I. Data of the Personal Data Administrator

We kindly inform you that the administrator of your personal data is the following company:

Aldesa Polska Services sp. z o.o. with it registered seat at ul. Postępu 18, 02-676 Warsaw, entered into the National Court Register under number 0000287883, using Tax ID number 676-235-6224, e-mail address: biuro@aldesa.pl,

Aldesa Construcciones S.A. based in Madrid, ul. c/ Bahia de Pollensa 13 28042 Madrid, registered into the Madrid Commercial Register, number of the first entry: K.17.979, FILE 139 I N, T.2.676, BOOK 2.009, SECTION III, e-mail address: biuro@aldesa.pl,

Aldesa Construcciones Polska sp. z o.o. with its registered seat at ul. Postępu 18, 02-676 Warsaw, entered into the National Court Register under number 0000288135, using Tax ID number 6762355756, e-mail address: biuro@aldesa.pl,

Aldesa Nowa Energia sp. z o.o. with its regsitered seat at ul. Postępu 18, 02-676 Warsaw, entered into the National Court Register under number 0000287686, using Tax ID number 6762356201, e-mail address: biuro@aldesa.pl,

Aldesa Polska Diamante Plaza sp. z o.o. with its registered seat at ul. Postępu 18, 02-676 Warsaw, entered into the National Court Register under number 0000261118, using Tax ID no. 6792900715, e-mail address: biuro@aldesa.pl,

Aeronaval de Constructioness e Instalaciones S.A. with its registered seat in Madrid, ul. c/Bahia de Pollensa 13 28042 Madrid, registered in the Madrid Commercial Register, number of the first entry: K.39.247, FILE 75 and NN, T.4.959, BOOK 4.121, SECTION III, e-mail address: biuro@aldesa.pl,

Each of them is hereinafter referred to as the Company.

The Company runs a website www.aldesa.pl and manages it.

II. Data Protection Officer

The Data Protection Officer designated in the Company is available at the following e-mail address: iod@aldesa.pl.

III. Purpose and basis for the personal data processing

DATA OF USERS OF THE WEBSITE

In order to be able to contact you in the matter described by you, we process personal data such as:

  • first name and last name,
  • e-mail address or phone number,
  • data about the case you are contacting.

The legal basis for such processing is art. 6 par. 1 f of GDPR (RODO), which allows us to implement our legitimate interest, which in this case is the response to your message that you send to us using the contact details provided on the website.

For archival and evidential purposes, we process personal data such as:

  • first name and last name,
  • e-mail address,
  • data about the case you are contacting.

– for the purpose of securing information that may serve to demonstrate facts of legal significance. The legal basis for such data processing is art. 6 par. 1 f of GDPR, which allows for processing of personal data, if, in this way, the Personal Data Administrator performs its legitimate interest (in this case, the interest of the Company is to have personal data that would prove certain facts related to your contact with the Company).

For analytical purposes, i.e. research and analysis of activity on the website belonging to the Company, we process personal data such as:

  • date and time of visits to the website,
  • type of operating system,
  • approximate location,
  • type of web browser used to browse the website,
  • time spent on the website,
  • visited subpages.

The legal basis for such data processing is art. 6 par. 1 f of GDPR, which allows for processing of personal data, if, in this way, the Personal Data Administrator performs its legitimate interest (in this case, the interest of the company is to know the activity of users on the website).

In order to use cookies on the website, we process such text information (cookies will be described in a separate section). The legal basis for such processing is art. 6 par. 1 a of GDPR, which allows personal data to be processed based on voluntary consent (the first time you enter the website, you will be asked for permission to use cookies).

DATA OF PEOPLE ESTABLISHING CONTACT BASED ON AUTHORIZATION OF CONTRACTOR OR CUSTOMER E.G. EMPLOYEES OR AUTHORIZED ATTORNEYS DESIGNATED FOR COOPERATION WITH THE COMPANY OR THOSE WHO ARE COMMUNICATING REGARDING OTHER CASES NOT THROUGH THE WEBSITE

In order to be able to contact you to enter into or to perform contract with client or contractor on behalf of whom you establish contact or in a case described by you – if you do not contact us on behalf of our contractor or client, the Company processes such personal data as:

  • first name and last name,
  • e-mail address or phone number,
  • position,
  • identification data of client, contractor (i.e. at the same time the place of your work) – if you contact us on behalf of our client or contractor,
  • data about the case you are contacting.

The legal basis for such processing is art. 6 par. 1 f of GDPR, which allows us to implement our legitimate interest, which in this case is the conclusion and performance of contract with the person on behalf of whom you establish contact with us and art. 6 par. 1 b of GDPR – conclusion and performance of contract – if you contact us on behalf of our client or contractor or reply to your message – if you contact us in a different matter.

We have obtained your data directly from you or from the person for and on behalf of whom you contact us.

For archival and evidential purposes, we process personal data such as:

  • first name and last name,
  • e-mail address,
  • position,
  • identification data of the client, contractor (i.e., at the same time the place of your work) – if you contact us on behalf of our client or contractor,
  • data about the case with regard to which you establish contact;

– for the purpose of securing information that may serve to demonstrate facts of legal significance. The legal basis for such data processing is art. 6 par. 1 f of GDPR, which allows for processing of personal data, if in this way the Personal Data Administrator performs its legitimate interest (in this case, the interest of the Company is to have personal data that will prove certain facts related to you contacting the Company, e.g. fulfillment of this information obligation).

In order to keep accounting books and tax documentation, if yours were specified in the contract as contact details or appear in accounting documents, we process personal data such as:

  • first name and last name,
  • e-mail address,
  • position
  • identification data of the client, contractor (i.e., at the same time the place of your work) – if you contact us on behalf of our client or contractor,
  • data resulting from relevant tax regulations.

The legal basis for such processing is art. 6 par. 1 c of GDPR in connection with the applicable tax law.

OFFICIAL DATA FOR CONTACT PERSONS OBTAINED FROM BUSINESS CARDS OR AS AVAILABLE DATA

In order to be able to contact you, the Company processes such personal data as:

  • first name and last name,
  • e-mail address or phone number,
  • position
  • data about your workplace.

The legal basis for such processing is art. 6 par. 1 f of GDPR, which allows us to implement our legitimate interest, which in this case is the maintenance and development of business relationships with you or the entity that you represent.

We have obtained your data directly from you, e.g. from a business card or from publicly available sources, such as a company website or www.linkedin.com.

IV Cookies

1. On its website, like other entities, the company uses the so-called cookies, i.e. short text information, saved on computer, phone, tablet or other user device. These cookie files can be read by our system as well as by systems belonging to other entities that we use (e.g. Facebook, Google, LinkedIn).

2. Cookies perform a lot of functions on the website, that are most often useful, which we will try to describe below (if the information is insufficient, please contact us):

  • ensuring security – cookies are used to protect users’ personal data against unauthorized access;
  • impact on the processes and efficiency of using the website – cookies are used to ensure that the website works efficiently and that you can use the features available on it, which is possible, among other things, thanks to remembering settings between subsequent visits to the website. Thanks to them, you can efficiently navigate through the website and individual subpages;
  • session status – cookies often record information about how visitors use the website, for example which subpages are displayed most often. They also enable identification of errors displayed on some subpages. Cookies used to save the so-called “session status” help, therefore, improve services and increase the comfort of browsing;
  • gathering statistics – cookies are used to analyze how users use the website (how many people visit the website, how long they stay on that website, which content arouses the greatest interest, etc.). Thanks to this, you can constantly improve the website and adapt its operation to the preferences of users. In order to track activity and create statistics, we use Google tools, such as Google Analytics; in addition to reporting website usage statistics, the Google Analytics pixel can also serve, along with some of the cookies described above, to help display to users more relevant content on Google services (e.g. Google search engine) and across the entire Internet;
  • using social functions – on the website we have so-called Facebook pixel, which allows you to like our fanpage while using the site, and LinkedIn pixel, which allows you to go to the company’s website on this website. However, to make this possible, we must use cookies provided by the indicated entities.

3. By default, your browser allows the use of cookies on your device, so at the time of your first visit, please express consent to the use of cookies. However, if you do not wish to use cookies while browsing the website, you can change settings in the web browser – completely block the automatic support of cookies or request notification whenever you post cookies on your device. Settings can be changed at any time.

4. While respecting the autonomy of all people using the website, we feel, however, obliged to notify you that disabling or limiting the use of cookies may cause quite serious difficulties in using the website, e.g. in the form of having to log in to each subpage, longer period of page loading, limitations in the use of functionalities, limitations in liking the webstite on Facebook or LinkedIn etc.

V The right to withdraw consent

1. If the processing of personal data takes place on the basis of consent, you can withdraw your consent at any time – at your sole discretion.

2. If you would like to withdraw your consent to the processing of your personal data, it is enough to send an e-mail directly to the Company at biuro@aldesa.pl or using contact details of the Data Protection Officer.

3. If the processing of your personal data took place on the basis of consent, its withdrawal does not mean that the processing of personal data up to this point has been illegal. In other words, until the withdrawal of consent, we have the right to process your personal data and such withdrawal does not affect the legality of current processing.

VI The obligation to provide personal data

1. Providing personal data is voluntary and depends on your decision. However, providing certain personal information is necessary to meet your expectations regarding the use of the website or to be able to contact the Company.

2. If you contact us on behalf of our client or contractor, providing data may be necessary due to your relationship with the client or contractor of the Company, as well as it is necessary for us to conclude or perform the contract for the person on behalf of whom you establish contact with us.

3. If the requirement to provide your data results from the law – providing data is your responsibility.

VII Automated decision making and profiling

We kindly inform you that we do not make automated decisions, including on the basis of profiling.

VIII Recipients of personal data

1. Like most entrepreneurs, in our operations we use the help of other entities, which often involves the necessity to provide personal data. Therefore, if necessary, we may transfer your data to our companies within the Aldesa group, hosting company, lawyers, owners of social media, and if you communicate with the Company on behalf of our client or contractor – entities involved in the case in which you establish contact.

2. In addition, it may happen that, for example, on the basis of the appropriate law or decision of competent authority, we will have to transfer your personal data to other entities, whether public or private. That is why it is extremely difficult for us to predict who may request the disclosure of personal data. Nevertheless, we assure you that every request to disclose your personal data is analyzed with great attention, so that we do not inadvertently inform unauthorized persons.

IX Transfer of personal data to third countries

We kindly inform you that we may transfer your data outside of the European Economic Area, which results, for example, from the use of Google Analytics, Facebook and Linkedin. Accordingly, your data is transferred to the United States on the basis of the European Commission’s decision of July 12, 2016 (Privacy Shield).

X Period of processing of personal data

1. In accordance with applicable law, we do not process your personal information “indefinitely”, but for the time that is needed to achieve given purpose. After this period, your personal data shall be irreparably removed or destroyed.

2. Regarding individual periods of personal data processing, we kindly inform you that we process personal data for the period of:

  • until consent is withdrawn or purpose of processing achieved – in the case of personal data processed on the basis of consent;
  • until the moment of making effective objection or achieving the purpose of processing (including, for example, expiration of time-limits) – in relation to personal data processed on the basis of legitimate interest of the Personal Data Administrator,
  • until the time of becoming obsolete or losing its usefulness, however, not longer than for 2 years – in relation to personal data processed mainly for analytical purposes, use of cookies and administration of the website.
  • until the expiration of limitation periods – in relation to data processed on the basis of tax law.

XI Data subjects’ rights

1. We kindly inform you that you have the right to:

  • access to your personal data;
  • correction of your personal data;
  • deletion of your personal data;
  • restrict the processing of your personal data;
  • oppose to the processing of your personal data;
  • transfer your personal data.

2. We respect your rights resulting from the provisions on the protection of personal data and we strive to facilitate their implementation to the highest possible extent.

3. We indicate that these rights are not absolute, and therefore we may legally refuse to comply with them in certain situations, in accordance with the law. However, if we refuse to accept your request, it is only the case after careful consideration and only if the refusal to take such request into account is necessary.

4. Regarding such right to object, we would like to explain that you have the right to oppose the processing of your personal data at any time, based on legitimate interest of the Personal Data Administrator in relation to your particular situation. However, you must remember that, in accordance with the law, we may refuse to take into account such objection, if we prove that:

  • there are legitimate grounds for processing that override your interests, rights and freedoms or
  • there are grounds for establishing, investigating or defending claims.

XII The right to submit complaints

If you feel that your personal data is being processed contrary to applicable law, you can submit complaints to the President of the Office of Personal Data Protection.

XIII Final provisions

1. To the extent not covered by this Privacy Policy, there apply provisions regarding the protection of personal data.

2. You will be notified by e-mail about any changes made to this Privacy Policy.

3. This Privacy Policy applies from May 25, 2018.