Information obligation
The data administrator is Kreatus sp. z o. o. street 11 Listopada 60-62, 43-300 Bielsko-Biała, e-mail: rodo@kreatus.eu, registered in the register under the number 0000482632
You have the right to access your data, correct it, request its deletion, the right to limit processing, the right to object to the processing of your personal data and the right to transfer it. You have the right to lodge a complaint with the supervisory authority if your data is processed contrary to legal requirements.
The data will be processed for the purpose of:
performance of the service contract concluded with us
marketing, based on your additional consent, also via messages sent to your e-mail address
sending an offer for our services to the e-mail address you provided in your inquiry
confirmation of the terms and specifications of our services
conducting research commissioned by companies cooperating with us under a contract
Providing data is voluntary. You do not have to provide us with them, but without providing the data we will not be able to send you an offer for our services
The legal basis for the processing of your data is Art. 6 section 1 letter a, b and letter f GDPR, i.e. this regulation. The legitimate interest of the Administrator is marketing of its own services. If you agree to receive additional marketing messages also to your e-mail address, the legal basis will also be Art. 10 of the Act on the provision of electronic services and Art. 172 of the Telecommunications Law.
The recipients of personal data will be: our employees, accounting office, law firm, contractors.
Personal data will be processed until
duration of the contract, and after its completion for the time necessary to demonstrate proper performance of the contract. This time corresponds to the length of the limitation period for claims;
conducting marketing activities or until you object to further processing of personal data for marketing or other purposes specified above, or until you withdraw your consent to sending messages to your e-mail address or communication to the telephone number provided by you
your withdrawal of consent does not affect the lawfulness of processing before your consent was withdrawn.
Your data will be transferred to countries outside the European Economic Area. We use a platform provided by Google and we are not sure where Google processes your personal data. Google has met users' expectations in this respect and when using G-suite business services, the content of privacy protection documents has been adapted to the requirements of the GDPR. Relevant records include, among others: Google's commitment to participate in the Privacy Shield program. This is a voluntary program under which US companies can commit to complying with EU personal data protection regulations and be subject to possible inspections by the US Department of Commerce in this respect. Additionally, the content of the privacy protection rules also includes regulations corresponding to the content of the contract entrusting the processing of personal data.
You have two types of right to object to the processing of your personal data if we process it:
on the basis of legitimate interests, you may object for reasons related to your particular situation;
for direct marketing purposes, you can object to this in any case.