- Directan Sp. z o.o. is the administrator of personal data processed within the scope of its business activity and appears as processing entity in relation to the data to which it is granted access under the licence agreement or any other legal relationship.
- Directan Sp. z o.o. processes the following personal data of its partners and entities entered into databases and put at the disposal of Directan Sp. z o.o. within the scope of its business activity: name and surname, PESEL, ID number, NIP number, KRS number, address of residence, address of correspondence, telephone number, e-mail address, education, marital status, position in a company, licences and qualifications, preferences, as well as other data included in the catalog of publicly available data. Directan Sp. z o.o. collects entrepreneurs’ data derived from public registries in its databases. Directan Sp.z o.o. holds profiled databases and provides profiling services with regard to its business activity. The indicated profiling activities are not related to decision making with regard to the profiled entities and are based exclusively on automated processing.
- Directan Sp. z o.o. does not process sensitive data, including biometric and genetic data, within the scope of its business activity.
- The data indicated in section 2 is processed exclusively for the following purposes:
1. drawing up of offers related to economic cooperation
2. providing services within the scope of Directan Sp. z o.o. business activity
3. issuing invoices, receipts or financial reporting
4. direct marketing run by Directan Sp. z o.o.
5. business activity claims
6. recruitment procedures. - The personal data indicated in section 2 is acquired by Directan Sp. z o.o. using:
1. the request form available on directan.pl or
2. provided directly, including data provided by a partner with regard to contract execution or
3. provided via electronic means, including data provided by a partner with regard to contract execution
4. provided by telephone or
5. made available or handed over on the basis of the contracts made with partners - Any entity using the request form indicated in section 5 or handing over personal data in any other form is required to submit their personal data exclusively whereas partners executing contracts are required to submit and make available real, up-to-date and complete data. Sending or handing over personal data in any form which is enables its successful receipt by Directan Sp. z o.o. is considered equivalent to accepting theTerms
- Access to personal data processed by Directan Sp. z o.o. is granted exclusively to employees who have been authorized to do so. Directan Sp. z o.o. keeps registers of employees authorized to process personal data.
- Directan Sp. z o.o. hands over data processed within the scope of its business activity to other external entities only as far as it complies with the law and is critical to the proper performance of services. Making available as well as handing over data occurs on the basis of personal data processing agreement. Directan Sp. z o.o. keeps registers of personal data processing agreements.
- Directan Sp. z o.o. declares that it only processes personal data relevant to the objective of processing. If the entity indicated in section 6 submits personal data beyond the scope indicated in section 2 (excessive data), Directan Sp. z o.o. deletes all excessive data unless its processing is justified on the basis of existing legal acts.
- Directan Sp. z o.o. declares that it adopts technical and organizational measures to provide the highest possible level of personal data processing protection appropriate to the risks and category of the data being processed, and in particular to protect data against unauthorized disclosure, takeover by an unauthorized person, processing with the violation of the Act, any change, loss, damage or destruction. In particular, Directan Sp. z o.o. processes data on the basis of the Regulation of the European Parliament and of the Council No. 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and of the free movement of such data and repealing of Directive 95/46/WE (general data protection regulation).
- Any entity indicated in section 6 is solely liable for making available data which is outdated, untrue, not complete or collected with the violation of the Act.
- If Directan Sp. z o.o. processes data which is untrue, outdated, not complete or collected with the violation of the Act, the entity indicated in section 6 will be required to pay compensation to Directan Sp. z o.o. for putting the company at risk of reputation and image loss and damages appropriate to the losses suffered.
- Any entity whose data is processed by Directan Sp. z o.o. has the right to request Directan Sp. z o.o. to share information on personal data (in particular the scope and the purpose of data processing) of the indicated entity processed by Directan Sp. z o.o. The request should be made in writing, personally signed by the authorized person and sent to the address of the registered office of Directan Sp. z o.o. or by scan to the following e-mail address: wypisz@directan.pl.
- Any entity whose data is processed by Directan Sp. z o.o. has the right to receive the personal data processed by Directan Sp. z o.o. and relevant to the entity in a structured, commonly used, machine readable format. The indicated entity has the right to submit the indicated data to another administrator as well as to order Directan Sp. z o.o. to hand it over in the indicated format to the administrator indicated by the entity.
- Any entity whose data is processed by Directan Sp. z o.o. has the right to require Directan Sp. z o.o. to limit the processing of its data if there are legally justified reasons for restricting the processing.
- Any entity whose data is processed by Directan Sp. z o.o. on the basis of the permission given by the entity for processing, has the right to revoke the permission to process its personal data by Directan Sp. z o.o. at any time. Revoking the permission does not affect the legality of the processing which had been done on the basis of the permission before it was revoked.
- Any entity whose data is processed by Directan Sp. z o.o. on the basis of the permission given by the entity has the right to object to its personal data processing by Directan Sp. z o.o. at any time.
- Directan Sp. z o.o. is required to delete personal data if the permission has been revoked or if the entity has objected with binding legal effect as well as at the request of any person whom the data concerns, when their personal data processing is no longer necessary for the purpose for which it had been collected.
- Directan Sp. z o.o. responds to forms and requests made by the entities whose data it processes within a month from the receipt of a form or a request. If necessary, the deadline may be extended for another two months considering the complexity of the request or the number of requests. Within a month from the receipt of the request Directan Sp. z o.o. informs the person whom the data concerns about the extension of the deadline indicating the reasons for the delay.
- Directan Sp. z o.o. assures that the owner of the database, from which the data subjected to modification or any other activities at the request of a person whom the data concerns is derived, informs all elligible recipients of the data and the person whom the data concerns, about rectification, deletion or restriction of personal data processing as soon as the indicated activities are performed. The owner of the database is exempted from the obligation to inform the indicated entities (with the exception of the person whom the data concerns) if it is impossible or involves a disproportionate effort.
- Directan Sp. z o.o. declares that depending on the necessity, personal data which is processed in its sets is subject to pseudonimisation in order to prevent its acquisition by unauthorized third parties.