GDPR

nformation Regarding the Processing of Personal Data

Processing of Personal Data
We hereby inform you that we process your personal data provided to us in connection with the use of our services.

Data Controller
The data controller is KAMAND Spółka z ograniczoną odpowiedzialnością, whose registration files are maintained by the District Court for the city of Wrocław.

Scope of Data Processing
We process your personal data provided to us in connection with the use of our services. These data may include, in particular, the following information:

  • Full name
  • Email address
  • Phone number
  • Residential address
  • Company name and position
  • Permanent business address
  • Tax Identification Number (NIP)

Purposes and Legal Basis for Processing
The data are processed for the following purposes and based on the following legal grounds:

  • Conclusion and execution of a contract – Article 6(1)(b) of the GDPR
  • Issuance of invoices, inclusion in accounting documentation, and fulfillment of other financial and accounting obligations imposed by law – Article 6(1)(c) of the GDPR
  • Establishing, pursuing, or defending claims related to the contract, which is our legitimate interest – Article 6(1)(f) of the GDPR
  • Identifying returning clients, reconstructing the course of cooperation, exchanged correspondence, prepared documents, etc., which is our legitimate interest – Article 6(1)(f) of the GDPR
  • Handling messages – Article 6(1)(f) of the GDPR
  • Handling event registrations – Article 6(1)(f) of the GDPR

Data Recipients
The following entities may be involved in the processing of personal data:

  • Hosting provider – in relation to storing personal data on a server
  • Cloud service providers – for using cloud-based solutions where personal data are stored
  • Invoicing system provider (Saldeo) – for using invoicing software that processes personal data for invoice issuance
  • CRM system provider (ClickUp) – for using CRM software that processes personal data to improve work efficiency and identify returning customers
  • Accounting office – for bookkeeping services that involve processing personal data contained in financial documents
  • Subcontractors – for service provision requiring access to personal data

All the above entities participate in the processing of personal data based on data processing agreements. These entities ensure an adequate level of personal data protection.

Transfer of Data to Tax Authorities and Other Institutions
Your personal data may be transferred to tax authorities as part of fulfilling public-law settlement obligations. Your personal data may also be transferred to other legally authorized entities if required to fulfill legal obligations or to assert rights.

Transfer of Data to Third Countries
Some of the programs we use have their servers in the USA, meaning that data is transferred to third countries as they are stored on servers located outside the European Economic Area. The programs we use ensure an adequate level of personal data protection through compliance mechanisms such as certification programs or standard contractual clauses.

Data Retention Period
Your personal data will be stored for as long as we conduct our business operations unless you object to data processing earlier, which will result in their deletion. Your objection will be effective after the expiration of the statute of limitations for claims arising from the contract. Until then, your data will be necessary for potential claim establishment, pursuit, or defense. Please note that financial documentation must be stored for the period specified by law.

Your Rights Regarding Data Processing
In relation to the processing of your personal data, you have the following rights:

  • Right of access – to obtain a copy of your data
  • Right to rectification – to correct your data
  • Right to erasure – if you believe there is no basis for processing your data, you may request its deletion
  • Right to restrict processing – to limit processing to storage or agreed-upon actions if you believe we have incorrect data or are processing it unlawfully
  • Right to object to processing – if processing is based on a legitimate interest, you may object, providing your specific situation as justification
  • Right to data portability – to receive your data in a structured, commonly used, machine-readable format or to request its transfer to another entity
  • Right to lodge a complaint with a supervisory authority – if you believe your data is being processed unlawfully, you may file a complaint with the President of the Personal Data Protection Office or another relevant authority

To exercise your rights, please send your request to biuro@kamand.eu. Please note that before fulfilling your request, we may need to verify your identity.

Providing your personal data is a requirement for using our services.