INFORMATION CLAUSE ON THE PROCESSING OF PERSONAL DATA

In accordance with the guidelines of the European Parliament and Council Regulation (EU) 2016/679 of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR”), we inform you about the principles of processing your personal data and your related rights.

The administrator of your personal data is: Krakowska Spółdzielnia Niewidomych Sanel, ul. Bandtkiego 19, 30-129 Kraków. Data Protection Officer: Maciej Rymaszewski; contact: iod@sanel.pl. The administrator processes your personal data based on applicable legal regulations, contracts, and consent granted, depending on the purpose for which the data was obtained or transmitted. The basis for processing your personal data depends on the purpose for which the data was transmitted:

a) Recruitment:

• Article 6(1)(a): The data subject has given consent to the processing of their personal data beyond the scope resulting from current regulations (Article 221 § 1 of the Labor Code of June 26, 1974 (Journal of Laws of 1974, No. 24, item 141, as amended)).
• Article 9(2)(a): Similar to the above, but applies to special categories of data, such as religious beliefs, health status, etc.
• Article 6(1)©: Processing is necessary for compliance with a legal obligation incumbent on the administrator based on the Labor Code, the Social Insurance Act, etc.

b) Employment:

• Article 6(1)(a) and Article 9(2)(a): In the case of submitting application documents containing personal data beyond the scope required by current regulations (Labor Code), processing continues until their removal or withdrawal of consent.
• Article 6(1): Processing is necessary to fulfill a legal obligation incumbent on the administrator based on the Labor Code, Social Insurance Act, etc.
• Article 6(1)(b): Processing is necessary for the performance of a contract to which the data subject is a party.

c) Civil-law contracts, sales agreements, online store sales, lease agreements:

• Article 6(1)(b): Processing is necessary for the performance of a contract to which the data subject is a party.

d) Monitoring:

• Article 6(1): Processing is necessary to fulfill a legal obligation incumbent on the administrator and for tasks carried out in the public interest.

e) Newsletter, marketing:

• Article 6(1)(a): Consent of the data subject.

Regarding the processing of data for the purposes mentioned in point 4, recipients of your personal data will include public authorities and entities performing public tasks or acting on behalf of public authorities. These entities process personal data in the Administrator’s databases based on appropriate agreements, such as IT service providers.

Your personal data will be stored for the period necessary to achieve the purposes specified in point 4. Afterward, data retention will comply with the requirements of universally applicable law and follow the records management instructions. For example:

• Monitoring records are kept for a maximum of 60 days, after which they are overwritten.
• Store purchases are retained for a minimum of 5 years according to accounting regulations, plus the current fiscal year.
• For newsletter subscriptions or other marketing consents, data is retained until the consent is revoked.

• Regarding the processing of data for the purposes mentioned in point 4, recipients of your personal data will include public authorities and entities performing public tasks or acting on behalf of public authorities. These entities process personal data in the Administrator’s databases based on appropriate agreements, such as IT service providers.

  Your personal data will be stored for the period necessary to achieve the purposes specified in point 4. Afterward, data retention will comply with the requirements of universally applicable law and follow the records management instructions. For example:

  • Monitoring records are kept for a maximum of 60 days, after which they are overwritten.
  • Store purchases are retained for a minimum of 5 years according to accounting regulations, plus the current fiscal year.
  • For newsletter subscriptions or other marketing consents, data is retained until the consent is revoked.

  In connection with the processing of your personal data, you have the following rights:

  • Right of access to personal data.
  • Right to data portability.
  • Right to rectification of data if it is incorrect or incomplete.
  • Right to request erasure of personal data (the so-called “right to be forgotten”).
  • Right to request restriction of processing.
  • Right to object to data processing.

  If your personal data is processed based on your consent (Article 6(1)(a) of the GDPR), you have the right to withdraw this consent at any time. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal, in accordance with applicable law.

  If you become aware of any unlawful processing of your personal data, you have the right to file a complaint with the relevant supervisory authority responsible for data protection matters.

• In situations where the processing of personal data is based on the consent of the data subject, providing personal data to the Administrator is voluntary.

  However, providing your personal data is mandatory when the legal basis for processing is a statutory requirement or a contract between the parties.

  Your personal data may be processed in an automated manner and will not be subject to profiling.

  Furthermore, your personal data will not be transferred to third countries or international organizations.