Dear Madam or Sir,
The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). It also addresses the export of personal data outside the EU and EEA. The GDPR aims primarily to give control to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
Please be advised that the administrator of your personal data is Sondasys sp. z o.o. based in Ogrodzieniec (42-440) at Kościuszki 107A street, Poland.
In order to contact the Administrator of your personal data, please contact us by email at email@example.com or in writing to the address of the data administrator with the addition “personal data administrator”.
The processing of your personal data takes place in order to accept and execute the requested service, while the legal basis for processing them is art. 6 par. 1 lit. b of the general regulation on the protection of personal data dated April 27, 2016 and art. 6 par. 1 lit. c of the general regulation on the protection of personal data dated 27 April 2016 in connection with the performance of obligations under the Act of 29 September 1994 on accounting (Journal of Laws of 2017, item 2342).
The recipients of your personal data are:
• employees of Sondasys sp. z o. o. in connection with the performance of official duties;
• carriers with whom Sondasys sp. z o. o. cooperates in the implementation of the forwarding order;
• employees of the accounting company with whom Sondasys sp. z o.o. cooperates in the field of accounting and human resources services.
• subcontractors operating and maintaining teleinformatic systems of Sondasys sp. z o. o.
Your personal data will be stored for a period of 5 years, counting from the beginning of the year following the financial year in which the contract expired or was dissolved, pursuant to the Act of 29 September 1994 on accounting (Journal of Laws of 2017, item. 2342).
You have the following rights related to the processing of personal data by the Administrator:
• access to data;
• rectification of data;
• deletion of data;
• processing restrictions;
• object to processing;
• data transfer;
You have the right to lodge a complaint with the supervisory body competent for personal data protection, if you acknowledge that the processing of your data violates the provisions of the general regulation on personal data protection dated April 27, 2016
Providing personal data by you is voluntary, however, it is necessary to conclude a contract and execute the requested services.
Your personal data will not be processed in the process of automated decision making, including profiling.