Pursuant to the Joint Data Control Agreement and the arrangements therein regarding the purposes, scope and means of processing, we jointly process your personal data as Joint Data Controllers.
I. The joint controllers of your personal data are:
- TPA Sp. z o.o. Sp.k ul. Młyńska 12, 61-730 Poznań as “Coordinating Data Controller”
- TPA Management Sp. z o.o. ul. Młyńska 12, 61-730 Poznań as “Joint Data Controller no. 1”
- TPA Real Estate Services Sp. z o.o. Sp. k. ul. Przyokopowa 33, 01-208 Warszawa as “Joint Data Controller no. 2”
- Baker Tilly Woroszylska Gajda Legal Sp.k. ul. Przyokopowa 33, 01-208 Warszawa as “Joint Data Controller no. 3”
- Baker Tilly TPA Sp. z o.o. k ul. Młyńska 12, 61-730 Poznań as “Joint Data Controller no. 4”
Under the Joint Data Control Agreement, together with the Joint Data Controllers we have agreed upon our respective responsibilities regarding the fulfilment of our obligations under the GDPR, in particular, we have arranged that the Coordinating Data Controller is responsible for fulfilling its information obligations to you and for enabling you to exercise your rights. Regardless of this arrangement, you may exercise your rights against us as well. In that case, we will forward your request to the Joint Data Controller, who will fulfill your request.
The contents of the arrangements between the Joint Administrators can be found on the website available: HERE
II. Contact in matters related to personal data protection
The Coordinating Data Controller has appointed a Data Protection Officer and established a common point of contact. Via email address: iodo@tpa-group.pl you can contact us about protecting your personal data and exercising your rights.
In addition, you may contact us by mail or in person at the address of the Coordinating Data Controller or any Joint Data Controller.
III. Purpose of data processing
We process your data exclusively for the purpose of answering the question contained in the contact form.
IV. Legal basis for data processing
We process your personal data based on:
– legitimate interests of the Joint Administrators (Article 6(1)(f) of the GDPR), consisting in:
communication with the users of the website
V. Data recipients
Your personal data may be shared with processors who provide us with IT maintenance services, hosting, IT solutions and tools necessary for the proper performance of the tasks of the Joint Data Controllers.
If necessary, your personal data may be disclosed to entities entitled to receive your data under applicable laws as part of ongoing proceedings and at their explicit and legitimate request, e.g. state offices, state authorities and state administration bodies.
VI. Transfer of data to third countries or international organizations
Your personal data may be transferred outside the European Economic Area as part of the use of IT solution providers and systems by the Joint Data Controllers (e.g., to: Google Inc., Microsoft Corporation etc.), which may store personal data on servers located outside that area. Such transfer may take place to a third country with respect to which the European Commission has assessed an adequate level of protection or through the application of appropriate legal safeguards, which are in particular standard contractual clauses for the protection of personal data approved by the European Commission. You have the right to obtain a copy of personal data transferred to a third country, which can be exercised by contacting at the addresses indicated in Sections I and II.
VII. Data storage period
Your data will be processed for the period necessary to fulfill the purpose for which they were collected, referred to in Section III of this Information, i.e. no longer than it is necessary to provide you with an answer, and after that time they may be processed for the period of limitation of possible claims.
VIII. Your rights
You have the right to access your data, including obtaining a copy of your data, rectifying your data, requesting erasure, restricting processing, objecting to processing, and transferring the data provided to another data controller. You also have the right to file a complaint with the President of the Polish Personal Data Protection Office.
In order to exercise the above rights, you must address your request to the Coordinating Data Controller through the established common Point of Contact or other contact data – contact details are indicated in Sections I and II of this Information.
VIII. Freedom to disclose data
Entering your data is voluntary, but necessary in order to answer your question.
IX. Information on automated decision-making, including profiling
Your personal data will not be subject to automated decision-making, including profiling.