Processing of personal data to implement the requests of persons who are subject to data protection law
Who is the Controller of your data?
The Controller is e-point SA with its registered seat in Warsaw, ul. Filona 16, 02-658 Warszawa (hereinafter referred to as the "Controller" or the "Company"). If you need any information related to the protection of personal data or you want to exercise your rights regarding data processing, contact the Controller or the Data Protection Officer appointed by him. Such contact may be made by e-mail or in writing to the Controller's address:
- e-point SA, IOD, ul. Filona 16, 02-658 Warszawa, e-mail: iod@e-point.pl
What data are we processing?
The personal data processed includes the applicant's identification data and data related to the handling of the application or request.
For what purpose and on what basis do we process your data?
Your data will be processed in order to perform our obligations arising from legal provisions in connection with the handling of your application or request – Article 6 section 1 letter c) of the GDPR. The processing is necessary to fulfill the legal obligation incumbent on e-point SA. Providing data is not mandatory, but necessary to complete the request or application.
Who can your data be transferred to?
The Controller may transfer your personal data to other recipients entrusted with the processing of personal data on behalf of and for the benefit of the Controller in connection with conducting business or operating IT systems. In addition, the Controller will share your personal data with other recipients, such as public administration bodies, courts, as long as such an obligation results from legal provisions. Your data may be transferred to third countries and international organizations, provided that entities established in these countries adequately protect personal data. In this case, the Controller will apply appropriate measures, such as e.g. standard contractual clauses approved by the European Commission or ensure that the transfer of data takes place within the country which is the subject of the European Commission decision on the appropriate protection of personal data. You can also get additional information regarding the transfer of data outside the EEA and a copy of appropriate security by directing the question to the contact address indicated above.
How long will we process your data?
The data will be processed as long as required by law, as well as for the period necessary to demonstrate to the relevant authorities that the legal obligations have been met. In any case, the Controller will process your personal data no longer than it is necessary to achieve a specific purpose.
What are your rights?
You have the right to:
- access your personal data and receive a copy of the personal data being processed,
- rectify your incorrect data,
- request deletion of data (right to be forgotten) in the event of circumstances provided for in Article 17 of the GDPR,
- request to limit data processing in cases indicated in Article 18 of the GDPR,
- object to data processing in cases indicated in Article 21 of the GDPR,
- transfer the data provided, processed in an automated manner.
If you think that your personal data is being processed unlawfully, you can lodge a complaint to the supervisory body, which is the President of the UODO [Personal Data Protection Office], ul. Stawki 2, 00-193 Warszawa.