GDPR information clause

Where did we get your data?

We obtained your data directly from you or from publicly available sources.

Who is the controller of your personal data?

The controller of your personal data is KIRAN Sp. z o.o., with registered office in Pruszków, ul. Działkowa 95/10, 05-808 Pruszków, Poland, entered in the National Court Register (KRS) under no. 0000723560, Tax ID (NIP) 5342580173. Email: info@kiran.pl, phone: +48 533 899 965.

For what purposes and on what basis will we process your personal data?

KIRAN Sp. z o.o. exercises particular care in processing personal data and implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks to the rights and freedoms of natural persons arising from the scope, nature, context and purposes of the processing. Your personal data may be processed on the basis of Article 6(1)(a), (b), (c) and (f) GDPR, depending on the nature of your relationship with our company.

This means your data may be processed to perform a contract, to fulfil legal obligations, or to pursue the controller's legitimate interests. Data may also be processed for other purposes based on separate consent - if you give it in a separate declaration.

How to withdraw consent or object?

You may at any time withdraw any consent given to KIRAN Sp. z o.o. in connection with the processing of personal data, with no negative consequences. Simply send an email to info@kiran.pl or call +48 533 899 965. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

Contact for data-protection matters

For any matters related to the processing of personal data you can contact the controller by email at info@kiran.pl or by phone at +48 533 899 965.

What can you do with the personal data you provide?

You have the right to access your data and the right to rectify, erase or restrict its processing, the right to data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

These rights may be excluded or limited in situations where the controller is legally obliged to process the data in order to fulfil a statutory obligation.

When and to whom may we transfer data, and to whom we will not?

Access to your personal data - within the organisational structure of KIRAN Sp. z o.o. based in Pruszków - will be available only to employees authorised by KIRAN Sp. z o.o. and only to the extent necessary. Recipients of your personal data may be parent entities, providers of IT services to KIRAN Sp. z o.o., and other authorised entities on the basis of and within the limits of the law.

Your data will not be subject to automated decision-making. We will not transfer your personal data to a third country (outside the European Economic Area).

How long will we keep your data?

Your personal data will be stored for the duration of the contract, extended in specified cases by the limitation period for claims and the period for retaining documentation related to the type of contract, where required by separate legal provisions. Where processing is based on consent - until it is withdrawn. Processing based on Article 6(1)(f) is carried out until an objection to the processing is raised.

Where can you lodge a complaint about the processing of personal data by KIRAN Sp. z o.o.?

In any case of reservations about the processing of your data by KIRAN Sp. z o.o., please contact the controller directly via the means of communication indicated above (email / phone).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you consider that the processing of your personal data infringes GDPR, at ul. Stawki 2, 00-193 Warsaw, Poland.