General information clause

Pursuant to art. 13 item 1−2 of the European Parliament and Council Regulation (EU) 2016/679 date 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Dz. Urz. UE L [Official Journal of the EU) 119, s. 1) – hereinafter referred to as GDPR − please be informed that:

1. Personal data administrator
   Your personal data are administered by ZPOW „Vortumnus” Sp. z o.o. seated in Lisowo 179, 38-242 Skołyszyn, and the administrator can be contacted under the address specified above, or by-mail info@vortumnus.pl or by office phone 13 44 913 00;
2. Data Protection Inspector
   The Data Protection Inspector appointed at ZPOW „Vortumnus” Sp. z o.o., who can be contacted regarding your personal data protection, is under the office email address iod@vortumnus.pl, office phone 13 44 91 300, ext. 16.
3. Aim and bases for data processing
   Aims of processing your personal data have been determined. As the administrator we’ll be processing your personal data:
   1. in order to conclude an agreement based on your interest in our offer - art.. 6, item 1,letter b of GDPR;
   2. in order to execute and pursuant to the agreement concluded with us, when effective - art. 6, item 1, letter b of GDPR;
   3. in order to fulfil the legal duty incumbent on the data Administrator - art. 6, item 1, letter c of GDPR;
   4. in order to initiate and continue the employment process, pursuant to your voluntary consent, based on art. 6,item 1,letter a, c, d, f of GDPR, the Code of Labour, the social security act, the personal income tax act, healthcare benefits financed from public funds, the insurance and reinsurance activity act, hygienic and sanitary regulations;
   5. in order to provide your data should it be required to inform competent authorities, since this is necessary to protect your vested interests or vested interests of another individual (protection of life, health, property) art. 6, item 1, letter d of GDPR);
   6. for analytical purposes, better selection of services adjusted to our clients’ needs, financial analysis of our company constituting implementation of our legally justified interest - art. 6, item 1, letter f of GDPR;
   7. for archiving (investigation) purposes constituting implementation of our legally justified interests to protect information should it become legally necessary to prove facts - art. 6, item 1, letter f of GDPR;
   8. in order to potentially determine, investigate or protect against claims constituting execution of our legally justified interest - art. 6, item 1, letter f of GDPR;
   9. in order to tests clients’ satisfaction level constituting our legally justified interest to determine our service quality and clients’ satisfaction level with the products - art. 6, item 1, letter f of GDPR;
   10. in order to directly offer products and services, constituting execution of our legally justified interest - art. 6, item 1, letter l of GDPR;
   11. in order to check client’s creditworthiness based on information from loan information offices, in particular from the Economic Information Bureau, or data available in the Administrator’s database pursuant to your consent - art. 6, item 1, letter a of GDPR;
   12. you are each and every time entitled to withdraw your consent for personal data processing, yet such withdrawal shall have no impact on compliance with the right to process which has been exercised based on your consent expressed before its withdrawal.
4. Right to object
   1. You are each time allowed to object to the processing of your personal data referred to hereinabove. We will cease your data processing for these purposes, unless we can prove we have important and legally justified grounds regarding your data which prove more important than your interests, rights and freedoms, or your data are essential for us for potential determination, investigation or protection against claims.
   2. You are each and every time entitled to object against your data processing for purposes related to products and services being directly offered by us. If you exercise this right, we shall discontinue your data processing for this purpose.
5. Data storage period 
   1. Your personal data resulting from the agreement concluded by us, or our distributor, shall be processed for the period during which claims related to the agreement may be raised, i.e. for the cooperation period +5 +1 year, since the end of the year when the agreement expired, while 3 years shall be the longest possible claims limitation period, 5 year is the period resulting from tax regulations (tax ordinance, accounting act and personal income tax act and corporate income tax act) for legal hold, the additional year is in case of claims reported at the last moment and delivery-related problems and calculating started since the end of the year is meant to determine one specific date for deleting data for agreements expiring in a given year.
   2. Should cooperation not be started, personal data will be stored for period beginning from quotation submittal by us until your consent withdrawal by you.
   3. Data for purposes of our direct quotations of products and services can be processed until objection against data processing for this purposes is raised by you or until we’ve determined the data have become out-of-date.
6. Data receivers
   Your personal data can be disclosed to: our partners, distributors, carriers or companies with whom we cooperate combining products or services.
   Your data can also be accessed by our sub-suppliers (data processing entities), e.g. accounting, legal, IT companies, claims adjusters, service provides related to claims adjustment, insurance companies, marketing agencies
7. Rights of individuals whom the data are related to:
   According to GDPR, you have the right to:
   1. access your personal data and receive their copies;
   2. straighten our (correct) your data;
   3. delete the data, restrict their processing;
   4. object against data processing;
   5. data transfer;
   6. make a complaint to a supervisory authority.
8. Information about the requirement/voluntary character of data providing
   Providing data is a duty resulting from art. 6, item 1, letter b of GDPR.
   Providing data is of voluntary character, yet it is necessary to begin cooperation and conclude an agreement.