Employee and Associate Contractor Information Clause

On 25 May 2018, the regulation of the European Parliament came into force and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as the GDPR.

In connection with the above, fulfilling the information obligation resulting from the above regulation, we would like to inform you that:

1: The Contoller of your personal data is Flexi Force Poland Sp. z o. o. with its registered office in Głowno, 17/19 Ludwika Norblina Street, 95-015 Głowno, KRS 0000269922,

NIP: 5252382009, REGON: 140778030, e-mail address: privacy.pl@flexiforce.com

2: You may contact the Data Protection Coordinator at your e-mail address:  privacy.pl@flexiforce.com

3:Your personal data have been made available to the Contoller by our Contractor, whom you represent, are an employee or collaborator or have been obtained from public registers (e.g. business registers), in connection with the conclusion and performance by the Controller of the commercial contract, which is bound by the entity you represent, you are an employee or associate.

4: We will process the following categories of your personal data:

a) for persons representing: name and surname, population register number, function in the body representing you, your position, your business e-mail address, telephone number,

b) for other persons: name and surname, business e-mail address, telephone number, position.

5: The processing of your personal data will take place when it results:

a) the fulfilment of legal obligations imposed on the Controller, based on Article 6(1)(c) GDPR;

b) and when it is necessary for the purposes of legitimate interests pursued by the Contoller pursuant to Article 6(1)(f) of the GDPR – namely, the conclusion and performance of a commercial agreement between the Contoller and the entity you represent, of which you are an employee or co-worker, fraud prevention, ensuring the security of the IT environment, applying internal processes for supervising compliance with the law, as well as determining, investigating and defending against claims of third parties.

6: Potential recipients of your personal information are entities with whom it is necessary to cooperate in the execution of the agreement between the Contoller and the entity you represent, of which you are an employee or collaborator.

7: The Controller may transfer your personal data to the following entities:

a) to entities processing your personal data in connection with tasks ordered by the Contoller and performed on its behalf;

b) to cooperating entities and contractors, subcontractors;

c) postal/courier operators who will deliver mail;

d) law firms to which the Contoller has commissioned, for example, to conduct possible court proceedings or provide other assistance within the framework of legal services;

e) entities or bodies authorized under the law.

8: The Contoller shall not transfer your personal data to third countries (outside the EU/EEA area) or international organizations. The transfer of your personal data to entities in third countries, however, may take place in particular when:

a) The controller maintains its data resources and copies on the servers of third parties located in third countries;

b) entities providing SMS and e-mail services for notifications generated in pdf are located in a third country;

c) in case of the situation described in points a) and b) above, the Contoller shall apply the standard contractual clauses adopted by the European Commission regarding the protection of personal data. An exception to the above rule is a situation where the data transfer takes place to third countries in relation to which the European Commission has issued a decision

If the decision to maintain an appropriate level of personal data protection is made, the transfer of data is based on the decision itself.

9: You have the right of access to the content of your personal data and the right to rectify, delete, limit the processing, the right to transfer personal data, the right to object.

10: You also have the right to lodge a complaint with the Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa (i.e. the supervisory body within the meaning of the GDPR), if you believe that the processing of your personal data violates the provisions of the GDPR.

11: Your personal data is stored for the time necessary to conclude and the performance of the commercial agreement referred to above. The period of storage will be extended by the period of limitation of claims if the processing of your data is necessary for the Contoller to determine or assert possible claims or defend against such claims. After these periods, your data will be stored only for the time required by law.

12: Your personal data is not subject to automated decision making, including profiling.