GDPR

Information clause for the Trenkwalder call centre

Information on the processing of personal data as part of the Trenkwalder call centre service

Administrators

Depending on the subject of the call and the matter for which you are calling, the controller of your personal data is the relevant Trenkwalder group company, i.e. Trenkwalder:

• Trenkwalder & Partner sp. z o.o. with its registered office in Skierniewice, address: ul. Gałeckiego 14,

• Trenkwalder Patron sp. z o.o. with its registered office in Skierniewice, address: ul. Gałeckiego 14,

• Trenkwalder Outsourcing Poland sp. z o.o. with its registered office in Skierniewice, address: ul. Gałeckiego 14,

• Trenkwalder Benefit sp. z o.o. with its registered office in Cracow, address: ul. Podgórska 36.

For matters relating to the processing of your personal data, you may contact the data controller at its registered office address or by email at the common address: daneosobowe@trenkwalder.com

IOD

In addition, we would like to inform you that the companies in the Trenkwalder Group have appointed a Data Protection Officer (DPO). You can contact the DPO at the following email address: iod@trenkwalder.com or by post at the controllers' registered addresses.

Purposes and legal basis for processing personal data

If you are calling in connection with a job search:

- the controller of your personal data is the Trenkwalder Group company conducting the recruitment process in which you decide to participate;

- the details of the processing of your personal data in the context of the recruitment process by the individual Trenkwalder Group companies are described in the information clauses for job candidates available above on the website.

If you are calling in connection with your wish to learn more about our offer and to establish future cooperation:

- the controller of your personal data is the Trenkwalder Group company from which you will receive an offer;

- your personal data will be processed by us in order to present you with an cooperation offer on the basis of Article 6(1)(b) GDPR (processing is necessary to take action at your request prior to entering into a contract), as well as for the establishment, pursuit and defence against possible claims which is our legitimate interest on the basis of Article 6(1)(f) GDPR;

- in addition, we may obtain your data from business information registers, business intelligence agencies and other publicly available sources. The personal data in question will relate to the regulation of your obligations and your business activities. The legal basis for processing the data indicated is the controller's legitimate interest referred to in Article 6(1)(f) of the GDPR, in the form of financial risk assessment and its minimisation;

- your personal data will be processed for the period necessary for the preparation of the offer and thereafter stored for no longer than one year.

If you are already our customer, employee or partner

- the controller of your data is the Trenkwalder Group company with which you have a contract;

- your personal data will be processed in order to identify you in our IT system and to provide you with information and/or take further action on your requests, in accordance with our legitimate interest on the basis of Article 6(1)(f) GDPR;

- other information regarding the processing of your personal data has been provided to you at the stage of entering into the contract with the controller.

If you are calling in connection with administrative proceedings as a representative of a public institution

- the controller of your data is the Trenkwalder Group company concerned;

- your personal data will be processed for the purpose of providing you with information and/or take further action on your requests, in accordance with our legitimate interest on the basis of Article 6(1)(f) GDPR;

- your data will be retained for the time necessary to respond to/fulfill your requests.

Handling inquiries other than those described above, which are made via the hotline

- the controller of your personal data is the Trenkwalder Group company to which the enquiry is addressed;

- your personal data will be processed for the purpose of handling the reported enquiry, in accordance with our legitimate interest, on the basis of Article 6(1)(f) GDPR;

- your personal data will be processed for the period necessary to handle the reported enquiry.

Regardless of the above, Trenkwalder & Partner sp. z o.o., as controller, processes your personal data, in the form of the content of the registered conversations, for purposes deriving from the legitimate interests of our or the group companies indicated above, on the basis of Article 6(1)(f) GDPR. These purposes are:

- to keep evidence in case it is necessary to reconstruct the arrangements made during the conversation, for the pursuit or defense of claims, including the handling of complaints;

- to improve the quality of service, by analysing the recorded calls and learning from them to improve the work of the consultants.

Personal data within the recordings is retained for a period of 6 months from the recording.

Your rights

You have the right to:

• access to your personal data and to receive a copy of your personal data;

• to rectify (correct) your personal data;

• to restrict the processing of your personal data;

• erasure of your personal data;

• transfer of your data;

• withdraw of consent - if the data is processed on the basis of the consent given,

• object to the processing of your personal data;

In addition, you are entitled to file a complaint to the President of the Personal Data Protection Office (to the following address: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).

Recipients of your personal data

Personal data may be disclosed within the companies of the Trenkwalder Group, i.e.:  Trenkwalder & Partner sp. z o.o., Trenkwalder Patron sp. z o.o., Trenkwalder Outsourcing Poland sp. z o.o., Trenkwalder Benefit sp. z o.o., entities with whom the administrator has concluded an agreement for the provision of maintenance services for the IT systems used in their processing, entities that provide support to the administrator on the basis of outsourced services and in accordance with the entrustment agreements concluded, entities that provide advisory, consultancy, auditing, legal, tax, accounting, document archiving services for the administrator, entities that provide postal or courier services, state authorities or other entities authorised by law - if it is necessary for the implementation of legal obligations.

Voluntariness to provide data

Providing data required by law is mandatory. In other cases, the provision of data is voluntary, but without the provision of such data, it may not be possible for the administrator to take action, in particular to respond to an enquiry or provide an offer.

Profiling

Your personal data will not be used for profiling or for automated decision-making of any kind towards you.

Transfer of data outside the EEA

Your personal data will not be transferred outside the EEA.