Information clause .mdd for existing or potential suppliers of services and goods

Data sources

1. We have obtained personal data from you directly, in connection with the contract negotiation and execution process or from publicly available sources.

Data categories

We process personal data in the scope of contact data (e.g. telephone number, e-mail address), employment data (position, place of employment) and identification data (name, surname).

Purposes of data processing and legal basis

1. To establish and maintain a business relationship - the processing is necessary for the Administrator's legitimate interests of purchasing goods and services necessary for the operation of the business (Article 6(1)(f) Polish RODO).
2. To conduct evaluations and classifications of service and goods suppliers and the quality of their work - the legal basis for processing is the necessity of processing for the Administrator's legitimate interest (Article 6(1) (f) Polish RODO),
3. Performance of contractual provisions - processing is necessary for the performance of pre-contractual activities and for the performance of contractual provisions (Article 6(1)(b) Polish RODO).
4. Maintenance of accounting and tax records - processing is necessary for the fulfilment of the legal obligation under Article 74 of the Accounting Act and others concerning taxpayers (Article 6(1)(c) Polish RODO).
5. Pursuing and protecting against claims - processing is necessary for the fulfilment of the legitimate interests of the controller (Article 6(1)(f) Polish RODO).

Duration of data processing

Data is processed for a period of time respectively:

1. until an effective objection/request for deletion is made - applies to points 1 and 2 above with the exception of email and telephone communication;
2. until termination or expiry of the contract - refers to point 3 above;
3. 5 years calculated from the end of the calendar year in which the contract is terminated or expired - refers to point 4 above;
4. limitation of actions - refers to point 5 above.

Transfer of personal data

Personal data will only be transferred by the Controller to trusted entities, such as companies providing and operating selected IT systems and solutions, and providers of accounting, legal, postal and courier services.

As a general rule, personal data will not be transferred outside the EEA or made available to international organisations. However, where the controller uses service providers from outside the EEA that have not been recognised by the European Commission as providing an adequate level of protection for personal data, transfers of personal data to the above-mentioned entities shall be made on the basis of standard data protection clauses adopted by the European Commission, thus subject to adequate safeguards for the protection of the privacy and rights and freedoms of the data subjects. A copy of the standard contractual clauses can be obtained from the controller.

Your rights

Concerning our processing of your personal data, you have the right to:

1. request access to your personal data,
2. request the rectification of your personal data,
3. request the erasure or restriction of the processing of your personal data,
4. object to the processing of your data,
5. complain to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection.

You may exercise your rights by sending the appropriate instruction by post to the Administrator's registered office address or by e-mail to iod@mdd.pl

Other information

The provision of data is voluntary, but necessary for the conclusion and execution of the contract.

There is no automated decision-making, including profiling, in the processing of personal data.