I. Person responsible for GDPR
The person responsible for GDPR is the owner of the sq9nfi.pzk.pl website, Jarek SQ9NFI hereinafter referred to as: „the Administrator”.

II. Contact with the person responsible for GDPR
Any questions concerning the processing of personal data by the Administrator may be directed to the person responsible for GDPR by e-mail: sq9nfi@pzk.pl

III. Purposes and legal bases for data processing
The Administrator will process the personal data you provide during the registration for services provided by the Administrator for the following purposes:
  1. direct marketing, including analytical activities and profiling, as well as providing information and commercial offers for the Administrator’s own products and services, and providing commercial offers from suppliers of these products and services cooperating with the Administrator. The legal basis for processing personal data for the above purpose is your consent,
  2. communicating with you using telecommunications terminal equipment for the purpose of providing information, commercial and marketing communications concerning the Administrator’s own products and services and those of entities cooperating with the Administrator, as well as marketing activities of partners in the intermediation of other services and products. The legal basis for processing personal data for the above purpose is your consent,
  3. entering into and performing a contract for the provision of services or sale of products. The legal basis for processing personal data for the above purpose is the concluded contract or your request prior to entering into a contract,
  4. providing services at the highest quality level and with due diligence in accordance with the standards applicable within the Administrator’s organization, the requirements of business partners and the Customer’s expectations. The legal basis for processing personal data for these purposes is the pursuit of the Administrator’s legitimate interests,
  5. disclosing personal data to entities cooperating with the Administrator so that these entities can carry out information, commercial and marketing activities, including profiling, as well as statistical activities, by communicating with you via telecommunications connections, electronically or by postal correspondence. The legal basis for processing personal data for the above purpose is your consent,
  6. fulfilling a legal obligation incumbent on the Administrator, e.g. the obligation to retain data required by law for a specified period, in particular tax and accounting records, and detecting crimes and financial fraud. The legal basis for processing personal data for these purposes is the pursuit of the Administrator’s legitimate interests,
  7. processing applications and complaints and, where applicable, establishing, pursuing or defending claims. The legal basis for processing personal data for these purposes is the pursuit of the Administrator’s legitimate interests.

IV. Data recipients
Recipients of personal data—entities to which the Administrator may disclose your personal data—may include entities cooperating with the Administrator, in particular entities providing services to the Administrator, including providers of IT systems and other IT services. Personal data may also be transferred to public authorities entitled to receive it, within the scope and on the basis of generally applicable laws.

V. Processing period
Personal data will be processed until consent to its processing is withdrawn. After that period, the data will be processed solely for the purposes and for the period required by generally applicable law. The legal obligation to retain data is provided for, among others, by accounting regulations (5 years) and anti-money-laundering regulations (5 years). To the extent necessary to establish, pursue or defend claims, your data will be retained until the expiry of any civil claims and for defense against criminal claims (up to 15 years). For the purposes of properly providing the services referred to in points 3–4.

VI. Rights of data subjects
The data subject has the right to access the content of their data and to request its rectification or erasure, restriction of processing, the right to data portability and the right to object to processing. The data subject has the right to withdraw consent to the processing of their personal data at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of personal data violates GDPR provisions.

VII. Obligation to provide data
Providing your personal data is necessary for the provision of services carried out by the Administrator and cooperating partners.