GDPR Information clause

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as “RODO”, we hereby inform you how we process your personal data and about your rights in connection therewith:

1. Personal data controller
The administrator with respect to your personal data (hereinafter referred to as “Personal Data”), is Autostrada Eksploatacja S.A. with its seat in Poznań (60-004), Głogowska Street (hereinafter referred to as “Administrator”).
Please direct any inquiries or requests related to the processing of Personal Data to the point of contact designated by the Administrator at the following e-mail address: odo@aesa.pl.

2 What Personal Data do we process?
We have received Personal Data directly from you in connection with the establishment of contact with us or within the framework of the business relationship or business contacts between us and you (in particular, in connection with tender proceedings, bids, orders or other existing or future business contacts established by you or third parties).
In addition, we also collect publicly available data, such as data related to your company’s presence on the Internet or in other available registers directories, KRS, etc.).
In addition to contact data, we may also collect other data that you have provided to us in connection with them (e.g. data appearing on business cards, Christmas cards, etc.).
In addition, we collect data that we have access to through our website of the company where you are employed. We process this data for the purpose of establishing business relations and our activities for good cooperation.
The Personal Data we process is ordinary data, such as (i) name, (ii) company contact data (such as phone number, cell phone number, email address, registered office address), (iii) data regarding your business position (including your occupation, business activity, employment with our contractor or cooperation with our contractor).

3 For what purpose and on what legal basis do we process Personal Data?
We process Personal Data in accordance with European data protection regulations, which is necessary for the purposes of the legitimate interests of the Administrator (Article 6(1)(f) of the DPA), that is, to establish and maintain a business relationship, ongoing communication, registration of correspondence, preparation and archiving of documents related to tenders, offers, orders, creation of reports, analyses and statistics for the internal needs of the Administrator and entities related by capital or personality to the Administrator, and for the establishment or assertion of claims or defense against such claims.

4 To whom may we transfer your Personal Data (data recipients)?
We may transfer Personal Data to:
a. Authorized employees of the Administrator who are entrusted with the processing of Personal Data for the performance of tasks provided to the Administrator, in particular IT and financial, but only to the extent necessary for the proper performance of the Agreement. We ensure that our employees receive appropriate training in the protection of Personal Data by familiarizing them with internal data protection policies and procedures or dedicated training programs. All persons authorized to process Personal Data
Personal Data are required to maintain the confidentiality of the data and protect it from disclosure to unauthorized persons;
b. other entities cooperating with the Administrator, including in particular: providers of legal, consulting, marketing, consulting audit and certification services, document archiving and training services, email service providers, IT service providers, entities providing courier, postal, forwarding or transportation services – each time on the basis of relevant agreements ensuring privacy protection;
c. to public authorities that are authorized to obtain personal data as part of a specific proceeding in accordance with applicable law;
d. entities with capital or personal relations with the Administrator;
e. to Autostrada Wielkopolska S.A. and Autostrada Wielkopolska II S.A. with its registered seat in Poznań (61-248), 1 Stanisława Zwierzchowskiego St., being the Concessionaires of A2 Nowy Tomyśl – Konin and Świecko – Nowy Tomyśl sections, respectively.

5 How long do we keep Personal Data?
Personal Data will be stored for no longer than necessary to achieve the purposes for which such Personal Data is processed.

6. transfer of Personal Data to third countries
We will not transfer your Personal Data to a third country (that is, a country outside the European Union and the European Economic Area) or international organizations.

7 Voluntariness of providing Personal Data
Provision of Personal Data is voluntary, but necessary for the conclusion and performance of the Agreement.
8 What rights do you have as we process Personal Data?
You have the right to access, rectify, erase or restrict processing of your Personal Data, as well as the right to object to the processing of your Personal Data to the extent that Personal Data processed under Article 6(1)(f) of the RODO.

9 Right to lodge a complaint
If you consider that we are processing Personal Data in violation of the law, you have the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection).

10 Automated Decision Making
Personal Data will not be subject to automated decision-making and will not be subject to profiling.