If you are an employee of an auditing company
The Controller of your personal data is Saint-Gobain Construction Products Polska Sp. z o.o. with its registered office in Gliwice (44-100), ul. Okrężna 16, e-mail address: firstname.lastname@example.org, telephone number: (048) 323 396 300, entered in the register of entrepreneurs of the National Court Register under the number 0000086064, Tax Identification Number: 5220101585, Business Statistical Number /REGON/: 011114850, share capital PLN 314,627,500, whose registry records are kept in the District Court in Gliwice, 10th Economic Department of the National Court Register.
You have the right to access your data, correct the data, request that the data be deleted, as well as the right to limit data processing, data transfer, to file an objection to processing of your personal data.
Additionally, you have the right to file a complaint to a supervisory body if your data are processed unlawfully. In Poland such a supervisory body is the President of the Personal Data Protection Office.
Your personal data shall be processed for the purposes of:
Pursuing the Controller’s legitimate interest described below – for a period necessary for pursuing the Controller’s legitimate interest, in this respect not longer, however, than a period deemed justified due to the particular situation of your objection, and in the event when the legitimate interest is direct marketing – until the time you file your objection,
In the case of expressing individual and optional consents, the data shall be processed also for marketing purposes, consisting in providing you with information on products sold by the Controller, promotions, pricelists, and other information and promotional events by means of messages sent to your e-mail address or telephone number and provided during telephone conversations with you – until the time you withdraw your consent for receiving marketing information.
You will not be subject to a decision based exclusively on automatic processing, including profiling, and having a legal effect on you or significantly affecting you in a similar way.
The Controller shall process the following categories of your data: identification data, contact details.
The legal basis for processing is Article 6 Section 1 Letter f of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), i.e. the Controller’s legitimate interest consisting in marketing its own products, measures related to determining the terms and conditions of a contract with a contractor and facilitating communication relating to the contract execution, together with securing the necessary settlements under the concluded contract, making claims (goods damage and property damage at the Controller’s), providing safety at the Controller’s and protection of the Controller’s property, optimisation of the process of transport and warehousing logistics management, as well as evaluation of the cooperation with the Controller, building relationships, and taking care of the image.
If you agree to receiving marketing messages also as text messages and messages to your e-mail address, the further legal basis is Article 10 of the Act of 18 July 2002 on Providing Services Electronically and Article 172 of the Act dated 16 July 2005 – Telecommunications Law.
If you agree to receiving voice messages to the indicated phone number, the legal basis shall also be Article 172 of the Act of 16 July 2004 – Telecommunications Law.
Your data have been obtained by the Controller from the Contractor.
Recipients of the personal data could include:
Companies from Saint-Gobain capital group supporting the process,
Suppliers of IT tools necessary in the process,
Accounting services provider,
Providers of post services.
The Controller does not plan to transfer your data to recipients outside the European Economic Area, i.e. third countries.
You have two types of the right to object to your personal data processing; if the Controller processes the Customer’s personal data:
For the purposes of direct marketing, the Customer can file an objection in every case,
On the basis of its other legitimate interest, the Customer can file an objection for reasons associated with their particular situation.