Information clause on the processing of personal data

1. The Administrator of your personal data is Infinity Group Sp. z o.o., located at 12 Składowa Street, 15-399 Białystok, phone +48 85 652 09 20, e-mail: biuro@infinity-group.pl.

2. For matters related to personal data protection, you can contact our Data Protection Officer via e-mail at iod@infinity-group.pl or via traditional correspondence sent to our office address with the note "GDPR".

3. Your personal data will be processed for the following purposes:

a. Correspondence — the legal basis for processing is Article 6 (1)(f) of the General Data Protection Regulation; our legitimate interest is correspondence;

b. Archival purposes — the legal basis is Article 6 (1)(f) of the General Data Protection Regulation; our legitimate interest is to secure information in case of legal needs to prove certain facts;

c. Establishing, pursuing, or defending claims — the legal basis for processing is Article 6 (1)(f); our legitimate interest is to secure information in case of legal needs to prove certain facts;

4. Your personal data may be disclosed to the following recipients:

a. Data processors: Entities providing services to the Data Administrators, such as email hosting services. Data transfer is based on data processing agreements in accordance with Article 28 of the General Data Protection Regulation;

b. Public authorities: When required by law. Data transfer to these authorities is conducted in compliance with applicable EU and national laws;

c. External advisory and legal firms: Law firms, audit firms, legal advisors, and debt collection companies that support the Data Administrator in legal matters.

d. Other contractors: Based on explicit consent of the data subject or in situations where it is justified by the Data Administrator’s legitimate interest, following a balance test in line with Article 6(1)(f) of the General Data Protection Regulation.

5. Your personal data will be processed only for as long as necessary to achieve purposes for which it was collected, i.e., for the period required to enforce claims or until the statute of limitations for potential claims expires.

6. You have the right to:

a. Request access to personal data, rectification, deletion, or restriction of processing;

b. Object to the processing of personal data; c. Data portability.

7. You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates GDPR regulations.

8. Providing your personal data is voluntary but necessary for corresponding with us. Failure to provide data may prevent us from responding to your inquiry or handling correspondence.

9. Your personal data will not be subject to automated decision-making, including profiling.

Intranet Solutions