RODO

INFORMATION ON PERSONAL DATA PROCESSING FOR CLIENTS AND CONTRACTORS

I. Personal Data Controller

The controller of your personal data is CDSR Sp. z o.o., with its registered office in Warsaw (00-837), ul. Pańska 96/83, entered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under KRS number: 0000595892, REGON: 363489110, NIP: 5252642663.

You can contact us in writing at the above address or via email: rodo@cdsr.pl

II. Purpose and Legal Basis for Processing

Your personal data will be processed for the following purposes: a) to conclude and perform a contract – based on Art. 6(1)(b) GDPR,
b) to fulfill legal obligations arising from the business relationship between the Parties, including obligations related to waste management, as well as accounting and tax obligations – based on Art. 6(1)(c) GDPR,
c) to maintain ongoing business relationships, present offers tailored to your needs, and send marketing content (direct marketing) – based on Art. 6(1)(f) GDPR,
d) based on your consent and to the extent provided, also for the purpose of disclosing our cooperation, publishing references you provided, demonstrating our experience, sending commercial/marketing information via electronic communication and telecommunications end devices, and other purposes specified in your consent – based on Art. 6(1)(a) GDPR.

III. Data Recipients

Your personal data may be shared with third parties as necessary to achieve the purposes of processing, including our collaborators and subcontractors, especially those providing services related to transportation and waste management under the contract with you, as well as entities providing accounting, legal, property security, IT, technical, and organizational support services.
Where required by law, data sharing will be based on agreements obliging confidentiality and/or data processing agreements in compliance with GDPR and our standards.

In addition, your personal data will be provided to relevant public authorities to fulfill legal obligations related to the execution of the contract, including waste management and tax settlements.

IV. Data Transfer to Third Countries

Your personal data will not be transferred outside the European Economic Area (EEA).

V. Data Retention Period

For waste management, your data will be stored for 5 years from the end of the calendar year in which the waste documentation was created.
For all other purposes, your data will be stored for the duration of the contract and subsequently for the limitation period of any claims arising from the contract and for the period required by law, including tax regulations.
Where processing is based on your consent, the data will be stored until the consent is withdrawn or we determine that the data may have become outdated.

VI. Your Rights

In relation to the processing of your personal data, you have the following rights: a) the right to access your data and receive a copy,
b) the right to rectify/correct your data,
c) the right to have your data erased – if there are no legal grounds for further processing,
d) the right to restrict data processing – if the data is inaccurate, lacks legal grounds for processing, or if for any reason you wish us to stop processing without deleting it,
e) the right to object to the processing of personal data,
f) the right to data portability,
g) the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office.

VII. Consequences of Not Providing Data

Providing data is necessary to conclude and perform a contract, as well as to fulfill our legal obligations. If you refuse to provide data, we may refuse to enter into or extend the contract, or in justified cases, terminate it.

If data is to be processed based on your consent, providing it is voluntary. Refusal will prevent us from performing the purpose for which the data was to be provided, as stated in your consent and this notice.

VIII. Profiling and Automated Decision-Making

Your personal data may be subject to automated processing and profiling, including the use of artificial intelligence, to create offers tailored to your needs and to improve our work organization and service quality. However, your data is not used for automated decision-making processes.

GDPR refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).