IBiC Privacy Policy

 

In connection with the implementation of the requirements of the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, regarding the protection of individuals in relation to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we inform you about the principles of processing your personal data and your rights related to it, effective from May 25, 2018.

 

Who is the data administrator?

The administrator of your data is the IBiC. based in Warsaw 00-020, ul. Chmielna 2/31.

 Contact details: biuro@ibic.pl

 

Where did we obtain your data?

We obtained your data: • directly from you, • from your employer as part of the contracts performed for them, • from the client to provide you with services, • from public sources.

 

What data do we process?

The IBiC. processes the following categories of data: • contact data; • required to present commercial offers, • required to perform services, • required for identification in the framework of the services provided, • necessary for issuing certificates, attestations, reports, • required for issuing invoices.

 

What will we use your personal data for?

We will process your personal data for one or more of the following purposes: • to carry out actions performed at your request before the Service is provided (request expressed directly or through your employer), • to conclude and execute the Service ordered from the Institute of IBiC, • to perform a service that theIBiC. provides as a subcontractor, • to execute a contract concluded with the IBiC. on your behalf as a third party (Article 393 of the Civil Code), when the other party to the contract is another entity, • to fulfill the legal obligation incumbent on IBiC, e.g., issuing an invoice, • creating summaries, analyses, and statistics for internal needs of IBiC Ltd., • monitoring the quality of services provided to you by our employees and collaborators.

 

On what basis will we process your personal data?

The basis for processing personal data is, depending on the activities performed: • conclusion and execution of a contract with the IBiC, • fulfillment of the legal obligation incumbent on the IBiC, • legally justified interest of the IBiC , • consent expressed by you. Do you have an obligation to provide personal data? Providing your data is voluntary, but it is necessary to present an offer, conclude and execute the Service/Contract. If personal data is not provided, the Service will not be performed. Providing data necessary for issuing an invoice is a statutory obligation and arises from the Act on Goods and Services Tax. In other respects, providing personal data is voluntary, is not a statutory or contractual requirement, and does not constitute a condition for concluding a contract.

 

How to withdraw consent?

You can withdraw any consent given to the IBiC regarding the processing of personal data at any time without incurring negative consequences. Withdrawal of consent can take place by sending an email (to: biuro@ibic.pl) or by traditional mail (to the company's registered address). The form is arbitrary but must clearly present your decision. Until the consent is withdrawn, the processing of your data by the IBiC is legal.

 

When and to whom can we transfer data?

The recipients of your personal data will only be entities: • authorized to obtain personal data under the provisions of law, • providing services to you on behalf of and for the Institute of IBiC (subcontractors).

 

What can you do with the personal data provided to us?

You have the right to: • Access your data content • Obtain from the IBiC. confirmation whether it processes your personal data and the right to access that data, as well as the following information: • information about the purposes of processing your personal data, • information about the categories of your personal data processed by the IBiC, • information about recipients or categories of recipients to whom the IBiC. has disclosed your personal data or intends to disclose that data, • information about your rights regarding personal data protection and how such rights can be exercised, • information about the right to lodge a complaint with a supervisory authority, • information about automated decision-making, including profiling and, in specific cases, about the rules for making such decisions, as well as the significance and anticipated consequences of such processing for you. • The right to rectify personal data • The right to request the IBiC to promptly rectify your incorrect personal data and to request the completion of incomplete personal data. • The right to erasure of personal data • The right to request the administrator to promptly erase your personal data. The IBiC. is obliged to erase your personal data without undue delay, provided that one of the following conditions is met: • the personal data are no longer necessary for the purposes for which they were collected or processed, • you have withdrawn your consent on which the processing is based, and the IBiC has no other legal basis for processing your personal data, • your personal data have been processed unlawfully, • your personal data must be erased to comply with a legal obligation. • The right to erasure of personal data cannot be exercised if the IBiC is obliged under legal provisions to continue processing personal data to the extent specified by the relevant legal provisions or for the purposes necessary to establish, pursue or defend claims by the IBiC • The right to request restriction of processing of personal data • The right to request the IBiC to restrict the processing of your personal data in the following cases: • when you contest the accuracy of the personal data processed by the IBiC– for a period enabling the IBiC to verify the accuracy of that data, • when the processing of your personal data is unlawful and you oppose the erasure of your personal data, requesting instead a restriction on its use.

 

The right to data portability:

You have the right to receive your personal data in a structured, commonly used format provided by the IBiC and to request that this personal data be transmitted to another data controller, if technically feasible. The IBiC is obliged to provide the data you provided, which collectively meet the following conditions: • the processing is carried out in an automated manner, i.e., does not include paper records, • the data is processed based on consent or in connection with a contract. Exercising the right to data portability must not adversely affect the rights and freedoms of others.

 

How long will we keep your data?

Your personal data will be retained for as long as: • it is necessary to perform the contract between you and the IBiC or a contract concluded by another entity on your behalf, and after that period for a time corresponding to the limitation period for claims that the Institute of IBiC may raise and that may be raised against the IBiC, • as required by fulfilling legal obligations, • as long as you do not withdraw your consent to their processing, including for processing based on the legitimate interest of the IBiC, when the basis for such processing is marketing its products and services.

 

Will your data be transferred outside the European Economic Area?

We do not plan to transfer your data outside the EEA, which includes countries outside the European Union as well as Iceland, Liechtenstein, and Norway, unless this arises from an agreement with you or your employer.

 

Where can you lodge a complaint about the processing of personal data by the IBiC?

Currently, such complaints can be directed to the President of the Personal Data Protection Office.

 

How will we not process personal data?

Your personal data is not subject to automated processing (e.g., profiling) that produces legal effects concerning you or significantly affects you in a similar way; however, we do use cookies and other systems to record traffic on our websites (profiling for marketing purposes).