Personal data protection rules

General Information
    The owner of the website is TDF S.A., with its registered office in Łódź, ul. Zbąszyńska 3, 91-342 Łódź, entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (KRS), KRS number:0000368567, IN VAT (NIP): 779-238-40-07, BDO: 000035943, e-mail address: info@tdfsa.pl, telephone number: +48 42 200 8118. Respecting the fundamental right of every person to privacy, we attach great importance to ensuring the confidentiality and protection of processed personal data and make every effort to ensure that the processing of such data is carried out in accordance with the law and with respect for the fundamental rights and freedoms of data subjects. Considering the above and to ensure the proper processing of personal data, under the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR"), we present this information obligation clause, which contains essential information on the processing of personal data.
Information on the processing of personal data of persons who are parties to the contract and whose data are processed in connection with the activities aimed at concluding and implementing commercial cooperation with the Controller of Personal Data

Controller of Personal Data

The Controller of your personal data is TDF S.A., with its registered office in Łódź, entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (KRS), KRS number: 0000368567, IN VAT (NIP): 779-238-40-07, BDO: 000035943.  The Controller of Personal Data can be contacted using the correspondence details or by sending an e-mail to the following e-mail address: info@tdfsa.pl.

Data Protection Officer

In all matters concerning the processing of personal data, including, in particular, the exercise of your rights related to the processing of personal data, the designated Data Protection Officer can be contacted via e-mail at the following e-mail address: iod@tdfsa.pl.

The purpose and legal basis for the processing of personal data

The Controller of Personal Data processes personal data in relation to the pursuit of concluding and implementing a contract to which you are a party. The legal basis for the processing of your personal data is the execution of activities related to the conclusion of the contract and its subsequent implementation (under Article 6 (1) (b) of the Regulation) as well as the possible determination, pursuit and defence of mutual claims regarding the contract and the demonstration of the accountability of the actions of the Controller of Personal Data referred to in Article 5 (2) of the GDPR – the personal data processing activity is carried out based on the legitimate interest exercised by the Controller of Personal Data (under Article 6 (1) (f) of the Regulation). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller of Personal Data, including tax and financial reporting regulations (pursuant to Article 6(1) letter c of the Regulation). Providing personal data is voluntary, but necessary to conclude and execute the contract. Failure to provide data will result in the impossibility of signing and executing the contract.

Source of obtaining personal data

As a rule, the data are obtained from the data subject. If the Controller of Personal Data did not obtain the data directly from you, your personal data, including but not limited to: identification data (name and surname), contact details (e-mail address, telephone number) and other data (place of employment), may have been obtained by the Controller of Personal Data from the agreement, under which the Controller of Personal Data processes your data or made available by a person who is a party to it. Providing data is voluntary, but necessary to achieve the purpose.

Recipients of Personal Data

The recipients of personal data may be entities processing personal data on behalf of the Controller of Personal Data, such as external processors providing and supporting IT systems used for the purposes of execution of the contract, accounting services providers or other providers of services related to the ongoing activities of the Controller of Personal Data and only under relevant personal data processing entrustment agreements. These agreements must ensure that the above-mentioned providers apply adequate technical and organisational measures to guarantee data protection. Personal data may also be made available to entities authorised to receive them under applicable law. Data recipients may have their registered office in a country outside the European Economic Area (EEA). However, in this case, the Controller of Personal Data shall apply an appropriate level of security to ensure the protection of the data subject, and personal data shall be transferred to third countries based on standard contractual clauses.

Period of Storage of Personal Data

Personal data will be processed for the duration of the contract. Personal data contained in the contract will also be processed for the period resulting from applicable legal provisions, including tax and accounting regulations. Personal data may, in some cases and to an adequate extent, be retained and processed by the Controller of Personal Data to secure any claims, until they expire, for the period required by law.

Data Subject Rights

Every person whose data are processed, to the extent resulting from legal provisions, has the right to request access to personal data, their rectification and, in cases provided for by generally applicable law, also the right to request their deletion or restriction of processing. You may also object to the processing of your personal data for the purpose of pursuing the legitimate interest of the Controller of Personal Data and to the transfer of your personal data.

Right to Lodge a Complaint with a Supervisory Authority

In case of any doubts related to the processing of personal data, any person may contact the Controller of Personal Data to request information. Regardless of the above, everyone has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

Profiling

Personal data are not subject to automated processing, including profiling.

Information on the processing of personal data of persons who are not parties to the contract and whose data are processed in connection with the activities aimed at concluding and implementing commercial cooperation with the Controller of Personal Data

Controller of Personal Data

The Controller of your personal data is TDF S.A., with its registered office in Łódź, entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (KRS), KRS number: 0000368567, IN VAT (NIP): 779-238-40-07, BDO: 000035943.  The Controller of Personal Data can be contacted using the correspondence details or by sending an e-mail to the following e-mail address: info@tdfsa.pl.

Data Protection Officer

In all matters concerning the processing of personal data, including, in particular, the exercise of your rights related to the processing of personal data, the designated Data Protection Officer can be contacted via e-mail at the following e-mail address: iod@tdfsa.pl.

The purpose and legal basis for the processing of personal data

The purpose of processing your personal data is to conduct activities related to the pursuit of concluding and executing the contract between the Controller of Personal Data and the Party to the contract, under which the Controller of Personal Data processes your personal data. The legal basis for the processing of your personal data is the legitimate interest of the Controller of Personal Data – contact regarding the conclusion and execution of the contract as well as the determination, pursuit and defence of mutual claims, if they arise (under Article 6 (1) (f) of the Regulation). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller of Personal Data, including tax and financial reporting regulations (pursuant to Article 6(1) letter c of the Regulation). The processing of personal data is necessary to implement the provisions of the contract and to respond to the question sent via the contact form (legal basis: Article 6 (1) (f) of the Regulation).

Source of obtaining personal data

If the Controller of Personal Data did not obtain the data directly from you, your personal data, including but not limited to: identification data (name and surname), contact details (e-mail address, telephone number) and other data (place of employment), may have been obtained by the Controller of Personal Data from the agreement, under which the Controller of Personal Data processes your data or made available by a person who is a party to it. Providing data is voluntary, but necessary to achieve the purpose.

Recipients of Personal Data

The recipients of personal data may be entities processing personal data on behalf of the Controller of Personal Data, such as external processors providing and supporting IT systems used for the purposes of execution of the contract, accounting services providers or other providers of services related to the ongoing activities of the Controller of Personal Data and only under relevant personal data processing entrustment agreements. These agreements must ensure that the above-mentioned providers apply adequate technical and organisational measures to guarantee data protection. Personal data may also be made available to entities authorised to receive them under applicable law. Data recipients may have their registered office in a country outside the European Economic Area (EEA).  However, in this case, the Controller of Personal Data shall apply an appropriate level of security to ensure the protection of the data subject, and personal data shall be transferred to third countries based on standard contractual clauses.

Period of Storage of Personal Data

Personal data will be processed for the duration of the contract. Personal data contained in the contract will also be processed for the period resulting from applicable legal provisions, including tax and accounting regulations. Personal data may, in some cases and to an adequate extent, be retained and processed by the Controller of Personal Data to secure any claims, until they expire, for the period required by law.

Data Subject Rights

Every person whose data are processed, to the extent resulting from legal provisions, has the right to request access to personal data, their rectification and, in cases provided for by generally applicable law, also the right to request their deletion or restriction of processing. You may also object to the processing of your personal data for the purpose of pursuing the legitimate interest of the Controller of Personal Data and to the transfer of your personal data.

Right to Lodge a Complaint with a Supervisory Authority

In case of any doubts related to the processing of personal data, any person may contact the Controller of Personal Data to request information. Regardless of the above, everyone has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

Profiling

Personal data are not subject to automated processing, including profiling.

Information on the processing of personal data of persons participating in the recruitment process conducted by the Controller of Personal Data

Controller of Personal Data

The Controller of your personal data is TDF S.A., with its registered office in Łódź, entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (KRS), KRS number: 0000368567, IN VAT (NIP): 779-238-40-07, BDO: 000035943.  The Controller of Personal Data can be contacted using the correspondence details or by sending an e-mail to the following e-mail address: info@tdfsa.pl.

Data Protection Officer

In all matters concerning the processing of personal data, including, in particular, the exercise of your rights related to the processing of personal data, the designated Data Protection Officer can be contacted via e-mail at the following e-mail address: iod@tdfsa.pl.

The purpose and legal basis for the processing of personal data

Personal data will be processed solely for the purpose of carrying out the recruitment process and, with appropriate consent, also for the purpose of conducting future recruitment processes. The legal basis for data processing is the right to request data necessary to take action before concluding a contract within the scope indicated in Article 22 _1 of the Labour Code or necessary to conclude a civil-law contract (Article 6 (1) letter b of the Regulation), and, in the remaining scope, the consent to the processing of personal data, which may be withdrawn at any time (Article 6 (1) (a) of the Regulation). The voluntary submission of personal data in the recruitment process constitutes an expression of consent (consent given through a clear confirmatory action). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller of Personal Data (Article 6 (1) (c) of the Regulation). Data may also be processed for the purpose of determining, pursuing and securing possible claims and defending against such claims related to the execution of the recruitment process – under Article 6 (1) (f) of the Regulation.

Justification for Providing Personal Data

Providing your personal data is voluntary; however, failure to provide the information indicated in Article 221 of the Act of 26 June 1974, the Labour Code, will result in the application documents received from you not being considered by the Controller of Personal Data.

Recipients of Personal Data

The recipients of personal data may be entities processing personal data on behalf of the Controller of Personal Data, such as external processors providing and supporting IT systems used for the publication of job advertisements, developers of the software used to submit applications and providers of services related to the ongoing activities of the Controller of Personal Data and only under relevant personal data processing entrustment agreements. These agreements must ensure that the above-mentioned providers apply adequate technical and organisational measures to guarantee data protection. Personal data may also be made available to entities authorised to receive them under applicable law. Data recipients may have their registered office in a country outside the European Economic Area (EEA). However, in this case, the Controller of Personal Data shall apply an appropriate level of security to ensure the protection of the data subject, and personal data shall be transferred to third countries based on standard contractual clauses.

Period of Storage of Personal Data

Personal data will be stored only as long as necessary to complete this recruitment procedure and no longer than 3 months after the submission of your recruitment documents. If you do not receive a job offer at this time, we will delete your application documents, unless you consent to the processing of your personal data for future recruitment processes. If you consent to the use of the application for future recruitment processes, your personal data will be stored for no longer than 6 months. Personal data may, in some cases and to an adequate extent, be retained and processed by the Controller of Personal Data to secure any claims, until they expire, for the period required by law.

Data Subject Rights

You have the right to:

Right to Lodge a Complaint with a Supervisory Authority

In case of any doubts related to the processing of personal data, any person may contact the Controller of Personal Data to request information. Regardless of the above, everyone has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

Profiling

Personal data are not subject to automated processing, including profiling.

Information on the processing of personal data of data subjects who are Shareholders, whose data are processed in connection with the exercise of rights vested in Shareholders

Controller of Personal Data

The Controller of your personal data is TDF S.A., with its registered office in Łódź, entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (KRS), KRS number: 0000368567, IN VAT (NIP): 779-238-40-07, BDO: 000035943.  The Controller of Personal Data can be contacted using the correspondence details or by sending an e-mail to the following e-mail address: info@tdfsa.pl.

Data Protection Officer

In all matters concerning the processing of personal data, including, in particular, the exercise of your rights related to the processing of personal data, the designated Data Protection Officer can be contacted via e-mail at the following e-mail address: iod@tdfsa.pl.

The purpose and legal basis for the processing of personal data

The Controller of Personal Data processes personal data to perform the obligations incumbent on the Controller of Personal Data towards the Shareholders. The legal basis for the processing of your personal data is the implementation of legal obligations imposed on the controller of personal data (Article 6 (1) (c) of the GDPR), including maintaining the register of shareholders, convening general meetings, paying dividends, providing information as well as possibly determining, pursuing or defending against any claims that may be related to the actions taken by the Controller of Personal Data – under Article 6 (1) (f) of the GDPR (legitimate interest of the controller of personal data). Personal data will also be processed in connection with the fulfilment of the obligations of communication with the shareholder based on the consent granted given Article 6 (1) (a) RODO. Providing personal data is voluntary, but necessary to exercise your rights.  Failure to provide data will result in the inability of the Controller of Personal Data to perform its obligations.

Source of obtaining personal data

As a rule, the data have been obtained from the data subject. If the Controller of Personal Data did not obtain the data directly from you, your personal data, including but not limited to: identification data (name and surname), contact details (e-mail address, telephone number) and other data (place of employment), may have been obtained by the Controller of Personal Data from the agreement, under which the Controller of Personal Data processes your data or made available by a person who is a party to it. Providing data is voluntary, but necessary to achieve the purpose.

Recipients of Personal Data

The recipients of personal data may be entities processing personal data on behalf of the Controller of Personal Data, such as external processors providing and supporting IT systems used for the purposes of execution of the contract, accounting services providers or other providers of services related to the ongoing activities of the Controller of Personal Data and only under relevant personal data processing entrustment agreements. These agreements must ensure that the above-mentioned providers apply adequate technical and organisational measures to guarantee data protection. Personal data may also be made available to entities authorised under applicable law and to the Tax Office for settlement purposes. Data recipients may have their registered office in a country outside the European Economic Area (EEA). However, in this case, the Controller of Personal Data shall apply an appropriate level of security to ensure the protection of the data subject, and personal data shall be transferred to third countries based on standard contractual clauses.

Period of Storage of Personal Data

Personal data will be processed for the duration of the contract. Personal data contained in the contract will also be processed for the period resulting from applicable legal provisions, including tax and accounting regulations. Personal data may, in some cases and to an adequate extent, be retained and processed by the Controller of Personal Data to secure any claims, until they expire, for the period required by law.

Data Subject Rights

Every person whose data are processed, to the extent resulting from legal provisions, has the right to request access to personal data, their rectification and, in cases provided for by generally applicable law, also the right to request their deletion or restriction of processing. You may also object to the processing of your personal data for the purpose of pursuing the legitimate interest of the Controller of Personal Data and to the transfer of your personal data.

Right to Lodge a Complaint with a Supervisory Authority

In case of any doubts related to the processing of personal data, any person may contact the Controller of Personal Data to request information. Regardless of the above, everyone has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

Profiling

Personal data are not subject to automated processing, including profiling.

Information on data processing for the purpose of handling inquiries addressed to the Controller of Personal Data

Controller of Personal Data

The Controller of your personal data is TDF S.A., with its registered office in Łódź, entered into the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register (KRS), KRS number: 0000368567, IN VAT (NIP): 779-238-40-07, BDO: 000035943.  The Controller of Personal Data can be contacted using the correspondence details or by sending an e-mail to the following e-mail address: info@tdfsa.pl.

Data Protection Officer

In all matters concerning the processing of personal data, including, in particular, the exercise of your rights related to the processing of personal data, the designated Data Protection Officer can be contacted via e-mail at the following e-mail address: iod@tdfsa.pl.

The purpose and legal basis for the processing of personal data

The Controller of Personal Data processes personal data to respond to the submitted inquiry, in which you are a party. The legal basis for the processing of your personal data is the execution of activities related to the response to the question sent by e-mail (under Article 6 (1) (f) of the Regulation) as well as possible determination, pursuit and defence of mutual claims regarding the contract and the demonstration of the accountability of the actions of the Controller of Personal Data referred to in Article 5 (2) of the GDPR – the personal data processing activity is carried out based on the legitimate interest exercised by the Controller of Personal Data (under Article 6 (1) (f) of the Regulation).

Source of obtaining personal data

As a rule, data are obtained from the data subject and made available during e-mail contact. Providing data is voluntary, but necessary to achieve the purpose.

Recipients of Personal Data

The recipients of personal data may be entities processing personal data on behalf of the Controller of Personal Data, such as external processors providing and supporting IT systems used for the purpose of responding to the submitted inquiry or other providers of services related to the ongoing activities of the Controller of Personal Data and only under relevant personal data processing entrustment agreements. These agreements must ensure that the above-mentioned providers apply adequate technical and organisational measures to guarantee data protection. Personal data may also be made available to entities authorised to receive them under applicable law. Data recipients may have their registered office in a country outside the European Economic Area (EEA). However, in this case, the Controller of Personal Data shall apply an appropriate level of security to ensure the protection of the data subject, and personal data shall be transferred to third countries based on standard contractual clauses.

Period of Storage of Personal Data

Personal data will be processed for the period necessary to respond to the question asked and for the period and to the extent required by law or to secure any claims.

Data Subject Rights

Every person whose data are processed, to the extent resulting from legal provisions, has the right to request access to personal data, their rectification and, in cases provided for by generally applicable law, also the right to request their deletion or restriction of processing. You may also object to the processing of your personal data for the purpose of pursuing the legitimate interest of the Controller of Personal Data and to the transfer of your personal data.

Right to Lodge a Complaint with a Supervisory Authority

In case of any doubts related to the processing of personal data, any person may contact the Controller of Personal Data to request information. Regardless of the above, everyone has the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

Profiling

Personal data are not subject to automated processing, including profiling.

Final information

The Website Owner reserves the right to make changes to this Privacy Policy by posting a new Privacy Policy on the Website with a relevant notice.