The information presented in this document complies with the information obligation in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter Regulation, GDPR).
The document applies to all natural persons who are partners of the company and fulfills the information obligation indicated in Articles 13 and 14 of the Regulation.
Personal data administrator Nais Sp. z o.o.
Contact the Administrator:
written correspondence:
Nais Sp. z o.o.; 34B Piecewska Street; 80-288 Gdansk; Poland.
electronic correspondence:
dziendobry@nais.co
The Data Protection Officer is Łukasz Kołodziejczyk.
Contact the Data Protection Officer:
written correspondence:
Nais Sp. z o.o.; Data Protection Officer; 34B Piecewska Street; 80-288 Gdańsk; Poland.
electronic correspondence:
iod@nais.co
Keeping records of the company.
Obligation resulting from legal provisions (6 (1) (c) GDPR).
Throughout the entire period of operation of the company.
Organization of shareholders' meetings.
Obligation resulting from legal provisions (6 (1) (c) GDPR).
Throughout the entire period of operation of the company.
Develop and provide answers.
Legitimate interest (6 (1) (f) GDPR).
For the period during which the parties to the conversation may be entitled to civil claims (limitation period for claims)
Personal data may be made available to trusted cooperating entities only for purposes related to the fulfillment of the purposes of processing, the provision of services or the exercise of the rights of data subjects.
Personal data may be made available to data recipients authorized by law, only to the extent and for the purpose of exercising their right under the provisions of law.
We provide all possible and available technical and organizational measures to ensure that data subjects can exercise their rights without hindrance. Therefore, please send any reports and requests concerning the exercise of rights to the Data Protection Officer.
In justified cases, due to the correct identification of the person, we may ask you to provide additional information or provide the necessary documents to prove your identity.
Right to freely express or withdraw consent to data processing
Any data subject has the right to freely express or withdraw consent to the processing of personal data. In the event that personal data is processed on the basis of your consent, we will provide the possibility to withdraw it at any time. The withdrawal of consent will have immediate effect from the moment of its execution and will not affect the processing of data that took place before its withdrawal. The withdrawal of consent to the processing of data for a specific purpose may result in the cessation or change of the way in which certain services are provided.
Right of access to personal data
Any data subject has the right to access the personal data provided. We implement this right primarily with the help of information society services on the basis of a submitted request.
Any data subject may also receive from us copies of the information we hold. In this case, we will provide a copy of the personal data provided to us in a structured, commonly used, machine-readable format. We do not charge a fee for the preparation, development and release of the first copy of the data.
In the event of further requests, we may charge a fee resulting from the costs of preparing, processing and providing this data. In this case, we will inform you about the amount of the fee before compiling the next copy of the data.
Right to rectification of personal data
Any data subject has the right to rectify (correct) personal data. We implement this right primarily through the services of the information society, allowing you to change your personal data. In the event that this is not possible, any data subject has the right to request that we promptly correct, complete or delete the data.
Right to erasure of personal data
Any data subject has the right to request the erasure of his or her personal data. We exercise this right on the basis of an explicit request to delete data provided to us.
Any data subject may exercise the right to erasure if:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the consent to the processing of the data on which the processing is based has been withdrawn and there is no other legal basis for further processing;
- personal data were processed unlawfully;
- the personal data must be deleted in order to comply with a legal obligation under Union or Member State law.
The exercise of the right to request the erasure of personal data may be restricted if such processing is necessary for the performance of an obligation under the law or for the establishment, exercise or defence of claims.
Right to object to the processing of personal data
Any data subject has the right to object to the processing of personal data. We exercise this right on the basis of an explicit objection to the processing of personal data provided to us.
Any data subject may exercise the right to object to the processing of personal data in a situation where such processing is carried out in connection with the realization of a legitimate interest - e.g. marketing of own products and services.
Right to the portability of personal data
Any data subject has the right to lodge a request regarding the transfer of personal data to another controller. However, for security reasons and in the absence of standards related to information security when transferring data, we may not be able to fulfill such a request. In accordance with the rules adopted by us, we may, upon request, provide a copy of the personal data processed.
Right to lodge a complaint with a supervisory authority
Any data subject has the right to lodge a complaint related to the processing of personal data to the national supervisory authority competent for the Administrator in the field of personal data processing.
We respect your privacy and guarantee the possibility of exercising your rights under the law regarding the processing of personal data. In order to avoid unnecessary disputes, we encourage you to contact our Data Protection Officer directly before making such a complaint.
The above rights and the way in which they are exercised may be subject to restrictions in justified cases. This will be the case in the event that this restriction is due to the obligations indicated in the law and/or the basis for the processing of the data. In this case, we will provide you with the relevant information together with the reasons for our decision.
Providing personal data is required in order to correctly identify the data subject and to achieve the indicated processing purposes.
In relation to the data subjects, in connection with the realization of the indicated processing purposes, decisions that may affect the individual situation of the data subject will not be taken in an automated manner.
In relation to the data subjects, in connection with the realization of the indicated processing purposes, no actions related to profiling will be taken.
The ICT and physical infrastructure related to the implemented processing objectives is located in the European Economic Area.
As a general rule, we do not transfer personal data outside the European Economic Area. However, for technical and technological reasons, in justified cases, we may use services supporting the operation of our company offered by suppliers outside the European Economic Area and using ICT infrastructure located outside the European Economic Area.
We may amend, supplement and adapt the Information Clause at any time in accordance with our needs and applicable privacy policies. We will inform you of any changes by posting the relevant information on the websites.
Date of update: 2024-06-28