This document also contains information for entities from whom personal data are collected about the rights belonging to them with regard to the above regulation.
Based on art. 13, par. 1 and 2 as well as art. 14, par. 1 and 2 of the GDPR, we inform you about the way and purpose of processing your personal data, and also about the rights belonging to you in connection with the above regulation.
Your personal data are administered by Pro-Project Group sp. z o.o. with its registered offices in Lublin (20-601) address: ul. Tomasza Zana 11a, entered into the register of entrepreneurs kept by District Court Lublin-Wschód in Lublin, VI Commercial Division KRS, under number KRS: 0000928499 (“Data Controller” or “Pro Project”)
You may contact the Data Controller in all questions related to personal data processing as well as exercising rights connected with data processing:
We process your personal data in accordance with the data protection provisions, including GDPR provisions.
Your personal data shall be processed for the following purposes:
When needed, we process data to protect legally justified interests of our own or third parties. Examples include the following:
If you have given consent to have personal data processed for specific purposes (e.g., personal interviews we are entitled to process such data based on this consent. Your consent may be withdrawn at any time. The withdrawing of your consent does not affect the legality of data processing before such withdrawal.
Personal data may be made available to other recipients in order to execute the contract with you or in order to carry out a legal obligation binding Pro-Project, based on your consent or for purposes flowing from legally justifiable interests of the Data Controller or a third party.
The recipients may be in particular: authorised employees, entities carrying out postal, courier, accounting, legal and IT services.
Additionally, data may be transferred to entities processing personal data on Pro-Project’s commission and to their authorised employees, with such entities processing data based on agreement with Pro-Project, exclusively as recommended by Pro-Project and on condition of confidentiality.
Data are transferred to recipients in countries outside the European Union (“third countries”) only when necessary to carry out purposes flowing from legally justifiable interests executed by Pro-Project, if it is indispensable to carry out a contract made between you and Pro-Project or undertake actions before entering into such a contract in order to make it, and also as part of Pro-Project’s using the IT infrastructure (e.g. electronic mail).
Any other transfer of your data to a third country may take place on us obtaining your consent.
You can get a copy of personal data transferred to a third country on applying to Data Controller.
Your data will be processed for a period necessary to carry out the purposes of processing shown in point 2, i.e.:
⎯ in terms of the contract made with Pro-Project – until its completion, and after that for a period required by legal regulations or in order to perform any possible claims and servicing.
⎯ in terms of meeting legal obligations binding Pro-Project in connection with conducting activity and executing the contracts entered into – until Pro-Project has met such obligations.
⎯ in terms of processing carried out solely on the basis of consent – up to the moment of immediate data deletion based on your request.
⎯ until Pro-Project has carried out legally justifiable interests on which such processing is based, or until you raise an objection against such processing, unless there is some legally justifiable basis for further data processing.
⎯ in terms of direct marketing carried out based on consent – until consent to such processing is withdrawn.
You have the right to:
⎯ request access to your data, and also request to correct them, to limit their processing or to delete them.
⎯ revoke at any time the previously given consent to have your data processed within the scope the consent was given to, without prejudice to the legality of the processing right which has been carried out based on your consent before its withdrawal.
⎯ request that the data given by you to Pro-Project to be processed with a view to making and executing a contract, or processed based on your consent, should be transferred. The transfer consists in you receiving from Pro-Project your data in a structured, commonly used format, capable of machine reading, as well as in the right to send them to another data controller, as long as it is technically possible. This right does not pertain to data which are the secret of the Pro-Project company.
⎯ to lodge a complaint with a supervisory authority, which in the Republic of Poland is the President of the Personal Data Protection Office, if you should conclude that the processing of your data violates the regulations, including the GDPR.
In addition, you have the right to raise an objection at any time against Pro-Project’s processing your data:
⎯ for reasons connected with your special situation if Pro-Project processes data for purposes flowing from legally justifiable interests (art. 21 par. 1 of the GDPR) ;
⎯ for purposes connected with direct marketing, including against profiling for marketing purposes, within the scope data processing is related to direct marketing (art. 21 par. 2 of the GDPR).
Pro-Project may request additional information necessary to confirm identity.
In order to make it possible for Pro-Project to enter into and execute a contract, you are obliged to give your personal data. In this case, data provision is a prerequisite of making a contract.
First of all, personal data collected by Pro-Project come:
⎯ directly from you,
⎯ from an entity which entered into a contract with Pro-Project to provide services for you,
⎯ from a partner/distributor/third party cooperating with Pro-Project, which made your personal data available based on your consent,
⎯ from publicly accessible sources, e.g., the National Court Register, Central Registry and Information about Business Activities or other similar sources.
To the extent that your data processing takes place in order to carry out the activities requested or enter into and execute a contract with Pro-Project, data provision by you is a prerequisite of carrying out the activities requested or entering into such a contract.
Data provision is voluntary but is indispensable to carry out the activities requested or to enter into and execute a contract with Pro-Project. Additionally, wherever applicable, in accordance with the regulations on money laundering and financing terrorism, we are particularly obliged to identify, as well as to collect and record your data.
For us to be able to fulfil those activities and obligations, the regulations require that we should be provided with the necessary information and documentation and be immediately notified about any changes. If you do not provide Pro-Project with the necessary information and documentation, Pro-Project will not be able to carry out the activities requested, enter into and execute contracts or provide services.
With regard to personal data of contractors, we obtain the said data also from other public sources, in which data about contractors are collected, i.e., the National Court Register, Central Registry and Information about Business Activities or similar sources located in other countries, as well as from private entities specializing in collecting and making available information about contractors. With personal data of people representing contractors or acting on their behalf, we obtain data both from the above-mentioned sources and from contractors themselves.
Pro-Project is equipped with security measures designed to protect personal data remaining under the Data Controller’s control against loss, illegal use, or modification. Also, the Data Protection Controller possesses suitable documentation and has implemented pertinent procedures related to personal data protection in the company.
The Data Controller declares that any information given is protected in accordance with the valid regulations and safety protection standards, in particular:
⎯ In accordance with art. 29 of the GDPR, direct access to personal data collected by the Data Controller is granted only to authorized employees or associates of the Data Controller, as well as authorized staff servicing them to whom appropriate authorization has been granted.
⎯ The Data Controller declares that while contracting other entities to provide services, he requires from his partners, in accordance with directive 28 of the GDPR, that they guarantee sufficiently high protection standards of personal data entrusted to them, that they sign pertinent assignment agreements, in which the partners confirm that they apply such standards, and that they grant right to check if they act according to such standards.
⎯ In order to ensure adequate protection of services provided electronically, the Service Administrator uses a high security level, including cryptographic protection of personal data transmission (the SSL protocol), in accordance with part C to the ordinance of the Minister of Internal Affairs and Administration of 29 April 2004 on personal data processing documentation, as well as technical and organizational conditions that should be complied with by the IT equipment and systems used to process personal data ((Journal of Laws 1997, no 100, item 1024).
⎯ Due to a public character of the internet, using services provided electronically may involve risks, irrespective of the data Administrator exercising due diligence.
On the Pro-Project website, third party cookies are used:
Google Analytics; more information can be found on: google.com/analytics/learn/privacy.html.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
The processing of your data may be carried out in an automated and profiled way.
Your data may be profiled, especially for marketing purposes, carrying out research, estimating interests and shopping preferences, including offering, and presenting advertisements, products and services based on attributed preferences, and also for internal analyses.
The following data categories will be used for profiling: information about products and services purchased, the way of using them, payment information, electronic addresses, information about devices bought and used, information contained in cookies and other systems recording movement on our websites, as well as in the Diagnomatic.com program.
Pro-Project uses this information to evaluate Customers’ preferences and interests. Thanks to these activities, we can develop a dedicated product offer and create new proposals.