on the processing of personal data

Data Administrator and contact information

Lenso Sp. z o.o. with its registered office in Poznań (ul. Madalińskiego 3; 61-509 Poznań) KRS 0000508761, NIP 7831712652 , REGON 302722260 e-mail address (hereinafter „Administrator”).

Purpose and legal basis for processing data

Personal data are processed: 1. based on the given consent/ 2. based on the necessity of their processing for the performance of a contract to which the data subject is a party or at data subject’s request to take steps prior to entering into a contract (Article 6(1)(b) of the GDPR)/ 3. based on the legitimate interests of the Administrator (Article 6(1)(f) of the GDPR).

Period of processing of data

Your personal data will be processed: 1. until the withdrawal of the consent/ 2. until the period of limitation for all claims arising from the contract has expired, but not less than 5 years from the end of the tax year in which the last tax was due or fulfilling by the Administrator the final obligation of public law nature in relation with the conclusion and performance or non-performance, inadequate performance, termination, or expiry of the contract, and in the case where the data are processed only for marketing purposes until the day of the consent withdrawal or objection to their further processing.

Recipients of data

Personal data may be disclosed to third parties only for the purposes of the performance of a contract/service, or eventual pursuing of claims arising from its provisions, in particular to: entities providing services to the Administrator, including IT services, HR and accounting services, legal services, and other services related to the performance of a contract; and public authorities on the basis of the generally applicable law regulations.

The rights of the data subject

You have the right to: 1. access your personal data, their rectification, erasure, restrict their processing and transfer; 2. object to the processing of your personal data; 3. withdraw the consent to the processing of your personal data at any time. Withdrawal of the consent does not affect legal compliance of the processing performed based on the consent prior to withdrawal; 4. lodge a complaint to a supervisory authority – the President of the Personal Data Protection Office.

Additional information

Provision of personal data is necessary for entering into a contract and refusal to provide data will prevent the conclusion or the performance of a contract.

The Administrator shall make every effort to ensure all physical, technical, and organizational measures necessary to protect personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable regulations.