Privacy Policy

Information obligation

In accordance to the Regulation of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regards to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union No. 119) (hereinafter “GDPR”), we provide information on your personal data that we can obtain or obtain by using the functionality of our website.

Personal Data Administrator

The administrator of your personal data is Sygnity S.A. with its registered office in Warsaw (02-676), ul. Postępu 17B (hereinafter referred to as the “Company”).

Contact to the Data Protection Officer

The administrator appointed Data Protection Officer. The inspector is Mr. Patryk Ferenc. You can contact him by e-mail: iod@sygnity.pl

Processing Purposes, Legal Basis and Processing Period

Purpose: Receiving the answer to the question asked:
1. within the purpose above, the data provided will be processed for the purposes of answering the question asked,
2. the legal basis for data processing is article 6 par. 1 letter a GDPR, i.e. agreement,
3. storage time of the provided data: until a satisfactory answer is given and the correspondence is completed, the absence of a reaction to the Company`s response no longer than 3 months;

Purpose: Receiving an offer or establishing cooperation:
1. the data provided in this case will be processed for the purpose of personalizing and presenting the offer or discussing cooperation proposals,
2. the legal basis for processing in this case is article 6 par. 1 letter b GDPR, i.e. taking action before the conclusion of the contract at the request of the person reporting to us and article 6 par. 1 letter f GDPR – because we also want to be able to present you our offer or cooperate, it is also our legitimate purpose to be able to convey to you our proposal to establish the fruitful cooperation for both Parties;
3. the duration of data storage in the absence of interest of the Parties to undertake any cooperation will last up to 6 months from the time of termination of contact – during this time both Parties (You and/or the Company) will be able to contact each other again, remaining the previous arrangements; in the event of cooperation, the storage period for the entrusted data will be determined by separate provisions between You and the Company.

Purpose: Contact at the request of a person expressed in a different way:
1. your personal data has been provided by you in a different way than by the Contact Form on the website: i.e. by giving us a business card, sending an email to the company's general address, or by phone;
2. the specific purpose of contact resulting from the context of the data transfer or conversation with a person will be suited to one of the above two purposes and proceeded in the same manner.

The categories of the personal data receivers

The data can be shared with the other subjects from the Sygnity S.A. Capital Group to be able to execute the purpose for which the data was transferred. Specific information about the capital group you can find here: https://www.sygnity.pl/grupa-sygnity

Rights of the Data Subject:

In terms of purpose No. 1: You have the right to access the data disclosed, to rectify it, delete or limit processing, as well as to transfer the data; In addition, you can withdraw your consent to the processing of your data expressed at the time the question is asked at any time - this operation will not affect the lawfulness of the processing carried out prior to withdrawal of consent;
In terms of purpose No. 2: You have the right to access the data disclosed, to rectify it, delete or limit processing, as well as to transfer the data.

Right to object:

It should be emphasized that you also have the right to object the personal data being processed within the terms of purpose No. 2, where your data is processed on the basis of article. 6 par. 1 letter f GDPR.

Right to file a complaint to the supervisory authority

In case when the provided personal data is processed in violation of the law, you have the right to lodge a complaint with the supervisory authority.

Information on the necessity to provide data and the consequences of not providing data

Providing the data is fully voluntary for each of the above purposes. The consequence of not providing data is the inability to achieve a purpose and contact.

Additional information

By visiting our website additional information about you may be collected via "cookies" - detailed information on this subject can be found at Cookies Policy

To simplify the comprehension of the table above, we have created for you a Glossary of terms from GDPR that are included in the table:

Personal Data Administrator – The administrator is an enterprise (company) to which you provide your personal data (e.g. name, surname, e-mail address). The administrator has the right to use your personal data for specific purposes, e.g. to answer a question asked in the contact form. At the same time, he is also responsible for their safety.
Data Protection Inspector – It is a person assigned by the Administrator who is responsible for ensuring compliance with the provisions of GDPR. In case of any doubts as to the correctness of processing with the applicable provisions of your personal data, please contact us at the e-mail address provided.
Processing purposes, Legal Basis and Processing Period – the processing legal basis result directly from the provisions of GDPR, however it should be adapted to the specific purpose. The purposes for which you provide us with your personal data result from specific expectations in relation to our Company, i.e. presentation of the offer, response to a question etc. The Data Processing Period is the time for which the Administrator stores the given data in order to be able to meet the set purpose. The transfer of data in order to fulfill a given purpose can be transferred in various ways. It should be assumed that the transfer of personal data by the Entrepreneur is equivalent to expressing the desire to contact for the purpose set when transferring the data.
The categories of the receivers of the personal data – These are other enterprises or third parties to whom the Administrator may transfer your personal data for processing. The transfer of data to these entities must be justified and take place for specific reasons, i.e. the Administrator is not able to answer the question on his own or present an appropriate offer, therefore he asks the appropriate company, which helps to answer your question.
Rights of the Data Subject – These are the rights You have in relation to the provided data:
1. The right to access the data – You have the right to ask the Administrator to obtain the information about what personal data is in his possession at any time.
2. The right to rectify data – if the data provided by you changed, you can ask the Administrator about the need to correct it at any time.
3. The right to delete the data – If the Administrator does not have the need to process the information on your opinion, you can request the data removal. Please note that if the Administrator completes a request to delete data, he will not be able to contact you anymore. There are also legally justified cases when the entrusted data cannot be deleted, i.e. the Administrator has not yet completed the process for which the data has been transferred.
4. The right to limit the data processing – in case of the conditions specified in article 18 GDPR, and you request the Administrator to limit the processing of personal data, as a consequence the Administrator will only be able to store your data (or use it to defend against claims) – he will not be able to use it in any other way until a request is revoked premises occur that will result in rejection of the request by the Administrator – the Administrator will immediately inform you about that.
5. The right to transfer the data – you have the right to ask the Administrator to transfer the data to another Administrator, i.e. another company, this right may be executed when the data is processed on the basis of article 6 par. 1 letter a, b or article 9 item 2 letter a GDPR. It should be noted that this right can be executed only if the technical conditions allow the Administrator to do so.
6. The right to object – any data subject is processed on the basis of article 6 par. 1 letter e or f has the right to object to the processing of his personal data in connection with her particular situation. In this case, the Administrator must stop processing shared data. However, it should be noted that if the Administrator’s interest is justified and superior to the rights of the data subject, he may reject the objection and process the data after informing the data subject about such circumstances.
Right to file a complaint – If the Administrator’s activities that directly relate to your data violate the law on Your opinion, you may submit a complaint to the Office for Personal Data Protection at any time.