Information obligation in the scope of GDPR
Pursuant to Art. 13 section 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Regulation on data protection, hereinafter referred to as “GDPR”), we inform you that:
- The administrator of personal data is Gako Transport Spółka z ograniczoną odpowiedzialnością Spółka komandytowa with its registered office in Kraków, 31-406 at Al. 29 Listopada 155B NIP: 9442258183 (hereinafter referred to as the Administrator).
- Contact with the Data Administrator is via e-mail: biuro@gako.pl.
- Personal data is processed for the purpose of fulfilling transport orders.
- Providing personal data is a necessary condition for the execution of transport orders.
- The legal basis for the processing of personal data by the Administrator may be:
- voluntary consent to their processing,
- the need to process them for the purposes of implementing the contract concluded by us or acting before concluding it,
- statutory requirements resulting from the legal provisions binding on us,
- the need to protect our legitimate interests.
- The recipients of personal data are:
- entities participating in the execution of the order,
- entities providing telecommunications services,
- accounting Office,
- entities providing IT services (including data hosting and e-mail services),
- entities authorized by law.
- The data will not be transferred to a third country or international organization.
- Rights related to data processing:
- The right of access of the data subject,
- The right to rectify data,
- The right to delete data (“right to be forgotten”),
- The right to restrict processing,
- The right to transfer data,
- Right to object,
- The right to withdraw consent.
- The data subject has the right to lodge a complaint with the supervisory authority if he or she believes that the processing of his or her personal data violates the provisions of the GDPR.
- Your data will not be subject to automated decision-making, including: profiling (Article 22 of the GDPR).
- The data will be processed for the period necessary for the Administrator to pursue legally justified interests.