Get in touch

Privacy

Notice

LAST CHANGE:

02.09.2025

Correspondence

Notice for individuals whose personal data are processed in the course of correspondence with Asseco Poland S.A., particularly in relation to responding to inquiries, continuing communication, and handling matters arising from such contact. The information obligation is also fulfilled by including a reference to this Privacy Notice in the email footer used by our organization.

Data Controller and Contact Details, DPO:

The Controller of your personal data is: Asseco Poland S.A. with its registered office in Rzeszów, ul. Olchowa 14, 35-322 Rzeszów (controller). Contact in matters concerning personal data protection: Data Protection Officer of Asseco Poland S.A., e-mail: iod@asseco.pl, phone no.: +48 691 992 077.

Purpose and Legal Basis for Processing:

Your personal data will be processed for the following purposes:

  1. to enable the effective exchange of correspondence, in particular to respond to your inquiry, send offers, manage concluded contracts, and carry out related arrangements – pursuant to Article 6(1)(b) GDPR;
  2. to perform necessary settlements in compliance with legal obligations imposed on the controller – pursuant to Article 6(1)(c) GDPR;
  3. to establish, pursue, or defend against potential claims – based on the controller’s legitimate interest in doing so (Article 6(1)(f) GDPR).

Data Recipients:

Your personal data may be shared with: entities authorized under applicable laws, the controller’s contractors, entities processing data on behalf of the controller to support its day-to-day business operations (subcontractors, suppliers, providers of external systems supporting the controller’s operations). Such entities process personal data on the basis of a contract with the controller and only under the controller’s instructions.

Data Transfers outside the European Economic Area (EEA):

Given the global scope of the controller’s operations and the IT infrastructure and telecommunication services it uses, your personal data may be transferred outside the EEA. Your data may be transferred outside the EEA on the basis of a mechanism legalizing Such transfers will only take place on the basis of legally recognized safeguards (standard contractual clauses or an adequacy decision of the European Commission – EU-U.S. Data Privacy Framework).

Data Retention Period:

Your personal data will be retained for as long as necessary to conduct correspondence connected with the controller’s ongoing operations and cooperation, and for the period required to comply with the controller’s legal obligations. Data are periodically reviewed to ensure they remain relevant to the purposes for which they are processed.

Your Rights:

In relation to the processing of your personal data, you have the right to:

  1. access your personal data and request rectification;
  2. request the erasure of your data, under the conditions provided in Article 17 GDPR;
  3. request restriction of processing, under the conditions provided in Article 18 GDPR;
  4. object to processing under the conditions set out in Article 21 GDPR.

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

Requirement to Provide Data:

Providing your personal data is voluntary, but necessary in order to conduct correspondence within the scope of cooperation with the controller.

Automated Decision-Making and Profiling:

We do not make any decisions that significantly affect you through automated means, including profiling.

GDPR – Regulation (EU) 2016/679 of the European Parliament andof the Council of 27 April 2016 on the protection of natural persons withregard to the processing of personal data and on the free movement of suchdata, and repealing Directive 95/46/EC (OJ L. of 2016 No. 119, page 1, asamended).