Who is the administrator of my personal data?
The administrator of your personal data is MAT Usługi Informatyczne Spółka z ograniczoną odpowiedzialnością Spółka komandytowa with its registered office in Kraków at Rzemieślnicza 1/607-608, hereinafter referred to as “MAT”.
What personal data does the Administrator process?
MAT, as a personal data controller within the meaning of RODO*, processes, in particular, the following personal data:
- Personal data of job candidates (data that candidates provide to the administrator in connection with participation in recruitment processes – in particular, data contained on CVs)
- Personal data of contractors and their representatives (data of companies** and contact persons – essential data for issuing and posting invoices (name, TIN, business address) and for contact (name, surname, company name, job position, email address, telephone number))
- Individuals sending inquiries via contact forms, email, and telephone (basic contact information (first name, last name, email address) provided by persons in connection with questions sent to the administrator)
- Individuals signing up for training/webinar/events (basic contact information (first name, last name, email address, phone number) and organization information** (company name, position))
- Individuals who consented to the sending of commercial information, including those who signed up for the Newsletter (basic contact information (first name, last name, email address)
* – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).
** – Company data is considered personal only when it can identify individuals. Data related to limited liability companies is not considered personal data.
On what principles does the Administrator process my personal data?
The following outlines the principles for processing your personal data, including who has access to it, the duration of its retention, and the basis for its processing.
Personal data of job applicants
- Purposes and Basis for Processing: Your data is gathered for recruitment and, with your consent, may also be applied to future recruitment processes. Processing follows legal requirements, including the Labor Code, and relies on your consent.
- Recipients of the Data: Data is given to legally authorized entities and may also be accessible to service providers and IT support partners of MAT under relevant agreements.
- Storage Period: Your personal data is stored until the recruitment process is complete or until you withdraw your consent for future recruitment
- Data Transfer to Third Countries: MAT generally does not transfer data outside the European Economic Area (EEA). However, if MAT uses IT service providers with servers outside the EEA, data transfers will be governed by standard contractual clauses approved by the European Commission.
- Automated Decision-Making and Profiling: MAT does not use automated processing or profiling to make decisions related to the purposes of data processing outlined above.
- Data Provision Requirements: Providing personal data required by law, such as under the Labor Code, is mandatory. Providing additional data is voluntary.
Personal data of contractors and their representatives
- Purposes and Grounds for Data Processing: The personal data of contractors is collected to fulfill agreements between the parties (Based on Article 6(1)(b) GDPR – necessary for executing agreements to which you are a party) and to comply with the legal obligations of the administrator (Based on Article 6(1)(c) GDPR – necessary for issuing and storing VAT invoices as required by the Accounting Act and the VAT Act). Personal data of contractors’ representatives is gathered for contact purposes, including establishing and maintaining business relationships (Based on Article 6(1)(f) GDPR – the legitimate interest of the data controller in maintaining contact with the contractor and ensuring the execution of agreements). Additionally, the personal data of contractors and their representatives serves purposes such as investigating and defending against claims (Based on Article 6(1)(f) GDPR – the legitimate interest of the data administrator in legal matters).
- Recipients of the Data: Data may be accessible to legally authorized entities. Access to the data on the basis of relevant agreements may also have entities supporting MAT in the field of IT services (in particular, hosting providers).
- Source of acquisition of personal data: Your personal data was obtained directly from you or from a partner
- Retention Period: Contractor personal data remains in the system until there is an objection to processing, claims are no longer active, or as specified by law.
- Data Transfer to Third Countries: Generally, MAT does not transfer data outside the European Economic Area (EEA). However, there may be cases where MAT uses IT service providers with servers outside the EEA. In such cases, data transfer relies on standard contractual clauses approved by the European Commission.
- Automated Decision-Making and Profiling: MAT does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
- Voluntariness/obligation to provide data: Provision of personal data is voluntary; however, it is necessary for business dealings with MAT and for the execution of the agreements between the parties.
Persons sending inquiries via contact forms, email, and telephone
- Purposes and Basis for Data Processing: Personal data is processed to manage electronic correspondence and fulfill actions upon your request (Processing relies on the need to handle electronic correspondence and respond to requests related to business operations involving personal data).
- Recipients of the Data: Data is accessible to legally authorized entities. Infrastructure and IT service providers handling data on behalf of MAT can access it in accordance with specific agreements.
- Retention Period: Personal data processed by the administrator remains available during electronic correspondence and moves to archival storage as specified in the records management policy.
- Transfer of Data to Third Countries: MAT typically does not transfer data outside the European Economic Area (EEA). However, if MAT employs IT service providers with servers outside the EEA, the data transfer will follow standard contractual clauses approved by the European Commission.
- Automated decision-making/profiling: MAT does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
- Voluntariness/Obligation to Provide Data: Providing personal data is optional but required for electronic correspondence or actions requested by the individual.
Individuals signing up for training/webinars/events
- Purposes and Basis of Data Processing: Your personal data undergoes processing for:
- enrollment in and execution of a webinar/training/event, including sending notifications regarding the event (The basis for data processing is Article 6(1)(a) RODO, i.e., the consent you have given)
- if you have given the appropriate consent – for the purpose of sending commercial information to the e-mail address indicated in the form in connection with the consent you have given to send such information, which is the legitimate interest of the Administrator (Article 6(1)(f) RODO)
- Recipients of the data: Your data may be made available to entities authorized by law and under relevant contracts to IT service providers processing data on the MAT.
- Retention Period: The personal data will remain stored until consent is withdrawn.
- Transfer of Data to Third Countries: MAT typically does not transfer data outside the European Economic Area (EEA). However, if MAT employs IT service providers with servers outside the EEA, the data transfer will follow standard contractual clauses approved by the European Commission.
- Voluntariness/obligation to provide data: Provision of personal data is voluntary; however, it is necessary to send an inquiry.
- Automated decision-making/profiling: MAT does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
Persons who have consented to sending commercial information, including those who have subscribed to the Newsletter
- Purposes and basis of data processing: Your personal data will be processed for marketing purposes – sending commercial information to the indicated email address (on the basis of Article 6(1)(f) – the legitimate interest of the data administrator, which is direct marketing, in connection with the consent given to send commercial information).
- Recipients of the data: The data may be made available to:
- entities authorized under the provisions of the law
- Infrastructure and IT service providers (including hosting companies and companies providing email marketing solutions) processing data on behalf of the MAT may also have access to the data on the basis of relevant contracts.
- Retention Period: Your personal data will be stored until you object to its processing or withdraw your consent to receive commercial information.
- Transfer of Data to Third Countries: MAT typically does not transfer data outside the European Economic Area (EEA). However, if MAT employs IT service providers with servers outside the EEA, the data transfer will follow standard contractual clauses approved by the European Commission.
- Profiling Information: Your personal data is not subject to profiling.
- Voluntariness/Obligation to Provide Data: Providing personal data is voluntary but required to subscribe to the NEWSLETTER service or to receive commercial information.
- Automated decision-making/profiling: MAT does not make decisions based on automated processing, including profiling (with respect to the purposes of data processing described above).
What rights do I have regarding MAT’s processing of my personal data?
You have the right, as applicable, to:
- Request access to your personal data, rectification, erasure, and restriction of processing, as well as the portability of your personal data;
- To withdraw the consent you have given at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;
- To object to the processing of your personal data;
- File a complaint to the supervisory authority (PUODO – President of the Office for Personal Data Protection).
Where can I contact you with questions about my personal data processing and exercising my rights?
Contact details of the data administrator:
MAT Usługi Informatyczne Spółka z ograniczoną odpowiedzialnością Spółka komandytowa with its registered office in Kraków at 1 /607-608 Rzemieślnicza St.
Email address: mat@mat.net.pl
Contact details of the Data Protection Officer:
Email address: mat@inspektor-danych.info
