Privacy policy of PST OSTSPED sp. z o. o.
The privacy policy is a document describing the principles of personal data protection applied by the Administrator in order to meet the requirements of Regulation PE and RE 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data, hereinafter referred to as the GDPR. The policy is one of the organizational measures aimed at demonstrating that the processing of personal data is carried out in accordance with this regulation, as well as improving and systematizing the Administrator’s work organization.
1. Administrator
The administrator of personal data, i.e. the entity that decides on the processing of personal data, is PST Ostsped sp. z o. o. with its registered office in Gądki, ul. Magazynowa 5a, 62-023, hereinafter referred to as the Administrator. The administrator directs this information to natural persons in connection with the need to fulfill the obligations set out in art. 13 sec. 1 and 2 and art. 14 sec. 1 and 2 of the General Regulation on the Protection of Personal Data of April 27, 2016 – hereinafter referred to as: GDPR. You can contact the Administrator for more information about the processing of your personal data. Contact with the Administrator is possible via e-mail, i.e. iod@ostsped.pl or via a traditional, correspondence form of contact. Correspondence should be sent to the following address: Pst Ostsped Sp. z o. o. Gądki, ul. Magazynowa 5a, 62-023.
The source of your personal data; Your personal data may have been sent to the Administrator directly, which applies, for example, to the use of the contact form on the website www.Ostsped.pl or by establishing commercial cooperation with the Administrator.
2. Purpose of data processing
2.1 We may process your data by answering questions sent via the contact form – the basis for processing – your consent and the legitimate interest of the Personal Data Administrator, which should be considered marketing of own services and/or action taken by the Administrator at your request before concluding a possible contract (i.e. Article 6(1)(a) and (f) of the GDPR in connection with Article 10 of the Act of 16 July 2002 on the provision of electronic services and/or Article 6(1)(b) of the GDPR).
2.2 We may also process them for the need to answer other questions and requests that do not relate to the services offered by the Administrator – the basis for processing – your consent (i.e. Article 6(1)(a) of the GDPR).
2.3 Implementation of other forms of marketing of own services, including running fun pages and organizing competitions and other types of corporate events – the basis for processing – your consent and / or the necessity of processing for the performance of the contract and / or the implementation of the legitimate interest of the Personal Data Administrator, for which marketing of own services should be considered (i.e. Article 6(1)(a) and/or (b) and/or (f) of the GDPR).
2.4 We also process data for the purpose of performing a contract with a client, supplier or other type of contractor who is a natural person, which also applies to actions taken at your request before the conclusion of the contract – the basis for processing – the necessity of processing for the performance of the contract, as well as to carry out activities at your request before concluding the contract (i.e. Article 6(1)(b) of the GDPR).
2.5 Implementation of commercial cooperation through the processing of your personal data (concerning natural persons running a sole proprietorship, as well as employees, representatives and persons performing a task for such natural persons and legal persons) – the basis for processing – the necessity of processing in connection with the need to fulfill the legal obligation of the Data Administrator (i.e. Article 6(1)(c) of the GDPR).
2.6 Fulfillment of all legal obligations incumbent on the Administrator, i.e. mainly accounting and tax obligations, or obligations in the field of exercising consumer rights (e.g. warranty and guarantee) – the basis for processing – the necessity of processing in connection with the need to fulfill the legal obligation incumbent on the Data Administrator (i.e. Article 6(1)(c) of the GDPR in connection with the provisions of other specific acts).
2.7 Acquisition and further processing of data that is public or appearing in public registers of entities conducting business activity – the basis for processing – the legitimate interest of the Personal Data Administrator, which should be considered the implementation of statutory activities (i.e. Article 6(1)(f) of the GDPR).
2.8 Protection of the Administrator’s interests and property and protection of own claims, as well as defense against possible claims – the basis for processing – the legitimate interest of the Data Administrator, which should be considered the protection of the Administrator’s own interests and property described earlier, also implemented through the use of video monitoring, which includes production and storage rooms as well as the space around the Administrator’s seat (i.e. Article 6(1)(f) of the GDPR).
3. Scope of data processing
In the course of processing activities, the Administrator applies the principle of data minimization. We try to process the minimum and necessary catalog of personal data, if it is not explicitly defined by law. The implementation of the purposes of processing described above, in the vast majority of cases, does not require the processing of special categories of personal data, i.e. also health data. Therefore, if personal data comes directly from you, do not provide the Administrator with an excessive catalog of data.
4. Your rights in connection with data processing
- Right of access to data.
- Right to rectification.
- Right to erasure.
- Right to restriction of processing.
- Right to data portability.
- Right to object.
The administrator indicates that the preferred form of contact when implementing an extensive catalog of rights is via e-mail: iod@ostsped.pl
If you have any questions or concerns, please contact us!