Personal data processing policy

1. Identity and contact details of the controller

Kierunek Francja Gildas Malandain, ul. Olszewskiego 6, 26-663, Kielce, Poland, company registered at the Business Activity Central Register (CEIDG), EU VAT nr (NIP) PL6762257321, statistic nr (REGON) 367102093, e-mail gma@kierunekfrancja.pl, tel +48 696 350 697

2. Purposes, legal basis and period for which the personal data will be processed

Your data may be processed for the following purposes:

1) performance of a contract – on the basis of art. 6 sec. 1 letter b) of the Regulation of the European Parliament and the Council of the EU 2016/679 of 27th of April 2016 r. on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), [hereinafter: the Regulation],

that is processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

2) compliance with the controller’s legal obligations, e.g. tax obligations, accounting obligations, obligations with regard to the enforcement of claims – on the basis of art. 6 sec. 1 letter c) of the Regulation, that is:

processing is necessary for compliance with a legal obligation to which the controller is subject.

3) pursuing by the controller his legitimate interests, e.g.:

a) management, exercise and defence in the case of reciprocal claims,

b) ensuring information security,

c) contact with the Client’s authorised employees in matters related to the performance of a contract,

d) the controller’s own direct marketing,

on the basis of art. 6 sec. 1 letter f) of the Regulation, that is: processing is necessary for the purposes of the legitimate interests pursued by the controller.

4) replying to an inquiry made via e-mail or telephone – on the basis of art. 6 sec. 1 letter a) of the Regulation, that is: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

Data are processed during the period necessary for raising a claim or during the period as requested by law.

3. Where do we gather your personal data?

Personal data are mainly collected directly from the data subject. The controller also processes personal data which have not been collected directly from the data subject, e.g. data concerning business activities, data of the Client’s employees and persons representing the Client and acting in the name of the Client.

Personal data are also collected, among others, from persons representing the Client, from the Business Activity Central Register (CEIDG), from the National Court Register (KRS) and from other entities authorised to process personal data.

4. Information about the categories of recipients of personal data

The recipients of personal data are entities cooperating with the controller, including but not limited to: providers of software supporting business processes, postal operators and couriers, e-mail service providers, accounting office, law firms and consultancy firms.

5. Information about the rights of data subjects

You have the right to:

a) request from the controller access to your personal data,

b) request from the controller rectification, erasure of personal data or restriction of processing of your personal data,

c) object to the controller to processing of personal data,

d) data portability (the right to have the personal data transmitted directly from one controller to another),

e) withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

6. The right to object to processing

To the extent that personal data are processed on the basis of article 6 sec. 1 letter f), you have the right to object at any time – on grounds relating to your particular situation. The controller shall then no longer process those personal data, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

7. Information about the right to lodge a complaint with a supervisory authority

You have a right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the Regulation. In Poland, the supervisory authority is the President of the Personal Data Protection Office seated in Warszawa, ul. Stawki 2, 00-193 Warszawa.

8. Information about profiling

The controller uses profiling technology. Let us remind that "profiling consists of any form of automated processing of personal data evaluating the personal aspects relating to a natural person, in particular to analyse or predict aspects concerning the data subject's performance at work, economic situation, health, personal preferences or interests, reliability or behaviour [...] (Sect. (71) at the top of the Regulation).

Personal data may be processed in an automated way, including in the form of profiling. Profiling may take place in particular with regard to age distribution, gender or location.

9. Cookies and other technologies policy

The controller would like to inform that on his website there may be utilized cookie files or other technologies with the intent of improving the quality and content of the site. Thanks to the cookie files, the controller receives information about how the Users are using the website, which allows the controller to optimise his offer.

A cookie does not identify you personally, but it does identify your computer. You can set your internet browser to notify you when you receive a cookie and this will provide you with an opportunity to either accept or reject it in each instance.

On the Controller’s website are also used the following cookie files Google Analytics – helps the Controller measure how Users use the contents of the website.

Information which is generated by Google Analytics (including IP address) are stored on servers located in the United States. Google, Inc. (hereinafter: Google) uses the collected data in order to assess how the Controller’s website is being used. Google may hand the collected information over to third parties if it is required by law. The User’s IP address is not linked with any other data stored by Google. By using the website, the User gives his consent for the processing of personal data by Google for the purposes described above. This consent may be withdrawn at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

10. Link to commercial agent partners' privacy policies

The commercial agency received mandate to promote some partners' products and may accordingly transfer to those partners some personal data. In the spirit of transparency and in order to comply with the information obligations set out in article 14 sec. 1 and 2 of the Regulation, please find below the links to the privacy policies of the companies that have given a mandate to act as a commercial agent :

SMA Magnetics
Blue energy
SCAN IT
Nextep Technologies

---

This Policy was last updated on November 3rd 2021.