Personal Data Information Clause

Personal Data Administrator

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we inform you that the controller of your personal data is BlueSoft Sp. z o.o. with its registered seat at. Aleje Jerozolimskie 134, 02-305 Warsaw, phone no.: +48 22 37 37 000

Legal basis for processing personal data:

  1. consent to the processing of the data subject’s personal data, where applicable (GDPR Article 6(1)(a)),

  2. performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract, where applicable (GDPR Article 6(1)(b)),

  3. fulfilment of a legal obligation incumbent on the controller (GDPR Article 6(1)(c)), as determined by applicable laws, contracts and legal instruments,

  4. legitimate interests pursued by the controller or by a third party (GDPR Article 6(1)(f)):
    a) direct marketing of own products and services,
    b) establishment, assertion or defence of claims.

Personal Data Administrator’s contact details:

BlueSoft Sp. z o.o.
Aleje Jerozolimskie 134
02-305 Warsaw +48 22 37 37 000

The processing your personal data shall take place on the basis of art. 6 and 7 of the GDPR and for the purpose of implementing tasks related to communication regarding submitted offers and implemented projects. The administrator refers to the legitimate interest, which is art. 6 paragraph 1 let. e GDPR. Data processing is based on the provisions of national law, international agreements and applicable conventions.

Data Protection Officer in BlueSoft Sp. z o.o.

Diana Kisiała

iod@bluesoft.com

The Data Protection Officer can be contacted about all matters concerning the processing of personal data and the exercise of rights in relation to data processing.

Use of Personal Data

Recipients of personal data / categories of recipients of personal data – as appropriate to the specific purposes of processing: postal operators, banks, as well as natural persons authorized to process personal data by the controller or by processors or by entities cooperating with the controller, and other natural persons and entities authorized on the basis of applicable laws, contracts or other legal instruments.

Provision of your personal data:

  1. is a statutory requirement in respect of data the processing of which is necessary for the fulfillment of a legal obligation incumbent on the controller,
  2. is a contractual requirement and a condition for entering into a contract, in respect of data whose processing is necessary for the conclusion and performance of a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract.

Personal data will be retained for the period necessary to fulfill the aforementioned purposes of processing and, where applicable, also for the time required by applicable laws, contracts or other legal instruments.

You have the right to access the content of your personal data and the right to have them rectified, unless otherwise provided for in specific legislation.

You have the right to:

  1. access the content of your data (Article 15 of the GDPR),

  2. have your data rectified (Article 16 of the GDPR),

  3. object to the processing of your data (Article 21 of the GDPR),

  4. data portability (Article 20 of the GDPR),

  5. In selected cases where the processing of personal data is carried out on the basis of legal regulations, you have a limited right to:

    • have the processing of your data restricted (Article 18 of the GDPR),
    • have your data erased (right to be forgotten) (Article 17 of the GDPR).

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Your personal data will not:

  1. be subjected to automated decision-making processes,

  2. be subjected to profiling,

  3. be transferred to a third country or to an international organisation.

If you believe that our processing of personal data is against applicable legislation, you are encouraged to contact our Data Protection Officer for an explanation. We would also like to inform you that you may lodge a complaint with the President of the Office for Personal Data Protection in Warsaw, ul. Stawki 2, 00-193 Warsaw.