KCRI Sp. z o.o. with its registered office in Kraków at ul. Miechowska 5b/3, 30-055 Kraków, National Court Register number KRS 0000218183, complying with the obligations under the applicable personal data protection laws, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter GDPR), provides you with information on your personal data processing and protection.
The Controller attaches particular importance to respecting the privacy of users who visit the website www.kcri.org (hereinafter “Website”).
I. PERSONAL DATA CONTROLLER
The personal data controller is KCRI Sp. z o.o. with its registered office at ul. Miechowska 5b/3, 30-055 Kraków, National Court Register number KRS 0000218183, (hereinafter also “PDC”, ”Company”, “Controller”)
II. PURPOSE OF PERSONAL DATA PROCESSING
Your personal data will be processed for the purpose of:
Moreover, the Controller collects information on IP numbers of any devices that establish connections to the website under the address https://www.kcri.org
III. LEGAL BASIS OF PERSONAL DATA PROCESSING
The legal basis for the processing of collected personal data is Article 6 (1) lit a) of the GDPR. The data will be processed until withdrawal of the consent granted or raising an objection.
However, the person whose data are processed has the right to withdraw the granted consent at any time. This will not compromise the lawfulness of processing done before withdrawal of consent.
IV. YOUR RIGHTS RELATED TO DATA PROCESSING BY THE CONTROLLER
In connection with your data processing by the PDC you have the right to:
Such requests must be submitted to the Controller.
You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data violates provisions of the GDPR. As from 25 May 2018, the supervisory authority is the President of the Office for Personal Data Protection.
Providing your personal data to the Controller is voluntary. However, if you do not provide your personal data or if you provide incomplete personal data, the accomplishment by the Controller of the purposes defined in Section II may be seriously impeded or prevented.
V. DATA TRANSFER
The Controller does not intend to transfer your personal data to any third countries or international organizations.
VI. AUTOMATED DECISION MAKING
The Controller will not make any automated decisions with regard to your data on the basis of the personal data shared by you, including decisions resulting from profiling.
VII. ADDITIONAL INFORMATION
This Policy is in effect from 25 May 2018 until its revocation and it fulfils the legal obligation under Articles 13 – 14 of the GDPR.