Basis and period of personal data processing
Any processing of personal data is carried out for specific, explicit and legally defined purposes, and the Controller ensures that it does not collect and process personal data against the purposes indicated below.
-
The performance of activities related to the conclusion and execution of the contract is carried out on the basis of Article 6(1)(b) of the GDPR and in particular covers:
- provision of the service within the scope of the concluded contract;
- to contact in terms related to the service provided;
- to take action before the contract is concluded, in particular to provide an offer at the request of the data subject.
The period of data processing for this purpose refers to the duration of the contract.
-
The establishment of commercial relationships, including responding to questions asked in connection with the data subjects’ inquiries, is carried out on the basis of Article 6(1)(f) of the GDPR, in pursuit of the Controller's legitimate interests consisting in answering submitted inquiries. Personal data will be processed until an effective objection to data processing is raised, but no longer than until the last day of the calendar year following the lapse of 3 years from the date on which the Controller provided a response.
-
The investigation or securing of potential claims and the handling of complaints is carried out on the basis of Article 6(1)(f) of the GDPR in connection with the legitimate interests of the Controller related to the protection of the Controller's rights and the rights of the individuals affected. The data processing period refers to the statute of limitations of the given claim, and begins at the time of pursuing or defending against a specific claim.
-
Marketing activities of the Controller's own or third-party services are carried out on the basis of Article 6(1)(f) of the GDPR, based on the legitimate interests of the Controller, which involve safeguarding the Controller's interests, promoting services, and seeking to establish cooperation. The period of personal data processing for marketing purposes lasts until consent for receiving communications or information under the provisions of the Act on the Provision of Electronic Services or telecommunications law is withdrawn, or until a valid objection to data processing is raised, but no longer than 3 years.
-
Fulfillment of tax and accounting obligations is carried out on the basis of Article 6(1)(c) of the GDPR in connection with the applicable tax and accounting regulations. The period of data processing for this purpose is equal to the duration of the legal obligation, where the period is specified by the applicable laws.