Information clause

Personal Data Administrator and Personal Data Protection Officer

The administrator of your personal data is Exorigo-Upos S.A. with its registered office in Warsaw (01-230) at 10 A Skierniewicka Street, entered into the register of entrepreneurs of the National Court Register under the KRS number: 0000428347, NIP: 5252535950, REGON: 146251737.

The Administrator has appointed a Data Protection Officer with whom you can contact in matters related to your personal data:

  • Electronically: ochronadanych@exorigo-upos.pl
  • by correspondence to the address Skierniewicka 10 A, 01-230 Warsaw (with the note “Personal Data Inspector”).

Purpose and legal basis for the processing of personal data and the requirement to provide them

Personal data will be processed for the purposes indicated below; their provision is voluntary, but necessary for the performance of the contract:

  1. Establishing contact and conducting ongoing business communication – the basis is our legitimate interest (Article 6(1)(f) of the GDPR), consisting in building relationships with contractors;
  2. Conclusion and performance of a contract – if you are a direct party to the contract (Article 6(1)(b) of the GDPR) or on the basis of our legitimate interest (Article 6(1)(f) of the GDPR), if you are the contacts/representatives indicated by the contractor;
  3. Direct marketing of products and services – on the basis of a legitimate interest (Article 6(1)(f) of the GDPR);
  4. To pursue or defend against claims – on the basis of a legitimate interest (Article 6(1)(f) of the GDPR);
  5. Fulfilment of legal obligations (e.g. issuing invoices, archiving tax documentation) – on the basis of a legal obligation to which we are subject (Article 6(1)(c) of the GDPR).

Your rights

You have the following rights related to our processing of your personal data:

  • the right of access to data;
  • the right to rectification, i.e. correction or updating of data;
  • the right to erasure;
  • the right to object;
  • the right to restrict data processing;
  • the right to data portability;
  • the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection (PUODO).

To exercise your rights, please contact our Data Protection Officer.

Recipients of personal data

We process your personal data primarily independently within the structures of Exorigo-Upos S.A., but to ensure the highest quality of service and the efficient implementation of business processes, we may entrust it to our proven partner entities. The group of data recipients includes, in particular, providers of specialised technical services who support our IT infrastructure – including companies providing hosting services, maintenance of database systems and communication tools necessary for the functioning of the www.exorigo-upos.pl service and ongoing correspondence. As part of the sales department’s operational activities, the data may also be made available to external partners who support us in marketing and sales analytics. In certain situations arising from the nature of the cooperation, entities from our capital group and external legal advisors may also become recipients of data if necessary for the proper performance of the service or for compliance with obligations imposed by law.

Transfers of data outside the EEA

The service providers are based mainly in Poland and other countries of the European Economic Area (EEA).

Profiling

Your personal data will not be subject to profiling.

Data retention period

We store personal data for the duration of the contract concluded with you, as well as after its termination, for the following purposes:

  • pursuing claims in connection with the performance of the contract,
  • making contact,

no longer than for a period of 6 years from the date of termination of the term of the agreement. This period may, in other cases, be extended as provided by law.

In order to fulfil our accountability obligation, i.e. the obligation to prove compliance with the regulations on the processing of personal data, we will store your data for the period in which Exorigo-Upos S.A. is obliged to retain such data or documents containing data to document compliance with legal requirements and to enable control by public authorities.

For more information on the processing of personal data, please refer to the Privacy Policy – Exorigo-Upos