INFORMATION ON PROCESSING OF PERSONAL DATA

In connection with the implementation of the requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (‘RODO’), Consultants United (CU) informs you about the principles of personal data processing and your rights.

1. The administrator of your personal data is Consultants United sp. z o.o. with its registered office in Warsaw, Łucka 2/4/6 loc. 8, 00-845 Warsaw.
   If you have any questions regarding the processing of your personal data, please:
   – contact the Personal Data Protection Coordinator via e-mail box: rodo@cunited.pl;
   – contact in writing or in person at the address of the company: Consultants United sp. z o.o., ul. Łucka 2/4/6 lok. 8, 00-845 Warsaw.
2. The processing of your personal data by CU is carried out for purposes related to the performance of the cooperation agreement signed with you.
   Within the scope of the above purpose, the legal basis for the processing of your personal data by CU is:
   (a) the performance of the contract – to the extent necessary to perform the contract or to take action at your request prior to the conclusion of the contract (Article 6(1)(b) RODO) – for the duration of the cooperation;
   (b) the performance of the contract between the parties, including the processing of payments to the extent necessary for the performance of the contract (Article 6(1)(b) of the DPA) – for the duration of the cooperation;
   (c) the performance of accounting obligations and the fulfilment of tax obligations – in order to comply with legal obligations (Article 6(1)(c) RODO) – for a period of 5 years from the end of the year in which the tax event occurred;
   (d) the assertion or defence of claims (Article 6(1)(f) RODO) – for 3 years from the end of the cooperation;
   (e) communication between the Parties – as the Administrator’s legitimate interest in ensuring adequate communication between the Parties to the contract (Article 6(1)(f) RODO) – for the duration of the cooperation
   (f) your consent in the event that you voluntarily provide data beyond what is required by applicable law (Article 6(1)(a) RODO).
3. CU processes the following categories of your data: company registration data, name of persons authorised to represent the company, contact data, including telephone numbers and e-mail addresses of employees designated as persons responsible for cooperation and contract performance, and other data necessary to fulfil the purpose for which the data were provided.
4. The provision of personal data is voluntary, but necessary for the conclusion and performance of the contract, and failure to provide such data may in some cases prevent the performance of the contract.
5. Your personal data is processed by employees and management of our company and CU partners to the extent necessary to enable them to communicate in order to perform the contract, as well as processors providing IT, postal and other services necessary for the proper operation of CU and acting on behalf of and for the benefit of CU in compliance with the requirements of the RODO and may be made available to control bodies or public entities entitled to obtain the data on the basis of applicable laws, among others. Among others, ZUS, US, courts, law enforcement authorities or state institutions, when they make a request, based on an appropriate legal basis.
6. The duration of the processing of your personal data depends on the purpose for which the data are processed and is calculated on the basis of the duration of the contract or legal provisions that may oblige CU to process the data for a specific period of time.
7. In order to fulfil its statutory tasks, in processing your personal data, CU does not make decisions based on automated data processing, including profiling.
8. Your personal data are not transferred to third countries.
9. All persons whose personal data is processed by CU have relevant rights under the RODO. In this regard, you have the following rights:
   1) the right of access to your personal data, including the right to obtain a copy of that data;
   2) The right to request the rectification (amendment) and completion of your personal data;
   3) The right to request the erasure of your personal data (the so-called ‘right to be forgotten’);
   4) The right to request the restriction of the processing of your personal data;
   5) The right to object to the processing of your personal data where the CU processes your personal data on the basis of a legitimate interest of the controller.
10. In all cases related to the processing of your personal data, you have the right to lodge a complaint with the competent supervisory authority dealing with the protection of personal data.