1. Purpose of the study.
Since the European Parliament and the Council adopted in April 2016. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: "RODO"), and the processing of your personal data should be lawful, fair and transparent, this document aims to provide you with information on the processing of your personal data, in particular on the manner, purposes and grounds for such processing.
Care for the security of your personal data is also important to us as providing the highest quality of services in the field of electrical installations and electrical power equipment, hence we ask you to carefully read this document, which is the implementation of the information obligation referred to in Art. 13 RODO.
The information obligation under Art. 13 RODO may also be implemented either in a limited or extended manner in relation to this Privacy Policy, subject to compliance with RODO, and in a separate form depending on the specific purpose and method of collection of your personal data.

2. Scope of application.
This Privacy Policy applies to all processing of your personal data by SPIE Elektromontaż Poznań S.A. with its registered office in Poznań, 60-166 Poznań, ul Wieruszowska 12/16, in a fully or partially automated manner and to the processing in a non-automated manner of personal data forming part of a data set or intended to form part of a data set.
Personal data means information about an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.
Processing of personal data means an operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, organisation, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Controller of personal data.
The controller of your personal data is a company under the name: SPIE Elektromontaż Poznań S.A. with its registered office in Poznań, 60-166 Poznań, ul Wieruszowska 12/16, NIP: 5272647215, REGON: 142784000, share capital PLN 3 120 600,00 paid in full; entered in the National Court Register in the District Court for Poznań - Nowe Miasto and Wilda in Poznań VIII Economic Division of the National Court Register under number: 0000842369 (hereinafter: "Elektromontaż").
The Elektromontaż Company, as the controller, shall determine the purposes and means of processing your personal data, and shall be responsible for their processing in accordance with the provisions of the law, including the RODO, which protects the fundamental rights and freedoms of natural persons, in particular the right to the protection of personal data.

4. Principles of processing your personal data.
Elektromontaż shall exercise the utmost care to ensure that your personal data:

1. processed lawfully, fairly and in a manner transparent to the data subject ("lawfulness, fairness and transparency");
2. collected for specific, explicit and legitimate purposes and not further processed in a way incompatible with those purposes ("purpose limitation");
3. adapted, relevant and limited to what is necessary for the purposes for which they are processed ("data minimisation");
4. correct and updated as necessary; take all reasonable steps to ensure that personal data which are inaccurate in the light of the purposes for which they are processed are erased or rectified without delay ("correctness");
5. stored in a form which permits identification of the data subject for no longer than is necessary for the purposes for which the data are processed; ("storage limitation");
6. processed in a manner which ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, by means of appropriate technical or organisational measures ("integrity and confidentiality").

Specific discussion of the principles under which the processing of your personal data may take place can be found in the RODO.

5. Purposes of processing personal data.
We process your personal data for the following purposes:

1. conclusion and performance of a contract to which you are or are to be a party or to which you are a representative, or taking steps prior to the conclusion of such a contract, including tendering, commercial negotiations, contacting you in relation to its performance, etc.
2. handling of complaints or the exercise of warranty or guarantee rights, if any;
3. provision of electronic services e.g. newsletter (where applicable);
4. handling of various notifications, communications or requests (e.g. via an online contact form), whether or not they relate to the conclusion or execution of a contract;
5. improving the quality of the services provided by Elektromontaż or of the products or goods supplied, e.g. by seeking opinions or opinions on them. by asking for opinions or satisfaction surveys;
6. managing activity on Elektromontaż websites, by monitoring them, with a view to improving the functionality of the service, analysing needs, adjusting advertisements according to previously viewed content;
7. direct marketing of Elektromontaż products, goods and services;
8. creation of analyses, statements, statistics and archiving, including ensuring accountability;
9. establishing, securing, enforcing claims by Elektromontaż or by a third party, as well as defending against claims by you or any third parties;
10. detecting and preventing fraud;
11. conducting or participating in proceedings before public authorities or courts, of whatever nature;
12. protection of property, health and life through image recording (monitoring) of the area of the Elektromontaż headquarters building and the area around the headquarters building, if such monitoring is used.

6. Legal bases for the processing of your personal data.
The processing of your personal data will take place on the following grounds:

1. on the basis of your consent to the processing of your personal data for one or more specified purposes - Art. 6(1)(a) RODO;
2. where processing is necessary for the performance of a contract to which you are party or to take steps at your request, prior to entering into a contract - art. 6(1)(b) RODO;
3. because the processing of your personal data is necessary for the fulfilment of legal obligations incumbent on Elektromontaż - art. 6(1)(c) RODO;
4. processing is necessary to protect your vital interests, or those of another natural person - Art. 6(1)(d) RODO. (d) RODO;
5. where processing is necessary for the purposes of the legitimate interests pursued by Elektromontaż or by a third party - art. 6(1)(f) RODO;
6. on the so-called sensitive data referred to in Article 9(1) RODO, which applies in particular to data concerning health - on the grounds provided for in Article 9(2) RODO.

The processing of your personal data due to its necessity for the fulfilment of legal obligations incumbent on Elektromontaż concerns, in particular, obligations imposed by tax law, accounting law, or anti-money laundering and anti-terrorist financing law.
In turn, the processing due to its necessity for purposes arising from legitimate interests pursued by Elektromontaż or by a third party concerns the cases of processing referred to in paras. 5 points 5) - 12) of this Privacy Policy, e.g. for direct marketing of Elektromontaż's products and services, or for establishing, securing, or asserting claims by Elektromontaż or by a third party, as well as defending against claims by you or any third parties.
It should be noted that processing is lawful only in cases where - and to the extent that - at least one of the above conditions (grounds) for processing personal data is met. Thus, it is possible to process your personal data on more than one basis, as well as to continue to process such data when any of the grounds for processing have fallen off while at least one of the others remains valid.

7. Information on recipients of personal data or categories of recipients, if any.
A recipient is understood to be a natural or legal person, public authority, entity or other body to which personal data are disclosed, whether or not it is a third party.
A special category is also the processor, by which is meant a natural or legal person, public authority, entity or other body that processes personal data on behalf of the controller.
The recipients of your personal data are or may be:

1. providing telecommunications and IT services;
2. providing data archiving and destruction services;
3. by whom we provide services or products or goods, in particular subcontractors in construction contracts or entities for whom we perform such activities, e.g. investors, contracting authorities, general contractors, etc.
4. banks and entities that enable us to carry out remote payment operations;
5. postal or courier services or transport services provided to us;
6. providing or supporting accounting, HR and payroll, recruitment and training processes;
7. providing legal or debt collection services;
8. other entities of the Elektromontaż Group and the PG Energy Group, subject to generally applicable regulations;
9. state authorities or other entities authorised by law, in order to comply with the obligations incumbent on Elektromontaż (e.g.

8. The period for which your personal data will be processed.
Your personal data will be stored for the period that is necessary for the purpose for which it was collected.
In principle, the period for which your personal data will be stored is the period of performance of the contract (including any mutual obligations and rights arising therefrom) to which you are a party or to which you act as a representative, however, due to the various legal bases for the processing of your personal data, the processing periods may be as follows, e.g.:

1. if you have given your consent to the processing of your personal data - until you withdraw your consent;
2. where the processing of your personal data is necessary for the fulfilment of legal obligations incumbent on Elektromontaż - for the period that the processing of your personal data is required by law, in particular the provisions of tax law, the Accounting Act, e.g. the Act on Personal Data Protection. data processed for accounting purposes and for tax reasons we process for the period until the expiry of the statute of limitations for tax liabilities, unless tax or other laws provide otherwise;
3. where processing is necessary for the purposes of legitimate interests pursued by Elektromontaż or by a third party - as a general rule until such legitimate interests have been fully satisfied or extinguished, which will result from the expiry or limitation period of any claims by you, Elektromontaż or any third party;
4. in situations where the retention period necessary for the purpose for which the data was collected cannot be linked to a specific legal obligation or legitimate interest - for a period of 3 (three) years in order to maintain the principle of accountability.

If we process your personal data on the basis of a legitimate interest, in particular for direct marketing purposes, we will keep the data until you object to such processing. After this time, the data will no longer be processed for this purpose, i.e. direct marketing, but further storage may be permissible or even necessary due to, for example, the performance of a contract, a specific legal provision or other legitimate interest.

9. Rights of the data subject.
Please be advised that you have the right to request from Elektromontaż, as the controller of your personal data, access to your personal data, rectification, erasure or restriction of processing, or the right to object to processing, as well as the right to data portability.
If the processing of your personal data is based on Article 6(1)(a) or Article 9(2)(a) of the RODO you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
Processing of your personal data is still possible as long as there is at least one other legal basis for the processing.

10. Complaint to a supervisory authority.
Where the processing we carry out in your opinion violates the provisions of the RODO, you have the right to lodge a complaint to a supervisory authority, i.e. the President of the Office for the Protection of Personal Data.

11. Voluntariness of providing personal data.
Where personal data is collected on the basis of consent, the provision of personal data is voluntary by you.

The provision of personal data by you, depending on the purpose of the processing, may be:

1. a condition for the conclusion and performance of a possible contract to which you (or the entity on whose behalf or for whose benefit you are acting) and Elektromontaż are or are to be a party, or for the taking of action on the part of Elektromontaż prior to the conclusion of such a contract;
2. requirement to provide you with a newsletter, if any;
3. requirement to receive an answer to your question when contacted via the contact form on the Elektromontaż website or otherwise.

Where required by specific legislation, we may require data required by such legislation, e.g. TIN. Refusal to provide data to the extent necessary for the conclusion or performance of the contract and to the extent required by law will prevent the conclusion of the contract.

12. Automated processing of personal data, including profiling.
Personal data will not be processed by automated means (including profiling) in such a way that any decisions could be made as a result of such automated processing, other legal effects would be produced or your situation would otherwise be materially affected (Art. 22 RODO).
In the course of our activities, however, we use cookies in such a way that we observe and analyse traffic on our websites as well as undertake marketing activities, but in the course of these activities we do not process personal data in the manner referred to in Article 22 RODO. You can find out more about our use of cookies in the document entitled "Cookie Policy".

13. Transfer of your personal data to third countries.
We do not currently transfer and do not plan to transfer your personal data outside the European Economic Area (comprising the European Union, Norway, Liechtenstein and Iceland), (hereinafter: "EEA"), i.e. to a third country or international organisation. In the event that we decide to transfer your data outside the EEA this will only take place for the purpose and to the extent permitted by law.

14. Security of your personal data.
We attach great importance to the security of the processing of your personal data. We use appropriate technical and organisational measures to protect your data from unauthorised disclosure and access, from accidental or unlawful destruction and from loss. Elektromontaż has also implemented a number of policies to this end, of which this Privacy Policy is one part. However, it should be remembered that no method of data transmission, in particular via the Internet and no method of electronic or physical storage is completely secure.

15. Obtaining information about the processing of personal data.
All requests, queries and notifications regarding your personal data processed at Elektromontaż should be addressed to the e-mail address: dane.osobowe@elektromontaz.com or in writing to the address of Elektromontaż's registered office.

16. Changes to the Privacy Policy.
Elektromontaż shall review the validity of the provisions of this Privacy Policy on an ongoing basis with regard to currently applicable laws and the needs of business practice. In the event of changes to this Privacy Policy, the updated version shall be immediately posted on Elektromontaż's website at: http://www.elektromontaz.com/ and in the Elektromontaż head office building.