GDPR INFORMATION CLAUSE
As of 25 May 2018, new provisions of the General Data Protection Regulation (GDPR) have been in force.
For several years, the dobrzemitu studio, owned by me — Małgorzata Nawrocka — has been collecting your personal data for the purpose of providing studio services.
Who is the controller of your personal data?
(identity of the data controller)
The controller, i.e. the entity that decides how your personal data is used, is Małgorzata Nawrocka, owner of the dobrzemitu studio.
How can you contact us to obtain more information about the processing of your personal data?
You may contact us using the following details:
Postal address:
ul. Bracka 18, unit 70
00-028 Warsaw, Poland
E-mail address: zapisy@dobrzemitu.pl
Phone number: +48 606 91 92 91
Why do we process your personal data?
(purposes of processing)
We process your personal data for the following purposes:
- providing services if you are our client or act on behalf of our client, which may also include sending you offers,
- ongoing communication regarding the services we provide,
- sending you offers related to our business activity,
- ongoing communication if you or the entity you represent provides services to us,
- responding to your inquiries if you are our partner or client,
- sending invitations to events and workshops organized by us or on behalf of our clients,
- recruitment of employees and persons providing services under civil law contracts,
- qualitative and statistical analyses.
If you give your consent, we also process your personal data for:
- storing data in cookies and other identifiers,
- collecting data from websites and mobile applications.
Additionally, we process your personal data for:
- archiving purposes and ensuring accountability (i.e. demonstrating compliance with legal obligations),
- pursuing potential claims after termination of a contract or completion of a service, including debt collection and conducting court, arbitration, or mediation proceedings.
What legal grounds do we rely on to process your personal data?
(legal basis for processing)
We may process your personal data based on one or more of the following legal grounds:
- you have given your consent to the processing of your data, including by providing the data through actions or behavior commonly considered as voluntary, informed, and unambiguous consent (e.g. handing over a business card, sending an email, providing data verbally, including by phone, or making your data publicly available for contact purposes),
- processing is necessary for the performance of a contract with you or with the entity you represent, particularly where your data is indicated as contact data,
- processing is necessary for purposes arising from our legitimate interests, provided that these interests do not override your rights and freedoms (e.g. market analyses, reporting, pursuing claims, or contacting you to request consent to present an offer).
These legal bases arise from applicable laws and/or contracts, including in particular (but not limited to):
- contracts (including oral contracts),
- the General Data Protection Regulation (GDPR),
- the Polish Personal Data Protection Act,
- the Press Law,
- the Act on Providing Services by Electronic Means,
- the Copyright and Related Rights Act,
- the Act on Access to Public Information,
- the Civil Code,
- the Commercial Companies Code,
- the Entrepreneurs’ Law,
- the Act on the Central Registration and Information on Business,
- the Law on Associations,
- the Act on the National Court Register,
- the Act on the Provision of Services in the Territory of the Republic of Poland.
What categories of personal data do we process?
We may process all or some of the following categories of your personal data:
- first and last name,
- nickname or alias (e.g. username, avatar),
- email address,
- other electronic contact identifiers (e.g. social media profiles),
- business or professional address,
- contact phone number,
- photographs in which you appear,
- personal data that you have clearly made public (e.g. statements or publications in the press, radio, television, internet, public speeches, or meetings with us).
To whom may we disclose your personal data?
(categories of recipients)
We disclose your personal data only where necessary to achieve the purposes described above, to:
- our employees and collaborators,
- service providers, including accountants, legal advisors, IT service providers (e.g. hosting), and subcontractors,
- clients or entities acting on behalf of our clients.
How long do we store your personal data?
(data retention period)
We process your personal data until:
- the term of the contract between us ends, or
- you effectively object to the processing of your data, or
- you withdraw your consent (if processing is based on consent), or
- the legal basis for processing ceases to exist.
We may extend this period for:
- limitation periods for claims, if data processing is necessary to pursue or defend claims,
- fulfillment of legal obligations, particularly tax and accounting obligations,
- fraud and abuse prevention,
- statistical and archival purposes.
What rights do you have regarding your personal data?
We guarantee the full exercise of your rights under the GDPR. You have the right to:
- access your personal data,
- withdraw your consent at any time (if processing is based on consent),
- rectify inaccurate or incomplete data,
- request erasure of your data (“right to be forgotten”),
- request restriction of processing,
- data portability, where processing is based on consent or a contract and carried out by automated means,
- object to processing based on legitimate interests or for direct marketing purposes, including profiling.
You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates GDPR.
In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO).
Requests may be submitted via email: zapisy@dobrzemitu.pl.
If necessary, we may request additional information to verify your identity.
Source of your personal data
Your personal data may originate from:
- you directly,
- the entity you represent,
- publicly available sources,
- third parties such as our clients or subcontractors.
Automated processing and profiling
Your personal data may be processed in an automated manner, including profiling. Such processing does not produce legal effects or significantly affect your situation.
Profiling involves automated processing of personal data to evaluate personal preferences and interests.
Contact
If you have any questions, please contact us at:
zapisy@dobrzemitu.pl