Chmielna Street 2/31

00-020 Warsaw

           +48 53-094-15-17

           biuro@ibic.pl

SOCIAL MEDIA

Find us at:

Call us

+48 530 941 517

Contact us

biuro@ibic.pl

Privacy Policy

**Privacy Policy of IBiC**

In connection with the implementation of the requirements of the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we inform you about the rules for processing your personal data and your rights related to this, effective from May 25, 2018.

**Who is the data administrator?**

The administrator of your data is the Institute of Research and Certification Sp. z o.o. based in Warsaw 00-020, ul. Chmielna 2/31.

**Contact details:** biuro@ibic.pl

**Where do we have your data from?**

We obtained your data:

• directly from you,

• from your Employer, in the context of the agreements performed for them,

• from the Principal, in order to provide you with services,

• from public sources.

**What data do we process?**

The Institute of Research and Certification Sp. z o.o. processes the following categories of data:

• contact data;

• required for presenting commercial offers,

• required for the execution of services,

• required for identification in the context of services provided,

• necessary for issuing certificates, attestations, reports,

• required for issuing invoices.

**For what purposes will we use your personal data?**

Your personal data will be processed for one or more of the following purposes:

• to carry out actions performed at your request prior to the provision of the Service (request expressed directly or through your Employer),

• to conclude and execute the Service ordered from the Institute of Research and Certification Sp. z o.o.,

• to perform the service that the Institute of Research and Certification Sp. z o.o. provides as a subcontractor,

• to execute the agreement concluded with the Institute of Research and Certification Sp. z o.o. on your behalf as a third party (art. 393 of the Civil Code), when the other party to the agreement is another entity,

• to fulfill the legal obligation on IBiC Sp. z o.o., e.g., issuing an invoice,

• creating summaries, analyses, and statistics for internal needs of IBiC Sp. z o.o.,

• monitoring the quality of services provided to you by our employees and collaborators.

**On what basis will we process your personal data?**

The basis for processing personal data is, depending on the activities performed:

• conclusion and execution of an agreement with the Institute of Research and Certification Sp. z o.o.,

• fulfillment of the legal obligation resting on the Institute of Research and Certification Sp. z o.o.,

• legitimate interest of the Institute of Research and Certification Sp. z o.o.,

• consent expressed by you. Do you have an obligation to provide personal data? Providing your data is voluntary, but necessary to present an offer, conclude and execute the Service/Agreement. If you do not provide personal data, the Service will not be realized. Providing data necessary for issuing an invoice is a statutory obligation resulting from the Act on Goods and Services Tax. In other respects, providing personal data is voluntary, is not a statutory or contractual requirement, and does not constitute a condition for concluding an agreement.

**How to withdraw consent?**

You can withdraw any consent granted to the Institute of Research and Certification Sp. z o.o. regarding the processing of personal data at any time without incurring negative consequences. Withdrawal of consent can occur by sending an email (to the address: biuro@ibic.pl) or by traditional mail (to the company's registered address). The form is arbitrary but must clearly express your decision. Until the consent is withdrawn, the processing of your data by the Institute of Research and Certification Sp. z o.o. is legal.

**When and to whom can we transfer the data?**

The recipients of your personal data will only be entities:

• entitled to obtain personal data under the provisions of law,

• providing services for you on behalf of and for the Institute of Research and Certification Sp. z o.o. (subcontractors).

**What can you do with the personal data you provided us?**

You have the right to:

• access the content of your data

• request confirmation from the Institute of Research and Certification Sp. z o.o. whether it processes your personal data and to obtain access to these data, as well as to the following information:

• information on the purposes of processing your personal data,

• information on the categories of your personal data processed by the Institute of Research and Certification Sp. z o.o.,

• information on recipients or categories of recipients to whom the Institute of Research and Certification Sp. z o.o. has disclosed your personal data or intends to disclose this data,

• information on the possibility of exercising your rights in the area of personal data protection, as well as the manner in which such rights may be realized,

• information on the right to lodge a complaint with a supervisory authority,

• information on automated decision-making, including profiling, and in certain cases on the principles of making such decisions, as well as on the significance and intended consequences of such processing for you.

• Right to rectify personal data

• Right to request the Institute of Research and Certification Sp. z o.o. to promptly rectify your personal data that are inaccurate and to request the completion of incomplete personal data.

• Right to deletion of personal data

• Right to request from the administrator the prompt deletion of your personal data. The Institute of Research and Certification Sp. z o.o. must delete your personal data without undue delay, provided that one of the following conditions is fulfilled:

• the personal data are no longer necessary for the purposes for which they were collected or are processed,

• you have withdrawn your consent on which the processing is based and the Institute of Research and Certification Sp. z o.o. has no other legal basis for processing your personal data,

• your personal data have been processed unlawfully,

• your personal data must be deleted to comply with a legal obligation.

• It is not possible to exercise the right to deletion of personal data if the Institute of Research and Certification Sp. z o.o. is obliged under the provisions of law to continue processing personal data in the scope defined by the relevant provisions of law or for purposes necessary to establish, pursue or defend claims by the Institute of Research and Certification Sp. z o.o.

• Right to request restriction of processing of personal data

• Right to request the Institute of Research and Certification Sp. z o.o. to restrict the processing of your personal data in the following cases:

• when you contest the accuracy of the personal data processed by the Institute of Research and Certification Sp. z o.o. - for a period enabling the Institute of Research and Certification Sp. z o.o. to verify the accuracy of this data,

• when the processing of your personal data is unlawful, and you oppose the deletion of your personal data, requesting instead the restriction of their use.

**Right to data portability:**

You have the right to receive in a structured, commonly used format provided by the Institute of Research and Certification Sp. z o.o. personal data and to request that this personal data be sent to another data administrator, if technically feasible. The Institute of Research and Certification Sp. z o.o. is obliged to provide the data you provided that meet the following conditions:

• processing is carried out in an automated manner, i.e., does not include paper records,

• data are processed on the basis of consent or in connection with a contract.

Exercising the right to data portability may not adversely affect the rights and freedoms of other persons.

**Until when will we store your data?**

Your personal data will be stored for as long as:

• as is necessary to execute the agreement between you and the Institute of Research and Certification Sp. z o.o. or the agreement concluded by another entity on your behalf, and after that for the period corresponding to the statute of limitations for claims that may be raised by the Institute of Research and Certification Sp. z o.o. and that may be raised against the Institute of Research and Certification Sp. z o.o.,

• as required by legal obligations,

• as long as you do not withdraw your consent for their processing, including the processing of data based on the legitimate interest of the Institute of Research and Certification Sp. z o.o., when the basis for this processing is the marketing of its products and services.

**Will your data go outside the European Economic Area?**

We do not plan to transfer your data outside the EEA, which includes countries outside the European Union as well as Iceland, Liechtenstein, and Norway, unless it results from the agreement with you or your Employer.

**Where can you file a complaint about the processing of personal data by the Institute of Research and Certification Sp. z o.o.?**

Currently, such complaints can be directed to the President of the Personal Data Protection Office.

**How will we not process personal data?**

Your personal data are not subject to automated processing (e.g., profiling), which has legal effects towards you or similarly significantly affects you, however, we use cookies and other systems that record traffic on our websites (profiling for marketing purposes).