Personal data protection

Personal data protection

Data controller and contact information
The data controller is INCO S.A. Group, ul. Wspólna 25, 00-519 Warszawa, e-mail address: kontakt@inco.pl. Contact details of the data protection officer – e-mail address: iod@inco.pl

Purposes and legal basis for processing

The personal data will be processed for purposes associated with examining consumer's complaints, queries, opinions and requests and in connection with the need to secure potential claims on the basis of Article 6 par. 1 letter f of the GDPR*
In the event of a need to issue a financial and accounting document, the legal basis for processing the data will be Article 6 par. 1 letter c of the GDPR in relation to Article 74 par. 1 and 2 of the Accounting Act of 29 September 1994.

Period during which the data will be processed

• The data necessary to examine complaints will be processed for a period of 3 years, however, those data can also be stored for the purpose of securing claims (see below),
• The data necessary to examine queries, opinions and requests will be processed for a period of 1 year
• The data necessary to secure claims will be processed until those claims expire, in accordance with the period indicated in Article 118 of the Civil code,
• The data necessary for financial reporting will be processed for a period of 5 years from the beginning of the year following the financial year in which the operations, transactions, proceedings were finally completed, paid off, settled or time-barred.

Data recipients

The personal data may be disclosed to the Company's employees or co-workers as well as entities providing support to the Company in areas such as IT, legal services as part of outsourced services and in accordance with the data entrustment agreements.

Rights of the data subject

You have the right to access your data and the right to demand that they be corrected, deleted or that processing thereof be limited. Within the scope in which the basis for processing your personal data is the prerequisite of a legally justified interest of the controller, you have the right to lodge an
objection to processing of your personal data.

Within the scope in which the basis for processing your personal data is a consent, you have the right to withdraw the consent. Withdrawal of the consent has no impact on compliance of processing performed on the basis of the consent before it had been withdrawn. Within the scope in which your data are processed for the purpose of concluding and performing an agreement or processed on the basis of a consent – you also have the right to transfer the personal data, i.e. to receive your personal data from the data controller in a structured, commonly used, machine-readable format. You can send those data to another data controller. Provision of the personal data is voluntary but necessary to achieve the purposes of processing of data. You also have the right to lodge a complaint to a supervisory body in charge of personal data protection.

*Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC..