Privacy Policy | Wightwick Consulting

About us:

Our website is available at https://wightwick.pl and is managed by Jordan Bowen sp. z o.o. (https://jordanbowen.pl/), based at ul. Nowogrodzka 56a, 00-695 Warszawa, NIP: 5252875887, REGON: 389923878.

1. Jordan Bowen sp. z o.o. is the administrator of Personal Data within the meaning of the GDPR to the extent that he obtained Personal Data in connection with the conclusion of the Agreement with Jordan Bowen sp. z o.o. ("Administrator").

2. Jordan Bowen sp. z o.o. It makes sure that Personal Data is collected only to the extent necessary for the indicated purpose and only for the period in which it is necessary.

3. Personal data obtained by Jordan Bowen sp. z o.o. in connection with the conclusion of the Agreement, they will be processed by Jordan Bowen sp. z o.o., subject to point 6, solely for the purpose of:
3.1 reply to the form sent (legal basis: Article 6 (1) (a) of the GDPR, Article 6 (1) (f) of the GDPR);
3.2 ongoing contact in connection with the conclusion or performance of the Agreement, presenting an offer, sending an order, answering questions (legal basis: 6 (1) (b) of the GDPR, Article 6 (1) (f) of the GDPR);
3.3 conducting e-mail correspondence and traditional correspondence related to the performance of contracts, orders, submitted offers and inquiries (legal basis: 6 (1) (b) of the GDPR, Article 6 (1) (f) of the GDPR);
3.4 telephone contact related to the services provided and the activities carried out, including the implementation of contracts, information about services (legal basis: 6 (1) (b) of the GDPR, Article 6 (1) (f) of the GDPR);
3.5 performance of contracts, orders, including pursuing claims or defending against claims (legal basis: 6 (1) (b) of the GDPR, Article 6 (1) (f) of the GDPR);
3.6 establishing or pursuing possible claims or defending against such claims (legal basis: Article 6 (1) (f) of the GDPR).

4. The Administrator makes every effort to ensure the security of the Personal Data entrusted to him. The Administrator:

4.1 ensures transparency of Data Processing;
4.2 informs about the Processing of Data at the time of their collection, except for situations where, under separate provisions, it is not obliged to do so;
4.3 ensures that the Data are collected only to the extent necessary for the indicated purpose and that they are processed only for the period in which it is necessary,
4.4 ensures the confidentiality of the Data by access to the Data only by authorised persons.

5. In a situation where, despite the taken security measures, there has been a breach of the protection of Personal Data and this breach could cause a high risk of violating the rights and freedoms of data subjects, the Administrator will immediately inform the Data Subjects of such an event.

6. The recipients of Personal Data will be:
6.1 tax administration authorities - to the extent that the transfer of Personal Data is the Administrator's obligation resulting from tax regulations (the legal basis for the transfer of data is Article 6 (1) (c) of the GDPR Regulation);
6.2 public administration bodies performing tasks in the field of social insurance, to the extent that the transfer of Personal Data is the Administrator's obligation resulting from legal provisions (the legal basis for the transfer of data is Article 6 (1) (c) of the GDPR Regulation);
6.3 entities providing accounting, tax and legal services (the legal basis for the transfer of data is Article 6 (1) (f) of the GDPR Regulation);
6.4 entities / bodies authorised under the provisions of law.

7. The Administrator will Process Personal Data during the implementation of the Agreement, including the exchange of correspondence or until the consent to Data Processing is withdrawn.

8. In the case of Data Processing on the basis of the Administrator's legitimate interest - the Data will be Processed for a period enabling the implementation of this interest or until an effective objection to the Data Processing is raised.

9. The Processing Period may be extended within the limits of the law if the processing of Personal Data is necessary to pursue or defend against claims.
After the Processing period, the Data will be deleted or anonymised.

10. Providing Personal Data is voluntary, but failure to provide data conditions the conclusion and performance of the Agreement.

11. Subject to the situations specified in the provisions of law, the Data subjects are entitled to:
11.1 the right to access the content of your Data;
11.2 the right to rectify inconsistencies or errors in the Data processed or to supplement them;
11.3 the right to information about the Processed Data, including the purposes and basis of the Processing;
11.4 the right to limit the Processing of Personal Data;
11.5 the right to withdraw consent at any time without affecting the lawfulness of the Processing, as long as the Processing is based on consent;
11.6 the right to transfer Personal Data;
11.7 the right to object to Data Processing;
11.8 the right to lodge a complaint with the supervisory body, i.e. the President of the Personal Data Protection Office, if it is found that the Processing of Personal Data violates the law, including the GDPR.

12. In order to exercise the rights referred to in para. 11 The customer may contact the personal data inspector at: rodo@wightwick.pl.

13. Jordan Bowen sp. z o.o. declares that if it is necessary within the meaning of the law, he will completely or to some extent delete the personal data entrusted to him for processing after the end of the entrustment time.

14. Jordan Bowen sp. z o.o. undertakes to comply with the provisions on the processing of personal data, in particular the GDPR.

15. Jordan Bowen sp. z o.o. undertakes to apply technical and organisational measures ensuring high protection of personal data, including securing personal data against unauthorised disclosure, collection by an unauthorised person, damage or destruction.

Jordan Bowen sp. z o.o. ensures that (taking into account the state of technical knowledge, the cost of implementation and the nature, scope, context and purposes of processing as well as the risk of violation of the rights or freedoms of natural persons with different probabilities and severity) has implemented appropriate technical and organisational measures to ensure the level of security of personal data processing corresponding to appropriate risk. Jordan Bowen sp. z o.o. also ensures compliance with Art. 28 sec. 2 and paragraph 4 GDPR.