RODO

Information on the processing of personal data by POL AIR CARGO Sp. z o.o.

Chapter I – GDPR/general information

GDPR (General Data Protection Regulation) applies from 25 May 2018. The full name is: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

GDPR  Purpose:

GDPR introduces and unifies the principles of personal data processing throughout the European Union. In particular, it ensures the security of personal data and protects the right to privacy.

A short glossary of terms:

“Administrator” – a person or entity that (independently or jointly with other administrators) determines why and how personal data will be processed.

The administrator of personal data is POL AIR CARGO Sp. z o.o. with its registered office in Warsaw (02-256) at AL. Krakowska 106, room 228

“Personal data” – information that identifies (or allows for identification of) a natural person (also called “data subject” or “customer”).

This will include in particular: name and surname, type, series and number of an identity document, address, telephone number, e-mail address, date of birth, PESEL, NIP, REGON, image from video monitoring, etc.

“Processing entity” – a natural person or entity that processes personal data on behalf of the administrator.

“Processing of personal data” – these are actions concerning personal data. They can be carried out automatically or manually. We talk about processing when we: collect, record, organize, arrange, store, adapt or modify, retrieve, review, use, disclose (e.g. by sending), distribute, make available, match or combine, limit, delete or destroy data.

“Recipient of personal data” means a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the framework of a specific inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of such data by those public authorities must comply with the data protection rules applicable according to the purposes of the processing;

Communication between us and our clients/data subjects:

In all matters, including personal data issues, we communicate

with our clients/data subjects: via the website, email, telephone and post, as well as at the Administrator’s registered office.

Administrator’s contact details:

e-mail: sales@polaircargo.pl

tel. + 48 791 292963

Chapter II – Basic principles of processing

The GDPR formulates 6 principles of personal data processing, which the Administrator is guided by when processing personal data of clients/business partners. These are:

• the principle of legality, reliability and transparency: we process personal data

in a manner consistent with the provisions of the law. We inform clients exhaustively about all issues related to this, through established communication channels and in the simplest language possible, so that they are aware that we collect, store or otherwise process their specific personal data;

• the principle of data minimization and adequacy: we only process data (adequate, relevant) that is actually needed to achieve a given purpose;
• the principle of data accuracy: we take the utmost care to ensure that the data we process is true, up-to-date and accurate.

Therefore, we may ask clients to check and update their data from time to time. We also ask them to inform us of any changes to their personal data (name, surname, address, etc.);

• the principle of purpose limitation and storage of processed data: we collect personal data of clients/persons to whom it relates only for a specific, explicit and legally justified purpose, which we could not achieve in any other way. We store data in a form that allows the identification of the data subject.

We process it only for as long as it is necessary to achieve the purpose for which we obtained it (unless we are required by law to continue processing it);

• the principle of data integrity and confidentiality: we provide IT and organizational solutions that ensure that the personal data we process is safe.

We protect data against unauthorized or unlawful processing and accidental loss, destruction or damage;

• the principle of accountability: we are able to demonstrate, in a manner required by law, that we act in accordance with the law in relation to personal data,

we take data protection into account at the design stage (e.g. of a new product) and we provide protection of personal data by default.

Chapter III Information obligations towards customers (data subjects)

All information on the protection of personal data is available to our customers at all times at the company’s headquarters. We are also happy to answer all questions asked by

customers. We provide individual information in two situations: when we collect data or when we change the purpose of their processing.

When do we inform?

If we collect data directly from the data subject, we provide such information immediately. When the data comes from another source, we provide it to the data subject:

1. a) within a reasonable period of time, but no later than one month after obtaining the data;
2. b) at the latest upon first communication with the data subject (if we use the data in communication with that person);

unless providing the information proves impossible or would require a disproportionately large effort or the data subject has all the information that he or she is entitled to receive in accordance with Articles 13 and 14 of the GDPR.

How do we inform?

We may provide this information:

1. a) in information clauses included in documents intended for the data subject;
2. b) in person or by phone, during a conversation with an employee/co-worker of the Administrator;
3. c) electronically, including by placing this information on our website.

Chapter IV What data do we process – basic information.

Personal data is any information that identifies (or allows for identification of) the data subject. Most often, we process data such as:

• name and surname;
• other identification data: PESEL number, date of birth, address, email, telephone number;
• tax identification number (NIP);
• REGON number;
• type, number and series of the identity document;
• other data necessary for us to offer products and services.

We may process personal data when we have one of the following grounds:

1. a) the data subject has consented to the processing of their personal data

for one or more specific purposes;

1. b) processing is necessary for the performance of a contract to which the data subject is a party,

or to take action at the request of the data subject prior to entering into a contract;

1. c) processing is necessary to comply with a legal obligation to which the controller is subject;
2. d) processing is necessary to protect the vital interests of the data subject,

or another natural person;

1. e) processing is necessary for the performance of a task carried out in the public interest

or in the exercise of official authority vested in the controller;

1. f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Chapter V Rights of data subjects

Right of access to data

The data subject has the right to receive information from us about whether we are processing their personal data. The interested person has the right to know:

• why we are processing specific data;
• what types of data we are processing;
• to what recipients or categories of recipients we have disclosed (or may disclose) the data – in particular, this applies to recipients in countries other than the countries of the European Economic Area;
• how long we plan (if possible) to process the data or based on what criteria we have determined this period.

In order for the client to gain access to their personal data, we must receive an appropriate application/request from them.

Right to rectify data

The data subject may request that we immediately rectify their incorrect personal data or supplement incomplete data.

In order to rectify the data of the data subject, we must receive a request from them,

in which they will specify the scope of the rectification. We will respond within the time limit in accordance with the GDPR.

Right to delete data (right to be forgotten)

The data subject may request that we delete their data when:

o the data is no longer necessary to achieve the purpose for which we collected it,

o the data was not processed in accordance with the GDPR or other legal regulations.

In order to delete the data of the data subject, we must receive a request from them, in which they will specify their requests.

We will respond within the time limits resulting from the GDPR. If we delete the customer’s data, we have the right to retain information about whose request we did so.

The right to restrict the processing of personal data

The data subject may also request that we restrict the processing of their data.

This right applies to the following situations:

• the data subject indicates that the data we are processing is not accurate;
• the data subject believes that we are processing the data unlawfully and requests that we restrict its use (but objects to its deletion);
• we no longer need the personal data to achieve the intended purpose, but the data subject objects to us deleting their data because they need it to assert or defend their claims;
• the data subject wishes to object for reasons related to their particular situation (when we process data based on our legitimate interest).

There may be situations when we process data despite the data subject’s request to restrict the processing of their data.

This applies in particular when we establish, assert or defend against claims.

In order to restrict the processing of your personal data, we must receive an appropriate request from you. We provide responses in writing within the deadlines specified in the GDPR.

The right to transfer data

In the event that the Administrator processes personal data based on consent or

in order to conclude and perform a contract, each data subject has the right to transfer their data.

We will transfer the data directly to the client or additionally to the administrator indicated by the client. In order to transfer the data of the data subject, we must receive an appropriate request from them.

We will transfer the data in an encrypted email within the deadlines resulting from the GDPR.

Right to object to processing

The data subject may object to our processing of their personal data, which is based on our legitimate interest.

The applicant should always indicate to us what specific objection they are making.

In particular, customers have the right to object to the marketing of the Administrator’s products and services.

The data subject who wants to exercise their rights is obliged to submit an application to the Administrator.

In the event that the identification of the person who submitted the application is not unambiguous, the Administrator reserves the right to obtain basic information about the applicant

in order to clearly identify their identity. In order to identify the applicant, the Administrator may ask for the following data:

• name and surname,
• PESEL number
• type, series and number of identity document,
• correspondence address (street, house/apartment number, town, postal code, country),
• REGON and NIP (in the case of a natural person conducting business activity),
• e-mail addresses and mobile phone numbers that the client uses or used in contacts with us.

Each application is considered individually by an authorized employee of the Administrator. 

Chapter VI Personal data protection breaches

A personal data protection breach occurs when the administrator accidentally or unlawfully destroys, loses, modifies, discloses or makes available personal data.

Who and when will we inform if a breach occurs in our company?

The data subject:

will be informed of such an event if the risk of violating the rights and freedoms of data subjects has been assessed by the Administrator as high or in the event that the relevant supervisory authority obliges us to take such action.

This information will be immediately communicated individually to each person affected by the incident or by means of a public announcement in the event if providing direct information would be very difficult.

Supervisory authority:

We will inform you about such an event if we assess that there was a greater than low probability of a violation of the rights or freedoms of natural persons whose data is being processed.

This information will be forwarded to the appropriate supervisory authority immediately, but no later than within 72 hours of the violation being detected.

Chapter VII Principles of transferring personal data outside the territory of the Republic of Poland

We may transfer personal data to entities (of course, in situations where there are grounds for doing so) from the European Economic Area (EEA).

It consists of the countries of the European Union, Iceland, Norway and Liechtenstein.

We may transfer personal data to a third country (outside the EEA) if it guarantees at least the same level of data protection as in Poland.

In practice, such a guarantee is that the given country has been recognized by the European Commission as a country that provides adequate protection.

We may, without the consent of the office supervising the protection of personal data in Poland, transfer personal data to other third countries when:

– in agreements with entities from these countries we have used special solutions,

provided for by law or approved by the office supervising the protection of personal data in Poland.

– the transfer of personal data is necessary for the performance of the agreement between the data subject and the Administrator in accordance with art. 49 sec. 1 letter b of the GDPR.

The Administrator pays special attention to minimizing the personal data transferred to third countries and to their proper protection.

Chapter VIII Supervisory authority/complaint

If a client/business partner suspects that their data is being processed in breach of the GDPR, they may file a complaint with the supervisory authority for personal data protection in the manner indicated on the website of the supervisory authority at www.giodo.gov.pl

Chapter VIII Supervisory authority/complaint

If a customer/business partner suspects that their data is being processed in breach of the GDPR, they may file a complaint with the supervisory authority for the protection of personal data in the manner indicated on the website of the supervisory authority

 Chapter IX Processing time – basic information

How long do we process data?

We process customer data for the time necessary to achieve the purpose of processing. We indicate specific periods in the documentation provided to customers.

We apply the principle of limiting the storage of personal data, which protects data from being processed for an unlimited period.

When we achieve the purpose of processing, we delete or anonymize the data (their recovery is then impossible). The exceptions are situations when we have to store data due to separate regulations

(e.g. tax law).

  We delete or anonymise customer data in particular when:

• the customer/business partner withdraws consent to the processing of personal data

(if the basis for processing was consent);

• the data subject effectively objects to further processing (if the basis for processing was the legitimate interest of the Administrator);
• any claims become time-barred (if the data were processed for the purpose of performing the contract);
• the deadlines resulting from other regulations expire (e.g. the Accounting Act, the Customs Law).

appendix no. 1: information obligations

Information clauses

in connection with art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of

personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR)

I hereby present information regarding the circumstances of processing your personal data:

Clause no. 1

for job candidates

DATA CONTROLLER

The personal data controller is POL AIR CARGO Sp. z o.o., contact address AL. Krakowska 106 room 228, 02-256 Warsaw, sales@polaircargo.pl

PURPOSES OF PROCESSING, LEGAL BASIS AND RETENTION

purpose of processing legal basis of processing

from Regulation No. 2016/679 (so-called GDPR) processing period

1) selection of a job candidate processing is necessary for the purposes resulting from the legally

legitimate interests of the administrator

(Article 6 paragraph 1 letter f) of the GDPR) – consisting in employing new staff up to 3 months after the end of recruitment

DATA RECIPIENTS

The Administrator will only transfer candidate data to trusted recipients such as IT service providers, mail hosting (who provide services to POL AIR CARGO Sp. z o.o.)

YOUR RIGHTS

Due to the fact that I process your personal data, you have the right to:

1) request access to your personal data,

2) request rectification of your personal data,

3) request deletion or restriction of processing of your personal data,

4) object to the processing of your data,

5) file a complaint with the authority (President of the Personal Data Protection Office).

Providing data is voluntary, but necessary to participate in the recruitment process.

Without providing your data, the candidate cannot take part in the recruitment process.

Clause No. 2

for employees

DATA CONTROLLER

The personal data controller is POL AIR CARGO Sp. z o.o., contact at AL. Krakowska 106 room 228, 02-256 Warsaw, sales@polaircargo.pl

PROCESSING PURPOSES, LEGAL BASIS AND RETENTION

processing purpose legal basis of processing from Regulation No. 2016/679 (so-called GDPR) processing period

1) fulfillment of the employer’s obligations arising from the employment relationship processing is necessary to take action before

concluding the contract and performing the contract (Article 6 paragraph 1 letter b) of the GDPR) 10 years from the end of the employment relationship

2) fulfillment of the employer’s obligations arising from labor law processing is necessary to fulfill a legal obligation

(Article 6 paragraph 1 letter c) of the GDPR) in connection with the Labor Code and implementing acts 10 years from the end of the employment relationship

3) registration of persons for social insurance processing is necessary to fulfill a legal obligation

(Article 6 paragraph 1 letter c) of the GDPR) in connection with With the Act on the Social Insurance System

5 years from the end of the employment relationship

4) maintaining accounting and tax documentation processing is necessary to fulfill a legal obligation

(Article 6, paragraph 1, letter c) of the GDPR) in connection with Article 74 of the Accounting Act

and other Taxes 5 full years from the end of the calendar year

5) pursuing claims and defending against claims processing is necessary for the purposes resulting from the legitimate interests of the administrator (Article 6, paragraph 1, letter f) of the GDPR)

– defending the interests of the entrepreneur 10 years from the end of cooperation

DATA RECIPIENTS

The Administrator will only transfer employee data to trusted recipients such as IT service providers, mail hosting, accounting, postal and courier services (who provide services to POL AIR CARGO Sp. z o.o.).

YOUR RIGHTS

Due to the fact that I process your personal data, you have the right to:

1) request access to your personal data,

2) request rectification of your personal data,

3) request deletion or restriction of processing of your personal data,

4) object to the processing of your data,

5) transfer of personal data (which are processed on the basis of a contract)

6) lodge a complaint with the authority (President of the Personal Data Protection Office).

Providing data is voluntary, although necessary for the conclusion and performance of an employment contract. Without providing your data, it is not possible to employ an employee..

Clause No. 3

for suppliers and potential suppliers

DATA CONTROLLER

The personal data controller is POL AIR CARGO Sp. z o.o., contact at AL. Krakowska 106 room 228, 02-256 Warsaw, sales@polaircargo.pl

PURPOSES OF PROCESSING, LEGAL BASIS AND RETENTION

purpose of processing the basis of the processing law

from Regulation No. 2016/679 (so-called GDPR)

1) establishing business relations – purchases processing is necessary for the purposes resulting from the legitimate

interests of the administrator (Article 6 paragraph 1 letter f) of the GDPR) –

consisting of the purchase of goods and services necessary to conduct

business

2) concluding and performing a purchase agreement processing is necessary to take action before concluding

the agreement and performing the agreement (Article 6 paragraph 1 letter b) of the GDPR)

3) filing complaints, grievances, applications processing is necessary for the purposes resulting from the legitimate

interests of the administrator (Article 6 paragraph 1 letter f) of the GDPR) – consisting of taking care of the quality of deliveries

4) maintaining accounting and tax documentation processing is necessary to fulfill a legal obligation

(Article 6 paragraph 1 letter c) of the GDPR) in connection with

Article 74 of the Accounting Act and other tax regulations

5) pursuing claims and defending against claims, processing is necessary for the purposes resulting from the legitimate interests of the administrator

(Article 6, paragraph 1, letter f) of the GDPR) – defending the interests of the entrepreneur

processing period

until an effective objection/request for deletion is filed

until the contract is terminated

one year from the date of filing a complaint, claim, or application

5 full years from the end of the calendar year

10 years from the end of cooperation

DATA RECIPIENTS

The Administrator will transfer the data of potential suppliers or providers only to trusted recipients such as IT service providers, mail hosting, accounting, postal and courier services

(who provide services to POL AIR CARGO Sp. z o.o.).

YOUR RIGHTS

Due to the fact that I process your personal data, you have the right to:

1) request access to your personal data,

2) request rectification of your personal data,

3) request deletion or restriction of processing of your personal data,

4) object to the processing of your data,

5) transfer of personal data (which are processed on the basis of a contract),

6) lodge a complaint with the authority (President of the Personal Data Protection Office).

Providing data is voluntary, although necessary to establish commercial cooperation.

Without providing your data, it is not possible to submit requests for quotes, conclude contracts or execute them.

Clause No. 4

for customers and potential customers

DATA CONTROLLER

The personal data controller is POL AIR CARGO Sp. z o.o., contact address AL. Krakowska 106 room 228, 02-256 Warsaw, sales@polaircargo.pl

PROCESSING PURPOSES, LEGAL BASIS AND RETENTION

the purpose of processing the basis of the law of processing

from Regulation No. 2016/679 (so-called GDPR) processing period

1) establishing business relations – sales processing is necessary for the purposes resulting from the legitimate interests of the administrator

(Article 6 paragraph 1 letter f) of the GDPR) – consisting in striving to sell services until an effective objection is filed/request for deletion

2) conclusion and performance of a sales contract [PK5] [PK6] processing is necessary to take action before the conclusion of the contract and the performance of the contract (Article 6 paragraph 1 letter b) of the GDPR) [PK7]until the termination of the contract

3) consideration of complaints, grievances, applications processing is necessary for the purposes resulting from the legitimate interests of the administrator (Article 6 paragraph 1 letter f) of the GDPR) – consisting in taking care of the quality and image of the entrepreneur one year from the date of filing a complaint, grievance, application

4) maintaining accounting and tax documentation processing is necessary to fulfill the legal obligation (Article 6, paragraph 1, letter c) of the GDPR) in connection with Article 74

Act on Accounting and Other Taxes 5 full years from the end of the calendar year

5) debt collection processing is necessary for purposes arising from the legitimate interests of the administrator (art. 6 sec. 1 letter f) of the GDPR) –consisting of maintaining financial liquidity until full settlement

6) pursuing claims and defending against claims processing is necessary for purposes arising from the legitimate interests of the administrator (art. 6 sec. 1 letter f) of the GDPR) –defending the interests of the entrepreneur 10 years from the end of cooperation

7) marketing of own services processing is necessary for purposes arising from the legitimate interests of the administrator (art. 6 sec. 1 letter f) of the GDPR) –consisting of taking care of the interests and good image of the entrepreneur 2 years from obtaining the data or until an objection is filed

8) marketing of services / goods of third parties – partners processing is necessary for purposes arising from the legitimate interests of the administrator (art. 6 sec. 1 letter f) of the GDPR) f) GDPR) –

consisting of the sale of services and promotion of business partners 2 years from the date of data acquisition or until an objection is filed

 DATA RECIPIENTS

The Administrator will transfer customer and potential customer data only to trusted recipients such as IT service providers, mail hosting, accounting, postal and courier services, law firms (who provide services to POL AIOR CARGO Sp. z o.o.).

YOUR RIGHTS

Due to the fact that I process your personal data, you have the right to:

1) request access to your personal data,

2) request rectification of your personal data,

3) request deletion or restriction of processing of your personal data,

4) object to the processing of your data,

5) transfer personal data (which are processed on the basis of a contract)

6) file a complaint with the authority (President of the Personal Data Protection Office). 

Providing your data is voluntary, but necessary to establish commercial cooperation. Without providing your data, it is not possible to submit requests for quotes, conclude contracts or perform them.

 Clause No. 5

for employees and associates of contractors

DATA CONTROLLER

The controller of personal data is POL AIR CARGO Sp. z o.o., contact at AL. Krakowska 106 room 228, 02-256 Warsaw, sales@polaircargo.pl

PURPOSES OF PROCESSING, LEGAL BASIS AND RETENTION

purpose of processing the basis of the right to process

from Regulation No. 2016/679 (so-called GDPR)

1) establishing business relations – sales processing is necessary for the purposes resulting from the legitimate interests of the administrator (Article 6 paragraph 1 letter f) of the GDPR) – consisting in striving to sell services

2) considering complaints, grievances, applications processing is necessary for the purposes resulting from the legitimate interests of the administrator (Article 6 paragraph 1 letter f) of the GDPR) – consisting in taking care of the quality and image of the entrepreneur

3) maintaining accounting and tax documentation processing is necessary to fulfill a legal obligation

(Article 6 paragraph 1 letter c) of the GDPR) in connection with Article 74 Act on Accounting and Other Taxes

4) debt collection processing is necessary for purposes arising from legally legitimate interests of the administrator (Article 6, paragraph 1, letter f) of the GDPR) – consisting in maintaining financial liquidity

5) pursuing claims and defending against claims processing is necessary for purposes arising from legally legitimate interests of the administrator (Article 6, paragraph 1, letter f) of the GDPR) – defending the interests of

until an effective objection/request for deletion is filed

one year from the entrepreneur

processing period

the date of f

ODBIORCY DANYCH

Administrator będz iling a complaint, claim, or application

5 full years from the end of the calendar year

until full settlement

10 years from the end of cooperation

ie przekazywać dane pracowników i współpracowników kontrahentów  

wyłącznie zaufanym odbiorcom takim jak dostawcy usług IT, hostingu poczty,

usługi księgowych, pocztowych i kurierskich, kancelarii prawnych (którzy świadczą usługi

dla POL AIR CARGO Sp. z o.o.).

 YOUR RIGHTS

Due to the fact that I process your personal data, you have the right to:

1) your personal data,

2) request rectification of your personal data,

3) request deletion or request access to limit the processing of your personal data,

4) object to the processing of your data,

5) file a complaint to the authority (President of the Personal Data Protection Office).

Providing data is voluntary, although necessary to establish commercial cooperation with your employer or principal. Without providing your data, it is not possible to establish any cooperation.

 Clause No. 6

for persons corresponding

DATA CONTROLLER

The administrator of personal data is POL AIR CARGO Sp. z o.o., contact at AL. Krakowska 106 room 228, 02-256 Warsaw, sales@polaircargo.pl

PURPOSES OF PROCESSING, LEGAL BASIS AND RETENTION

purpose of processing the basis of the processing law

from Regulation No. 2016/679 (so-called GDPR)

1) registration of correspondence and providing answers necessary for the purposes resulting from the legitimate interests of the administrator (Article 6 paragraph 1 letter f) of the GDPR) – fulfilling

timely response to letters, timely execution of payments to suppliers, taking care of the quality of cooperation with contractors and other interested parties

2) pursuing claims and defense against claims processing is necessary for the purposes resulting from the legitimate interests of the administrator

(Article 6 paragraph 1 letter f) of the GDPR) – defense of the interests of the entrepreneur

processing period

10 years from sending or receiving correspondence

10 years from the end of cooperation

DATA RECIPIENTS

The Administrator will only transfer the data of correspondents to trusted recipients such as IT service providers, mail hosting, accounting, postal and courier services (who provide services for POL AIR CARGO Sp. z o.o.).

YOUR RIGHTS

Due to the fact that I process your personal data, you have the right to:

1) request access to your personal data,

2) request rectification of your personal data,

3) request deletion or restriction of processing of your personal data,

4) object to the processing of your data,

5) file a complaint with the authority (President of the Personal Data Protection Office).

Providing data is voluntary, although necessary to establish commercial cooperation with your employer or principal. Without providing your data, it is not possible to establish any cooperation.

 Clause No. 7

for users of the website www.

DATA CONTROLLER

The administrator of personal data is POL AIR CARGO Sp. z o.o., contact at AL. Krakowska 106 room 228, 02-256 Warsaw, sales@polaircargo.pl

PURPOSES OF PROCESSING, LEGAL BASIS AND RETENTION

purpose of processing basis of the processing law

from Regulation No. 2016/679 (so-called GDPR) processing period

1) use of the website and ensuring its proper functioning necessary for the purposes arising from the legitimate interests of the administrator (Article 6 paragraph 1 letter f) of the GDPR) –

consisting of running the website 2 years from the last visit to the pages

2) pursuing claims and defense against claims processing is necessary for the purposes arising from the legitimate interests of the administrator

(Article 6 paragraph 1 letter f) of the GDPR) – defense of the entrepreneur’s interests 10 years from the end of cooperation

processing period

2 years from last visits

10 years from termination of cooperation

DATA RECIPIENTS

The Administrator will only transfer the data of website users to trusted recipients such as IT service providers (who provide services to POL AIR CARGO Sp. z o.o.).

YOUR RIGHTS

Due to the fact that I process your personal data, you have the right to:

1) request access to your personal data,

2) request the rectification of your personal data,

3) request the deletion or restriction of the processing of your personal data,

4) object to the processing of your data,

5) file a complaint with the authority (President of the Personal Data Protection Office).

Providing data is voluntary,