Privacy Policy

GDPR POLICY

regarding the performance of information obligations under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC

PROTON Tomasz Lisowski
31A Karola Dickensa Street, apt. 26B
02-382 Warsaw, Poland
Tax ID: 966-145-76-46 | Business ID: 200342208

Respecting your privacy and ensuring that you know how your personal data is processed, we present a set of the most important information related to EU Regulation 2016/679, known as the General Data Protection Regulation (“GDPR”)

Clause for Correspondents

DATA CONTROLLER

The controller of your personal data is PROTON Tomasz Lisowski with its registered office at 31A Karola Dickensa Street, apt. 26B, 02-382 Warsaw, Tax ID: 9661457646, Business ID: 200342208 (hereinafter referred to as the controller). For all matters related to the protection of personal data, please contact us at: t.lisowski@protonconsulting.pl.

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

Your personal data will be processed for the following purposes:

  • Registration of outgoing and incoming correspondence and sending and providing responses to received correspondence based on the legitimate interest of the controller, i.e., Article 6(1)(f) GDPR, consisting of timely response to letters, care for the quality of cooperation and proper communication,
  • Pursuing claims and defense against claims based on the legitimate interest of the controller, i.e., Article 6(1)(f) GDPR, which is the protection of the controller’s interests.

DATA RETENTION PERIOD

Your personal data will be processed until the matter that is the subject of the correspondence is resolved or for the period specified in the cooperation agreement (in the case of correspondence concerning the agreement), and after the achievement of the primary purpose for which they were collected, until the expiration of claims.

CATEGORIES OF DATA RECIPIENTS

The recipients of data may be entities from the following categories:

  • entities authorized on the basis of applicable laws (in particular courts and state authorities);
  • entities providing IT services (including email hosting providers), postal and courier services acting on behalf of the controller,
  • lawyers, legal advisors and other entities providing advisory and legal services cooperating with the controller.

YOUR RIGHTS

In connection with the processing of your personal data, you have the right to:

  1. request access to your personal data,
  2. request rectification of your personal data,
  3. request deletion or restriction of processing of your personal data,
  4. data portability (which is processed on the basis of a contract).

In addition, you have the right to object to the processing of personal data in the cases specified in Article 21 GDPR.

If you believe that your personal data is being processed inconsistently with legal requirements, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (2 Stawki Street, 00-193 Warsaw, https://www.uodo.gov.pl/).

INFORMATION ON THE REQUIREMENT OR VOLUNTARY NATURE OF PROVIDING DATA AND THE CONSEQUENCES OF NOT PROVIDING IT

Providing personal data is voluntary, however necessary for the registration of incoming correspondence and to provide a response to the correspondence received. In case of non-disclosure of personal data, it will not be possible to handle matters being the subject of correspondence.

Clause for Clients

DATA CONTROLLER

The controller of your personal data is PROTON Tomasz Lisowski with its registered office at 31A Karola Dickensa Street, apt. 26B, 02-382 Warsaw, Tax ID: 9661457646, Business ID: 200342208 (hereinafter referred to as the controller). For all matters related to the protection of personal data, please contact us at: t.lisowski@protonconsulting.pl.

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

Your personal data will be processed for the following purposes:

  • carrying out all necessary actions before concluding a contract (e.g., preparing documents or collecting necessary data to identify the parties to the contract) as well as concluding and executing a contract with the client (on the basis of Article 6(1)(b) GDPR) or establishing a relationship with a person representing a given client in order to sign a contract based on the legitimate interest of the controller, i.e., Article 6(1)(f) GDPR, which is striving to conclude and properly implement the contract,
  • fulfilling legal obligations incumbent on the controller in connection with maintaining accounting and tax documentation on the basis of Article 6(1)(c) GDPR resulting from the Accounting Act of September 29, 1994, the Corporate Income Tax Act of February 15, 1992, the Goods and Services Tax Act of March 11, 2004 and other provisions concerning the determination and expiration of tax obligations;
  • processing and submitting complaints in connection with the contract performed on the basis of the legitimate interest of the controller, i.e., Article 6(1)(f) GDPR, which is ensuring proper execution of the contract and quality of services provided;
  • pursuing claims and defense against claims based on the legitimate interest of the controller, i.e., Article 6(1)(f) GDPR, which is the protection of the controller’s interests and care for its reputation;
  • registration of outgoing and incoming correspondence and sending and providing responses to received correspondence based on the legitimate interest of the controller – Article 6(1)(f) GDPR, which is timely response to letters, fulfilling obligations in cooperation with contractors, ensuring proper communication with clients;
  • maintaining records of contractors along with verification of the contractor who provides services to the controller in accordance with internal procedures based on the legitimate interest of the controller, i.e., Article 6(1)(f) GDPR, which is striving for proper management of the contractor database and ensuring the quality of services provided.

DATA RETENTION PERIOD

Your personal data will be processed until the end of the contract, and after that period your personal data will be processed until the expiration of claims. Personal data resulting from tax documentation will be processed for 5 years from the end of the calendar year in which the tax payment deadline expired.

CATEGORIES OF DATA RECIPIENTS

The recipients of data may be entities from the following categories:

  • entities providing advisory and legal services cooperating with the controller,
  • entities authorized on the basis of applicable laws (in particular courts and state authorities),
  • specialized entities dealing with paid acquisition of information on the economic situation of enterprises,
  • entities providing IT and email hosting services acting on behalf of the controller,
  • entities providing postal and courier services acting on behalf of the controller,
  • entities providing accounting and bookkeeping services to the controller.

YOUR RIGHTS

In connection with the processing of your personal data, you have the right to:

  1. request access to your personal data,
  2. request rectification of your personal data,
  3. request deletion or restriction of processing of your personal data,
  4. data portability (which is processed on the basis of a contract).

In addition, you have the right to object to the processing of personal data in the cases specified in Article 21 GDPR.

If you believe that your personal data is being processed inconsistently with legal requirements, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (2 Stawki Street, 00-193 Warsaw, https://www.uodo.gov.pl/).

INFORMATION ON THE REQUIREMENT OR VOLUNTARY NATURE OF PROVIDING DATA AND THE CONSEQUENCES OF NOT PROVIDING IT

With regard to the processing of personal data in order to fulfill legal obligations incumbent on the controller, the obligation to provide data is a statutory requirement. In the case of other purposes, the provision of personal data is voluntary, but is necessary to conclude and execute the contract, and in case of non-disclosure it will not be possible to achieve the above purposes, i.e., conclusion and execution of the contract.

Clause for Job Candidates

DATA CONTROLLER

The controller of your personal data is PROTON Tomasz Lisowski with its registered office at 31A Karola Dickensa Street, apt. 26B, 02-382 Warsaw, Tax ID: 9661457646, Business ID: 200342208 (hereinafter referred to as the controller). For all matters related to the protection of personal data, please contact us at: t.lisowski@protonconsulting.pl.

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

We inform you that your personal data will be processed for the following purposes:

  • Selection of candidates for vacant positions in the current recruitment process on the basis of the provisions of the Labor Code regarding data included in Article 221 § 1 and § 2 of the Labor Code, i.e., Article 6(1)(c) GDPR and your consent (Article 6(1)(a) GDPR) if you provide data in the application documentation that goes beyond the scope of data specified in the Labor Code;
  • Conducting future recruitment if the candidate consents to participate and process their personal data for future recruitment purposes (Article 6(1)(a) GDPR).

Additionally, we ask you not to disclose health data in the submitted application documentation and not to attach additional health documents. However, if you provide us with this information, we will ask for additional consent to process sensitive personal data.

DATA RETENTION PERIOD

Your personal data will be processed for the following period:

  • personal data processed for the purpose of selecting a candidate for a vacant position in the current recruitment process will be processed until the end of the recruitment procedure, and after its completion the personal data will be deleted,
  • personal data processed for the purpose of building a database of job offers from candidates for future recruitment will be processed until the candidate withdraws consent, however not longer than 18 months from the moment of granting consent and after this time, even without withdrawing consent, the personal data will be deleted.

CATEGORIES OF DATA RECIPIENTS

The recipients of data may be entities from the following categories:

  • legal advisors and other entities providing advisory and legal services cooperating with the controller;
  • entities providing IT and email hosting services acting on behalf of the controller;
  • entities on behalf of which the controller conducted recruitment;
  • other entities not mentioned above, if the transfer of data to these entities is necessary in connection with the implementation of a specific purpose of data processing.

YOUR RIGHTS

In connection with the processing of your personal data, you have the right to:

  1. request access to your personal data,
  2. request rectification of your personal data,
  3. request deletion or restriction of processing of your personal data.

In addition, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Consent can be withdrawn in person at the controller’s registered office, by mail or electronically at the e-mail address: t.lisowski@protonconsulting.pl.

RIGHT TO LODGE A COMPLAINT

If you believe that your personal data is being processed inconsistently with legal requirements, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (2 Stawki Street, 00-193 Warsaw, https://www.uodo.gov.pl/).

INFORMATION ON THE REQUIREMENT OR VOLUNTARY NATURE OF PROVIDING DATA AND THE CONSEQUENCES OF NOT PROVIDING IT

With regard to the processing of personal data in order to fulfill legal obligations incumbent on the controller, the obligation to provide data is a statutory requirement. In the case of other purposes, the provision of personal data is voluntary, but is necessary to conclude and execute the contract, and the consequence of not providing data will be the inability to achieve the above purposes.

Clause for Newsletter Subscribers

DATA CONTROLLER

The controller of your personal data is PROTON Tomasz Lisowski with its registered office at 31A Karola Dickensa Street, apt. 26B, 02-382 Warsaw, Tax ID: 9661457646, Business ID: 200342208 (hereinafter referred to as the controller). For all matters related to the protection of personal data, please contact us at: t.lisowski@protonconsulting.pl.

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

Your personal data is processed for the purpose of marketing our own products and services by sending newsletters to the e-mail address indicated by you, based on your consent, i.e., Article 6(1)(a) GDPR.

RECIPIENTS OF YOUR PERSONAL DATA

The recipients of your personal data are service providers dealing with handling newsletter delivery and conducting direct marketing on behalf of the controller and entities providing IT and email hosting services and website on behalf of the controller.

DATA RETENTION PERIOD

Your personal data will be processed until you withdraw your consent to the processing of personal data.

YOUR RIGHTS

You have the following rights under GDPR:

  • the right to request access to your personal data,
  • the right to request rectification of your personal data,
  • the right to request deletion or restriction of processing of your personal data,
  • the right to data portability to another controller,
  • the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office.

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal via e-mail address: t.lisowski@protonconsulting.pl.

OBLIGATION TO PROVIDE PERSONAL DATA

The provision of your personal data is voluntary; without providing data and consenting, the controller will not be able to send you marketing information to the e-mail address indicated by you.