Personal data protection

Dear User,

please read the following information carefully:

In connection with the implementation of the requirements of Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of personal data of individuals in relation to the processing of personal data and on the free flow of such data and repeal of Directive 95/46 / EC (general regulation on personal data protection) , further on: Regulation) Enerace Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, Chmielna street 132/134, 00 - 805 Warsaw informs about the principles of personal data processing:

I. Data administrator

The administrator of Your data is Enerace Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, Towarowa 20B street, 10-417 Olsztyn, entered in the Register of Entrepreneurs of the National Court Register by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Department of the National Court Register under KRS number: 0000770173; REGON: 382492398, NIP: 5272881425, with share capital in the amount of PLN 50,000.00, tel. +48 514893079, email: info@enerace.eu hereinafter referred to as "Enerace".

II. Categories of personal data

ENERACE processes the following categories of data: identification data, address data as well as contact details and data necessary for the purposes for which ENERACE processes data.

III. Objectives and legal basis for the processing of personal data

Personal data can be processed by ENERACE for the following purposes:

1. performing activities related to the current operations of ENERACE, and in particular in order to take necessary actions related to the conclusion and performance of a contract with a client and taking actions by ENERACE, at Your request, before the conclusion of the contract - the legal basis for the processing of personal data in this respect is art. 6(1)(b) of the Regulation,
2. within the scope of processing for statistical purposes and internal reporting - the legal basis for the processing of personal data in this field is art. 6(1)(f) of the Regulation,
3. promoting and marketing of activities conducted by ENERACE during the term of the contract - the legal basis for the processing of personal data in this respect is the legally justified interest pursued by ENERACE, i.e. art. 6(1)(f) of the Regulation,
4. promoting and marketing of activities conducted by ENERACE after termination, expiry or withdrawal from the contract - the legal basis for the processing of personal data in this respect is the consent of the data subject, i.e. art. 6(1)(a) of the Regulation,
5. establishing and pursuing own claims or defending against reported claims - the legal basis for the processing of personal data in this respect is the legally justified interest pursued by ENERACE, i.e. art. 6(1)(f) of the Regulation,
6. fulfill the legal obligations imposed on ENERACE in connection with business activity and in connection with the performance of the contract - the legal basis for the processing of personal data in this respect is art. 6(1)(c) of the Regulation,

IV. Information on the periods of personal data processing

ENERACE will store Your personal data:

1. in connection with the conclusion of the contract and for its implementation - for the duration of the contract, and then for the period and to the extent required by law, as well as for the period necessary to establish and assert claims or defend against submitted claims,
2. for statistical purposes and analyzes - for the duration of the obligation,
3. within the scope of processing for statistical purposes and internal reporting - until the legally justified interest of ENERACE forming the basis of this processing or until the moment You raise your objection,
4. within the scope of promotion and marketing of the activity carried out by ENERACE during the term of the contract - until the moment You raise your objection,
5. in the promotion and marketing of activities conducted by ENERACE after termination, expiration or withdrawal from the contract - until You withdraw your consent,
6. within the scope of establishing and pursuing one's own claims or defending against submitted claims - until the period of prescription of potential claims under the contract or another title,
7. in the scope of fulfilling the legal obligations incumbent on ENERACE - for the period in which the law requires entrepreneurs to store documentation and fulfill their obligations arising therefrom,

V. Information on recipients of personal data

The data is intended for ENERACE and may be transferred to the following recipients:

1. entities and bodies to which ENERACE is obliged or authorized to disclose personal data on the basis of generally applicable laws, including entities or bodies entitled to receive personal data from ENERACE or authorized to request access to personal data on the basis of generally applicable laws,
2. entities participating in the processes necessary to perform contracts concluded with the data subject,
3. entities that process personal data of the data subject on behalf of ENERACE based on the personal data processing agreement concluded with ENERACE,
4. to related entities,
5. entities supporting ENERACE in business processes and ENERACE activities.

VI. Automated decision making, including profiling

Profiling should be understood as any form of automated processing of personal data, which consists in the use of personal data to assess some of the characteristics of an individual, in particular to analyze or forecast aspects of the work of that individual, its economic situation, health, personal preferences, interests, reliability, behavior, location or movement.

ENERACE does not process personal data in the aforementioned manner.

VII. The rights of the data subject

You have the right to access your personal data, the right to demand rectification, deletion, and processing restrictions under the terms of the Regulation.

To the extent that the processing of Your personal data is based on the premise of the legitimate interest of ENERACE, You have the right to object to the processing of Your personal data.

To the extent that the processing of Your personal data is based on Your consent, You have the right to withdraw Your consent. Withdrawal of consent does not affect the compliance of the processing which was made on the basis of consent before its withdrawal.

To the extent that Your personal data is processed for the purpose of conclusion and performance of the contract or processed on the basis of consent - You also have the right to transfer personal data, i.e. the right to receive Your personal data from ENERACE, in a structured , a commonly used machine-readable format (You may send this data to another data administrator).

To the extent that Your personal data is processed for the promotion and marketing of activities conducted by ENERACE - You have the right to object at any time to the processing of Your data for the promotion and marketing of activities conducted by ENERACE, including profiling, to the extent that the processing is related to the promotion and marketing of activities conducted by ENERACE.

You also have the right to lodge a complaint with the body supervising compliance with the Regulation of the President of the Office for Personal Data Protection in a situation where there is a suspicion that the processing of Your personal data violates the provisions on the protection of personal data.

VIII. Source of data

The information concerns personal data obtained in a different way than the data subject.

Your data may come from the principal (in the case of a power of attorney), a statutory representative, as well as publicly available sources (eg databases and registers: REGON, Central Register of Economic Activities (CEIDG), National Court Register and persons / entities having a basis to share your data.

IX. Transfer of personal data to a third country

ENERACE in justified and necessary cases, in order to perform the contract (eg implementation of Your contractual instructions), and in cases where the transfer of personal data is necessary, You will provide personal data to international organizations (eg SWIFT) or provide Your personal data to entities based outside the European Economic Area (EEA).

X. The obligation to provide personal data

Providing Your personal data is voluntary, however, it is a condition for the conclusion and implementation of the contract and statutory specific powers and obligations ENERACE in the absence of personal data ENERACE is forced to refuse to enter into a contract.

To the extent that personal data is collected on the basis of Your consent, providing personal data is voluntary.

XI. Security of data processing

To avoid unauthorized or improper use of personal data managed by ENERACE, the company undertook comprehensive technical and operational activities in the field of security. Security procedures are regularly reviewed and improved in line with technological developments.

XII. Request of persons whose data refers to

A person who wants to take advantage of personal data rights may apply to ENERACE.

XIII. Users of the ENERACE.online application can ask ENERACE to remove their username and password.

To do so, send an email with your username to: support@enerace.online. Your username and password will be removed within 7 business days, which will be confirmed by email.