In fulfilment of our obligations under Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR", which is applicable within the European Union from 25 May 2018, we inform you that:
The administrator of your personal data is Alures Sp. z o. o. with its registered office in Boguchwała, ul. Techniczna 2a, 36-040 Boguchwała, hereinafter referred to as: ALURES.
Regarding matters of data protection, you can contact ALURES at its registered office at the address: ul. Techniczna 2a, 36-040 Boguchwała, by telephone number 17 871 13 13 or email address: biuro@alures.pl
Your personal data is processed by ALURES in order to:
⦁ to cooperate with us and to handle matters relating to ALURES' cooperation, including the exercise of rights and obligations relating to the conclusion and performance of contracts, and to take action prior to the conclusion of a contract, and the legal basis for the processing is the contract or the need to take action prior to the conclusion of the contract - Article 6(1)(b) of the GDPR, as well as the legitimate interests of ALURES in the form of the need to maintain contact);
⦁ to conduct employment service matters, and in particular to receive information from persons interested in working at ALURES, and the legal basis for processing is:
- consent - in the case of processing data other than the data indicated in the Labour Code (Article 6(1)(a) of the GDPR) or processing data in future recruitment processes,
- contract or the need to take steps prior to entering into a contract - in the case of entering into a contract or taking steps prior to entering into a contract (Article 6(1)(b) GDPR),
- legal obligation (Article 6(1)(c) of the GDPR in connection with the relevant legal provisions, including the Labour Code Act and its implementing acts);⦁ considering complaints, and the legal basis for processing is the obligation resulting from legal provisions (Article 6 (1) (c) of the GDPR) and the concluded contract (Article 6 (1) (b) of the GDPR);
⦁ processing of complaints, and the legal basis for the processing is the obligation arising from the law (Art. 6 (1)(c) GDPR) and the agreement concluded (Art. 6 (1)(b) GDPR);
⦁ fulfilment of obligations (mainly tax law and accounting regulations) incumbent on ALURES with regard to record keeping, and the legal basis is a legal obligation (Art. 6(1)(c) GDPR);
⦁ to ensure the safety of persons and property on land owned or used by ALURES, and the legal basis for the processing is the legitimate interest on the part of ALURES in the need to ensure the safety of persons and property (Article 6(1)(f) of the DPA);
⦁ the establishment, investigation or defence of claims, and the legal basis is Article 6(1)(f) of the GDPR in the form of the need to ensure the establishment, investigation, defence of claims;
⦁ in the case of data processing based on consent - for the purpose indicated in the content of the consent given, and the legal basis for the processing is the consent given (Article 6 (1)(a) of the GDPR).
In certain situations, your data may be accessed by entities cooperating with ALURES in the course of its business, in particular entities to whom ALURES entrusted the processing of personal data under a contract, e.g. IT service providers, security service providers, as well as ALURES contractors cooperating with ALURES (e.g. investors, ordering parties, subcontractors), legal service providers, debt collection agencies, insurance companies, and other entities authorised by law to access your data.
ALURES does not transfer your personal data outside the European Economic Area.
Your personal data will be kept for the period necessary to fulfil the stated purpose, including the duration of the contract/cooperation and, upon termination of the contract/cooperation, for the period necessary to comply with ALURES' legal obligation to keep records under the law, as well as the statute of limitations for any claims, in accordance with applicable law, and in the case of consent to the processing of personal data, no longer than until you withdraw your consent, unless there is another basis for processing.
access to the content of your data (Article 15 of the GDPR),
rectify your data (Article 16 of the GDPR),
erase your data (Article 17 of the GDPR),
restrict data processing (Article 18 of the GDPR),
transfer of data (Article 20 of the GDPR),
object to the processing of data (Article 21 of the GDPR),
not to be subject to decisions taken pursuant to automated processing, including profiling Art. 22 GDPR)
If ALURES processes your data on the basis of your consent, you have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
In cases where you consider that the processing of your data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection.
Providing your data is voluntary, however, it is necessary in order to conclude and perform the contract - it is a contractual requirement. Failure to provide personal data can make it difficult or completely impossible to handle the matter in a manner consistent with your expectations; the consequence of failing to provide the data can be lack of the possibility of cooperation with ALURES.
Your personal data will not be processed in an automated means, including profiling.
The source of your personal data are the forms addressed to ALURES and the contracts concluded with ALURES, while in the case of obtaining personal data by means other than from the data subjects, the source of the data are third parties. In that case ALURES is obliged to inform those persons about the source of their data.