Processing of Personal Data

Information on the Processing of Personal Data

1. The controller of personal data is Casbeg Consulting sp. z o.o., with its registered office at Powstańców Śląskich 5, 53-332 Wrocław, Poland, Tax Identification Number (NIP): 8992846938, represented by Michał Budniak (the “Controller”). To contact him send an e-mail: [email protected].
2. Any matters relating to the processing of personal data, including the exercise of data subject rights, may be addressed to the Controller via the contact details provided in the relevant business correspondence.
3. Personal data are processed for the purpose of initiating, conducting, and maintaining business contact and professional communication, including marketing and offer-related activities directed at business recipients. The legal basis for such processing is the Controller’s legitimate interest, in accordance with Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
4. Personal data may be disclosed solely to entities cooperating with the Controller in the scope necessary for the proper functioning of its operations, in particular, providers of IT systems, hosting services, and technical support. Such entities process personal data based on appropriate data processing agreements.
5. Personal data will be retained for as long as it is necessary to achieve the purposes for which it is processed or until a valid and justified objection to the processing is submitted, unless a longer retention period is required under applicable law.
6. The data subject has the right to:
   obtain confirmation as to whether personal data concerning them is being processed and, if so, access such data and receive a copy thereof,
   request the rectification of inaccurate or incomplete personal data,
   request the restriction of processing or the erasure of personal data, insofar as such requests are justified and do not conflict with legal obligations imposed on the Controller,
   receive personal data processed based on consent or a contract in a structured, commonly used and machine-readable format, and to transmit those data to another controller, where technically feasible,
   Lodge a complaint with the competent supervisory authority for data protection.
7. Where personal data are processed based on the Controller’s legitimate interest, the data subject has the right to object to such processing at any time on grounds relating to their particular situation.
8. Personal data may have been obtained from publicly available sources, including professional and business platforms (e.g. Apollo.io, LinkedIn) operated by entities located outside the European Union or the European Economic Area. In the event of transfers of personal data to third countries, such transfers are carried out in accordance with applicable GDPR provisions. However, it should be noted that such countries may not provide a level of data protection equivalent to that guaranteed within the European Union, which may result in potential access to personal data by public authorities without effective legal remedies available to the data subject.