Privacy policy

INFORMATION CLAUSE ON PERSONAL DATA PROCESSING

 

In accordance with Article 13 para. 1 and para. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (Official Journal of the European Union L. 2016.119.1), General Data Protection Regulation, hereinafter referred to as „GDPR”, we inform that:

  1. The Administrator of your personal data is  Nordes sp. z o.o. with its registered office at ul. Ziemniaczana 15, 52-127 Wroclaw, registered at the District Court for Wroclaw-Fabryczna in Wroclaw, 6th Commercial Department of the National Register Courthouse under the number KRS: 0000394159, NIP: 8992727004, share capital 50 000 PLN (paid in full).  The data administrator can be contacted via email: rodo@nordes.com.pl.
  2. Your personal data obtained by Nordes sp. z o.o. will be processed for the following purposes:
  • 6 para. 1 letter a GDPR, i.e. the data subject has given consent to the processing of his or her personal data;
  • 6 para. 1 letter b GDPR, i.e. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  • 6 para. 1 letter c GDPR, i.e. processing is necessary for compliance with a legal obligation to which the controller is subject;
  • 6 para. 1 letter d GDPR, i.e. processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  • 6 para. 1 letter f GDPR, i.e. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
  1. The obtained personal data will be processed depending on its processing basis for no longer than arising from generally applicable law and current internal regulations at Nordes sp. z o.o.
  2. According to GDPR Nordes sp. z o.o.  ensures that all persons whose personal data is processed have appropriate rights, therefore they have the right to:
  • Access their personal data and receive a copy of it;
  • Correct or revise their personal data;
  • Delete their personal data in the event of the data not being processed for the purpose of complying with the obligations arising from the regulations of law as part of exercising official authority;
  • Limit processing of their personal data;
  • Appeal against processing of their personal data;
  • File a complaint to the chair of Personal Data Protection Office to the address of Personal Data Protection Office at ul. Stawki 2, 00-193 Warsaw

 

INFORMATION CLAUSE ON VIDEO SURVEILLANCE

 

In accordance with Article 13 para. 1 and para. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (Official Journal of the European Union L. 2016.119.1), General Data Protection Regulation, hereinafter referred to as „GDPR”, we inform that:

  1. The Administrator of your personal data is  Nordes sp. z o.o. with its registered office at ul. Ziemniaczana 15, 52-127 Wroclaw, registered at the District Court for Wroclaw-Fabryczna in Wroclaw, 6th Commercial Department of the National Register Courthouse under the numer KRS: 0000394159, NIP: 8992727004, share capital 50 000 PLN (paid in full).  The data administrator can be contacted via email: rodo@nordes.com.pl.
  2. The Administrator informs that your personal data obtained via video surveillance is processed pursuant to the act of 26 June 1974 – Labour Act art. 222 in order to ensure workers’ safety, property protection and production supervision – the basis for personal data processing is art. 6 para. 1 letter b and art. 6 para. 1 letter f GDPR.
  3. Surveillance cameras recording will be stored for a period not longer than 2 weeks.
  4. Only the entities authorized by the regulations of law will be allowed to receive and view the recordings from the surveillance system.
  5. A person whose data is stored has the right to demand from the administrator the access to his/her personal data, removal of the data or restriction of data processing on the terms set out in GDPR taking into consideration Administrator’s rights and obligations resulting from the regulations of law.
  6. A person whose data is stored has the right to file a complaint to supervisory authority – the chair of Personal Data Protection Office when the person decides that his/her personal data is processed contrary to GPDR.
  7. Personal data will not be transferred to third country/international organization.

 

INFORMATION CLAUSE ON PERSONAL DATA PROCESSING ON FACEBOOK, LINKED IN AND YOU TUBE ACCOUNTS RUN BY NORDES

 

In conformity with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016  on the protection of natural persons in regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC, so called General Data Protection Regulation, hereinafter referred to as „GDPR”, below we present information regarding personal data processing in connection with the use of fan page run by Nordes sp. z o.o.:

  1. PERSONAL DATA ADMINISTRATOR

The Administrator of your personal data is  Nordes sp. z o.o. with its registered office at ul. Ziemniaczana 15, 52-127 Wroclaw, registered at the District Court for Wroclaw-Fabryczna in Wroclaw, 6th Commercial Department of the National Register Courthouse under the numer KRS: 0000394159, NIP: 8992727004, share capital 50 000 PLN (paid in full).  The data administrator can be contacted via email: rodo@nordes.com.pl.

  1. WHOSE PERSONAL DATA IS PROCESSED

In relation to Nordes sp. z o.o running a fan page personal data of persons who visit our fan page or subscribed our channel by clicking ‘I like it’ or ‘Follow’, publish comments under our posts or send direct messages is processed.

  1. PURPOSES AND GROUNDS FOR PERSONAL DATA PROCESSING

We process personal data of aforementioned persons for the following purposes and grounds:

  • Running our fan pages on Facebook, Linked In, You Tube under the terms and conditions defined by Facebook, Linked In and You Tube and informing, via aforementioned profiles, about our activities, events and promoting our services. Legal ground for such personal data processing is art. 6 para. 1 letter f GDPR which allows us to promote our company;
  • Providing information, responding to questions and complaints. Legal ground for such personal data processing is art. 6 para. 1 letter f GDPR which allows us to perform aforementioned actions including communicating with people;
  • Analyzing fan page functioning and users activity which is legally justified and compliant with art. 6 para. 1 letter f GDPR;
  • Organizing and conducting contests, giving out prizes. In such case the basis for personal data processing is a person’s permission for data processing in the scope and purpose compliant with art. 6 para. 1 letter GDPR.
  1. PERMISSION WITHDRAWAL

Nordes sp. z o.o informs that a person whose personal data is processed has got a right to withdraw a permission to process one’s personal data if the data is processed on  the basis of a permission. Withdrawing a permission does not work retroactively meaning that all the processing of personal data done before the withdrawal had legal grounds for it.

  1. TYPES OF PERSONAL DATA

With respect to the purposes and bases of processing personal data described above the administrator will not least process the following identification data: Name and Surname, other data published on Facebook, Linked In and You Tube. Additionally, Facebook, Linked In and You Tube share statistics regarding views and extent of posts published by Nordes. The aforementioned statistics present data generated by people visiting Nordes fan page.

  1. PERSONAL DATA RECEIVERS

The Administrator informs about sharing the personal data to the owner of Facebook platform following the regulations established by Facebook. The regulations can be acknowledged under the links below:

https://www.facebook.com/about.privacy

https://policies.google.com/privacy?hl=pl

https://pl.linkedin.com/legal/privacy-policy

 

Moreover the personal data can also be shared with state authorities and entities performing public duties in the extent and for purposes arising from the regulations of law.

  1. REQUIREMENT TO PROVIDE PERSONAL DATA

Providing personal data is voluntary however taking into consideration operationality of Facebook, Linked In and You Tube, it is inherent while taking actions related to subscribing, commenting or sending direct messages.

  1. TRANSFERRING PERSONAL DATA TO THIRD COUNTRIES

The Administrator does not intent on transferring personal data to third countries. However, taking into consideration operationality of Facebook, Linked In and You Tube, there is a possibility of personal data being transferred outside European Economic Area.

  1. DATA PROCESSING PERIOD

Data processing period is related to the purpose and legal basis of such processing. According to that:

  • Your personal data which is processed on the basis of justified legal interest of the Administrator will be processed until an effective objection is raised or until the purpose of processing ceases.
  • Statistical data is processed for the period of 2 years
  • Personal data which is processed on the basis of a person’s permission will be processed until the permission is withdrawn
  1. RIGHTS OF PERSONS WHOSE PERSONAL DATA IS PROCESSED

We inform that due to Nordes processing your personal data you have the right to access your personal data and, subject to the regulations of law, its correction, deletion or limitation of processing as well as raising an objection.

If you consider that processing of your personal data violates the regulations of law you, additionally, have the right to file a complaint to the chair of Personal Data Protection Office

  1. AUTOMATED DECISION MAKING

We inform that your personal data will not be subject to automated decision making. Your personal data will also not be subject to profiling.