INFORMATION OBLIGATION REGARDING THE PROCESSING OF PERSONAL DATA

The administrator of your personal data is GRUPA GRIFFIN Sp. z o.o., with its registered office in Gdynia, at Władysława IV 42/21 (hereinafter: the “Administrator”).

Your personal data is processed in connection with the execution of a contract or assignment related to the matter addressed to the Administrator.

Legal basis for data processing:
 Personal data is processed in accordance with Article 6(1)(b), (c), or (e) of the GDPR, namely:

• for the performance of a contract or to take steps at your request prior to entering into a contract,
• for compliance with a legal obligation to which the Administrator is subject,
• for the performance of a task carried out in the public interest.
  

The precise legal basis will be determined after analysing the nature of the matter.

Voluntary nature of providing data:
 Providing personal data is generally voluntary, but it may be necessary for the conclusion and performance of a contract.

Recipients of personal data:
 Personal data may be disclosed to:

• entities processing data on behalf of the Administrator (e.g. consulting, advisory, auditing, IT, legal, tax, accounting service providers),
• our clients,
• public authorities or local government bodies, if required by law,
• other data controllers, if their involvement is necessary to carry out the relevant process.
  
  

Data retention period:
 Personal data will be processed for as long as necessary to achieve the purpose of processing and subsequently archived in accordance with applicable laws.

Data will be deleted after the expiry of statutory limitation periods for specific claims, calculated from the end of the calendar year in which the purpose of processing was fulfilled.

Transfer of data outside the EEA:
 As a rule, data will not be transferred outside the European Economic Area (EEA), unless the nature of the matter explicitly requires it and you are informed of such transfer.

Data subject rights:
 You have the right to:

• access your personal data,
• request its rectification, deletion, or restriction of processing,
• object to its processing,
• data portability,
• lodge a complaint with the supervisory authority (President of the Personal Data Protection Office in Poland).
  
  

Automated decision-making:
 Your personal data will not be subject to profiling or automated decision-making within the meaning of Article 22(1) and (4) of the GDPR.

Contact:
 If you have any questions regarding the processing of your personal data, please contact us at:
 📧 office@migrant.legal