INFORMATION ON THE PROCESSING OF PERSONAL DATA
In accordance with Article 13 and Article 14 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR), as well as the Act of May 10, 2018, on the protection of personal data, I inform you that:
1. Administrator.The administrator of your personal data is IBP Consulting Mariusz Sobecki, ul. Piastowska 36/6, 59-220 Legnica, NIP 6911990743. Contact regarding personal data: biuro@ibpkonsulting.pl.
2. Purposes and legal bases for processing.I process data for the purpose of:
a) responding to inquiries, preparing offers, and concluding contracts at your request (Article 6(1)(b) GDPR);
b) executing orders, including preparing opinions, expertise, coordinating project documentation, consultations, and training in the field of fire protection (Article 6(1)(b) GDPR, and when the data concerns a representative or employee of the ordering party: Article 6(1)(f) GDPR);
c) fulfilling legal obligations, in particular arising from the Act of August 29, 1997 – Tax Ordinance and other tax regulations, as well as from the Act of August 24, 1991 on fire protection, including maintaining and storing records of agreed projects (Article 11i(2)(1) of this Act) (Article 6(1)(c) GDPR);
d) conducting correspondence, establishing, pursuing, or defending claims, and defending in proceedings conducted under the supervision of fire protection assessors (Articles 11n–11s of the Fire Protection Act), which constitutes my legitimate interest (Article 6(1)(f) GDPR).
3. Categories of data and source (when the data does not come from you).I process identification and contact data: first name, last name, position, employer's name, work email address, and phone number, and in the case of authors of project documentation, also data recorded in the records of agreed projects (Article 11i(4) of the Fire Protection Act). I may receive data from the ordering party or participants in the investment process (e.g., investor, designer, facility manager) or from publicly available sources such as CEIDG, KRS, or websites.
4. Data recipients.Data may be received by entities supporting my activities: accounting offices, IT service providers, email and hosting providers, postal and courier operators, banks, and law firms. Data may also be made available to public authorities when required by law, in particular to the Chief Commander and provincial commanders of the State Fire Service in the context of supervision over the activities of assessors (Article 6d(2), Article 11i(2)(2), and Article 11n(5) of the Fire Protection Act).
5. Transfer outside the EEA.I store data on servers located in the European Economic Area. If an IT service provider, in exceptional cases (e.g., technical support, ensuring service security), transfers data outside the EEA, this occurs based on a decision of the European Commission determining an adequate level of protection or standard contractual clauses approved by the Commission.
6. Retention period.I retain data for the duration of correspondence or execution of the order, and then for the longest of the periods applicable to the specific document:
a) accounting and tax documents – until the expiry of the statute of limitations for tax liabilities, i.e., 5 years from the end of the calendar year in which the tax payment deadline expired (Article 70 § 1 and Article 86 § 1 of the Tax Ordinance and Article 112 of the Goods and Services Tax Act);
b) records of agreed projects along with copies of notifications of agreement and evidence of their sending – for 5 years (Article 11i(2)(1) of the Fire Protection Act);
c) documentation related to agreed projects – at least until the expiry of 5 years from the date of completion of construction work or notification of completion of construction or issuance of a decision on the permit for the use of the building, and in the case of fire protection devices carried out in other cases – 5 years from the start of their use; during this time, proceedings may be initiated against me under the supervision of assessors (Article 11n(8) of the Fire Protection Act), and in the absence of knowledge of the aforementioned deadlines, data is stored longer;
d) documentation of expertise, opinions, and consultations – at least until the expiry of the limitation periods for claims, including claims for damages, which expire no later than 10 years from the date of the event causing the damage (Articles 118 and 442¹ § 1 of the Civil Code).
e) project documentation, expert opinions, consultations, and documentation obtained for the purpose of carrying out these tasks may be stored longer due to potential further tasks related to them.
The completion dates of the investments are unknown at the time of executing the order, so I determine the retention period according to the above criteria (Article 13(2)(a) of the GDPR).
7. Your rights.You have the right to access your data (Article 15 of the GDPR), to rectify it (Article 16 of the GDPR), to delete it (Article 17 of the GDPR) or to restrict processing (Article 18 of the GDPR), the right to data portability concerning processing based on a contract (Article 20 of the GDPR) and the right to object to processing based on legitimate interests (Article 21 of the GDPR).
8. Complaint.You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, which is the supervisory authority within the meaning of Article 77 of the GDPR and the Act of May 10, 2018, on the protection of personal data.
9. Voluntariness.Providing data is voluntary, but necessary to provide a response, prepare an offer, and execute the order. The data necessary for issuing an invoice is a statutory requirement arising from the Act of March 11, 2004, on goods and services tax.
10. Automated decisions.Data is not used for automated decision-making or profiling.
ul. Piastowska 36/6
59-220 Legnica
NIP: 6911990743
e-Doręcznia: PL-76561-13219-CJJDB-25
WWW: www.ibpkonsulting.pl
T: + 48 607375466
e-mail: biuro@ibpkonsulting.pl
A website created in the WebWave website builder