pl | en | de

ATAL Construction Sp. z.o.o.


In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), we are required to share the following information on the protection of personal data with you:

 

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Data controller

The controller of your personal data (hereinafter: the Controller) is ATAL Construction spółka z ograniczoną odpowiedzialnością with registered offices in Cieszyn (address: 43-400 Cieszyn, ulica Stawowa 27, REGON: 072795147, NIP: 5482350734), entered into the Registry of Enterprises of the National Court Registry with the number KRS: 0000111008.

Contact details

In all matters concerning the processing of personal data by our company and rights associated with processing of personal data to which you are entitled, you can contact us by email at: [email protected], or by traditional mail at: ATAL Construction spółka z ograniczoną odpowiedzialnością with registered offices in Cieszyn (43-400), ul. Stawowa 27 with the annotation “Personal data”.

Purposes and legal basis of processing

We process personal data in a variety of situations described in our privacy policy. Below, you will find information about the purposes of such processing and its legal basis.

Purpose of processing

Legal basis

To undertake actions which are essential before contracting an agreement, to contract an agreement, and to execute a agreement or provide services in accordance with a agreement.

Art. 6 para. 1b and 1f of the GDPR, the legitimate business interest of the Controller, including executing claims and protecting rights.

For the Controller’s marketing purposes, including profiling and analytical purposes.

Art. 6 para. 1b and 1f of the GDPR, the legitimate business interest of the Controller, or Art. 6 para. 1 lit. a – consent given.

For marketing purposes, including profiling and analytical purposes, of third parties, including the Controller’s partners.

Art. 6 para. 1a of the GDPR - consent, unless consent has not been given, in which case personal data is not processed for this purpose.

To comply with legal obligations resulting from applicable legislation.

Art. 6 para. 1c of the GDPR – processing is essential to comply with legal obligations which the Controller is subject to.

As necessary to advance claims associated with an agreement made with the client or services provided to the client.

Art. 6 para. 1b and 1f of the GDPR, , the legitimate business interest of the Controller, including executing claims and protecting rights.

The specific purpose and legal basis for processing are provided in a separate information section intended for data subjects.

Data storage period

Your personal data will be processed until the validity period of any possible claims resulting from an agreement or services provided has expired or until the obligation to store such data resulting from applicable legislation has expired, in particular the obligation to store accounting documentation concerning an agreement. All data processed for accounting purposes or for tax purposes is stored for 5 years beginning with the end of the calendar year in which the tax obligation arose. After this period, your personal data is either deleted or subjected to anonymisation.

Whenever we process personal data based on the legitimate business interest of the Controller, these data will not be processed for that particular purpose if you lodge an objection to such processing.

If we process data based on your consent, such data will be processed until you withdraw your consent.

Data recipients

Your personal data may be shared with third parties for the purposes outlined above/for marketing purposes, provided you have given your consent for particular marketing purposes for which access to data is required.

Additionally, your personal data may be transferred or shared with entities which process personal data based on an agreement with the Data Controller, such as entities which are part of the Controller’s capital group (a current list of such entities can be found at: https://atal.pl/en/for-investors/About-Us/Capital-Group.html), providers of renovation and construction services and IT services, external auditors, entities dealing with debt recovery and vindication, notaries public, banks, building managers and residential cooperatives, and marketing agencies, bearing in mind that all such entities process data based on an agreement with the Controller and strictly in compliance with our instructions.

Transfer of data beyond the European Economic Area

Personal data collected is not shared with recipients located in countries outside of the European Economic Area (the countries of the EU and Iceland, Liechtenstein and Norway).

Rights of data subjects

You are entitled to access your personal data and to demand its rectification, deletion, and to limit its processing. If the basis for processing of your personal data is the legitimate business interest of the Controller, you can lodge an objection to such processing. In particular, you are entitled to lodge an objection to processing for direct marketing purpose, including profiling and for analytical purposes.

 

If the legal basis for processing of your personal data is your consent, you have the right to withdraw this consent. Withdrawal of consent does not impact the legality of processing which took place before withdrawal of consent.

 

If the basis for processing of your personal data is for the purposes of entering into or executing an agreement or providing services, or if the basis is consent which you have given, you have the right to transfer your personal data. In thus situation, you will receive from us your data in a structured, commonly used format which can be machine read. You may then send these data to another data controller.

 

You are also entitled to lodge a complaint with the supervisory body dealing with the protection of personal data.

Provision of personal data in connection with an agreement or with services provided on the basis of an agreement is voluntary, yet essential for contracting and executing such an agreement; failure to provide such personal data will make it impossible to contract or execute an agreement or provide services.

Provision of personal data for marketing purposes is voluntary.