In accordance with Art. 13 par. 1 and par. 2 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – hereinafter RODO/GDPR), we inform that:
I. Data Protection Officer
The data controller of your personal data is Int4 AG, Bahnhofstrasse 11, 6300 Zug, Switzerland, you can contact the Data Protection Officer via email: firstname.lastname@example.org
II. Purposes and basics of processing
1. Realization of the cooperation agreement (art. 6 ust. 1 lit. b)
2. The legitimate interest of the data controller in the event of possible determination, investigation or defense against claims (art. 6 ust. 1 lit. f)
3. Performance of a legal obligation, including obligations arising from tax regulations (art. 6 ust. 1 lit.c)
4. The contractor's consent to the processing of data to a wider extent than those required to conclude the contract (art 6 ust. 1 lit. a)
III. Recipients of personal data
The recipients of your personal data will be:
entities running human resources and accounting, entities providing computer services and software, in particular electronic mail and CRM services, disk space, etc. which provide us with IT solutions to support our business, entities providing postal or courier services (if it comes to sending your shipments), entities providing hosting and electronic mail services (including shipments), entities providing payment services, entities providing advisory and legal services, management and board, authorized employees and associates, for whom knowledge of personal data will be necessary to perform the tasks arising from the cooperation agreement.
In our activities, where necessary, e.g. dictated by law, we may transfer your personal data to recipients who act as separate administrators. These are mainly entities authorized to do so on the basis of legal provisions, in particular tax offices, ZUS, police etc. This only happens in cases regulated by law, as a result of performing an obligation or at the request of such an entity. Transferring data to other recipients may also take place on the basis of your consent. These entities are responsible for further processing of your personal data.
IV. Personal data processing time:
1. Personal data necessary to conclude and perform the contract - art. 6 clause 1 b) RODO we store for the time necessary to perform the contract and make necessary settlements under it;
2. Data necessary to fulfill our legal obligations - legal basis of art. 6 clause 1 c) RODO covering, among others:
obligations for withdrawing or terminating the contract (for the duration of these obligations)
obligations related to the issue and storage of invoices and documents required by accounting regulations - until the invoice and documents are issued, and then for the duration of their storage required by legal regulations;
3. Data necessary to implement the so-called legitimate interests - legal basis of art. 6 clause 1 f) RODO we store until the limitation of claims under the contract or our actions related to the contract or with pre-contractual requests (maximum 10 years from the performance of the contract or with requests before its conclusion or a final court decision)
4. Data we process based on the consent granted - legal basis of art. 6 section 1 letter a - we process until withdrawn.
V. Rights of the personal data subject:
You are entitled (in situations indicated by the provisions of the GDPR/RODO):
• the right to access your data,
• the right to rectify your data,
• the right to remove your data,
• the right to restrict processing of your data,
• the right to object to personal data processing • for reasons related to your particular situation • in accordance with art. 21 GDPR.
To the extent that the basis for the processing of your personal data is consent based on the provisions of the GDPR, you have the right to withdraw such consent. Withdrawal of consent does not affect the processing that was carried out before its withdrawal.
You have the right to lodge a complaint with a supervisory authority if you feel that the processing of your personal data violates the provisions of the general regulation on the protection of personal data or national regulations.
VI. Do you have to provide your personal data?
Providing your personal data is voluntary, however, failure to provide data necessary to conclude the contract will result in the lack of conclusion of the contract.
VII. Transfer of personal data to third parties
Your personal data will not be transferred to a third country/international organisation, i.e. outside the European Union.
VIII. Automated processing, including profiling
Your personal data will be neither processed automatically nor profiled which may have legal effects on you or similarly significantly affect your situation.