GDPR Information Notice
GDPR Information Notice
This notice provides a concise, clear, and transparent summary of the information set out in the Privacy Policy regarding the Data Controller, the purposes and methods of personal data processing, and your rights in connection with such processing, in the form required to comply with the GDPR information obligation. Detailed information on the processing methods and the entities involved is available in the referenced policy.
Who is the data controller?
The controller of personal data (the “Controller”) is Microelectronics Sp. z o.o., with its business address at ul. Augusta Lewakowskiego 53 lok. 303, VAT-ID (NIP): PL6842637296 and National Court Register number (KRS): 0000480001, providing electronic services via the Service.
How can you contact the data controller?
You may contact the Controller using one of the following methods:
- Postal address - Microelectronics Sp. z o.o., ul. Augusta Lewakowskiego 53 lok. 303, 38-400 Krosno
- Email address - info@microelectronics.pl
- Telephone - +48 13 42 002 14
- Contact form - available at: https://microelectronics.pl/en/contact
Has the Controller appointed a Data Protection Officer?
Pursuant to Article 37 of the GDPR, the Controller has not appointed a Data Protection Officer.
For all matters relating to data processing, including personal data processing, please contact the Controller directly.
Where do we obtain personal data from and what are its sources?
Data is obtained from the following source:
- directly from the data subjects
What categories of personal data do we process?
The Service processes ordinary personal data voluntarily provided by data subjects (e.g. first name and surname, username, email address, telephone number, IP address, etc.)
Detailed information on the scope of processed data is available in the Privacy Policy.
For what purposes do we process personal data?
Personal data voluntarily provided by Users is processed for one or more of the following purposes:
- Provision of electronic services
- Communication between the Controller and Users regarding matters related to the Service and data protection
- Pursuit of the Controller’s legitimate interests
What are the legal bases for processing personal data?
The Service collects and processes Users’ data on the basis of:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
- Article 6(1)(a)
the data subject has given consent to the processing of their personal data for one or more specific purposes - Article 6(1)(b)
processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract - Article 6(1)(f)
processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party
- Article 6(1)(a)
- Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2018, item 1000)
- Act of 16 July 2004 - Telecommunications Law (Journal of Laws 2004 No. 171, item 1800)
- Act of 4 February 1994 on Copyright and Related Rights (Journal of Laws 1994 No. 24, item 83)
What legitimate interests are pursued by the Controller?
- For the purpose of establishing, pursuing, or defending against claims - the legal basis for processing is our legitimate interest within the meaning of Article 6(1)(f) GDPR, consisting in the protection of our rights, including, among other things:
- Assessing the risk posed by potential clients
- Evaluating planned marketing campaigns
- Conducting direct marketing
How long do we retain personal data?
As a rule, the personal data indicated above is retained only for the period necessary to provide the relevant service within the Service operated by the Controller. It is deleted or anonymised within up to 30 days from the end of service provision (e.g. deletion of a registered user account, unsubscribing from the Newsletter, etc.).
In exceptional cases, where necessary to protect the Controller’s legitimate interests, this period may be extended. In such cases, the Controller will retain the data from the time the User requests its deletion, for no longer than 3 years in the event of a breach or suspected breach of the Service terms and conditions by the data subject.
Who receives the data, including personal data?
As a rule, the Controller is the sole recipient of the data.
However, data processing may be entrusted to other entities providing services to the Controller for the purpose of maintaining the operation of the Service.
Will your personal data be transferred outside the European Union?
Personal data will not be transferred outside the European Union unless it is published as a result of an individual action taken by the User (e.g. posting a comment or an entry), which makes the data available to any person visiting the Service.
Will personal data be used for automated decision-making?
Personal data will not be used for automated decision-making, including profiling.
What rights do you have in relation to the processing of personal data?
- Right of access to personal data
Users have the right to obtain access to their personal data by submitting a request to the Controller - Right to rectification of personal data
Users have the right to request that the Controller promptly rectify inaccurate personal data and/or complete incomplete personal data by submitting a request to the Controller - Right to erasure of personal data
Users have the right to request that the Controller promptly erase personal data by submitting a request to the Controller.
In the case of user accounts, erasure consists of anonymising data that makes it possible to identify the User.
In the case of the Newsletter service, the User may independently delete their personal data by using the link included in every email message sent. - Right to restriction of processing
Users have the right to request restriction of the processing of personal data in the cases set out in Article 18 GDPR, including where the accuracy of personal data is contested, by submitting a request to the Controller - Right to data portability
Users have the right to obtain from the Controller the personal data concerning them in a structured, commonly used, and machine-readable format, by submitting a request to the Controller - Right to object to the processing of personal data
Users have the right to object to the processing of their personal data in the cases specified in Article 21 GDPR, by submitting a request to the Controller - Right to lodge a complaint
Users have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data.