Information clause of KZN RAIL Spółka z ograniczoną odpowiedzialnością
Dear Customers, we would like to inform you that in connection with its business activities, the Controller collects and processes personal data in accordance with the relevant regulations and the rules of data processing provided for therein, including, in particular, the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Please find below detailed information on the processing of your personal data.
1. CONTROLLER
The controller of your personal data is KZN RAIL Spółka z ograniczoną odpowiedzialnością with its registered office in Kraków, ul. Półłanki 25, 30-740 Kraków, National Court Register [Krajowy Rejestr Sądowy, KRS] number: 0000463072, Tax Identification Number [Numer Identyfikacji Podatkowej, NIP]: 6793092654, National Official Business Register Number [REGON]: 122857335.
2. PURPOSE OF PERSONAL DATA PROCESSING AND GROUNDS FOR PROCESSING. PROCESSING TIME
We will process your personal data for the following purposes:
a) the conclusion and performance of contracts in the course of business;
b) related to establishing and maintaining business contacts;
c) conducting recruitment processes, including competency assessment in order to determine the candidate’s suitability for the recruited position based on the documents submitted with the recruitment application;
d) joining the bidding process;
e) based on a consent – for the purposes indicated in the content of the consent;
f) for other purposes related to its business activities, including for executing legitimate interests related to the need to pursue claims associated to the contracts executed and services provided;
The period of processing of your personal data by the Controller depends on the type of service provided and the purpose of processing. The period of data processing may also result from the law, when it constitutes the grounds for processing. The period of processing of your personal data will last, in particular: for the time necessary to resolve the reported issue or event, but no longer than 365 days, for the term of the contract, and in the case of consenting to the processing of personal data – until its withdrawal, while after the contract termination – for the period of the legal statute of limitations for claims arising from the concluded contract, as well as for the time provided by law for actions taken by inspection authorities, as well as until the final resolution of the public contract award proceedings and for the duration of the recruitment process, but no longer than 90 days. The period for personal data processing may be extended if processing is necessary for the establishment, exercise or defense or claims, and after that period – only is and as required by law. At the end of the processing period, the data is irreversibly deleted or anonymized.
3. INFORMATION ON YOUR RIGHTS IN RELATION TO THE PROCESSING OF YOUR PERSONAL DATA
In connection with the processing of your personal data, you have the following rights:
a) The right to withdraw your consent to the processing of personal data. You have the right to withdraw your consent to the processing of your personal data in whole or in part at any time. Withdrawing consent does not affect the lawfulness of processing of your data before its withdrawal. You may withdraw your consent by contacting us by any of the means specified in section 4 below.
b) Right to access your personal data. You have the right to obtain confirmation from us that we are processing your personal data. You also have the right to obtain access to such personal data, a copy of the personal data, as well as information about (a) the purpose of processing, (b) the categories of personal data concerned; (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; (d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; (f) the right to lodge a complaint with a supervisory authority; (g) where the personal data are not collected from the data subject, any available information as to their source; (h) the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Where data are transferred to a third country or to an international organisation, you shall have the right to be informed of the appropriate safeguards relating to the data transfer.
c) Right to rectification You have the right to request that we promptly rectify your personal data that is inaccurate. You also have the right to request that we complete the incomplete personal data.
d) The right to erasure (also known as the “right to be forgotten”). You have the right to request that we immediately erase your personal data, provided that at least one of the conditions is met:
- your personal data is no longer necessary in relation to the purposes for which they were collected or are being processed;
- we processed your personal data unlawfully;
- if you have withdrawn your consent to process your personal data and there is no other legal basis for processing your personal data;
- we must remove your personal data in order to comply with a legally imposed obligation on us.
We may deny you the right to be forgotten, invoking Article 17(3) of the Regulation, i.e. when the processing is necessary: (a) for exercising the right of freedom of expression and information; (b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; (c) for reasons of public interest in the area of public health, (d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or (e) for the establishment, exercise or defence of legal claims.
e) The right to restrict the processing of personal data. You have the right to request that we restrict the processing of your personal data in the following cases:
- if you question the accuracy of your personal data that we process;
- if we process your personal data unlawfully and you oppose the erasure and request that we restrict their use instead;
- if we no longer need your personal data for the purposes of processing, but you need them to establish, exercise or defend your legal claims.
If you exercise your right to restrict the processing of personal data, we may process them in exceptional situations, as indicated in Article 18(2) of the Regulation, according to which, where data processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
f) Right to data portability. You have the right to receive personal data from us or authorize us to send your data to another controller in a structured commonly used format (pdf., doc.), if transmission is technically possible. This may include personal data that we have received directly from you, as well as data resulting from your behavior, e.g., data on the products you have viewed on the website.
We will only transfer personal data that meet both of the following conditions:
- processing is carried out by automated means, i.e. they are not paper-based personal data;
- data is processed on the basis of a consent or in connection with a contract.
4. POINT OF CONTACT THROUGH WHICH YOU CAN REPORT A REQUEST TO EXERCISE YOUR RIGHTS
If you wish to exercise the right that we have described above – you can contact us in any of the following ways:
- in writing to the address of KZN RAIL Spółka z ograniczoną odpowiedzialnością with its registered office in Krakow, ul. 25 Półłanki, 30-740 Kraków;
- by email to biuro@kznrail.pl.
If you choose to exercise the above rights, we will respond to your request without undue delay, but no later than one month from the receipt of the request.
5. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe that the processing of your personal data violates the law, you have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.
6. EXPECTED DATA RECIPIENTS
The expected recipients of your personal data are:
- operators of postal or courier delivery services;
- occupational health services providers should a decision be taken to employ you in order to refer you for pre-employment medical examinations in the event that such an obligation arises from generally applicable laws;
- ICT system operators and IT services providers;
- consulting, advisory, auditing, legal, tax, accounting services providers;
- document archiving services providers
to the extent that it is necessary for the purposes of processing your personal data.
7. REQUIREMENT TO PROVIDE PERSONAL DATA
The provision of personal data is voluntary, but necessary for the proper and efficient handling of your case or application, as well as for sending a response to your inquiry and further correspondence.
Glossary.
Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation); the text of the regulation can be found under: https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=celex%3A32016R0679.
KZN Bieżanów Group companies – KZN Rail Spółka z ograniczoną odpowiedzialnością with its registered office in Kraków and Kolejowe Zakłady Nawierzchniowe “Bieżanów” with its registered office in Kraków.