In accordance with Article 13(1) and (2) of the General Data Protection Regulation of 27 April 2016 (GDPR), we hereby inform you that:
1) The data controller for your personal data is Centoro S.A. (Centoro), with its registered office in Gdynia (81-451), at the following address: al. Zwycięstwa 96/98;
2) we process only the data of individuals acting on behalf of or with the authorisation of companies or entities cooperating with the data controller, or of companies or entities that are potential recipients of marketing campaigns carried out by the data controller; in particular, we process these individuals’ full names, job titles or roles, email addresses and contact telephone numbers;
3) we do not process special categories of personal data within the meaning of Article 9 of the GDPR;
4) personal data will be processed:
- (a) for the purpose of carrying out joint business ventures and fulfilling orders or cooperation agreements entered into;.
- (b) for the purpose of marketing the services offered by the controller or the controller’s partners;
- (c) to identify the best solutions for business-to-business services based on information regarding the activities of potential campaign recipients;
5) the basis for processing is voluntary consent, expressed by contacting us (Article 6(1)(a) of the GDPR) or our collection of information provided voluntarily, for example through advertisements or proposals for cooperation published in the public domain (the internet, the press), which is justified by the specific needs of the controller, as an entity holding a database of information on parties interested in cooperation within the scope of the advertisement or proposal for cooperation (Article 6(1)(f) of the GDPR);
6) the personal data of contact persons at partner companies may be transferred to entities cooperating with the data controller in the course of its business activities;
7) personal data is transferred outside the country or to international organisations only after separate consent has been obtained for this purpose;
8) the personal data of contact persons at partner companies or organisations will be retained until we are informed that it is out of date or until we receive a request for its deletion;
9) every data subject has the right of access to their personal data, as well as the right to rectify, erase or restrict the processing of such data, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal;
10) any person who considers that our processing of personal data infringes the provisions of the General Data Protection Regulation of 27 April 2016 (GDPR) or other legislation relating to the processing of personal data has the right to lodge a complaint with the supervisory authority;
11) Our processing of the personal data of contact persons at partner companies or organisations is a necessary condition for the proper performance of a contract or order and for the provision of our services. Failure to provide personal data or the withdrawal of consent to our processing of such data may result in our inability to provide services or to continue our cooperation;
12) As part of our business activities, we do not profile the personal data of our business partners’ representatives, nor do we make automated decisions based on profiling.