Telephone contact clause

INFORMATION CLAUSE FOR TELEPHONE CONTACT

In accordance with Article 13 paragraph 1 and paragraph 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (OJ EU. L. 119 of 04.05.2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) - hereinafter also referred to as GDPR, we provide you with information on the processing of personal data below:

1. Who is the administrator of your personal data?
The joint controllers, i.e. entities jointly deciding on how your personal data will be used, are: PMR Restrukturyzacje SA with its registered office in Warsaw (KRS: 000054630) and entities belonging to the PMR Partner Network, i.e.: Hamryszak i Pakuła Kancelaria Prawna HP sp. k. (KRS: 0001149956), ALLIANCE CONSULTING sp. z oo (KRS: 0001131650), Chapter11 Sp. z oo (KRS: 0000799669)

2. How to contact the Joint Administrators to obtain more information about the processing of your personal data?
Joint administrators have determined that the entity responsible for the implementation of your rights described in this information clause will be PMR Restrukturyzacje SA with its registered office in Warsaw as the contact point designated by the Parties in accordance with Article 26 paragraph 1 of the GDPR.

If you have any questions regarding the processing of personal data, you may contact the Joint Administrators using the contact details provided:

1. e-mail: iodo@pmrsa.pl
2. by post to the address: ul. Klonowica 2/5B, 58-500 Jelenia Góra (with the note PMR Restrukturyzacje)

You can also contact the designated data protection officer at the following e-mail address: iodo@pmrsa.pl

The Joint Controllers undertake to closely cooperate in the implementation of your rights and making decisions in this regard.

The Joint Controllers, if necessary to fulfil your request, undertake to take additional steps to properly verify your personal data. For this purpose, the Joint Controllers may ask additional questions or provide you with additional instructions in response to your request.

Notwithstanding the above arrangements, you have the right to exercise your rights towards each of the Joint Controllers.

The Joint Administrator who receives your marketing consents is responsible for providing the information clause regarding the processing of personal data.

3. What is the purpose of processing your personal data?
The Joint Controllers process your personal data for the following purposes:
a) establishing relationships, including for the purpose of providing commercial information by the Joint Controllers or concluding an agreement or taking steps before concluding an agreement at your request or with the entity you represent;
b) administrative purposes related to the functioning of the PMR Partner Network;
c) ensuring the accuracy of personal data;
d) ensuring accountability (demonstrating compliance with requirements arising from legal provisions).

4. On what basis can the Joint Administrators process your personal data?
The Joint Controllers process your personal data based on the legitimate interest of seeking to establish a relationship with you or the entity you represent (Article 6(1)(f) of the GDPR).

If you give your consent, the Joint Controllers are entitled to process your personal data on the basis of the consent granted (Article 6, paragraph 1, letter a of the GDPR).

If, at your request, the Joint Controllers take steps to prepare or conclude a contract, your personal data will be processed on the basis of the premise of necessity to take steps before concluding the contract (Article 6 paragraph 1 letter b of the GDPR).

The Joint Controllers also process your personal data based on their legitimate interest, which consists in the internal administration of data in the PMR Partner Network, as well as in ensuring the accountability of personal data and in order to fulfil their obligation to ensure the accuracy of personal data.

5. Is the provision of personal data obligatory?
Providing your personal data is voluntary, but necessary to prepare a response to the submitted inquiry and to send commercial information about services and products. To the extent that your personal data will be processed for the purpose of concluding or preparing a contract, providing personal data will be necessary to prepare such a contract.

6. What are your rights towards the Joint Controllers regarding the processed data?
In relation to the processing of your personal data by the Joint Administrators, you may request:

1. access to data,
2. rectification of data,
3. deletion of data,
4. processing restrictions,
5. data transfer,
6. object to the processing of your personal data.

You also have the right to lodge a complaint regarding the processing of your personal data by the Joint Controllers with the President of the Personal Data Protection Office.

7. When can you object to data processing?
You have the right to object to the processing of your personal data when:
• the processing of personal data is based on a legitimate interest and the objection is justified by your particular situation,
• Your personal data are processed for the purposes of sending commercial information, including direct marketing.

8. To whom do the Joint Administrators provide personal data?
The Joint Controllers share your data with other entities from the PMR Partner Network within the scope of their authorization. The Joint Controllers share your personal data with entities supporting the Joint Controllers, including collaborators, entities providing IT, teleinformatics, accounting and organizational support. At the request of entities authorized under the law, the Joint Controllers share personal data with public authorities.

9. How long do the Joint Administrators process your personal data?
The Joint Controllers process your personal data until you object to the processing of your data or withdraw your consent to the processing of your personal data, but no longer than for 3 years from your last activity in relations with one of the Joint Controllers.

In the event of taking steps to conclude a contract, your personal data will be processed for the duration of the preparation and then execution of the contract.

If the Joint Controllers have a reasonable suspicion that it may be necessary to pursue or defend claims, the data will be stored for the limitation period for claims (which is 3 years in the case of activities related to running a business) or for the duration of court proceedings, taking into account the period for enforcing a court decision.

10. To which countries outside the European Economic Area do the Joint Controllers transfer data?
The Joint Controllers may use technical solutions that may be provided by entities outside the European Economic Area (EEA). In certain situations, your data may be transferred to the countries where the suppliers are based, including the USA. Suppliers of such solutions include Meta and LiveChat. Data transfer takes place on the basis of a personal data entrustment agreement containing standard contractual clauses. The personal data security measures used are analyzed in terms of risks and may change, including in the event of the adoption by the relevant authorities of new legal instruments to ensure an appropriate level of security of personal data transferred outside the EEA.

11. Do the Joint Controllers profile your personal data or process them automatically in a way that affects your rights?
Your personal data will be processed in IT systems, but the Administrator will not make decisions in an automated manner, including profiling.