds for processing of your personal data

The legal ground for processing of your personal data is our legitimate interest (art. 6 par. 1 let. f of the GDPR) consisting in servicing correspondence addressed to us and settling current matters, e.g. official matters, etc. related to our economic activities.

We process your personal data only if:
you provided it to us,
you made it publicly available or through your employer/entity you represent.

If you provide us with your data, then its provision is voluntary, but without it we will not have the technical possibility to contact you and settle the matter you addressed to us.

3.2.3. Storage period of your personal data

We will process your personal data for the duration of ongoing communication - answering questions and possible further communication. After this period, your data may be processed until the limitation of possible claims.

Your data may be deleted earlier if you object to its processing.

3.2.4. Recipients of your data

We will only share your personal data with entities with whom we cooperate in the conduct of our activities (service providers), in particular, providers of accounting, legal, IT, hosting, etc. services.

3.3. CONDUCTING RECRUITMENT

3.3.1. Purposes of processing of your personal data

If you intend to submit your candidacy to work with us, remember that it is sufficient for us to provide data specified in the labor law. If your provide us with other data not required by us, we acknowledge that you agree to its processing. You can withdraw your consent at any time, but this does not affect the lawfulness of data processing prior to the withdrawal of consent.

As part of the recruitment, we process personal data to assess your qualifications and experience for work at the position you are applying for, contact you to arrange meetings, conduct job interviews, negotiate the future agreement and take a decision about your employment.

If you agree to this by sending your application, your data may also be processed by us for future recruitments, until your consent is withdrawn.

3.3.2. Legal grounds for processing of your personal data

Your personal data is processed:

3.3.2.1. in terms of data listed in art. 221 of the Labor Code, on the basis of the legal obligation incumbent on us as the controller (art. 6 par. 1 let. c of the GDPR in conjunction with art. 221 of the Labor Code);
3.3.2.2. in terms of data not required by law and to take into account your candidacy in future recruitments, on the basis of your consent (art. 6 par. 1 let. a of the GDPR);

Personal data you provide to us may also be processed on the basis of our legitimate interest (art. 6 par. 1 let. f of the GDPR), consisting of:

3.3.2.3. pursuing possible claims or defense against such claims;
3.3.2.4. processing of your personal data provided by you during the job interview, in order to verify your qualifications and skills at the position you are applying for.

3.3.3. Storage period of your personal data

We will process your personal data until the completion of the recruitment process for the position you are applying for, and after this period until the possible claims are limited.

In terms of data processed by us on the basis of a legitimate interest, the data may be deleted earlier if you effectively object to its processing.

If you gave consent to the processing of your personal data in recruitments conducted by us in the future or to the processing of data to a greater extent than we require, your data may be processed until you withdraw your consent.

3.3.4. Recipients of your data

We will only share your personal data with entities with whom we cooperate in the conduct of our activities (service providers), in particular, providers of accounting, legal, IT, hosting, etc. services.

4. OTHER TYPES OF DATA PROCESSED BY AIR TECH BUD Sp. z o.o.

4.1. PROCESSING OF PERSONAL DATA FOR THE PERFORMANCE OF THE AGREEMENT

Your personal data will also be processed if you decide to conclude the agreement with us. Before collecting the data to conclude the agreement, we provide detailed information regarding the processing of your personal data, regardless of whether you conclude the agreement as our contractor or employee.

4.2. PROCESSING OF PERSONAL DATA IN OTHER CASES

In connection with our activities, we collect and process data in other cases, for purposes related to the initiation and maintenance of business contacts, e.g. during business meetings, or by exchanging business cards, etc.

The legal ground for data processing in such situations is our legitimate interest (art. 6 par. 1 let. f of the GDPR), consisting in the creation and maintenance of relations with our customers, contractors and associates.

Personal data collected in such cases will be processed by us only for the purpose for which they were provided to us and are not transferred to any other persons, except entities with whom we cooperate in the conduct of our activities (service providers), in particular, hosting providers, etc.

Your personal data collected in such cases will be stored for the duration of our relations justifying mutual contact for cooperation purposes, or until you object to the processing of your data.

5. DATA TRANSMISSION OUTSIDE THE EEA

We do not transfer your personal data outside the EEA.

6. YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA

6.1. RIGHTS RELATED TO THE PROCESSING OF YOUR PERSONAL DATA

In connection with the processing of your personal data by us, you have the following rights:

6.1.1. The right to access your personal data

On this basis, you can obtain information about the processing of your personal data by us, in particular about purposes and legal grounds for processing, type (categories) of data, recipients with whom we share your data and about the planned processing time of your data.

6.1.2. The right to obtain the copy of your personal data

If you make such a request, you will obtain the copy of your data from us that we process.

6.1.3. The right to request the rectification of your personal data

If your data we process is incorrect or incomplete, you can at any time ask us to correct or supplement it.

6.1.4. The right to request the deletion of your personal data

You may request the deletion of your personal data that we process in the situation where it is no longer necessary to achieve any of the purposes for which it was collected.

6.1.5. The right to request the limitation of processing of your personal data

In the event of the request to limit the processing, your personal data will no longer be processed to another extent than its storage, until the reasons for the limitation of its processing cease to exist. In addition to storage, your personal data may be processed exceptionally on the basis of your consent or to determine, pursue or defend claims, or to protect the rights of another natural or legal person, or for important public reasons.

6.1.6. The right to transfer your data

If we process your data on the basis of the agreement or your consent, you can ask us to transfer your personal data provided to us in a format that allows its reading by the computer. You can also request the data to be sent to another entity, but only if it is possible due to technical capabilities existing both on our side and on the side of the entity to whom you want to send your data.

6.1.7. The right to object to the processing of your data

In terms of data processed on the basis of our legitimate interest (this is the basis indicated in art. 6 par. 1 let. f of the GDPR), you can object to the processing at any time. Remember that your objection concerning the processing in others should be justified. You can object to the processing of your personal data for marketing purposes without justification.

6.1.8. The right to withdraw consent to the processing of your data

If your data is processed on the basis of your consent (the basis indicated in art. 6 par. 1 let. a of the GDPR), you can withdraw your consent at any time. The withdrawal of consent, of course, does not affect the compliance of our processing of your data before the withdrawal of your consent.

6.1.9. The right to lodge a complaint to the POPDP

If you believe that our processing of your personal data violates the provisions of the GDPR or other provisions regarding the protection of personal data, you have the right to lodge a complaint to the President of the Office for Personal Data Protection.

6.2. METHOD OF SUBMISSION OF REQUESTS IN CONNECTION WITH THE PROCESSING OF YOUR DATA

All requests related to your rights concerning the processing of your personal data by us may be submitted in the following manner:

6.2.1. by e-mail to the following address: rodo@airtechbud.pl
6.2.2. by traditional mail to the following address: Partyzantow Street No. 26, 32-700 Bochnia , Poland

You will receive the answer to the request in the same way as you submitted your request, unless you clearly indicate the form in which you wish to receive it.

If we are unable to identify you on the basis of your request, we will ask you for additional information.

The request for exercising your rights is processed within one month of its receipt. This period may be extended, in which case you will be informed along with the reasons for extension.