General Data Protection Policy

In connection with obligations arising due to the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as: “GDPR”, we would like to provide basic information regarding the use of personal data for individual categories of persons (indicated below).

Data subjects rights

A person whose personal data are processed by the companies forming the ES-SYSTEM Capital Group, i.e. ES-SYSTEM sp. z o.o. with its seat in Kraków, ES-SYSTEM NT sp. z o.o. with its seat in Kraków, ES-SYSTEM Projekty sp. z o.o. in liquidation with its seat in Kraków and ES-SYSTEM Wilkasy sp. z o.o. with its seat in Wilkasy (hereinafter referred to collectively as the Companies of the ES-SYSTEM Capital Group), is entitled to the following rights:

• accessing the content of their personal data,
• correcting their personal data,
• completing their personal data,
• deleting their personal data (the so-called “right to be forgotten”),
• limiting the processing of their personal data,
• transferring their personal data,
• objecting to the processing of their personal data,
• withdrawing consent to the processing of their personal data at any time (if the data are processed solely on the basis of the consent of the person concerned).

It is worth noting that for some of the above rights, their justified use depends on the fulfillment of certain prerequisites in the GDPR. A significant role is played here by the basis on which the specific personal data processing is carried out, as well as the purpose and manner in which these data are processed.

In addition, the person whose personal data are processed has the right to file a complaint to the supervisory authority – the President of the Office for Personal Data Protection.

Information clauses

Dear Recipient of correspondence from the essystem.pl domain,

The ES-SYSTEM Group wants to ensure the effective protection of the personal data of persons whose data it processes. If you have received any messages from an e-mail address ending with @essystem.pl – your personal data (i.e. e-mail address and personal data contained in the correspondence) are processed by the companies of the ES-SYSTEM Group.
The Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as: “GDPR”, imposes an obligation on us in terms of data processing. That is why we want you to be aware of what data are being processed and for what purpose, who the administrator is, what entities the data can be disclosed to, and what rights you are entitled to in terms of protecting your personal data. Please read the clause below carefully, and in case of doubt, feel free to use your rights.

[Personal Data Administrator] The companies of the ES-SYSTEM Group that are subject to an agreement on co-administration, hereinafter referred to as: the Co-Administrators, are the collective Administrator of the personal data obtained through electronic correspondence from the essystem.pl domain. An excerpt from this agreement has been published on the website www.essystem.pl (in the “Personal data” tab). It is these entities that determine the purposes and means of processing your personal data.

[Contact details] The Co-Administrators have appointed the following point of contact for data subjects: the Data Protection Inspector, ES-SYSTEM sp. z o.o., address: ul. Przemysłowa 2, 30-701 Kraków, e-mail address: inspektorodo@essystem.pl.

[Inspector] The Co-Administrators have appointed a Data Protection Inspector for the purpose of ongoing monitoring of compliance with the principles of the proper protection of personal data. You can contact the Inspector by sending an email to the following address: inspektorodo@essystem.pl.

[Purpose and legitimate interest] Your personal data, including your e-mail address, are processed for the purposes of staying in touch, professional cooperation, accepting and submitting offers, as well as conducting correspondence via e-mail in business and administration processes related to the subject of the Co-Administrators’ activity. Without the use of this communication channel, the Co-Administrators’ activity would not be able to cope with technological development, and contact with you could prove to be much more difficult, if not impossible.

[Recipients] The recipients of the personal data provided by you are suppliers of goods and services necessary for the fulfillment of the above-mentioned purposes and entities which have been entrusted with processing your data by the Co-Administrators, including IT service providers, entities affiliated with the Co-Administrators personally or through capital, as well as entities authorized by law, including state authorities.
 
[Data storage period] Your data will be stored until the fulfillment of the Co-Administrators’ legitimate interests, which constitute the basis for processing, or until you object to such processing.
 
[Rights] You are entitled to the right to access the content of your personal data and to correct it, the right to delete it or limit its processing, as well as the right to object to its processing. You are also entitled to the right to file a complaint to the supervisory authority – the President of the Office for Personal Data Protection.
 
[Automated decision making] Personal data processed for legitimate purposes of the Co-Administrator will not be subject to automated decision making, including profiling.
 
[Legal basis] The legal basis for the processing of personal data is contained in art. 6 par. 1 letter f of the GDPR.

Providing personal data is voluntary, but necessary for effective contact by the Co-Administrators.

[Transfer of personal data to a third country] If the Co-Administrators should decide to transfer the personal data of e-mail recipients outside the EEA solely to the extent permitted by law, then current information in this respect will be posted on the website www.essystem.pl (in the “Personal data” tab).
 
Bearing in mind the specificity of e-mail and its wide application, it may happen that your contact details have not been obtained directly from you. However, the indication of the specific entity that provided us with your data is not possible in this clause – which is general for all recipients of correspondence from the essystem.pl domain..
 
Due to legal and factual relations to the Co-Administrators, you may be one of the recipients of e-mails from the essystem.pl domain, about whom we possess and process a broader scope of personal data (in accordance with the law), than that resulting only from communication via e-mail. Therefore, in order to obtain comprehensive information about the personal data being processed, please read the other specific information that is relevant to you (depending on your status, i.e. belonging to a specific category of persons from the point of view of the processed personal data).