I. Data Controller
The data controller is the owner of the sq9nfi.pzk.pl website, Jarek SQ9NFI hereinafter referred to as: „the Controller.”.

II. Contact with the Data Protection Officer
Any questions concerning the processing of personal data by the Controller may be addressed to the Controller, acting as the Data Protection Officer, by e-mail: sq9nfi@pzk.pl

III. Purposes and legal bases for data processing
The Controller will process the personal data you provide during the registration for services provided by the Controller for the following purposes:
  1. direct marketing, including analytics and profiling, as well as presenting information and commercial offers for the Controller’s own products and services, and presenting commercial offers from suppliers of those products and services cooperating with the Controller. The legal basis for processing personal data for the above purpose is your consent,
  2. communicating with you using telecommunications terminal equipment for the purpose of carrying out information, commercial and marketing activities concerning the Controller’s own products and services and those of entities cooperating with the Controller, as well as partners’ marketing activities related to the intermediation of other services and products. The legal basis for processing personal data for the above purpose is your consent,
  3. entering into and performing a contract for the provision of services or the sale of products. The legal basis for processing personal data for the above purpose is the concluded contract or your request made before entering into the contract,
  4. providing services at the highest level of quality and with due care, in accordance with the standards applicable within the Controller’s organisation, the requirements of business partners and the Customer’s expectations. The legal basis for processing personal data for these purposes is the pursuit of the Controller’s legitimate interests,
  5. disclosing personal data to entities cooperating with the Controller so that those entities can carry out information, commercial and marketing activities, including profiling and statistical activities, by communicating with you via telecommunications connections, electronically or by post. The legal basis for processing personal data for the above purpose is your consent,
  6. fulfilling a legal obligation incumbent on the Controller, such as the obligation to retain data required by law for a specified period, in particular tax and accounting records, and detecting crimes and financial fraud. The legal basis for processing personal data for these purposes is the pursuit of the Controller’s legitimate interests,
  7. processing applications and complaints and, where applicable, establishing, pursuing or defending claims. The legal basis for processing personal data for these purposes is the pursuit of the Controller’s legitimate interests.

IV. Data recipients
Recipients of personal data—entities to which the Controller may disclose your personal data—may include entities cooperating with the Controller, in particular entities providing services to the Controller, including providers of IT systems and other IT services. Personal data may also be transferred to public authorities authorised to receive it, within the scope and on the basis of generally applicable legal provisions.

V. Processing period
Personal data will be processed until consent to its processing is withdrawn. After that period, the data will be processed solely for the purposes and for the period required by generally applicable law. The legal obligation to retain data is provided for, among other things, by accounting regulations (5 years) and anti-money-laundering regulations (5 years). To the extent necessary to establish, pursue or defend claims, your data will be retained until the limitation period for any civil claims expires and for defence against criminal claims (up to 15 years). For the purposes of duly providing the services referred to in points 3–4.

VI. Rights of data subjects
The data subject has the right to access the content of their data and request its rectification, erasure or restriction of processing, the right to data portability and the right to object to processing. The data subject has the right to withdraw consent to the processing of their personal data at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of personal data infringes the GDPR.

VII. Obligation to provide data
Providing your personal data is necessary for the provision of services performed by the Controller and cooperating partners.