Information on the processing of personal data in connection with the activities aimed at entering into and implementing agreements with Contractors

I. PERSONAL DATA CONTROLLER

The controller of personal data is NEUCA SA with its registered office at 35-37 Forteczna St in Toruń. The data controller can be contacted via the following telephone number: +48 56 669 40 00, e-mail address: neuca@neuca.pl, or in writing to the above-mentioned address of the registered office.

II . DATA PROTECTION OFFICER

The data controller has appointed a Data Protection Officer, whom you can contact at the following e-mail address: iod@neuca.pl, or in writing at the following address: ul. Forteczna 35-37, 87-100 Toruń, with the annotation "Data Protection Officer". You can contact the data protection officer in all matters related to the processing of personal data and the exercise of rights related to data processing.

III. PURPOSES OF AND GROUNDS FOR DATA PROCESSING

Your personal data will be processed for the following purposes and on the basis of:
a. taking steps to conclude and perform the contract to which you are a party - pursuant to Art.6 section 1 letter b of Regulation (EU) 2016/679 of the European Parliament and of the Council - general regulation on data protection (hereinafter: "GDPR"),
b. taking actions related to striving to conclude and then conclude and implement an agreement with the contractor, contacting the contractor where you are employed and/or whom you represent - pursuant to Art. 6 sec. 1 letter f GDPR,
c. accounting and tax settlements - pursuant to Article 6 sec. 1 letter c of the GDPR - the fulfilment of the legal obligations imposed on the data controller, in particular those resulting from tax law and financial reporting,
d. handling, pursuing, and defending possible claims - based on the legitimate interest of NEUCA SA - pursuant to Art. 6 sec. 1 letter f of the GDPR, while the legitimate interest of the data controller will be to keep evidence to establish, pursue, or defend any claims, in accordance with the provisions of law.
e. direct marketing - based on the legitimate interest of NEUCA S.A., in particular the possibility of presenting products and services offered by NEUCA S.A. to contractors. - based on Art. 6 sec. 1 letter f GDPR,

IV. DATA SOURCE

Your personal data may have been obtained by the data controller:
a. directly from you,
b. from a cooperation agreement with a contractor,
c. provided by a contractor with which you are bound by an employment contract or a civil law contract.
In connection with the performance of the agreement, the data controller will be processing your personal data to the extent necessary, in particular: your name(s), surname, business e-mail address, business telephone number, position, place of employment/company name of the conducted business activity.

V. PERSONAL DATA RECIPIENTS

Your personal data may be transferred by NEUCA SA to entities cooperating with it (recipients), in particular to IT service providers and to entities providing services such as accounting and financial services, archiving, delivery of correspondence and shipments, legal services, debt collection - where such entities process data on the basis of an agreement with the data controller and only in accordance with the data controller's instructions.

VI. DATA STORAGE PERIOD

Your personal data will be kept for the period of:
a. validity of the agreement with the contractor,
b. until the data processing obligations resulting from legal provisions expire,
c. until any claims under this agreement are time-barred,

VII. RIGHTS OF DATA SUBJECTS

You shall have the following rights related to the processing of your personal data:
a. the right to request access to the content of your data,
b. the right to request the rectification of your personal data,
c. the right to request the deletion of your personal data or the limitation of their processing,
d. the right to transfer data to another data controller, i.e. the right to obtain from NEUCA S.A. personal data, in a structured, commonly used and machine-readable IT format. You can send this data to another data controller or request that NEUCA S.A. send the data to another data controller. However, NEUCA S.A. will only do so, if such a transfer is technically possible. The right to transfer personal data shall apply only to the data processed on the basis of your consent or an agreement with you,
e. the right to object - in cases where the data controller processes your personal data on the basis of its legitimate interest, you may file a written objection sent to the address of the data controller's registered office with the annotation "Personal Data", or to the e-mail address: iod@neuca.pl.

VIII. RIGHT TO LODGE A COMPLAINT

You shall have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

IX. INFORMATION ON THE REQUIREMENT TO PROVIDE/VOLUNTARY PROVISION OF PERSONAL DATA

The processing of your personal data by the Data Controller results from the entering into and implementing an agreement between the Parties to the agreement.

X. INFORMATION ON AUTOMATED DATA PROCESSING (INCLUDING PROFILING)

Personal data will not be subject to automated decision making - including profiling.