Information Clause regarding the personal data processing by ICON RE Group Companies
Following the provisions of the REGULATION NO. 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, consolidated text in the Official Journal of the European Union L 119 of 4 May 2016 - hereinafter referred to as: GDPR), we inform you that:
1) The Controller and Processor of your personal data is ICON Re sp. z o.o. with its registered office in Warsaw (Administrator's address: ul. Stanisława Moniuszki 1A, 8th floor, 00-014 Warsaw, KRS: 702440, NIP: 7010759279, and the Co-Administrators Are the ICON Re’s Group of Project and Executive Companies (hereinafter jointly referred to as the Controller);
2) You may contact the Administrator in writing, by traditional mail to the following address: ICON Re sp. z o. o. with its registered office in Warsaw, ul. Stanisława Moniuszki 1A, 8th floor, 00-014 Warsaw or by e-mail to the following address: biuro@iconre.pl;
3) Your personal data are processed in accordance with applicable laws and the Administrator's internal Information Security Policy.
4) Your personal data will be processed with your consent to the processing of your personal data for one or more specific purposes resulting from the provisions of art. 6 sec. 1 points a - d and f of the GDPR, to the extent that at least one of the following conditions is met:
➢ the data subject has consented to the processing of their personal data for one or more specific purposes;
➢ the processing is necessary for the performance of a contract to which the data subject is a party or to take action at the request of the data subject before entering into a contract;
➢ the processing is necessary to fulfill a legal obligation incumbent on the Controller; ➢ processing is necessary to protect the vital interests of the data subject or another natural person;
➢ processing is necessary for legitimate interests pursued by the Administrator or a third party, except for cases, in which the interests or fundamental rights and freedoms of the data subject, requiring the protection of personal data, prevail over these interests, in particular when the data subject is a child.
5) Legitimate interests pursued by the Administrator are related to the offered products, services provided, and marketing activities, including for contact and presentation of commercial offers.
6) Personal data processed may be transferred to entities authorized to receive them under applicable law.
7) Personal data may also be transferred to cooperating entities or third parties in connection with the offered products and services, as well as to entities processing personal data on behalf of the Administrator, i.e. partners providing:
➢ technical services related to the maintenance of IT systems,
➢ advisory and consulting services,
➢ other services related to the offered products and services of the Administrator.
8) The transferred personal data will not be made available to other entities and will not be transferred to a third country/international organization without your consent.
9) The users of the transferred personal data will only be authorized employees or collaborators of the Administrator obliged to keep the processed data, including personal data, confidential.
10) Your personal data will be processed for the period necessary to achieve the specific purposes for which they were transferred or obtained unless the superior provisions require the storage of personal data for a different period.
11) You have the right to:
➢ access the content of your data, supplement it, rectify it, and update it,
➢ delete personal data,
➢ limit the processing of personal data,
➢ transfer personal data,
➢ object to the processing of personal data,
➢ withdraw consent to the processing of personal data at any time, without affecting the lawfulness of the processing carried out based on consent before its withdrawal.
12) Withdrawal of consent to the processing of personal data may be made after sending appropriate information to the following address: ICON Re sp. z o.o. with its registered office in Warsaw, ul. Stanisława Moniuszki 1A, 8th floor, 00-014 Warsaw or by e-mail to the following address: biuro@iconre.pl.
13) You have the right to complain with the President of the Personal Data Protection Office, if you consider that processing of your personal data violates the provisions of the GDPR.
14) Providing us with your personal data is voluntary, and at the same time it is a necessary statutory requirement or a condition for the provision of specific services, the implementation of specific processing purposes, and the consequence of not providing personal data and not consenting to the processing of data and the provision of services electronically or by telephone will be the inability to provide specific services to you.
15) Granting consent to the processing of personal data is not a necessary condition for the performance of a contract to which the data subject is a party, or for taking action at the request of the data subject before concluding a contract.
16) Your personal data processed in a traditional and automated manner will be subject to appropriate safeguards to ensure an appropriate level of personal data security under the GDPR.