Privacy Policy
On May 25, 2018, new rules regarding personal data protection came into effect, resulting from the regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (GDPR).
We exercise special care in processing personal data, operate in accordance with the law, and implement appropriate technical and organizational measures to ensure the security of personal data entrusted to our company. We take data protection into account from the very beginning of new projects.
Personal Data Controller
Laut – Paweł Laufer / ul. Krakowskie Przedmieście 59/3A / 20-076 Lublin / TAX ID: 7661782658 / REGON: 634590960, hereinafter referred to as “Laut,” is the controller of personal data of its employees, associates, clients, and individuals who have provided their data through the website form or email, as well as other entities that have given consent for the processing of personal data.
Processor of Personal Data
Laut also processes personal data entrusted by other controllers, especially when the nature of the services provided by the company requires it. In such cases, Laut acts as a processor of personal data and processes personal data in accordance with the recommendations of the relevant data controller, as specified by them.
Legal Basis and Purposes of Personal Data Processing Laut processes personal data only when at least one of the following conditions is met:
1. The person to whom the data relates has given consent to the processing of their personal data (Art. 6(1)(a) of the GDPR).
2. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) of the GDPR).
3. Processing is necessary for compliance with a legal obligation to which Laut is subject (Art. 6(1)(c) of the GDPR).
4. Processing is necessary to protect the vital interests of the data subject or of another natural person (Art. 6(1)(d) of the GDPR).
5. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Laut (Art. 6(1)(e) of the GDPR).
6. Processing is necessary for the purposes of the legitimate interests pursued by Laut or by a third party (Art. 6(1)(f) of the GDPR).
The processing of data provided to Laut via email or through the website form is based on Art. 6(1)(a), (b), (c), or (f) of the GDPR and includes, among others, data such as: first name, last name, email address, phone number, and other data provided in electronic correspondence. This data is processed for the purpose for which it was provided.
Data processed on the basis of consent (Art. 6(1)(a) of the GDPR), especially first name, last name, email address, phone number, is used for the purpose for which consent was given and processed until consent is withdrawn or until the purpose for which consent was given is achieved.
Data processed in connection with the conclusion of a contract based on Art. 6(1)(b) of the GDPR includes, in particular, first name, last name, address, phone number, email address, TAX ID/PESEL, bank account number, and other data arising from the specific nature of the contract, and is used for the purpose of fulfilling this contract.
Data of individuals through whom our contractors execute contracts concluded with Laut are processed based on Art. 6(1)(f) of the GDPR and include, among other things, first name, last name, email address, phone number. This data is used for the purpose of contract fulfillment.
Data entrusted for processing by other administrators, especially for the purpose of services provided by Laut, is processed based on Art. 6(1)(c) or (f) of the GDPR and includes, among others: first name, last name, correspondence address, email address, PESEL number, and other data necessary for the provision of services depending on its nature. Processing is carried out for the purpose of fulfilling the commissioned service.
Obligation to Provide Data and Consequences of Not Providing Data
Providing personal data in connection with a concluded contract is voluntary but necessary for the conclusion and performance of the contract, as well as for financial settlements related to it.
Giving consent for the processing of personal data for marketing or informational purposes is voluntary, and consent can be withdrawn at any time, without affecting the legality of the processing carried out based on the consent before its withdrawal.
Providing an email address and other data for electronic correspondence is voluntary. Withdrawing consent for data processing will result in the inability to continue email correspondence.
Retention Period for Personal Data
Acquired personal data is stored until the obligation to store data under the law expires.
In the case where the exclusive basis for data processing is given consent, withdrawing consent will result in the cessation of data processing, without affecting the legality of the processing carried out based on consent before its withdrawal.
Personal data entrusted for processing by other administrators will be stored for the period indicated by the relevant administrator of personal data.
Personal data processed for purposes arising from the legitimate interests pursued by Laut or by a third party (Art. 6(1)(f) of the GDPR) will be stored for the duration of the legally justified interest.
Rights of Data Subjects
The person to whom the data relates has the right to access their personal data, the right to rectify it, request its erasure, as well as the right to restrict its processing, the right to data portability, and the right to object to the processing of personal data.
If the legal basis for processing personal data is given consent, the right to withdraw consent at any time is granted, without affecting the legality of the processing carried out based on consent before its withdrawal.
Furthermore, if it is believed that the processing of personal data violates the provisions of the EU GDPR, the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection (https://uodo.gov.pl/pl/p/kontakt) is granted.
Recipients of Personal Data
Personal data may be disclosed to third parties with the consent of the person to whom the data relates.
Additionally, personal data may be disclosed when required by the performance of a contract binding the parties or for the performance of the duties of the personal data administrator, or when necessary for purposes arising from the legitimate interests pursued by Laut.
In the case of processing personal data on behalf of third parties, Laut acts as a processor, and data is disclosed in accordance with the principles set out by the administrator of personal data.
Entities that may be provided with data depend on the category of data: entities processing personal data at the request of Laut, subcontractors of Laut, IT service providers, accounting service providers, training companies, courier companies, other entities cooperating with Laut, as well as institutions authorized by law (Tax Office, Court, Social Insurance Institution).
Information about Automated Decision-Making
Data will not be subject to profiling, which means that it will not be used as the basis for assigning specific properties or characteristics automatically, nor will it be used to predict behavior and preferences.
Contact Information
You can contact us in the following ways:
By post at the company’s registered office address,
Via email, email address: office@laut.com.pl.