Rzeczoznawca, ochrona przeciwpożarowa

INFORMATION ON THE PROCESSING OF PERSONAL DATA

In accordance with Articles 13 and 14 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR), as well as the Act of May 10, 2018, on the protection of personal data, I inform you that:

1. Administrator.The administrator of your personal data is IBP Consulting Mariusz Sobecki, ul. Piastowska 36/6, 59-220 Legnica, NIP 6911990743. Contact regarding personal data: biuro@ibpkonsulting.pl.

2. Purposes and legal basis for processing.I process data for the purpose of:

a) responding to inquiries, preparing offers, and concluding contracts at your request (Article 6(1)(b) GDPR);

b) fulfilling orders, including preparing opinions, expert reports, agreeing on project documentation, consultations, and training in the field of fire protection (Article 6(1)(b) GDPR, and when the data concerns a representative or employee of the client: Article 6(1)(f) GDPR);

c) fulfilling legal obligations, particularly arising from the Act of August 29, 1997 – Tax Ordinance and other tax regulations, as well as the Act of August 24, 1991, on fire protection, including maintaining and storing records of agreed projects (Article 11i(2)(1) of this Act) (Article 6(1)(c) GDPR);

d) conducting correspondence, establishing, pursuing, or defending claims, as well as defending in proceedings conducted under the supervision of the activity of fire protection experts (Articles 11n–11s of the Fire Protection Act), which constitutes my legitimate interest (Article 6(1)(f) GDPR).

3. Categories of data and source (when data is not obtained from you).I process identification and contact data: first name, last name, position, employer's name, work email address, and phone number, and in the case of authors of project documentation, also data included in the records of agreed projects (Article 11i(4) of the Fire Protection Act). I may obtain data from the client or participants in the investment process (e.g., investor, designer, facility manager) or from publicly available sources, such as CEIDG, KRS, or websites.

4. Recipients of data.Data may be received by entities supporting my activities: accounting offices, IT service providers, email and hosting services, postal and courier operators, banks, and law firms. Data may also be disclosed to public authorities when required by law, particularly to the Chief Commander and provincial commanders of the State Fire Service in the context of supervising the activities of experts (Article 6d(2), Article 11i(2)(2), and Article 11n(5) of the Fire Protection Act).

5. Transfer outside the EEA.I store data on servers located in the European Economic Area. If an IT service provider transfers data outside the EEA in exceptional cases (e.g., technical support, ensuring service security), this is done based on a decision by the European Commission confirming an adequate level of protection or standard contractual clauses approved by the Commission.

6. Retention period.I retain data for the duration of correspondence or execution of the order, and then for the longest of the periods applicable to the given document:

a) accounting and tax documents – until the expiration of the statute of limitations for tax liability, i.e., 5 years from the end of the calendar year in which the tax payment deadline expired (Article 70 § 1 and Article 86 § 1 of the Tax Ordinance and Article 112 of the Act on Goods and Services Tax);

b) records of agreed projects along with copies of notifications of agreement and evidence of their sending – for 5 years (Article 11i(2)(1) of the Fire Protection Act);

c) documentation concerning agreed projects – until the expiration of 5 years from the completion of construction works or notification of completion of construction or issuance of a decision on the permit for the use of the building, and in the case of fire protection devices realized in other cases – 5 years from the start of their use; during this time, proceedings may be initiated against me in the context of supervision over the activities of experts (Article 11n(8) of the Fire Protection Act), in the absence of knowledge of the aforementioned deadlines, data is stored longer;

d) documentation of expert opinions, opinions, and consultations – until the expiration of the statute of limitations for claims, including claims for damages, which expire no later than 10 years from the date of the event causing the damage (Article 118 and Article 442¹ § 1 of the Civil Code).

The dates for the completion of the investments are not known at the time of executing the order, therefore the retention period is determined according to the criteria above (Article 13(2)(a) of GDPR).

7. Your Rights.You have the right to access your data (Article 15 of GDPR), to rectify it (Article 16 of GDPR), to erase it (Article 17 of GDPR), or to restrict processing (Article 18 of GDPR), the right to data portability in the context of processing based on a contract (Article 20 of GDPR), and the right to object to processing based on legitimate interests (Article 21 of GDPR).

8. Complaint.You have the right to lodge a complaint with the President of the Personal Data Protection Office, at Stanisława Moniuszki 1A, 00-014 Warsaw, which is the supervisory authority within the meaning of Article 77 of GDPR and the Act of May 10, 2018, on the protection of personal data.

9. Voluntariness.Providing data is voluntary, but necessary to respond, prepare an offer, and fulfill the order. The data necessary for issuing an invoice is a statutory requirement resulting from the Act of March 11, 2004, on goods and services tax.

10. Automated Decisions.The data is not used for automated decision-making or profiling.

Become a part of my online community

Adress

Contact

Menu

Follow us