en 
As a Personal Data Controller, in accordance with the provisions of Regulation 2016/679 of the European Parliament and of the Council of the European Union of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR), ATAL S.A. is obliged to provide some information regarding the processing of your personal data. As part of its business processes, ATAL S.A. processes various categories of personal data. We never collect too much information, limiting ourselves to the information we really need. It is also our responsibility to ensure that your data is used only for the purpose for which it was provided. We exercise special care to ensure that only authorized persons have access to the data. We also use the latest technological and IT solutions to ensure the security of your personal data. Thanks to these measures, you can be sure that your personal data stored by us is safe and confidential. Data protection is a priority task for all ATAL S.A. employees.
In accordance with the provisions of Regulation 2016/679 of the European Parliament and of the Council of the European Union of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter “GDPR”), we are obliged to provide the following information regarding the processing of your personal data:
The Controller of personal data (hereinafter: “Controller”) is ATAL S.A. with its registered office in Cieszyn, address: 43-400 Cieszyn, ul. Stawowa 27, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Bielsko-Biała, VIII Commercial Division of the National Court Register (KRS) number: 0000262397, NIP (Tax Identification Number): 548-248-72-78, REGON (National Business Registry Number): 240415672, share capital:
PLN 216,073,050.00, paid in full.
In all matters relating to our processing of personal data and to exercising your rights related to the processing of your personal data, you can contact our Data Protection Officer, Piotr Witkowski, at the following e-mail address: [email protected] or in writing at: ATAL S.A., Cieszyn (43-400), ul. Stawowa 27, with the note “Personal data”.
Przetwarzamy Twoje dane osobowe w różnych sytuacjach. Poniżej znajdziesz informacje na temat celów oraz podstaw prawnych przetwarzania Twoich danych osobowych.
Your personal data will be stored for a period depending on the legal basis that authorizes the Controller to process your personal data.
Your personal data may be shared with third parties only for the purposes mentioned above. We share your personal data to the extent necessary to achieve the purpose for which we process your personal data (data minimization).
Data may be shared with entities processing personal data at the request of the Controller, among others, entities from the capital group, suppliers of renovation and construction services, as well as entities providing services such as: accounting, legal services, courier delivery, IT services, design services, ICT, office services, services related to the repair of defects, security services, insurance, entities processing data for the purpose of debt enforcement, notaries, banks, building/real property managers and housing associations, marketing agencies – whereas such entities process data only in accordance with our instructions.
Moreover, data may be shared with other entities, including appropriate tax authorities and other authorized public administration and local government authorities, as well as judicial authorities and other authorized institutions (e.g., financial supervision, insurance companies in the scope of claims settlement) if the requirement to provide data results from the law.
Collected personal data will not be transferred to recipients located in countries outside the European Economic Area (European Union states and Iceland, Liechtenstein and Norway).
Please be informed that depending on the legal basis for processing your personal data, you have the following rights:
a) right to request access to personal data,
b) right to request rectification of personal data,
c) right to request deletion of personal data,
d) right to request restricted processing of personal data,
e) right to object to the processing of personal data,
f) right to portability of personal data.
If the legal basis for the processing of your personal data is consent (Art. 6.1.a), you also have the right to withdraw your consent at any time without affecting the lawfulness of the processing performed on the basis of the consent before its withdrawal. You can withdraw your consent the same way it was given.
Moreover, you also have the right to lodge a complaint with the supervisory authority, i.e., the President of the Office for Personal Data Protection, sent to: ul. Stawki 2, 00-193 Warsaw, if you believe that the processing of your personal data violates the GDPR.
The requirement to provide data and the consequences associated with not providing data may differ depending on the process for which the Controller needs to process your personal data.
The Controller may use your personal data for profiling with respect to specific products or services it is marketing (in order to best match the products or services offered by the Controller to your needs). Profiling does not affect your legal situation, in particular, the Controller does not make decisions based solely on automated decision-making, including profiling, which could produce legal effects against you or affect you in a similar way.
