Private Policy

Information on the Processing of Personal Data in Connection with Email Correspondence

The controller of the personal data provided in electronic correspondence is SESTEC POLSKA Sp. z o.o., with its registered office in Kraków, at ul. prof. Michała Życzkowskiego 16, 31-864 Kraków, Poland.

The data controller processes personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

The controller processes contact information of senders and recipients of electronic correspondence, as contained in the content of the messages, for the following purposes:

• communication via email with the controller and its employees,
• documenting arrangements made with clients, contractors, and other individuals,
• receiving orders, inquiries, letters, notifications, or applications via email,
• protecting against claims and asserting potential claims.

The legal bases for processing the data contained in electronic correspondence for the above purposes are:

• the legitimate interest of the controller (Article 6(1)(f) GDPR), consisting of ensuring the possibility of communication via electronic means,
• the necessity for the performance of a contract with a client or contractor (Article 6(1)(b) GDPR) – in cases of correspondence conducted in the course of contract performance,
• the legitimate interest of the controller (Article 6(1)(f) GDPR), consisting of the pursuit or defense of legal claims.

The data will not be disclosed to other recipients, except in cases related to the pursuit of claims or cooperation with entities processing data on behalf of the controller under data processing agreements.

The data will be stored for the period necessary to achieve the purposes for which they were collected, but no longer than for the duration of the contract, and in the case of claims – until they are time-barred or resolved by a final decision.

Providing the data is necessary to establish contact with the controller via email and in cases where such communication results from a concluded contract.

The data subject has the right to access their data, rectify, erase, restrict processing, object to processing, and lodge a complaint with a supervisory authority if the processing violates legal provisions.

For matters related to personal data protection, you may contact the Data Protection Officer appointed by the controller at the following email address: [insert DPO email address, if appointed].