THE RIGHTS APPLICABLE TO THE DATA SUBJECT
One of the main purposes of introducing the GDPR was to strengthen your right to privacy protection and to strengthen the right to shape the methods of processing personal data already made available to the Administrator. This goal was achieved by indicating the rights of a natural person in the regulations, which we hope to describe below in a clear way.
The right to access data – you have the right to request access to your personal data, including:
You also have the right to obtain a copy of your personal data.
On the basis of the submitted request, we will provide you with all information free of charge (subject to the inconvenient and regular request for further copies of the data, then we may charge a reasonable fee) and without undue delay, at the latest within one month of receiving the request. Due to the complex nature of the request or the number of requests, the deadline may be extended by another two months, but we will inform you about such extension within one month of receiving the request.
The right to rectify data – in a situation where the personal data we have is inconsistent or incorrect, you have the right to request rectification.
The right to delete data (the right to be forgotten) – you have the right to request deletion of data if one of the following circumstances occurs:
It is worth remembering that you will not be able to exercise the right to delete data, if:
The right to limit data processing – you have the right to request the restriction of data processing in the following cases:
The right to data portability – you have the right to receive your personal data in a structured, commonly used and machine-readable format and you have the right to send this personal data to another administrator if:
Please note that:
The right to object to data processing – You have the right to object at any time – for reasons related to your particular situation – to the processing of personal data, if the legal basis for processing is a task carried out in the legitimate public interest.
As a result of the objection, we will cease the processing of personal data, unless we demonstrate the existence of valid legally justified grounds for processing that override your interests, rights and freedoms, or grounds for establishing, investigating, pursuing or defending against claims.
If your personal data is processed for direct marketing purposes, you may object to such processing at any time, including profiling, without the need to demonstrate reasons related to your particular situation. Only objection to direct marketing, including profiling, is absolutely effective.
Automated decision making, including profiling – the data subject has the right not to be subject to a decision which:
Making decisions based solely on automated data processing is permissible if the decision meets at least one of the three conditions:
Note: Decisions that are made with the participation of a person (i.e., where a human has a direct influence on the decision) are not subject to the above prohibition.
The right to lodge a complaint with a supervisory authority – you have the right to lodge a complaint with the President of the Personal Data Protection Office, if you believe that we are processing personal data in violation of the provisions. All necessary information can be found at www.uodo.gov.pl
The above-mentioned rights can be brought to the Data Protection Officer, through the following forms of communication:
Please be advised that we will carefully verify your requests, demands or objections in accordance with the applicable provisions on the protection of personal data. At the same time, we would like to inform you that the above-mentioned rights are not absolute, as the provisions allow them to be disregarded in certain situations that we have tried to outline here.