Dane osobowe

In the matter of personal data processing, we kindly inform You that:

The Energa Group makes every effort to protect the data of people using the services offered on the websites. In order to implement the principle of lawful, reliable and transparent processing of your personal data when using our services, in accordance with art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), we kindly inform:

1) Who is the Administrator of Your personal data?

The administrator of Your personal data (ADO) is CCGT Grudziądz sp. z o.o., based at Dworcowa 47 St., 86-300 Grudziądz. Correspondence address: Grunwaldzka 472 Av, 80-309 Gdańsk

2) You can contact the Data Protection Officer (DPO) by e-mail:

iod.eobpgk1@energa.pl or by correspondence to the ADO address (point 1).

3) For what purposes do we process Your personal data?

We process Your personal data for the purposes for which You contact us; the goals can be:

- conclusion and implementation of the contract with ADO, or taking action at Your request, before concluding the contract;

- statistical - to facilitate the use of individual website functionalities and to ensure IT security;

- consideration of complaints and requests, answers to questions; it is personal data sent by You by e-mail or contained in the documents attached to the notification, complaint or application;

- implementation of legal provisions, if Your case results from them, e.g. issuing and storing invoices and accounting documents;

- indicated in the consents, if You express them; You can withdraw Your consent at any time, withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of its granting;

- enabling the use of website resources;

- determination, execution or defence of claims arising from legal provisions;

- archiving correspondence;

- contacting You.

4) On what grounds do we process Your personal data?

 

The grounds for processing personal data that You have sent to ADO may have different legal bases, depending on the issue. Personal data in correspondence sent to ADO can be processed on the basis of:

- Art. 6 clause 1 let. a GDPR, i.e. granting voluntary consent, which You can withdraw at any time;

- Art. 6 clause 1 let. b GDPR, i.e. the conclusion and implementation of the contract to which You are a party and taking action at Your request, before concluding the contract;

- Art. 6 clause 1 let. c GDPR, i.e. the implementation of legal obligations incumbent on ADO;

- Art. 6 clause 1 let. f GDPR, i.e. legitimate interests, e.g. marketing of own products or determination, investigation and defence of claims, archiving correspondence.

5) Providing the data required to conduct correspondence with ADO or use ADO websites is voluntary.

 

6) How long will we process Your data?

The data will be processed for the period of provision of services, necessary to achieve the purposes of processing indicated in point 3.

- in the scope of contract performance, for the period to its termination, after that time the data will be processed for the period required by law or for the period necessary to establish, assert or defend claims;

- in the scope of fulfilling legal obligations incumbent on ADO, data will be processed for the period of fulfilling these obligations;

- if You agree to the processing of personal data, the data will be processed until it is withdrawn;

- in the scope of the implementation of ADO's legitimate interests, the data will be processed until You have resolved Your objection to data processing.

7) Who do we transfer Your personal data to?

- service providers - we transfer Your personal data to service providers whose services are used by ADO; service providers, depending on contractual arrangements and circumstances, are subject to ADO's instructions regarding the purposes and methods of processing this data (they are processors);

- public entities and bodies, e.g. organizational units of the Prosecutor's Office, Courts, Police, President of the Office for Personal Data Protection or President of the Office of Electronic Communications - we transfer Your personal data only if ADO has such an obligation under the law;

- Energa Group companies, based on internal contracts;

- entities providing correspondence;

- entities performing documentation destruction services;

- entities providing legal advisory services and regarding court cases;

- entities providing IT services in the field of systems processing Your personal data.

 

8) GDPR grants You numerous rights.

You can submit to ADO or DPO (points 1, 2) an application regarding Your personal data with respect to the following rights:

- corrections (e.g. corrections) if they are incorrect;

- removal;

- requests for processing restrictions;

- access to Your data and obtaining a copy thereof;

- withdrawal of consent to processing if it was the basis for their processing; withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of its granting;

- expressing objection to processing;

- transferring data to another personal data administrator;

- lodging a complaint to the President of the Office for Personal Data Protection.

The scope of each of the above rights and the situations in which they can be exercised arise from the law. The exercise of this right will depend, for example, on the legal basis and the purpose of the processing.