Dear User,
On May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), will enter into force.
The existing measures for the protection of personal data at the Banabit Center have met the requirements of the Regulation.
We do not require any action on your part, but we encourage you to familiarize yourself with the rules for the processing of personal data:
Rules for the processing of personal data by Centrum Banabitów,
Information clause
The data controller is the Provincial Curia of the Congregation of the Priests of St. Paul – Barnabites, with its registered office in Warsaw at ul. Smoluchowskiego 1, 02-679 Warsaw.
Contact details
The Data Protection Officer can be contacted at the following email address: iod@barnabici.pl.
Purpose of data processing and legal basis for data processing
Purposes of processing and legal basis for processing
Your data may be processed for the following purposes: | Basis for processing: |
|---|
- conclusion and performance of the contract and provision of services in accordance with the contract,
| the necessity of data processing for the conclusion and performance of the contract, |
- for the Administrator's marketing purposes, including analytical purposes,
| consent granted, and in some cases (e.g., contact for consent) also the legitimate interest of the controller (e.g., better selection of services to the needs of our customers, general optimization of our products, optimization of service processes, building knowledge about our customers, financial analysis of our company, etc.) |
- for marketing purposes, including analytical purposes of third
| consent, if consent is not given, personal data will not be processed for this purpose, |
- or to establish, investigate, or defend against claims related to the agreement concluded with you/services provided.
| the necessity of processing for the purposes of the legitimate interests pursued by the controller; the legitimate interest of the controller is the possibility to pursue claims or defend against them, |
- for archival (evidential) purposes legal need to prove facts
| the necessity of processing for the purposes of the legitimate interests pursued by the controller; the legitimate interest of the controller is the possibility of a legal need to prove facts |
- to examine customer satisfaction
| the necessity of processing for the purposes of the legitimate interests pursued by the controller; the legitimate interest of the controller is to improve the quality of the services offered |
- in order to offer you products and services directly (direct marketing), including tailoring them to your needs
| the necessity of processing for the purposes of the legitimate interests pursued by the controller; the legitimate interest of the controller is direct marketing of the controller's services/products |
The period for which the data will be stored
- Regardless of the basis for processing your personal data, we will store it until the claims under the contract/service provision expire or until the data storage obligation under the law expires, in particular the obligation to store accounting documents relating to the contract.
- Where we process personal data based on the legitimate interest of the Controller, personal data will not be processed for a specific purpose if you object to such processing.
- Please note that if we process your data based on your consent, you may withdraw it at any time, and we may only process your data until that moment.
Data recipients
- Your personal data may be shared with our business partners, i.e. companies with whom we cooperate (including by presenting, describing, and linking their products or services), for the purposes referred to above (for marketing purposes, if you consent to specific marketing purposes for which the sharing of data is necessary).
- In addition, your data may be transferred to our subcontractors (processors), e.g., accounting and law firms, IT service providers, marketing agencies, entities processing data for debt collection purposes, shipping companies, whereby such entities process data on the basis of a contract with the Administrator and exclusively in accordance with the instructions issued by the Administrator.
Transfer of data outside the EOG
Your personal data will not be transferred outside the European Economic Area unless this is clearly indicated by the nature of the service you have purchased.
Rights of the data subject
- You have the right to access your data and the right to request its rectification, deletion, or restriction of processing. If the basis for the processing of your personal data is the legitimate interest of the Administrator, you may object to the processing of your personal data. In particular, you have the right to object to processing for direct marketing purposes, including for analytical purposes.
- To the extent that the basis for the processing of your personal data is consent, you have the right to withdraw your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- To the extent that your data is processed for the purpose of concluding and performing a contract/providing services or processed on the basis of consent, you also have the right to transfer your personal data.
- You also have the right to lodge a complaint with a supervisory authority dealing with personal data protection if you consider that the processing of your personal data violates the provisions of the RODO.
Centrum Banabitów
ul. Smoluchowskiego 1, 02-679 Warszawa
phone. +48 (22) 543 20 01
