Information on the processing of personal data of a contractor who is a natural person
The information below is provided pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the “GDPR”.
1.Controller.
The controllers of your personal data are Agnieszka Nowak and Urszula Łopata, conducting business activity in the form of a civil-law partnership under the name MOLTEVO Agnieszka Nowak i Urszula Łopata s.c., with its registered office in Katowice, VAT ID (NIP): 954-28-84-827, REGON: 541011312, email addresses: agnieszka.nowak@moltevo.com, urszula.lopata@moltevo.com, acting as joint controllers, hereinafter referred to as the “Controller”.
2.Contact details.
In all matters concerning the processing of personal data and the exercise of rights related to that processing, you may contact the Controller as follows:
- 2.1.by post to: ul. Uniwersytecka 13 40-007 Katowice, Poland,
- 2.2.by email: agnieszka.nowak@moltevo.com or urszula.lopata@moltevo.com.
3.Processing of personal data in order to fulfil the legal obligations of the Controller in connection with the conclusion of an agreement.
- 3.1.In connection with the agreement you have concluded with the Controller, the Controller is entitled to process the following personal data: given name(s) and surname, business name, business address, VAT ID (NIP), REGON, information on the amount of remuneration arising from the agreement, and other data contained in the invoices you issue.
- 3.2.The personal data indicated in point 3.1. will be processed to the extent necessary for the purpose of fulfilling the statutory obligations of the Controller, including obligations related to paying your remuneration.
- 3.3.The legal bases for processing the personal data indicated in point 3.1. are:
- 3.3.1.Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the Controller is subject);
- 3.3.2.the provisions of the Act of 23 April 1964 – the Civil Code (consolidated text: Journal of Laws of 2022, item 1360, as amended) applicable to the subject matter of the agreement specified therein;
- 3.3.3.Article 74 and other provisions of the Act of 29 September 1994 on Accounting (consolidated text: Journal of Laws of 2021, item 217, as amended);
- 3.3.4.the provisions of other legal acts in force at the time the personal data are processed.
4.Processing of personal data for the purposes of performing the agreement.
- 4.1.Your personal data comprising given name(s), surname, business name, business address, VAT ID (NIP), REGON, information on the amount of remuneration arising from the agreement, other data contained in the invoices you issue, bank account number, telephone number and email address will be processed to the extent necessary to enable you to perform the agreement and to enable the Controller to communicate with you, and to the extent necessary by the Controller’s employees, persons authorised by the Controller or persons cooperating with the Controller under civil-law contracts.
- 4.2.Your personal data comprising given name, surname, telephone number and email address will be processed to the extent necessary to enable you to perform the agreement and to enable the Controller to communicate with you, and to the extent necessary by the Controller’s employees, persons authorised by the Controller, persons cooperating with the Controller under civil-law contracts, or the Controller’s clients.
- 4.3.The legal basis for processing your personal data referred to in points 4.1. and 4.2. is Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract to which the data subject is party).
5.Recipients of personal data.
- 5.1.The recipients of the personal data referred to in point 3 may be persons and entities authorised under the law to obtain the personal data of a party to the agreement, in particular: the authorities of the National Revenue Administration, other state authorities and institutions, as well as banks to the extent necessary to pay your remuneration, natural persons, organisational units and legal persons cooperating with the Controller in the area of accounting services, the Controller’s employees, persons authorised by the Controller or persons cooperating with the Controller under civil-law contracts.
- 5.2.The recipients of your personal data referred to in point 4.1. may be the Controller’s employees, persons authorised by the Controller or persons cooperating with the Controller under civil-law contracts.
- 5.3.The recipients of your personal data referred to in point 4.2. may be the Controller’s clients, persons authorised by the Controller’s clients, the Controller’s employees, persons authorised by the Controller or persons cooperating with the Controller under civil-law contracts.
6.Transfer of personal data to a third country or an international organisation.
Your personal data will not be transferred by the Controller to a third country or to an international organisation.
7.Personal data retention period.
Your personal data will be stored for the term of the agreement, as well as for the period during which any claims may be pursued, or for the period necessary for the Controller to fulfil its legal obligations (in particular those arising from tax and accounting regulations).
8.Rights relating to personal data.
You have the right to access your data and the right to rectify, erase or restrict the processing of that data, the right to data portability and the right to object to the processing – in the cases and on the terms set out in the GDPR.
9.Obligation and voluntariness of providing data and the consequences of not providing it.
- 9.1.You are obliged to provide the personal data referred to in point 3., and this requirement arises from statute in connection with the conclusion of the agreement. The consequence of not providing this personal data is that it will not be possible to conclude the agreement or to perform it on the terms set out in the law, and the Controller will not be able to exercise the rights and obligations of a party to the agreement.
- 9.2.Providing the personal data specified in point 4. for the purposes specified in point 4. is mandatory and constitutes a contractual requirement. The consequence of not providing this personal data is that it will not be possible to perform the agreement.
10.Right to lodge a complaint.
You have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), if you consider that the processing of your personal data infringes the GDPR.
11.Automated decision-making and profiling.
Your personal data may also be processed using an IT system and appropriate software; however, your personal data will not be subject to automated decision-making or profiling as referred to in Article 22(1) and (4) of the GDPR.