RODO - SOLBET

I. Data Protection Officer of SOLBET Sp. z o.o.

Agnieszka Robaszkiewicz
Email: iodo@solbet.pl

II. Privacy Notice on the Processing of Personal Data for Business Partners of SOLBET Sp. z o.o.

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1), hereinafter referred to as the GDPR, we hereby inform you as follows:

1. Controllers of personal data

The controller of the Business Partner’s personal data is SOLBET Sp. z o.o., with its registered office at ul. Toruńska 71, 86-050 Solec Kujawski, telephone: 52 387 41 00, email: sekretariat@solbet.pl.

The following companies within the SOLBET Group are joint controllers of the Business Partner’s personal data:

SOLBET LUBARTÓW Spółka Akcyjna, with its registered office at ul. Nowodworska 18, 21-100 Lubartów, telephone: 81 855 62 51, email: zarzad@solbet-lubartow.com.pl;
SOLBET STALOWA WOLA Spółka Akcyjna, with its registered office at ul. Spacerowa 4, 37-450 Stalowa Wola, telephone: 15 842 39 51 to 53, email: sekretariat@solbet-stw.pl;
SOLBET KOLBUSZOWA Spółka Akcyjna, with its registered office at ul. Kolejowa 10, 36-100 Kolbuszowa, telephone: 17 227 14 44, email: sekretariat@solbet-kolbuszowa.pl.

The business partner database is shared by all companies within the SOLBET Group. The Joint Controllers jointly determine the purposes and means of processing the personal data of the SOLBET Group’s business partners and fulfil the obligations arising under the GDPR.

2. Joint arrangements between the Controllers

Under the joint controllership agreement, we and the other Joint Controllers have agreed on the respective responsibilities of the companies within the SOLBET Group for compliance with the obligations arising under the GDPR. In particular, we have agreed that:

each Joint Controller exercises due care to ensure the security of the processing of your personal data, and, as Joint Controllers, we jointly determine the technical measures to be adopted in relation to IT infrastructure and data security;
the Joint Controller entering into a contract with the Business Partner is responsible for administering that contract;
the Controller referred to in point 2 is responsible for:
- fulfilling the information obligations required under the GDPR towards the Business Partner with whom it has entered into a contract;
- giving effect to the rights of data subjects under the GDPR, as set out in section 6.

3. Purposes and legal bases of processing

The personal data concerned are processed for the purpose of entering into and performing the contract between us (legal basis: Article 6(1)(b) of the GDPR).

4. Data retention period

The Business Partner’s personal data will be retained for the duration of the contract and, thereafter, for the period necessary for:

handling complaints;
securing or pursuing any claims available to the Controller;
compliance with the Controller’s legal obligations under tax legislation.

5. Recipients of personal data

The Business Partner’s personal data may be disclosed to companies within the SOLBET Group acting as Joint Controllers. Our subcontractors (processors), such as entities maintaining our IT and ICT systems, lawyers and providers of advisory services, may also have access to the Business Partner’s personal data.

6. Rights of the data subject

Under the GDPR, the Business Partner has:

the right of access to their personal data;
the right to rectification (correction) of their personal data;
the right to erasure of personal data and restriction of processing;
the right to object to the processing of personal data;
the right to data portability;
the right to lodge a complaint with the President of the Personal Data Protection Office.

To exercise the rights provided for under the GDPR (points (a)–(e) above), please contact the Controller with whom the contract was concluded, either in person or in writing, at the address specified in section 1, in a manner that enables your identity to be verified.

7. Whether the provision of personal data is mandatory or voluntary

The provision of personal data is voluntary but necessary to enter into and perform the contract.

8. Data Protection Officer of the SOLBET Group

Contact details: email: iodo@solbet.pl

III. Privacy Notice on the Processing of Personal Data for Former Employees of SOLBET Sp. z o.o., with Its Registered Office in Solec Kujawski

1. Controller of personal data

The controller of your personal data processed in connection with your former employment with SOLBET Sp. z o.o. is SOLBET Sp. z o.o., with its registered office at ul. Toruńska 71, 86-050 Solec Kujawski, telephone: 52 387 41 00, email: sekretariat@solbet.pl.

2. Purposes and legal bases of processing

Your personal data are processed for the purpose of fulfilling the Controller’s obligations as an employer in respect of retaining employment records, as well as the Controller’s obligations as a payer of contributions to the Social Insurance Institution (ZUS) and a withholding agent for advance income tax payments (Article 6(1)(c) of the GDPR).

Your personal data may also be processed in connection with the pursuit of or defence against claims, on the basis of the Controller’s legitimate interests (Article 6(1)(f) of the GDPR).

3. Data retention period

Your personal data will be retained for the period required by law.

4. Recipients of personal data

Your personal data are not disclosed to any recipients other than entities authorised under applicable law.

5. Rights of the data subject

Under the GDPR, you have:

the right of access to your personal data;
the right to rectification (correction) of your personal data;
the right to erasure of personal data and restriction of processing;
the right to object to the processing of personal data;
the right to data portability;
the right to lodge a complaint with the President of the Personal Data Protection Office.

To exercise the rights provided for under the GDPR (points (a)–(e) above), you should contact the Controller, either in person or in writing, at the address specified in section 1, in a manner that enables your identity to be verified.

You also have the right to withdraw any consent you have given. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

6. Whether the provision of personal data is mandatory or voluntary

The provision of your personal data referred to in Article 22¹ of the Labour Code was a statutory requirement or a condition for entering into an employment contract. Accordingly, as an employee, you were obliged to provide those data.

The provision of personal data other than those specified in Article 22¹ of the Labour Code was voluntary.

7. SOLBET Data Protection Officer

Contact details: email: iodo@solbet.pl