1.Data Controller and Data Protection Officer
The controller of your personal data is KONO Limited Liability Company, headquartered in Gdańsk at Szafarnia Street 11/F8, NIP 744-181-15-47, hereinafter referred to as “KONO.”
If you have any questions regarding the manner, purposes, or scope of personal data processing by KONO, or questions concerning your rights, please contact KONO at the following email address: kadry@kono.net.pl.
2.GDPR
GDPR stands for the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. GDPR governs matters related to personal data processing and has been applicable since 25 May 2018.
3.Purposes and Legal Basis for Processing Your Personal Data
KONO processes your personal data to perform the contract between you and KONO (legal basis: Art. 6(1)(b) GDPR).
KONO also processes your personal data to fulfill legal obligations imposed on KONO (legal basis: Art. 6(1)(c) GDPR), including:
- In connection with the conclusion of an employment contract or a civil law contract – maintaining employee records in accordance with the Labor Code and keeping records of contractors following the Civil Code, Accounting Act, and Income Tax Act.
- In connection with the conclusion of an employment contract or a commission contract – registering employees and contractors, as well as their family members, with ZUS (Social Insurance Institution).
- In connection with the conclusion of an employment contract or a commission contract – collecting data for accounting purposes following the Labor Code, Civil Code, Accounting Act, Insurance System Act, and Income Tax Act.
Additionally, in some cases, it may be necessary to process your personal data for purposes arising from KONO’s legitimate interests (legal basis: Art. 6(1)(f) GDPR), particularly:
- Determination and pursuit of claims or defense against claims.
- Violations of law arising from the Penal Code or Civil Law.
- Fulfillment of legal obligations imposed on KONO in connection with its business activities.
- Internal administrative purposes, including statistics and internal reporting for KONO.
In other cases, your personal data will be processed solely based on your consent (legal basis: Art. 6(1)(a) GDPR), for the purpose specified in the consent.
4.Obligation to Provide Personal Data
Providing your personal data is a statutory requirement and a condition for concluding a contract.
Failure to provide the required personal data may prevent the conclusion of an employment contract or civil law contracts.
To the extent that personal data is collected based on consent, providing such data is voluntary.
5.Information on Recipients of Your Personal Data
Your personal data may be disclosed to the following recipients or categories of recipients:
- Public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for purposes arising from applicable laws, e.g., Social Insurance Institution, Tax Offices, Court Bailiffs, etc.
- Entities supporting KONO in the implementation of its business and operational processes, including entities processing personal data on behalf of KONO.
- Entities processing your personal data on behalf of KONO under a data processing agreement with KONO (so-called processors).
6.Periods of Personal Data Processing
Your personal data will be processed for the period necessary to achieve the processing purposes specified in point 3 above, i.e., for the period of:
- The contract binding you with KONO,
- Fulfillment of legal obligations imposed on KONO, including obligations related to data storage, e.g., for financial reporting purposes,
- The realization of KONO’s legitimate interests, particularly for periods specified in separate regulations regarding the statute of limitations for claims,
- Until consent is withdrawn – provided the processing is based on your consent.
7.Profiling and Automated Decision-Making
Your personal data will not be subject to profiling.
8.Rights of the Data Subject
In connection with KONO’s processing of your personal data, you have the following rights:
- The right to access personal data, including the right to obtain a copy of such data,
- The right to request rectification (correction) of data,
- The right to request the deletion of personal data (the so-called “right to be forgotten”),
- The right to request the restriction of personal data processing,
- The right to data portability to you or another data controller,
- The right to object to the processing of personal data.
You can exercise these rights by:
- Submitting a request at our headquarters,
- Sending a request to the address: KONO Sp. z o.o., Sobieskiego Street 53, 14-200 Iława,
- Sending a request via email to kadry@kono.net.pl.
The scope of each of these rights and the situations in which you can exercise them are defined by law. The ability to exercise some of the aforementioned rights may depend on, among other things, the legal basis, purpose, or manner of their processing.
9.Right to Withdraw Consent for Personal Data Processing
To the extent that you have given consent for the processing of personal data, you have the right to withdraw this consent. Withdrawal of consent does not affect the legality of processing carried out based on consent before its withdrawal.
10.Right to Lodge a Complaint with a Supervisory Authority
If you believe that KONO’s processing of your personal data violates applicable law, you may lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office.
11.Transfer of Personal Data to Entities Outside the European Economic Area (EEA) or International Organizations
In justified cases, KONO may disclose your personal data to entities located in countries outside the EEA. Generally, data transfer outside the EEA is based on standard contractual clauses established by the European Commission, ensuring the highest market standards for personal data protection. You have the right to obtain a copy of these data through KONO. KONO does not plan to transfer your personal data to entities outside the EEA or international organizations.