Information on the processing of personal data by GD&K Consulting sp. z o.o.

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR “, we would like to inform you that:

Data controller

The administrator of personal data is GD&K Consulting sp. z o.o. based in Kraków (31-545) ul. Mogilska 65/740, which you can contact via:

tel.: +48 787 859 111,
in writing to the registered office address.

GD&K Consulting sp. z o.o. may process your personal data for the purposes of:

performance of a contract to which you are a party or when it is necessary to take action before concluding a contract at the request of the data subject;
archiving based on applicable legal provisions, including the Accounting Act in the period resulting from these provisions,
pursuing claims arising in connection with the performance of business activities and other claims arising from legal provisions, as well as to defend against claims, until the claims expire, which constitutes the legally justified interest of GD&K Consulting sp. z o.o.,
fulfillment of legal obligations related to counteracting money laundering and terrorism financing.

Information about the requirement to provide data

The processing of your data may occur on the basis of your consent. Any consent given may be withdrawn at any time. This also applies to the withdrawal of consents that were granted before the GDPR came into force, i.e. before May 25, 2018.

Providing personal data

GD&K Consulting sp. z o.o. may transfer your personal data to entities authorized to obtain it under the law, as well as to other entities based on your consent. In addition, this data may be transferred to entities processing personal data on behalf of GD&K Consulting sp. z o.o., such as IT and archiving service providers, entities processing data for the purpose of debt collection, marketing agencies, and such entities process data on the basis of an agreement with GD&K Consulting sp. . z o. o. and on its behalf.

Automated decision-making, including profiling

We do not use your personal data for the purposes of making decisions based on automated data processing that could affect your legal situation or have other significant effects for you.

Rights of persons whose data is processed by GD&K Consulting sp. z o.o

In connection with the processing of your personal data by GD&K Consulting sp. z o.o., you have the right to access:

access to your personal data, i.e. confirmation whether the data is being processed, information about the purposes of processing, categories of processed data and recipients, and information about the rights of the administrator,
request immediate rectification and supplementation of data,
request deletion of data if one of the circumstances listed in Art. 17 GDPR,
processing restrictions,
consent to the processing of data in relation to new recruitments for which the person meets the criteria for applying for a given position,
transferring data provided to the administrator,
Objection to data processing pursuant to Art. 6 section 1 point f of the GDPR (including for the purposes of direct marketing, including profiling),
submit a complaint to the body supervising compliance with the provisions on personal data protection (President of the Personal Data Protection Office).
if the processing is based on the consent expressed by the data subject, he or she has the right to withdraw this consent at any time.