Contact

1. administrator and contact information

The administrator of the personal data is Magnicity Warsaw Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, Złota 59 Street, 00-120 Warsaw, registered in the register of entrepreneurs, kept by the District Court for the Capital City of Warsaw in Warsaw, XII Economic Department of the National Court Register, under KRS number: 0001043051, NIP: 5252961210, REGON: 525637863.

2. contact the administrator

The administrator can be contacted by snail mail at the registered office address or by email at info@highlinewarsaw.com.

3. purposes and legal basis for processing

Your personal data will be processed for the following purposes, based on the following legal grounds:

1. To conclude and perform a contract to which a natural person acting on his/her own behalf is a party, since the processing of personal data is necessary to perform the aforementioned activities and to take action at your request prior to its conclusion (based on Article 6(1)(b) RODO);
2. To conclude and execute a contract with respect to a party other than an individual due to the Administrator’s legitimate interest in contacting through persons designated to contact/represent/execute a contract (based on Article 6(1)(f) of the DPA);
3. to perform the Administrator’s legal obligations under the laws applicable to its operations, in particular tax and accounting, and those arising from other laws governing the Administrator’s operations (based on Article 6(1)(c) of the RODO);
4. archiving of documentation and communications, including correspondence produced by the Administrator in the course of its business activities, due to its legitimate interest, which is the necessity to document evidence of its activities, among other things, in accordance with applicable regulations, and the use of archived material for the purpose of investigating, establishing or defending against claims (based on Article 6(1)(f) RODO).

4 Sources and categories of personal data

The personal data was obtained from the person directly or was provided by the employer/principal/employer, in connection with the conclusion of a contract. In some situations there is acquisition of representative data from public sources (public records, website, etc.). The scope of data received includes: name, position or function, email address, phone number, company name, company contact information.

5 Data recipients

The Administrator has the right to transfer your personal data to other recipients if necessary to achieve the purpose of processing, i.e..: entities that provide IT support services to the Administrator, including IT system support and maintenance, data hosting and cloud services, our authorized employees and associates, postal operators and couriers, law firms, auditors, banks, insurers, entities responsible for archiving or destroying data, group companies for internal administrative purposes (based on Article 6(1)(f) of the RODO).

6 Processing outside the EEA

Your personal data may be transferred to a third country (i.e., a country outside the European Economic Area). Such transfer of your personal data may take place on the basis of standard safeguard clauses (based on Article 46(2)(c) and (d) of the RODO) or on the basis of another mechanism that is lawful and legalizes such transfer and will provide adequate guarantees for the protection of personal data in accordance with the applicable legal provisions in this regard. The transfer to the United States is based on the decision of the European Commission dated 10/07/2023, finding an adequate level of personal data protection provided under the EU-US data protection framework (Article 45 RODO).

7. data retention period

In the case of the conclusion or execution of a contract, the Administrator will process personal data for the duration of the contract, after which time they will be processed for 5 years from the end of the year in which the tax or accounting obligation arose, unless a longer period is provided for by law or the statute of limitations for claims.

8 Rights of data subjects

You have the right to request from the Administrator access to personal data concerning you, rectification, erasure, restriction of processing and data portability. You have the right to object to the processing of your personal data for the purpose of pursuing the legitimate interests of the Controller, whereby the right to object will not be exercised if there are valid legitimate grounds for processing that override your interests, rights and freedoms.

9. right to lodge a complaint with the authority

You have the right to complain about the actions of the Administrator to the competent supervisory authority, in particular in the country of your habitual residence, your place of work or the place where the alleged violation was committed.

10. voluntariness of providing data

Provision of data indicated by the Administrator as necessary to conclude a contract is a contractual condition, and the consequence of failure to provide such data will be the inability to conclude or perform the contract.

11. profiling

Automated decision-making, including profiling, will not be undertaken with respect to you.