Pursuant to the Joint Data Control Agreement and the arrangements therein regarding the purposes, scope and means of processing, we jointly process your personal data as Joint Data Controllers.
I. The joint controllers of your personal data are:
- TPA Sp. z o.o. Sp.k ul. Młyńska 12, 61-730 Poznań as “Coordinating Data Controller”
- TPA Management Sp. z o.o. ul. Młyńska 12, 61-730 Poznań as “Joint Data Controller no. 1”
- TPA Real Estate Services. Sp. k. przy ul. Przyokopowa 33, 01-208 Warszawa as “Joint Data Controller no. 2”
- Baker Tilly Woroszylska Gajda Legal Sp.k. ul. Przyokopowa 33, 01-208 Warszawa as “Joint Data Controller no. 3”
- Baker Tilly TPA Sp. z o.o. k ul. Młyńska 12, 61-730 Poznań as “Joint Data Controller no. 4”
Under the Joint Data Control Agreement, together with the Joint Data Controllers we have agreed upon our respective responsibilities regarding the fulfilment of our obligations under the GDPR, in particular, we have arranged that the Coordinating Data Controller is responsible for fulfilling its information obligations to you and for enabling you to exercise your rights. Regardless of this arrangement, you may exercise your rights against us as well. In that case, we will forward your request to the Joint Data Controller, who will fulfill your request.
The contents of the arrangements between the Joint Administrators can be found on the website available at: HERE
II. Contact in matters related to personal data protection
The Coordinating Data Controller has appointed a Data Protection Officer and established a common point of contact. Using the email address: iodo@tpa-group.pl you can contact us about protecting your personal data and exercising your rights.
In addition, you may contact us by mail or in person at the address of the Coordinating Data Controller or any Joint Controller.
III. Purpose of data processing
We process your data in order to register for an event (training) and, if you have given your consent, also to deliver publications and newsletters and invitations to training and other events.
With regard to personal data processed on the basis of consent, you have the right to withdraw it at any time without affecting the legality of the processing carried out on the basis of consent before its withdrawal.
IV. Legal basis for data processing
We process your personal data in order to conclude and execute a contract between the parties or take action at the request of the data subject prior to concluding a contract, i.e. organizing an event (Article 6(1)(b) of the GDPR), to promote our activities in the media, which is the legitimate interest and activity of the Joint Data Controllers (in line with Article 6(1)(f) of the GDPR), and in other cases your personal data are processed only on the basis of a previously granted consent in the scope and for the purpose specified in that consent (Article 6(1)(a) of the GDPR), e.g. for the purpose of transferring materials and information related to the event by means of electronic communication, sending newsletters and information about the current offer by electronic means.
V. Data recipients
Your personal data may be shared with processors who provide us with IT maintenance services, hosting, IT solutions and tools necessary for the proper performance of the tasks of the Joint Data Controllers.
If necessary, your personal data may be disclosed to entities entitled to receive your data under applicable laws as part of ongoing proceedings and at their explicit and legitimate request, e.g. state offices, state authorities and state administration bodies.
VI. Transfer of data to third countries or international organizations
Your personal data may̨ be transferred outside the European Economic Area as part of the use of IT solution providers and systems by the Joint Data Controllers (e.g., to: Google Inc., Microsoft Corporation etc.), which may store personal data on servers located outside that area. Such transfer may take place to a third country with respect to which the European Commission has assessed an adequate level of protection or through the application of appropriate legal safeguards, which are in particular standard contractual clauses for the protection of personal data approved by the European Commission. You have the right to obtain a copy of personal data transferred to a third country, which can be exercised by contacting at the addresses indicated in Sections I and II.
VII. Data storage period
Your data will be processed for the period necessary to accomplish the purpose for which they were collected, referred to in Section III of this Information, i.e. no longer than until you withdraw your consent or raise an objection, and after that time they may be processed for the period of limitation of potential claims.
VIII. Your rights
In addition to the right to withdraw consent, you have the right to access your data, including obtaining a copy of your data, rectifying your data, requesting erasure, restricting processing, objecting to processing, and transferring the data provided to another data controller. You also have the right to file a complaint with the President of the Polish Personal Data Protection Office.
In order to exercise the above rights, you must address your request to the Coordinating Data Controller through the established common Point of Contact or other contact data – contact details are indicated in Sections I and II of this Information.
VIII. Freedom to disclose data
Entering your data is voluntary, but it is necessary in order to fulfill your request for participation in the event, and in case of giving your consent to sending commercial information – in order to receive newsletters and information about new publications and invitations to trainings and other events.
IX. Information on automated decision-making, including profiling
Your personal data will not be subject to automated decision-making, including profiling.