Personal data processing policy in “FORMA SYSTEM” Sp. z o.o.

Introduction

GDPR is the commonly used abbreviation for the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), which applies from 25 May 2018. The GDPR establishes uniform rules for the processing of personal data in all Member States of the European Union.

Information

Pursuant to Art. 13 sec. 1 and Art. 14 sec. 1 and 2 of the GDPR, we would like to inform you about the way and the purpose of the processing of your personal data and also about your rights regarding data protection. The controller of your data is “FORMA SYSTEM” Sp. z o.o., (hereinafter referred to as “FORMA SYSTEM”), whom you can contact:

  • in writing by sending letters to the address:
    “FORMA SYSTEM: Sp. z o.o.,
    ul. Stalowa 14, 58-100 Świdnica
  • by telephone at: +48 74 64 01 370,
  • by e-mail at: rodo@formasystem.pl

“FORMA SYSTEM” has not appointed an Inspector of Personal Data Protection as it is not subject to any such obligation.

We process your data in accordance with the provisions of the GDPR and Polish regulations on the protection of personal data, for the performance of obligations arising from contracts concluded and for the performance of actions by data subjects prior to the conclusion of a contract (Art. 6(1)(b) of the GDPR) and for the performance of legal obligations (Art. 6(1)(c) of the GDPR).

The data is processed for the purpose of providing services in the context of the performance of contracts concluded with customers or for the purpose of carrying out activities prior to or in connection with the conclusion of a contract.

“FORMA SYSTEM” is subject to legal obligations resulting for example from labour and social security law, accounting and tax law. If necessary, we process your data in order to comply with the requirements imposed by, among others, the aforementioned regulations.

We process the data for purposes arising from the legitimate interests of “FORMA SYSTEM” or a third party (Art. 6(1)(f) of the GDPR). The legitimate interests of “FORMA SYSTEM” arise from activities carried out to ensure the protection of persons and property, the assertion and defence of claims, the direct marketing of “FORMA SYSTEM” products and services, for internal administrative purposes of “FORMA SYSTEM”.

We process data on the basis of your consent (Art. 6(1)(a) of the GDPR) given for specific purposes. The consent can be withdrawn at any time. The withdrawal of consent does not affect the lawfulness of the data processing by “FORMA SYSTEM” until the withdrawal of consent or in situations where “FORMA SYSTEM” processes data on the basis of a lawful ground other than your consent.

The data may be disclosed to other parties in order to fulfil a concluded contract, to comply with a legal obligation imposed on “FORMA SYSTEM”, on the basis of your consent or for purposes deriving from the legitimate interests of “FORMA SYSTEM” or a third party.

The recipients of the data may be entities that process data on behalf of “FORMA SYSTEM”, where these entities process the data under a contract with “FORMA SYSTEM” and only in accordance with the instructions of “FORMA SYSTEM” and under the condition of commercial confidentiality. The group of entities performing tasks on behalf of and for the benefit of “FORMA SYSTEM” comprises entities providing ICT, debt collection, legal and insurance services.

Your data will not be transferred to a third country (outside the European Union).

Your data will be processed for as long as necessary to achieve the purposes of the processing:

  • in the context of the performance of the contract concluded with “FORMA SYSTEM” – until its completion and thereafter for the period prescribed by law or for the assertion of any claims,
  • in the context of the fulfilment of the legal obligations imposed on “FORMA SYSTEM” in connection with its business activity and the performance of the contracts concluded – until “FORMA SYSTEM” fulfils these obligations,
  • in the context of processing based solely on consent – until the data is deleted immediately at your request,
  • until the legitimate interests of “FORMA SYSTEM” which form the basis for such processing are met or you object to the processing, unless there are no legitimate grounds for further processing.

You have the following rights:

  • to request access to, rectification, restriction of processing or erasure of your data,
  • to withdraw previously given consent to the processing of data at any time to the extent of the consent,
  • to request the transfer of data provided to “FORMA SYSTEM”,
  • to lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office, if the transfer of your data violates regulations, including the GDPR,
  • to object, on grounds relating to your particular situation, to the processing of your data by “FORMA SYSTEM” where “FORMA SYSTEM” processes data for the purposes of legitimate interests ( Art. 21(1) of the GDPR).

Insofar as the processing of your data takes place for the purpose of concluding and fulfilling a contract with “FORMA SYSTEM”, the provision of your data is a prerequisite for the conclusion of this contract. The provision of data is voluntary but necessary to conclude and fulfil a contract with “FORMA SYSTEM”.

Most of the data processed by “FORMA SYSTEM” comes directly from the data subject, in particular from the customer. Some data may come from parties to whom you have given your consent to provide such data, from persons who represent you, from public registers and records (e.g. the National Court Register, the Central Registration and Information on Business) concerning customer identification data and contact details.

The processing of your data is not automated and does not involve automated decision making and is not subject to profiling.