Information about the processing of personal data
In accordance with Article 13 and Article 14 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 (GDPR), I inform you that:
- Administrator.The administrator of your personal data is IBP Consulting Mariusz Sobecki, ul. Piastowska 36/6, 59-220 Legnica, NIP 6911990743. Contact regarding personal data: biuro@ibpkonsulting.pl.
- Purposes and legal bases for processing.I process data for the purpose:
of responding to inquiries, preparing offers, and concluding contracts at your request (Article 6(1)(b) GDPR);
of fulfilling orders, including preparing opinions, expert assessments, coordinating project documentation, consultations, and training in fire protection (Article 6(1)(b) GDPR, and when the data concerns a representative or employee of the client: Article 6(1)(f) GDPR);
of fulfilling legal obligations, particularly those arising from tax and accounting regulations as well as fire protection regulations (Article 6(1)(c) GDPR);
of conducting correspondence and determining, pursuing, or defending claims, which constitutes my legitimate interest (Article 6(1)(f) GDPR).
- Categories of data and source(when the data does not come from you). I process identification and contact data: first name, last name, position, employer's name, work email address, and phone number. I may receive data from the client or participant in the investment process (e.g., investor, designer, property manager) or from publicly available sources such as CEIDG, KRS, or websites.
- Data recipients.Data may be received by entities supporting my activities: accounting offices, IT service providers, email and hosting providers, postal and courier operators, banks, and law firms. Data may also be shared with public authorities when required by law.
- Transfer outside the EEA.I store data on servers located in the European Economic Area. If the IT service provider exceptionally transfers data outside the EEA (e.g., technical support, ensuring service security), this is done based on a decision of the European Commission determining an adequate level of protection or standard contractual clauses approved by the Commission.
- Retention period.I store data for the duration of correspondence or contract execution, and then for the period required by tax and accounting regulations and until the expiry of the limitation periods for claims; contact data is retained for future communication.
- Your rights.You have the right to access your data, rectify it, delete it, or limit its processing, the right to data portability (in the scope of processing based on a contract), and the right to object to processing based on legitimate interests.
- Complaint.You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
- Voluntariness.Providing data is voluntary but necessary to respond, prepare an offer, and execute the order. In terms of invoice data, it is a statutory requirement.
- Automated decisions.Data is not used for automated decision-making or profiling.