Privacy policy

PROTECTION OF PERSONAL DATA
 
Dear User,
Please read the following carefully:
In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the Regulation), Enim Institute sp. z o.o. with its registered office in Krakow at Kielecka 8 lok. 1, 31526 Kraków, entered into the register of entrepreneurs kept by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register, under KRS number 0000571807, with NIP 6751522191 and REGON 362278380, share capital: PLN 70,000.00, informs about the principles of personal data processing:
Data Controller
The administrator of your data is Enim Institute sp. z o.o. with its registered office in Krakow at Kielecka 8 lok. 1, 31526 Kraków, entered into the register of entrepreneurs kept by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register, under KRS number 0000571807, with NIP 6751522191 and REGON 362278380, share capital: PLN 70,000.00, email: biuro@eniminstitute.pl, hereinafter referred to as “ENIM Institute”.
Categories of personal data
ENIM Institute processes the following categories of data: identification data, address and contact data as well as data necessary for the purposes for which ENIM Institute processes data.
Purposes and legal basis for the processing of personal data
Personal data may be processed by ENIM Institute for the following purposes:
performing activities related to the day-to-day operations of ENIM Institute, and in particular in order to take the necessary actions related to the conclusion and performance of the contract with the client and taking actions by the ENIM Institute at your request before concluding the agreement – the legal basis for the processing of personal data in this respect is Article 6(1)(b) of the Regulation,
for the purposes resulting from the legitimate interests pursued by ENIM Institute as the data controller: in order to provide services to Clients, marketing of ENIM Institute’s services in the field of processing for statistical purposes and internal reporting – the legal basis for the processing of personal data in this respect is Article 6(1)(f) of the Regulation,
establishing and pursuing own claims or defending against reported claims – the legal basis for the processing of personal data in this respect is the legitimate interest pursued by ENIM Institute, i.e. Article 6(1)(f) of the Regulation,
fulfilment of legal obligations incumbent on ENIM Institute in connection with the conduct of business activity and in connection with the performance of the contract – the legal basis for the processing of personal data in this respect is Article 6(1)(c) of the Regulation,
recruiting persons interested in working or cooperating with ENIM Institute, the legal basis for the processing of personal data in this respect is Article 6(1)(a) and Article 6(1)(c) of the Regulation.
ENIM Institute also processes personal data provided by you in the course of business contacts and correspondence exchanges, e m.in. by e-mail, through conversations using tools and platforms provided by ENIM Institute or in connection with the virtual workspace and collaboration tools used by ENIM Institute. These methods are based on ENIM Institute’s legitimate interest to maintain a relationship with you by dealing with your questions, as well as to ensure the availability, proper use, control and control of these tools, as well as the security of the computer system and the confidentiality of information. Providing personal data to the extent not resulting from the provisions of law is voluntary, however, refusal to provide data may result in refusal to provide services or answer the questions asked.
Information on the periods of personal data processing
Personal data will be processed, respectively, until the relevant legitimate interests pursued by ENIM Institute as the Data Controller related to the processing of specific data are realized, until the expiry of the limitation periods related to the agreement to which the processing of personal data is related, or related to the limitation period of obligations arising from the provisions of law, until an objection is raised to the processing for marketing purposes.
Information about the recipients of personal data
The data is intended for the ENIM Institute and may be passed on to the following recipients:
entities and bodies to which ENIM Institute is obliged or authorized to make personal data available on the basis of generally applicable laws, including entities or bodies authorized to receive personal data from ENIM Institute or authorized to request access to personal data on the basis of generally applicable laws,
entities participating in the processes necessary for the performance of contracts concluded with the data subject,
entities processing personal data of the data subject on behalf of ENIM Institute on the basis of a personal data processing agreement concluded with ENIM Institute,
entities supporting ENIM Institute in business processes and activities of ENIM Institute.
Automated decision-making, including profiling
Profiling is to be understood as any form of automated processing of personal data which consists of the use of personal data to evaluate certain characteristics of a natural person, in particular to analyse or forecast aspects relating to that natural person’s work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. ENIM Institute does not process personal data in the above-mentioned manner.
Rights of the data subject
You have the right to access your personal data, the right to request their rectification, deletion, restriction of processing under the conditions resulting from the Regulation. To the extent that the basis for the processing of your personal data is the premise of the legitimate interest of ENIM Institute, you have the right to object to the processing of your personal data.
To the extent that the basis for the processing of your personal data is consent, you have the right to withdraw your consent. The withdrawal of consent does not affect the compliance of the processing that was carried out on the basis of consent before its withdrawal.
To the extent that your personal data is processed for the purpose of concluding and performing a contract or processed on the basis of consent – you also have the right to transfer your personal data, i.e. the right to receive your personal data from ENIM Institute in a structured, commonly used and machine-readable format (you can send this data to another data controller).
To the extent that your personal data is processed for the purpose of promotion and marketing of the activities conducted by the ENIM Institute – you have the right to object at any time to the processing of your data for the purposes of promotion and marketing of the activities conducted by the ENIM Institute, including profiling, to the extent that the processing is related to the promotion and marketing of the activities conducted by the ENIM Institute.
You also have the right to lodge a complaint with the authority supervising compliance with the Regulation of the President of the Office for Personal Data Protection in a situation where there is a suspicion that the processing of your personal data violates the provisions on the protection of personal data.
Source of origin
The information refers to personal data obtained by means other than from the data subject. Your data may come from the principal (in the case of a power of attorney granted), a statutory representative, as well as publicly available sources (e.g. databases and registers: REGON, Central Register of Economic Activity (CEIDG), National Court Register) and persons/entities having the basis for providing your data.
Transfer of personal data to a third country
In justified and necessary cases, in order to perform a contract (e.g. to implement your instructions related to the contract), as well as in cases where the transfer of personal data is necessary, you will transfer your personal data to international organizations (e.g. SWIFT) or make your personal data available to entities based outside the European Economic Area (EEA).
Obligation to provide personal data
Providing your personal data is voluntary, however, it is a condition for concluding and performing the contract and the statutorily defined rights and obligations of ENIM Institute, in the event of failure to provide personal data, ENIM Institute is forced to refuse to conclude the agreement.
To the extent that personal data is collected on the basis of your consent, providing personal data is voluntary.
Security of data processing
In order to avoid unauthorized or improper use of personal data managed by ENIM Institute, the company has taken comprehensive technical and operational measures in the field of security. Safety procedures are regularly reviewed and improved in line with technological progress.