Customer Guide

‘Personal data’ means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The processing of personal data is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Health data, in addition to data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data processed for the purpose of uniquely identifying a natural person, data regarding sexuality or sexual orientation, belong to the category of sensitive data ( Article 9(1) of the GDPR).

Bearing the above in mind, please do not provide us on your own initiative, in any form (e.g. separate documents, information contained in the content of the letter, telephone conversation) of the above-described categories of personal data, including data regarding your health.

‘GDPR’ means Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

The main goal of the GDPR is to protect the basic rights and freedoms of natural persons.

PDF version of GDPR

‘Controller’ means the party which, alone or jointly with others, determines the purposes and means of the processing of personal data.

‘Recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.

‘Supervisory authority’ means an independent public authority which is established by a Member State in order to protect the basic rights and freedoms of natural persons in connection with the processing of data.

Currently, the function of a supervisory authority is performed by the President of the Personal Data Protection Office.

If you have any questions about the processing of your personal data, please contact Magdalena Rosinke or Karol Waliczewski by sending an e-mail to [email protected]

We would like to inform you that an article on the processing of personal data by debt collection companies has been published on the website operated by the Office for Personal Data Protection, link to the above-mentioned. article: https://archiwum.uodo.gov.pl/pl/138/1263.