Search

What are you looking for?

Enter at least 3 characters or an abbreviation, such as AI, BI, or HR.
Home › Company › Information on the Processing of Personal Data of Individuals Corresponding with Astrafox Sp. z o.o. by Email
Company

Information on the Processing of Personal Data of Individuals Corresponding with Astrafox Sp. z o.o. by Email

Information on the processing of personal data of individuals corresponding with Astrafox Sp. z o.o. by email

Pursuant to General Data Protection Regulation (EU) 2016/679 (the “GDPR”), we provide the following information about the processing of personal data contained in email correspondence with ASTRAFOX Sp. z o.o.

Controller and Data Protection Officer

  1. The controller of your personal data is ASTRAFOX Sp. z o.o., with its registered office at ul. Poloneza 93, 02-826 Warsaw, telephone: +48 22 355 21 60, email: office@astrafox.pl, hereinafter the “Controller” or “we.”

  2. The Controller has appointed a Data Protection Officer (DPO), who can be contacted in all matters related to the processing and protection of personal data by email at iod@astrafox.pl.

Purposes and legal bases for processing

  1. Personal data provided in an email will be processed for the purpose of conducting electronic correspondence, including answering questions and providing relevant information. The legal basis for processing data for these purposes is the Controller’s legitimate interest (Art. 6(1)(f) GDPR), which consists of handling email correspondence.

  2. If you ask us to present our offer, your personal data will be processed for the purpose of sending you an appropriate offer on the basis of Art. 6(1)(b) GDPR, i.e., taking steps at the request of the data subject prior to entering into a contract (if you are to be a party to the contract), or on the basis of our legitimate interest (Art. 6(1)(f) GDPR) if you represent a legal entity.

  3. If you are a party to a contract entered into with ASTRAFOX Sp. z o.o., your personal data will be processed on the basis of that contract (Art. 6(1)(b) GDPR) for the purpose of its proper performance (communication necessary for the proper performance of the contract/order).

  4. If you are designated as a contact by our Contractor for the purpose of contract performance, we will process your data on the basis of the Controller’s legitimate interest (Art. 6(1)(f) GDPR), which is maintaining communication in connection with the contract.

Data recipients

  1. Recipients of your personal data may include entities that provide the Controller with IT services (software maintenance, email hosting, and server hosting), legal services, advisory services, and insurance services under appropriate agreements, as well as entities authorized to receive your personal data under applicable laws.

Retention period

  1. Your personal data will be processed for the period necessary to handle the correspondence, extended as appropriate by the period resulting from the correspondence’s connection with an established legal relationship, archiving obligations, the pursuit of possible claims, or other obligations required by generally applicable laws.

Rights of natural persons

  1. Under the rules set out in the GDPR, you have the right to:

a) access your data and request a copy of it (Art. 15 GDPR);

b) request rectification of your personal data (Art. 16 GDPR);

c) request erasure of your data (Art. 17 GDPR);

d) request restriction of the processing of your data (Art. 18 GDPR);

e) data portability, i.e., to receive from the Controller the personal data concerning you in a structured, commonly used, and machine-readable format, to the extent that your data is processed by automated means for the purpose of entering into and performing a contract (Art. 20 GDPR);

f) object to the processing of your personal data on the basis of a legitimate interest (Art. 21 GDPR).

  1. To exercise your rights, please contact the Controller or the Data Protection Officer at the email addresses specified in Sections 1 and 2 above, or by mail at the address of the Controller’s registered office.

  2. Every natural person also has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if they believe that the processing of personal data concerning them violates the GDPR.

Information on whether providing data is required or voluntary

  1. Providing your full name and email address is voluntary but necessary to conduct email correspondence. Providing other data in the correspondence is also voluntary and depends on the matter with which you contact the Controller.

Information on the absence of profiling and transfers of data outside the EEA

  1. Your personal data will not be subject to automated decision-making, including profiling, and will not be transferred outside the European Economic Area.