Information obligation towards customer's employee

Information obligation towards customer's employee

The Controller of your personal data is ISOROC Polska S.A. w likwidacji with its registered office in Nidzica (13-100) at ul. Leśna 30, e-mail address: odo.isoroc@saint-gobain.com , entered in the register of entrepreneurs of the National Court Register under the number 0000476683, Tax Identification Number: 5272435536, Business Statistical Number /REGON/: 015741851, BDO: 000026771, share capital PLN 32.673.470,00, whose registry records are kept in the District Court in Olsztyn, 8th Commercial Division of the National Court Register.You have the right to access your data, correct the data, request that the data be deleted, as well as the right to limit data processing, data transfer, to file an objection to processing of your personal data.Additionally, you have the right to file a complaint to a supervisory body if your data are processed unlawfully. In Poland such a supervisory body is the President of the Personal Data Protection Office.    Your personal data shall be processed for the purposes of:

1. Pursuing the Controller’s legitimate interest described below – for a period necessary to pursue the Administrator’s legitimate interest, in this respect not longer than until your objection is recognised as justified due to your particular situation, and in the event when the legitimate interest is direct marketing – until you make an objection.
2. In the case of an order related to the services of transport of the purchased goods – for the purposes of:

1. Providing the service ordered,
2. Evaluation of the Customer’s satisfaction level after service delivery,
3. Appropriate communication, including communication to the e-mail address and telephone number provided,

for a period necessary to provide the service, to demonstrate it has been duly executed, and a period of limitation of claims, if any,

3. Marketing purposes, consisting in promoting the services and goods offered by the Controller, the Controller itself, current events, promotions, pricelists, in particular in the form of product catalogues and promotional leaflets, assessment of the satisfaction level of the Customer making a purchase,
4. In the case of expressing individual and optional consents, the data shall be processed also for marketing purposes, consisting in providing you with information on products and services, promotions, pricelists, and other information and promotional events by means of messages sent to your e-mail address or telephone number or during telephone conversations with you – until you withdraw your consent for receiving marketing messages.

You will not be subject to a decision based exclusively on automatic processing, including profiling, and having a legal effect on you or significantly affecting you in a similar way.  The Controller will process the following categories of your data: identification data, personal data.  The legal basis for processing of your personal data is Article 6 Section 1 Letters f of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), i.e. the Controller’s legitimate interest consisting in measures connected with determining the terms and conditions of the contract with the Customer and facilitating communication related to the execution thereof, together with providing necessary settlements in connection with the contract concluded, filing claims, if any, as well as building relationships and taking care of the image and evaluating the satisfaction level connected with the transport service ordered.  If you agree to receiving marketing messages also to your e-mail address, the further legal basis is Article 10 of the Act of 18 July 2002 on Providing Services Electronically and Article 172 of the Act dated 16 July 2005 – Telecommunications Law.  Your data has been obtained from the Contractor. Recipients of the personal data could include:

1. Companies from Saint-Gobain capital group supporting the process,
2. The Controller’s distributors and business partners participating in the sales process,
3. If a transport service is ordered – entities involved in the transport of goods purchased by the Customer,
4. Security services provider,
5. Accounting services provider,
6. Entities involved in the research on the your satisfaction level of our Customers,
7. Suppliers of necessary IT tools,
8. Hosting providers,
9. Entities involved in marketing activities.

Due to the fact that the Controller has capital connections with companies from the Saint-Gobain Group which have their registered offices also beyond Europe, your data may be transferred beyond the European Economic Area in the scope of the IT tools provided and used by the Controller, as well as to countries which have not been recognized by the European Commission as providing an appropriate level of personal data protection. Your data may be transferred to e.g. the United Stated under the Commission Implementing Decision of 12 July 2016 introducing the Privacy Shield. The data shall be transferred only to entities certified under this decision, which obliges them to properly secure your personal data. In the remaining scope the data shall be transferred in particular under standard contractual clauses approved by a decision of the European Commission. The Customer has two types of the right to object to their personal data processing; if the Controller processes the Customer’s personal data:

1. On the basis of its legitimate interest, the Customer can file an objection for reasons associated with their particular situation;
2. For the purposes of direct marketing, the Customer can file an objection in every case.