Information on the Processing of Personal Data

Below you will find information about the rules for data processing, joint controllership, retention periods and the rights available to you.

Who is the controller of your personal data?

In connection with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "GDPR"), we inform you that the controllers of your personal data collected in connection with handling correspondence sent by you to the Controller (the "Data") are: ZINEL ENGINEERING sp. z o.o., with its registered office in Warsaw (02-867), ul. Baletowa 177D, KRS: 0000719425, NIP: 9512456127, and ZINEL FACILITY MANAGEMENT sp. z o.o., with its registered office in Warsaw (02-867), ul. Baletowa 177D, KRS: 0000464193, NIP: 1132865967 (hereinafter jointly referred to as the "Controller" or the "Joint Controllers").

Purposes and legal bases for processing your Data

Your Data will be processed for the purpose of handling ongoing correspondence, as well as taking steps related to the conclusion and performance of a contract. In connection with correspondence sent by you to the Controller, we process your Data to the extent provided in that correspondence.

The legal basis for processing your Data is:

• taking steps related to the conclusion and performance of a contract. Article 6(1)(b) GDPR, i.e. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• handling correspondence and archiving documents as part of our legitimate interest in securing information in the event of a legal need to prove facts or to establish, pursue or defend against claims. Article 6(1)(f) GDPR, i.e. the legitimate interest of the controller consisting in the need to handle correspondence and respond to incoming emails;
• performance of obligations arising from legal provisions, including tax and archiving obligations. Article 6(1)(c) GDPR, i.e. processing is necessary for compliance with a legal obligation to which the Controller is subject.

Access to your Data will be granted only to persons authorised by the Controller to process it.

How long do we keep your Data?

Your Personal Data collected for the purposes of concluding and performing a contract will be processed for the duration of the contract or until you object to the processing based on our legitimate interest, unless legal provisions (for example on archiving, tax or accounting) require us to process the data for a longer period, or unless we keep it longer in connection with potential claims, for the limitation periods specified by law, depending on which of these periods is longer.

Your Data provided when contacting us will be processed for the period necessary to provide a response and, if needed, continue correspondence, and then until the expiry of the limitation period for potential claims. Your Data that the Controller is required to store under specific legal provisions is stored for the statutory retention period. Where a given purpose involves compliance with tax or accounting requirements, the data will also be processed for 5 years counting from the end of the calendar year in which the tax event occurred or the tax payment deadline expired.

Cookies and analytics tools

This website uses cookies necessary for proper operation and, after obtaining your consent, analytics cookies. Cookies are small text files stored on your device.

For analytics, we use Google Analytics (GA4) to measure traffic statistics and improve the website. The legal basis for processing data in relation to analytics cookies is your consent (Article 6(1)(a) GDPR).

On your first visit, we display a cookie banner where you can accept or decline analytics cookies. You can change your decision at any time through your browser settings (including deleting saved cookies) and set your preferences again on a subsequent visit.

Data collected via Google Analytics may be processed by entities from the Google group. More details about how Google processes data are available at: https://policies.google.com/privacy.

What rights do you have?

You have the right to access your Data, including the right to obtain a copy of it, request its rectification, erasure or restriction of processing, object to its processing, and transfer it to another controller.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stanislawa Moniuszki 1A, 00-014 Warsaw, Poland) if the processing of your data violates the law.

Sharing your Data with other recipients

Your Data may be disclosed to other recipients or entrusted to other entities and institutions for the purposes indicated above or where required by law. Where necessary for the proper implementation of the Controller's purposes, your Data may be transferred to external recipients supporting the Controller in managing the business, including administrative and organisational matters, and providing support for and operation of our IT tools and systems (for example data storage), such as IT suppliers, hosting companies, IT service providers, as well as entities providing ongoing legal, accounting or bookkeeping services, external advisers and audit firms.

Transfer of your Data outside the European Economic Area (EEA)

Your Data will not be transferred to third countries within the meaning of the GDPR, i.e. outside the European Economic Area (EEA), or to international organisations.

Automated decision-making and profiling

Your Data will not be subject to profiling and you will not be subject to a decision based solely on automated processing.

Joint controllership

Under the joint controllership agreement, the Joint Controllers have agreed on the scope of their responsibilities regarding compliance with the GDPR, in particular that: (1) the Joint Controllers are responsible for fulfilling the information obligation towards you; (2) the Joint Controllers are responsible towards you for enabling you to exercise your rights. Regardless of this arrangement, you may also exercise your rights against either Joint Controller. In that case, your request will be handled by the Joint Controller that received it. If your request is received by all Joint Controllers, each of them will provide a response.

The key terms of the arrangements concluded between the Joint Controllers are made available to data subjects. Please send a request to obtain the content of those arrangements directly to the registered office address of the selected Joint Controller or to the email address provided below.