RODO

    INFORMATION OBLIGATION

    In accordance with Article 13 and 14 (1) and (2) of the General Regulation on the Protection of Personal Data of 27 April 2016, I inform you that the Controller of personal data is SAT Ltd., Grochowska Street 27, 60-277 Poznan. Contact to the Data Protection Officer: iod@sat.poznan.pl

    1. The purpose, legal basis and retention period for the processing

     

    Purpose of personal data processing

    That legal basis for the processing

    Retention period

     

    Conclusion of contract and its execution

    (Article 6(1) (b) GDPR) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

    6 years

     

    Debt collection

    (Article 6(1) (b) GDPR) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

    (Article 6(1) (c) GDPR) Processing is necessary for compliance with a legal obligation to which the controller is subject.

    (Article 6(1) (f) GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller – ensuring the settlement of accounts receivable.

    Until payment is made or legal proceedings are commenced

     

    Storage and issuance of accounting documents

    (Article 6(1) (c) GDPR) Processing is necessary for compliance with a legal obligation to which the controller is subject.

    5 years from the time of data collection, starting from the first of January of the following year

     

    Internal reporting

    (Article 6(1) (f) GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller – ensuring accountability for actions taken by customers

    5 years from the time of data collection, starting from the first of January of the following year

    2. Your personal data will be entrusted to companies providing IT support services, companies providing document shredding services, controlling bodies, law firms and may be made available to authorized entities upon documented request.

    3. To the extent arising from the GDPR and with the limitations indicated therein, you have the right of access to the content of your data and the right to rectification, erasure, restriction of processing, the right to data portability, the right to object. You have the right to lodge a complaint to the Personal Data Protection Office located at Stawki Street 2 in Warsaw. More information available at www.uodo.gov.pl.

    4. Your personal data will not be transferred outside the European Economic Area by the Controller. However, such transfer may be conducted by, among others, Microsoft, as a provider of Microsoft 365 as part of its use of global cloud services. Microsoft performs the transfer outside the EEA using safeguards based on standard contractual clauses in accordance with Article 46(2) GDPR.

    5. Your personal data will not be used for automated decision-making processes including profiling.

    6. Providing your personal data for the purposes described above is obligatory. It results from the legislation, the concluded contract, or results from the legitimate interest of the controller. The consequence of not providing the personal data will be impossible to conclude and/or perform the contract.