UE projekt

RODO

APPLICATION SCOPE

The following information applies to data received:

• via electronic forms,

• under contracts with Contractors, and

• by representatives of EM-MED in terms of purchasing and sales activities or generally understood business contacts.

The information does not apply to the processing of personal data of job applicants, employees, or data entrusted for processing under entrustment agreements.

Personal data administrator

The administrator of your personal data is the EM-MED group, which includes:

EM-MED Sp. z o.o.

ul. Pocieszka 11A, 31-408 Kraków

NIP: 676 005 66 47

and

EM-MED Sp. z o.o. Sp. K.

ul. Pocieszka 11A

31-408 Kraków

NIP 945 221 71 97

Contact details to the personal data administrator

Please send inquiries or requests related to the processing of personal data, by the Company, to the following contact details:

EM-MED

ul. Pocieszka 11A

31-408 Kraków

biuro@emmed.pl

Acquiring data

EM-MED collects only basic contact details related to its business activities. The collected data includes: name, surname, e-mail address, telephone number, position or function, name of the company represented by a given person and possibly other data resulting from a contract or an order, and can be obtained directly from contact forms, during business meetings and conferences. This data is provided to the respective contact person inside the company.  

Personal data is processed by EM-MED for the purposes set out below.

For each purpose, the legal basis for processing and the criteria for determining the period of data processing have been provided.

The purposes of data processing are as follows:

1. Performance of the contract or order

Legal basis: art. 6 sec. 1 point b) GDPR

Processing period: the period of performance of obligations and the period of limitation of claims resulting from legal provisions.

In the case of concluding a contract or order between you and EM-MED, the data provided by you will be processed for the purpose of performing such a contract or order and their settlement.

2. Performance of the contract or order between EM-MED and another entity

Legal basis: art. 6 sec. 1 point f) GDPR

Processing period: the period of performance of obligations and the period of limitation of claims resulting from provisions or until the objection submitted pursuant to art. 21 GDPR

If you are indicated as a contact person by your employer or another entity, your data may be processed for the purpose of performance and settlement of the contract (or order) concluded between EM-MED and your employer or other Entity. In this case, data processing will include ongoing contacts related to the implementation of such a contract / order, preparation and archiving of documentation from the performance of the contract / order, as well as pursuing claims or defense against claims of the other party.

In this case, the processing of your data will be undertaken in order to implement the legitimate interest of the administrator, which is the protection of rights, performance of contracts and obtaining the remuneration due to him.

You have the right to object to such processing of personal data in accordance with the information in the section AUTHORIZATIONS.

3. Fulfillment of the obligation to prepare and store documentation

Legal basis: Article 6 sec. 1 point c) GDPR

Processing period: the date of storage of invoices, accounting books and documents confirming the conclusion and performance of the contract resulting from national regulations.

In the case of performance of a contract or order or other service for you, we will also process personal data contained in invoices, delivery notes, in the accounting books or in other documentation confirming the conclusion and performance of the contract in order to prepare and store documents in accordance with applicable law. This applies to situations when you are a party to a contract or order, and when a party to the contract or order is your employer or an entity with which you cooperate, or when any service has been provided for you.

4. Confirmation of the performance of obligations and defense against claims or their pursuit

Legal basis: art. 6 sec. 1 point f) GDPR

Processing period: the period of performing obligations and the period of limitation of claims resulting from the provisions.

Data entered on an electronic form, made available under the order or contract, or otherwise made available to EM-MED may be processed for the purpose of archiving information or documents confirming the performance of the Company’s obligations and for the purpose of pursuing any claims or defending against claims against the Company. In particular, this applies to situations where you are a party to a contract or order, and when a party to the contract or order is your employer or an entity with whom you cooperate, and when the Company was obliged to perform any service on any basis for your benefit or for the exercise of your rights.

In such a case, data processing will be undertaken in order to implement the legitimate interest of the administrator, which is the protection of rights, confirmation of the performance of obligations and obtaining the remuneration due to him.

You have the right to object to such processing of personal data in accordance with the information in the AUTHORIZATIONS section.

5. Business contacts

Legal basis: art. 6 sec. 1 point f) GDPR

Processing period: until the objection submitted pursuant to art. 21 GDPR

Contact details entered on the electronic form, provided under the contract / order or otherwise provided, may be processed by EM-MED for the purpose of business contacts.

EM-MED may contact you to present his offer, invite you to a meeting organized by us or as part of other marketing activities.

If you are a representative of the supplier or service provider, EM-MED may also contact you to obtain an offer, information or other documents. The processing of your data will in this case be undertaken in order to implement the legitimate interest of the administrator.

You have the right to object to such processing of personal data in accordance with the information in section AUTHORIZATIONS.

6. Answer to the query

Legal basis: art. 6 sec. 1 point a) GDPR

Processing period: until you resign from obtaining an answer (withdrawal of consent)

If you fill in the contact form or submit your inquiry in another form (e.g. e-mail, telephone), you consent to the contact related to the implementation of your request or inquiry. To withdraw your consent, use the contact details provided above.

This consent may be withdrawn at any time, but its withdrawal does not affect the lawfulness of processing this data prior to withdrawal. In addition, withdrawal of consent will result in the lack of response to the inquiry.

Failure to provide data – consequences

In the case of electronic forms – providing data is voluntary, but failure to provide the data indicated as required results in the inability to send the form and, consequently, no response to the inquiry. In the case of data of persons who are a party to the contract / order concluded with EM-MED – providing data necessary to perform the contract and fulfil legal obligations is a condition for the conclusion and performance of the contract. For data collected in the field of purchasing, sales or marketing activities – providing the data is fully voluntary and the consequence of not providing it may be the inability to contact you in the future.

AUTHORISATIONS

In accordance with the provisions of the GDPR, you have the right to:

1. access to data;

2. rectify and supplement data;

3. data portability;

4. data processing restrictions;

5. withdraw consent (when consent is the basis for processing);

6. objection (when the basis for processing is the legitimate interest of the administrator);

7. deletion of data.

The implementation of the above rights depends on the conditions set out in the GDPR. In the event of refusal to accept the request, you will receive a reply with the justification for the refusal.

In order to exercise your rights, please contact us in accordance with the information provided above.

Please be advised that:

• in some cases, the administrator has the right to refuse to take into account your objection to the processing of data on the basis of the legitimate interest of the administrator, when there are valid legitimate grounds for data processing that override your interests, rights and freedoms, or there are grounds for establishing, pursuing or defending claims;

• the right to data portability applies only if the legal basis for processing is consent or performance of a contract;

• the right to delete data and the right to request the restriction of their processing apply only in the cases specified in the provisions of the GDPR;

Data recipients, transfer to third countries

Contact details are stored in the IT systems of EM-MED in the territory of Poland.

The data may be made available to suppliers, service providers and partners with whom the company undertakes cooperation to the extent necessary to provide services for customers, business contacts and marketing activities.

EM-MED does not transfer any information to third countries (within the meaning of the GDPR) and any possible transfer of any data must be approved by the data subject in a separate agreement.