Personal Data Processing Information

In compliance with the requirements of the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, "GDPR"), PFR TFI S.A. (PFR TFI) with its registered office in Warsaw informs about the rules of processing your personal data and the associated rights. The following rules apply since May 25, 2018. If you have any questions about the way and scope of processing your personal data by PFR TFI and the applicable rights, please contact PFR TFI or the Data Protection Officer - Kamila Szwarc-Skudlarska, PFR TFI S.A., Krucza 50, 00-025 Warsaw, e-mail address: [email protected]

Your personal data controller is PFR TFI S.A., Krucza 50, 00-025 Warsaw.

PFR TFI processes your data under Article 6(1)(f) of the GDPR for purposes arising from legitimate interests pursued by the controller, primarily for enhancing data security and protection, and for business contacts. The controller may process your personal data to answer a question left (exchange of correspondence), respond to a request concerning a product or service, in this case, the legal basis will be your conscious and voluntary consent.

The recipients of your personal data may be authorized public bodies and entities providing services for the controller under agreements, and companies of the PFR Group. At the same time, your personal data may be transferred to entities processing personal data on behalf of PFR TFI, but these entities will process your data following the controller's instructions. These entities also have agreements with the controller.

The Administrator will process the following categories of your data: name and surname, e-mail address, telephone number, company name.
Your personal data will be processed for the time necessary to achieve the purposes indicated in point II, and after that time for the period and to the extent required by law.

 Profiling should be understood as any form of automated personal data processing, which involves using it to evaluate certain characteristics of a natural person, particularly for analysis or prediction of aspects related to that person's work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movement. We inform you that your personal data will not be processed automatically, including profiling.

The Controller wishes to assure you that all persons whose personal data is processed by PFR TFI have appropriate rights arising from the GDPR. Therefore, you have the following rights:

a) the right of access to personal data, including the right to obtain a copy of these data,

b) the right to demand rectification (correction) of personal data - if the data are incorrect or incomplete,

c) the right to request the deletion of personal data (the right to be forgotten) if:

• the data are no longer necessary for the purposes for which they were collected or otherwise processed,
• the data subject has objected to the processing of data,
• the data subject has withdrawn consent on which the processing is based, and there is no other legal basis for processing,
• the data are processed unlawfully,
• the data must be deleted to comply with a legal obligation,

d) the right to request restriction of personal data processing - if:

• the data subject disputes the accuracy of personal data,
• the processing of personal data is unlawful, and the data subject opposes the deletion of data, requesting their restriction instead,
• the controller no longer needs the data for its purposes, but the data subject needs them to establish, assert or defend claims,
• the data subject has objected to the processing of data - until it is determined whether legally justified grounds on the part of the controller override the basis of the objection,

e) the right to data portability, when:

• processing is based on a contract concluded with the data subject or on the consent expressed by such a person, and
• the processing takes place in an automated manner,

f) the right to object to the processing of personal data, including profiling, when:

• there are reasons related to your particular situation, and
• personal data processing is necessary for purposes arising from legitimate interests of PFR TFI, referred to in point II above.
   

If you believe that the processing of your personal data by PFR TFI violates the GDPR, you have the right to lodge a complaint with the appropriate supervisory authority, i.e., the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

Your personal data will not be transferred to recipients located in countries outside the European Economic Area or to international organizations.