GDPR

COMPLIANCE WITH INFORMATION OBLIGATION

Pursuant to Art. 13 par. 1 and 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “Regulation 2016/679”, AC S.A. announces herewith that the controller of your personal data is AC Spółka Akcyjna, with its registered office in Białystok, ul. 42 Pułku Piechoty 50, 15-181 Białystok. AC S.A. created a special e-mail address: rodo@ac.com.pl, at which you can contact the controller in any matter regarding the processing of your personal data.

Your personal data will be processed on the basis of:
a) Art. 6 par. 1 letter a) of Regulation 2016/679 for one or more specific  purposes for which you have given consent to the processing of your personal data – to the extent the provision of personal data is  optional (e.g. consent to newsletters) ;
b) Art. 6 par. 1 letter b) of Regulation 2016/679 for the purpose of and insofar as it is necessary for entering and performance of a contract (this applies solely to contracts entered into with AC S.A.);
c) Art. 6 par. 1 letter c) of Regulation 2016/679 for the purpose of compliance with legal obligations to which the controller is subject, including obligations resulting from the tax law or other specific laws, e.g. requirements concerning type approval);
d) Art. 6 par. 1 letter a) and f) of Regulation 2016/679 for the purpose of direct marketing of products and services of the controller – the legal basis for the processing of data in this case is the consent of the authorised person and legitimate interest of the controller;
e) Art. 6 par. 1 letter f) of Regulation 2016/679 for analytical and statistical purposes – here the legal basis for the processing is legitimate interest of the controller, involving the possibility of carrying out commercial and market analyses, as well as gathering information relating to business partners’ preferences, including, inter alia, for the purpose of development or improvement of products and rendered services;
f) Art. 6 par. 1 letter f) of Regulation 2016/679 for the purpose of asserting any legal claims or defence against such claims by the controller – the legal basis for the processing of personal data is legitimate interest of the controller which involves making it possible to assert claims or defend against claims.

Your personal data will be transmitted, as necessary, to the entities the controller cooperates with, such as suppliers of IT systems and services, entities providing AC S.A. with legal, advisory or similar services, postal service operators and couriers, banks within the scope of payment execution, as well as authorities authorised to receive your personal data under the provisions of the law. Your data will be stored, as a rule, throughout the term of the concluded contract or consent granted. The period of personal data processing may be extended, from time to time, by the limitation period applicable to claims, providing personal data processing is necessary for AC S.A. to assert legal claims or defend against such claims. After the lapse of this period your personal data will be processed only within the scope and for the duration required under applicable provisions of the law, including the provisions of tax law.

The provision of your personal data referred to in letter b) above is the condition for entering and performance of the contract referenced therein. Each and every consent granted by you may be withdrawn  at any time, which, in the case of consent to the processing of personal data in connection with the contract  referred to in letter b) above, shall result in termination of the same with immediate effect. The withdrawal of consent shall not affect the lawfulness of processing based on the consent before its withdrawal nor shall it affect the possibility of personal data processing under the applicable provisions of law. For evidentiary purposes, AC S.A. kindly requests that consents be withdrawn in writing or by electronic means. At any time, you have the right to request from the controller access to and rectification or erasure of personal data, or restriction of their processing or to object to the processing, as well as the right to data portability. You also have the  right to lodge a complaint with a competent supervisory authority dealing with personal data protection, that is the Personal Data Protection Office, should you believe that the processing of your personal data breaches the provisions of Regulation 2016/679. Your data may be processed by automated means and may be subject to profiling.