Your personal data will be processed for the following purposes:

1. to send commercial information, including marketing about our products and services, through electronic communication – based on your consent (Article 6(1)(a) GDPR in connection with Article 398 of the Electronic Communications Law);
2. to carry out public relations (PR) activities and to send commercial information, including marketing in non-electronic forms – based on the controller’s legitimate interest in building external relationships and promoting products and services (Article 6(1)(f) GDPR).

Your personal data may be shared with entities processing data on behalf of the controller to support its day-to-day business operations (subcontractors, suppliers, including providers of external systems). Such entities process personal data on the basis of a contract with the controller and only under the controller’s instructions.

Due to the IT infrastructure and telecommunication services used by the controller, your personal data may be transferred outside the EEA. Your data may be transferred outside the EEA on the basis of a mechanism legalizing Such transfers will only take place on the basis of legally recognized safeguards (standard contractual clauses or an adequacy decision of the European Commission – EU-U.S. Data Privacy Framework).

Your data will be retained only for as long as necessary to fulfill the purpose of processing, and in any case no longer than until you withdraw your consent or object to further processing. Data are periodically reviewed to ensure they remain relevant to the purposes for which they are processed.

In relation to the processing of your personal data, you have the right to:

1. access your personal data and request rectification;
2. request the erasure of your data, under the conditions provided in Article 17 GDPR;
3. request restriction of processing, under the conditions provided in Article 18 GDPR;
4. data portability, under the conditions set out in Article 20 GDPR;
5. object to processing under the conditions set out in Article 21 GDPR;
6. withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal, where processing is based on consent.

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

Providing your personal data is voluntary, but necessary in order to receive up-to-date information about the controller’s current offer.

We do not make any decisions that significantly affect you through automated means, including profiling.