1. Objective.
Whereas the European Parliament and the Council adopted, in April 2016, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR” and your personal data should be processed in accordance with the law, fairly and in a transparent manner, this document is intended to provide you with information on the processing of your personal data, in particular on the manner, purposes and grounds for such processing.
Taking care of the safety of your personal data is as important to us as providing the highest quality services in the field of electrical installations and electrical power engineering devices, therefore we ask you to carefully read this document, which constitutes the implementation of the information obligation referred to in Article 13 of GDPR.
The information obligation resulting from Article 13 of GDPR may also be implemented in a manner limited or extended in relation to this Privacy Policy, provided that it is consistent with GDPR, as well as in a separate form depending on the specific purpose and method of collection of your personal data.

2. Scope of application.
This Privacy Policy applies to all cases of processing of your personal data by Elektromontaż - Poznań S.A. with its registered office in Poznań, address: ul. Wieruszowska 12/16, 60-166 Poznań, in a fully or partially automated manner and to the processing of personal data that constitute a part of a data filing system or are intended to be a part of a data filing system in a manner other than automated.
“Personal data” mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Data Controller.
The Controller of your personal data is a company under the name of: Elektromontaż - Poznań Sp. z o.o. with its registered office in Poznań, address: ul. Wieruszowska 12/16, 60-166 Poznań, NIP [Taxpayer Identification Number]: 5272647215, REGON [National Business Registry Number]: 142784000 share capital of PLN 3,120,600.00 paid in full, entered in the National Court Register – Register of Entrepreneurs by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register, under no. KRS: 0000842369 (hereinafter referred to as “Elektromontaż”).
Elektromontaż, as the controller, determines the purposes and methods of processing of your personal data and is responsible for processing of such data in accordance with the law, including GDPR, which protects the fundamental rights and freedoms of natural persons, in particular the right to the protection of personal data.

4. Rules of processing of your personal data.
Elektromontaż shall assure the highest degree of professional care and conduct in order to ensure that your personal data are:

1. processed lawfully, fairly and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”);
2. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (“purpose limitation”);
3. adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);
4. accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”);
5. kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (“storage limitation”)
6. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (“integrity and confidentiality”).

A detailed description of the rules under which your personal data may be processed can be found in GDPR.

5. Personal data processing purposes.
We process your personal data in order to:

1. enter into and perform agreements to which you are or are to be a party or to which you are a representative, or take actions before entering into such agreements, including making offers, participating in negotiations, contacting you in connection with the performance of such agreement, etc.;
2. consider complaints and reclamations or exercise rights under warranty or guarantee, provided that such rights exist;
3. provide services by electronic means, e.g. newsletter (if applicable);
4. handle various notifications, messages or requests (e.g. via an online contact form), regardless of whether they concern entering into or performance of an agreement;
5. to improve the quality of services or products or goods delivered by Elektromontaż, e.g. through consultations or satisfaction surveys;
6. to manage the activity on the Elektromontaż websites by monitoring them in order to improve the functionality of the service, analyse the needs, adapt the advertisements to the content previously viewed;
7. handle direct marketing activities for products, goods and services delivered by Elektromontaż;
8. produce analyses, compilations, statistics and archives, including ensuring accountability;
9. to establish, secure, pursue claims by Electrical Disassembly or by a third party, as well as to defend against your or any third party's claims;
10. detect and prevent any abuse;
11. conduct proceedings before public authorities or courts or participate in such proceedings, regardless of their nature;
12. to protect the property, health and life by recording the image (video surveillance) in the building where Elektromontaż registered office is located and around such building, if such video surveillance is used.

6. Legal grounds for the processing of your personal data.
Your personal data will be processed on the following grounds:

1. on the basis of your consent to the processing of personal data for one or more purposes – Article 6(1)(a) of GDPR;
2. when the processing is necessary for the performance of the agreements to which you are a party or to take actions, upon your request, before signing such agreements – Article 6(1)(b) of GDPR;
3. due to the fact that the processing of your personal data is necessary to fulfil the legal obligations binding on Elektromontaż – Article 6(1)(c) of GDPR;
4. processing is necessary to protect your vital interests or vital interests of other natural persons – Article 6(1)(d) of GDPR;
5. in situations when the processing is necessary for the purposes resulting from the legally justified interests pursued by Elektromontaż or by a third party – Article 6(1)(f) of GDPR;
6. with regard to the so-called sensitive data mentioned in Article 9(1) of GDPR, which refers in particular to data concerning health – based on the grounds specified in Article 9(2) of GDPR.

The processing of your personal data which is required to fulfil the legal obligations of Elektromontaż concerns in particular the obligations imposed by the provisions of tax law, accounting regulations or regulations on preventing money laundering and terrorism financing.
On the other hand, the processing which is necessary for purposes resulting from legitimate interests pursued by Elektromontaż or by a third party concerns the cases of processing referred to in paragraph 5 subparagraphs 5) - 12) of this Privacy Policy, e.g. for the purpose of direct marketing of products and services delivered by Elektromontaż or to establish, secure or pursue claims by Elektromontaż or by a third party, as well as to defend against your or any third party's claims.
It should be noted that the processing is lawful only if and to the extent that one or more of the above conditions (grounds) for the processing of personal data are met. Thus, it is possible to process your personal data based on more than one ground, as well as to continue the processing of such personal data in the event that any of the grounds for the processing is no longer valid, provided that at least one of the remaining grounds is still valid.

7. Information on the recipients of the personal data or on the categories of recipients, if they exist.
A recipient means a natural or legal person, public authority, individual or any other body to which personal data are disclosed, regardless of whether it is a third party.
The processor is also a specific category and it is understood as a natural or legal person, public authority, individual or other entity which processes personal data on behalf of the controller.
The recipients of your personal data include or may include:

1. entities providing telecommunications and IT services;
2. entities providing services related to archiving and destruction of data;
3. entities through which we provide services or goods or products, in particular subcontractors in construction works contracts or entities for which we provide such services, e.g. investors, ordering parties, general contractors, etc.
4. banks and entities enabling us to make remote payment operations;
5. entities providing postal or courier services, or providing transport services for us;
6. entities providing services related to accounting, personnel and payroll management, recruitment and training processes or their support;
7. entities providing legal services or dealing with debt collection;
8. other entities belonging to Elektromontaż Group and PG Energy Capital Group, subject to generally applicable regulations;
9. state bodies or other entities authorised under the law, in order to fulfil the obligations binding on Elektromontaż (e.g. tax offices, Państwowa Inspekcja Pracy [National Labour Inspectorate], ZUS [Social Insurance Institution], etc.).

8. The duration of the processing of your personal data.

Your personal data will be stored for as long as it is necessary to fulfil the purpose for which they were collected.
In principle, the storage period of your personal data is the period of performance of the agreement (that includes all mutual obligations and rights resulting from it) to which you are a party or act as a representative of a party, however, due to various legal grounds for the processing of your personal data, the processing periods may be as follows, e.g.:

1. if you express consent to the processing of your personal data – until you revoke your consent;
2. in a situation when the processing of your personal data is necessary for the fulfilment of legal obligations binding on Elektromontaż – for the period for which the processing of personal data is required by law, in particular by tax law regulations, the Accounting Act, e.g. data processed for the purposes of accounting and for tax reasons are processed by us until the tax liability expires, unless otherwise provided by tax laws or other regulations;
3. in situations when the processing is necessary for the purposes resulting from the legally justified interests pursued by Elektromontaż or by a third party – in principle, until such interests are fully satisfied or expired, which will result from the expiry of period of limitation for your potential claims, Elektromontaż’s claims or any third party’s claims or from their extinction;
4. in situations where the data storage period necessary for the fulfilment of the purpose for which such data were collected cannot be associated with any specific legal obligation or a legitimate interest – for the period of 3 (three) years in order to observe the principle of accountability.

If we process your personal data on the basis of a legitimate interest, in particular for the purpose of direct marketing, we will store the data until you object to such processing. After that time, the data will no longer be processed for that purpose, i.e. for the purpose of direct marketing, but their further storage may be permissible or even necessary due to, for example, the performance of an agreement, a specific legal provision or any other legitimate interest.

9. Data subject’s rights.
We kindly inform you that you have the right to request Elektromontaż, which is the controller of your personal data, to give you access to your personal data, to rectify such data, to delete such data or to limit the processing, or to object to the processing, as well as to transfer the data.
If your personal data are processed on the basis of Article 6(1)(a) or Article 9(2)(a) of GDPR, you have the right to revoke your consent at any time without prejudice to the lawfulness of the processing carried out on the basis of your consent prior to its revocation.
The processing of your personal data is still possible, provided that there is at least one other legal basis for the processing.

10. Filing a complaint with the supervisory authority.
If the processing which we perform violates, in your opinion, the provisions of GDPR, you have the right to file a complaint with the supervisory authority, i.e. the President of the Office for the Protection of Personal Data.

11. Voluntary provision of personal data.
In the case of collection of personal data on the basis of your consent, you provide your personal data voluntarily.

The provision of personal data by you, depending on the purpose of the processing of such data, may be:

1. a condition for entering into and performing any contract to which you (or the entity in the name of which or for the benefit of which you are acting) and Elektromontaż are or are to be parties, or taking by Elektromontaż any actions before entering into any such an agreement;
2. required from you if you want to subscribe to newsletter, provided that it exists;
3. required from you if you want to receive answers to your questions asked via the contact form available on the Elektromontaż website or in any other form.

Where required by specific laws, we may demand that you provide information required by those laws, for example, your NIP [Taxpayer Identification Number]. A refusal to provide data necessary for entering into or performing an agreement and required by the provisions of law shall make entering into such an agreement impossible.

12. Automation of personal data processing, including profiling.
Personal data will not be processed in an automated manner (including in the form of profiling), namely, in a manner allowing any decision to be taken as a result of such automated processing, any other legal consequences to be produced or any other serious consequences to affect you (Article 22 of GDPR).
However, as part of our activities, we use cookies in such a manner that we monitor and analyse the traffic on our websites as well as undertake marketing activities. Nevertheless, while performing such activities, we do not process personal data in the manner described in Article 22 of GDPR. More information on the use of cookies can be found in the document entitled “Cookies Policy” .

13. Transfer of your personal data to third countries.
Currently, we are not transferring nor planning to transfer your personal data outside the European Economic Area (which includes the European Union, Norway, Liechtenstein and Iceland), (hereinafter referred to as “EEA”), i.e. to a third country or an international organisation. In the event that we decide to transfer data outside the EEA, we will do so only to the extent and for the purpose permitted by law.

14. Security of your personal data.
We pay great attention to the security of the processing of your personal data. We apply appropriate technical and organisational measures so as to protect your personal data against unauthorised disclosure and access, accidental or unlawful destruction or loss. For this purpose, Elektromontaż has also implemented a number of policies, including this Privacy Policy which is one of them. However, it should be noted that no method of data transmission, in particular via the Internet, and no method of electronic or physical storage is entirely secure.

15. Obtaining information on the processing of personal data.
All requests, inquiries and notifications regarding your personal data that are processed by Elektromontaż should be sent either by e-mail to the following address: dane.osobowe@elektromontaz.com or in a written form to the address of Elektromontaż registered office.

16. Changes in Privacy Policy.
Elektromontaż verifies the compliance of the provisions of this Privacy Policy with the current legal regulations and the needs of business practice on an ongoing basis. If this Privacy Policy is changed, its updated version will be immediately published on the Elektromontaż website at: http://www.elektromontaz.com/ and in the building where the registered office of Elektromontaż is located.