Information obligation
website and social media
Information Clause
regarding the processing of personal data of website users and social media profiles
- The Administrator of your personal data is KBJ S.A. with its registered office in Warsaw (01-161), at Obozowa 57, entered into the Register of Entrepreneurs of the National Court Register by the District Court for the Capital City of Warsaw, XIII Commercial Division of the National Court Register under the number 0000387799, NIP: 7262571799, REGON: 100393858.
- Inquiries regarding the protection and processing of personal data can be sent via e-mail to the address rodo@kbj.com.pl or by traditional mail to the address of the Administrator's seat.
- The Administrator processes personal data obtained directly from website users:
a. via the contact forms available on the website;
b. collected via cookies or other similar technologies (including IP address or other identifiers). - The Administrator processes the personal data collected in the above manner in order to:
a) identification of the sender and handling his inquiry sent via the provided form; legal basis: Article 6. paragraph 1 (a) of the GDPR;
b) providing electronic services in the scope of the content available to users collected on the website; legal basis: Article 6. section 1 letter b of the GDPR;
c) registering the application for a selected event organized by KBJ, and then, in order to organize and promote this event; legal basis: Article 6. section 1 letter b of the GDPR;
d) in order to send marketing content to users regarding the administrator's offer, using various communication channels for which the user has consented, i.e. via e-mail, by MMS / SMS or by phone; legal basis: Article 6. paragraph 1 (a), (f) of the GDPR;
e) registration and inclusion in the recruitment process of the candidate's application, sent via the recruitment form; legal basis: Article 6. paragraph 1 (a), (f) of the GDPR;
f) informing users, visiting administrator profiles run on social media (Facebook, Linkedin) about the activities undertaken and promoting various types of events, services and products; legal basis: art. 6 sec. 1 lit. f GDPR;
g) conducting analyzes and statistics on user activity, component inquiries, as well as their preferences, aimed at improving the functionalities and services provided; legal basis: Article 6. paragraph 1 (f) of the GDPR;
h) possible determination and pursuit of claims or defense against them; legal basis: Article 6. section 1 letter f of GDPR. - KBJ S.A. will process the following personal data of website users:
a. name, surname, e-mail address, telephone number and other data provided in the contact form, IP address;
b. personal data provided in the form of attachments (e.g. CVs of job candidates). - The recipients of your personal data may be:
a. authorized employees or associates of KBJ S.A.
b. entities providing the Administrator with, inter alia, IT, advisory, audit, legal and tax services;
c. entities providing postal and courier services. - Personal data of website users will be kept for the period necessary to handle requests submitted via the contact form. In accordance with the internal policy and applicable regulations, KBJ stores data from the moment of completing the service of a given report, for a period from one year to five years, depending on the area covered by the report.
- Personal data of website users will be processed and stored on servers located in the European Economic Area - EEA). However, personal data may be transferred to third countries to the extent necessary for the use by KBJ S.A. from cloud services provided by global providers of such services, the transfer will take place in accordance with the relevant legal provisions regulating the principles of personal data protection, in particular on the basis of standard contractual clauses, in accordance with the templates approved by the European Commission.
- Personal data is processed in an automated manner, but is not subject to profiling.
- With regard to the processed personal data pursuant to art. 15-21 of GDPR, website users have the right to:
a. the right to access data,
b. the right to rectify incorrect data or supplement incomplete data;
c. the right to limit processing,
d. the right to delete data;
e. the right to data transfer.
f. the right to withdraw consent at any time, without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal;
g. the right to lodge a complaint to the President of the Personal Data Protection Office, when the user considers that the processing of personal data concerning him violates the provisions of the GDPR.