INFORMATION ON PERSONAL DATA PROTECTION

In fulfillment of the information obligation arising from Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (OJ L 119, p. 1), hereinafter referred to as “GDPR”, we hereby inform you that:
The controller of your personal data is:
Ambient System sp. z o.o., ul. Bysewska 27, 80-298 Gdańsk
Contact the Controller regarding the processing of personal data: tel. +48 58 345 51 95, email address: rodo@ambientsystem.pl

Purpose and scope of processed data:
We ensure that your data is properly secured and that its processing is clear, fair, and compliant with applicable law. Your personal data may be processed:

• for the purpose of preparing, concluding, and performing a contract based on Art. 6(1)(b) of the GDPR, including for the purpose of maintaining legally required financial accountability as specified in the Act of July 26, 1991, on Personal Income Tax and the Act of August 29, 1997, Tax Ordinance (issuance and archiving of accounting documents). Data is processed for this purpose throughout the duration of the contract and after its termination or expiry until the statute of limitations for any claims specified in the Act of April 23, 1964, Civil Code, or until the expiry of the tax liability limitation period specified in the Act of August 29, 1997, Tax Ordinance, whichever occurs later,
• for the purpose of preparing and sending an offer based on Art. 6(1)(a) of the GDPR, i.e., based on consent given through: a conscious action such as sending a request for quotation or by submitting a declaration of consent to data processing for the purpose of preparing and sending an offer. In the case of sending a request for quotation, data is deleted 12 months after the offer is sent, while in the case of a declaration of consent – data is processed until its withdrawal.
• for the purpose of conducting ongoing correspondence based on Art. 6(1)(f), i.e., in the legitimate interest of the controller, which is maintaining contact with contractors. Data for this purpose is processed until the controller receives an objection to its processing,
• for the purpose of establishing and pursuing claims through debt collection activities, sale of receivables based on Art. 6(1)(f) of the GDPR, in connection with Art. 509 and 510 of the Act of April 23, 1964, Civil Code. Data for this purpose is processed until the satisfaction of the receivable, assignment of the receivable, or the statute of limitations for the claim specified in the Act of April 23, 1964, Civil Code,
• to improve the quality of services provided by supervising customer service and creating analyses based on Art. 6(1)(f) of the GDPR. Data is processed until an objection to its processing for this purpose is received.

Recipients of personal data
Access to your personal data may be granted to:

• employees and associates of the Controller, authorized to process personal data, who process data at their explicit instruction,
• providers of IT, accounting, advisory, legal, marketing, graphic, and business development services with whom the Controller has concluded personal data processing agreements and who have successfully passed verification of compliance with the GDPR.

We do not transfer your personal data to countries outside the European Economic Area (i.e., to so-called Third Countries)

Rights of the data subject.
You may at any time exercise your right to access your personal data and the rights to:

• rectify data – i.e., correct personal data when it is incorrect, has changed, or has become outdated,
• partial or complete erasure of data (right to be forgotten) if the data is processed contrary to applicable law or all purposes related to data processing have been achieved and there is no other legal basis for its further processing,
• restriction of data processing – i.e., restricting data processing solely to its storage,
• access to data – i.e., obtaining information about the purpose and method of processing your personal data and a copy of the data from the IT system,
• data portability – i.e., obtaining your personal data that you have provided to us or indicating another controller to whom we should transfer it, if technically possible.

Right to object – you may object to data processing at any time:

• for direct marketing purposes – we will cease processing your data for this purpose,
• in specific situations, if we process it in a legitimate interest or public interest.

We will cease processing data for these purposes, unless there are other overriding legitimate grounds for processing.

Right to withdraw consent – you may withdraw any consent you have given at any time. From the moment such a disposition is made, we will no longer process data for the purpose you indicated. Please remember, however, that until consent is withdrawn, we have the right to process your data.
You may exercise your rights by submitting a request via the following communication channels:

• by sending an email to: rodo@ambientsystem.pl,
• by phone at: +48 58 345 51 95
• by sending to the correspondence address:
  Ambient System sp. z o.o., ul. Bysewska 27, 80-298 Gdańsk