INFORMATION NOTICE – UNIT ACCEPTANCE

In connection with Regulation 2016/679 of the European Parliament and of the Council of the European Union of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter “GDPR”), we are obliged to provide the following information on the processing of your personal data:

1. Data Controller – it is ATAL S.A. with its registered office in Cieszyn (hereinafter: “Controller”), address: 43-400 Cieszyn, ul. Stawowa 27, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court in Bielsko-Biała, VIII Commercial Division of the National Court Register (KRS), entry number: 0000262397, Tax ID (NIP): 548-248-72-78, National Business Registry Number (REGON): 240415672, share capital: PLN 216.302.750,00, fully paid up.
2. Data Protection Officer – for all matters relating to the processing of personal data and the exercise of rights in connection with personal data processing, you may contact the designated Data Protection Officer at the following e-mail address: [email protected] or by mail at: ATAL S.A., Cieszyn (43-400), ul. Stawowa 27, Poland, marked as “Personal data”.
3. Purposes of processing and legal basis of processing – we process your personal data for the following purposes:
   a) to perform the concluded contract in the scope of the acceptance of the unit and related activities, and the legal basis for the processing of your personal data is Article 6(1)(b) GDPR, i.e. the processing is necessary for the performance of the concluded contract, and Article 6(1)(c) GDPR, i.e. the legal obligation incumbent on the Controller;
   b) to pursue our legitimate interest in verifying, assessing and rectifying recognized defects or faults with the participation of repair and construction service providers acting at the instruction of the Controller on the basis of Article 6(1)(f) GDPR.
4. Data retention period – your personal data will be stored until the expiry of the statute of limitations for all claims under the Civil Code Act arising from the concluded contract.
5. Data recipients – your personal data may be shared with IT service providers or technical service providers, etc. – whereas such entities will be processing your personal data on the basis of a contract concluded with the Controller and in accordance with our instructions. If defects are reported and described in the unit acceptance report, your personal data may be shared in the necessary scope with repair and construction companies conducting on behalf of the Controller the verification, assessment and rectification of recognized defects or faults.
6. Rights of the data subject – you have the right to request access to your personal data, to data rectification, erasure or restriction of processing, and the right to object to processing.
7. Right to lodge a complaint – you also have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection at ul. Stawki 2, 00-193 Warsaw, Poland, if you believe that the processing of your personal data violates the provisions of GDPR.
8. Provision of personal data is necessary for drafting the unit acceptance report. Failure to provide personal data results in the inability to carry out the unit acceptance and to report defects to be included in the report.
9. Automated decision-making and profiling – your personal data will not be used for automated decision-making, including profiling, as referred to in Article 22 GDPR.