Pursuant to the Joint Data Control Agreement and the arrangements therein regarding the purposes, scope and means of processing, we jointly process your personal data as Joint Data Controllers.
I. The joint controllers of your personal data are:
- TPA Sp. z o.o. Sp.k ul. Młyńska 12, 61-730 Poznań as “Coordinating Data Controller”
- TPA Management Sp. z o.o. ul. Młyńska 12, 61-730 Poznań as “Joint Data Controller no. 1”
- TPA Real Estate Services Sp. z o.o. Sp. k., ul. Przyokopowa 33, 01-208 Warszawa as “Joint Data Controller no. 2”
- Baker Tilly Woroszylska Gajda Legal Sp.k. ul. Przyokopowa 33, 01-208 Warszawa as “Joint Data Controller no. 3”
- Baker Tilly TPA Sp. z o.o. k ul. Młyńska 12, 61-730 Poznań as “Joint Data Controller no. 4”
Under the Joint Data Control Agreement, together with the Joint Data Controllers we have agreed upon our respective responsibilities regarding the fulfilment of our obligations under the GDPR, in particular, we have arranged that the Coordinating Data Controller is responsible for fulfilling its information obligations to you and for enabling you to exercise your rights. Regardless of this arrangement, you may exercise your rights against us as well. In that case, we will forward your request to the Joint Data Controller, who will fulfill your request.
The contents of the arrangements between the Joint Administrators can be found on the website available: HERE
II. Contact in matters related to personal data protection
The Coordinating Data Controller has appointed a Data Protection Officer and established a common point of contact. Via email address: iodo@tpa-group.pl you can contact us about protecting your personal data and exercising your rights.
In addition, you may contact us by mail or in person at the address of the Coordinating Data Controller or any Joint Controller.
III. Purpose of data processing
We process your data exclusively in order to deliver publications and/or newsletters and invitations to training and other events, based on your voluntarily given consent.
With regard to personal data processed on the basis of consent, you have the right to withdraw it at any time without affecting the legality of the processing carried out on the basis of consent before its withdrawal.
IV. Legal basis for data processing
We process your personal data on the basis of your consent (Article 6(1)(a) of the GDPR) and on the basis of legal regulations – pursuant to Article 10(2) of the Act of 18 July, 2002 on Providing Services by Electronic Means and Article 172(1) of Telecommunications Law of 16 July 2004 and also based on the legitimate interest of the Joint Data Controllers, which is to provide information about our activities (Article 6(1)(f) RODO).
V. Data recipients
Your personal data may be shared with processors who provide us with IT maintenance services, hosting, IT solutions and tools necessary for the proper performance of the tasks of the Joint Data Controllers.
If necessary, your personal data may be disclosed to entities entitled to receive your data under applicable laws as part of ongoing proceedings and at their explicit and legitimate request, e.g. state offices, state authorities and state administration bodies.
VI. Transfer of data to third countries or international organizations
Your personal data may be transferred outside the European Economic Area as part of the use of IT solution providers and systems by the Joint Data Controllers (e.g., to: Google Inc., Microsoft Corporation etc.), which may store personal data on servers located outside that area. Such transfer may take place to a third country with respect to which the European Commission has assessed an adequate level of protection or through the application of appropriate legal safeguards, which are in particular standard contractual clauses for the protection of personal data approved by the European Commission. You have the right to obtain a copy of personal data transferred to a third country, which can be exercised by contacting at the addresses indicated in Sections I and II.
VII. Data storage period
Your data will be processed for the period necessary to accomplish the purpose for which they were collected, referred to in Section III of this Information, i.e. no longer than until you withdraw your consent or raise an objection, and after that time they may be processed for the period of limitation of potential claims.
VIII. Your rights
In addition to the right to withdraw consent, you have the right to access your data, including obtaining a copy of your data, rectifying your data, requesting erasure, restricting processing, objecting to processing, and transferring the data provided to another data controller. You also have the right to file a complaint with the President of the Polish Personal Data Protection Office.
In order to exercise the above rights, you must address your request to the Coordinating Data Controller through the established common Point of Contact or other contact data – contact details are indicated in Sections I and II of this Information.
VIII. Freedom to disclose data
Entering your data is voluntary, but necessary in order to fulfill your request to send you the publication, as well as to allow you to receive newsletters and information about new publications and invitations to trainings and other events.
IX. Information on automated decision-making, including profiling
Your personal data will not be subject to automated decision-making, including profiling.