Information clause regarding the processing of personal data
1. The controller of your personal data is BacterX spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, Aleje Jerozolimskie 44, unit 19, floor, 00-024 Warsaw, KRS: 0000901328 (hereinafter: the Controller). You can contact the Controller by mail at the company’s address or via e-mail: biuro@bacterx.pl
2. The personal data you provide may be processed for the following purposes:
A) taking actions at your request prior to entering into a contract or contracts,
B) pursuing the legitimate interests of the Controller (asserting claims, defending against claims, carrying out direct marketing of the Controller’s services, submitting business cooperation proposals, sending offers and newsletters),
C) contacting you.
3. The legal basis for processing your personal data is:
– Article 6(1)(a) GDPR [when the Controller processes personal data based on your voluntary consent],
– Article 6(1)(b) GDPR [when the Controller processes data necessary for the performance of a contract concluded between you and the Controller or for taking steps at your request prior to entering into a contract],
– Article 6(1)(f) GDPR [when the Controller processes data for purposes arising from the pursuit of its legitimate interests],
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) – hereinafter also “GDPR”.
4. The recipients of your personal data may include:
– authorised persons employed by the Controller,
– entities providing hosting, server data storage, advisory, marketing and legal services to the Controller (legal advisers or attorneys-at-law),
– the Controller’s auditors.
5. My personal data may be transferred to a third country. The Controller is entitled to transfer my personal data to a third country (regarding the transfer and collection of data within Google tools).
I declare that — due to the European Commission not recognising some countries to which my personal data may be transferred as providing an adequate level of data protection, and due to the fact that the Controller does not provide appropriate safeguards referred to in Article 46 GDPR, including not having concluded standard contractual clauses with recipients nor possessing binding corporate rules — I have been informed, in accordance with Article 49(1)(a) GDPR, about the potential risks associated with the proposed transfer of my personal data (name and surname, e-mail, phone number, town/city, postal code, farm size, type of crops) to third countries within the meaning of the GDPR. In particular, I have been informed that pursuing claims related to the exercise of rights resulting from potential violations of my privacy or personal rights may be impossible or significantly hindered, that some third countries may lack a supervisory authority for data protection, and that relevant data protection laws may not apply.
6. Your personal data will be stored by the Controller:
a) until you object to the processing of your personal data, unless the Controller remains entitled to continue processing despite the objection – until such entitlement expires,
b) until the withdrawal of consent – if the Controller processes your data based on consent,
c) for 6 months after the expiry of any claims of the Controller in the event of a contract with you, or after the lapse of the required archiving period — whichever occurs later.
7. You have the right to request from the Controller access to your personal data, their rectification, deletion, restriction of processing, as well as the right to data portability.
8. If your data is processed based on consent (Article 6(1)(a) GDPR), you have the right to withdraw consent at any time and in any form (in particular in writing, via e-mail or by phone). Withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.
9. You have the right to lodge a complaint with a supervisory authority, which in Poland is the President of the Personal Data Protection Office.
10. Providing data for the purpose of the Controller’s marketing activities, submitting proposals for entering into contracts or establishing business cooperation is voluntary. If the data is not provided: a contract may not be concluded, and the Controller may be unable to contact you or present business proposals.
11. Further detailed information on the processing of personal data may be obtained by contacting the Controller.
If your data is processed based on Article 6(1)(f) GDPR, you may object to the processing of your personal data by the Controller on this basis.