GDPR Information clause

INFORMATION CLAUSE

1. In fulfilling the requirements concerning the protection of personal data as stipulated by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and taking into account the fact that the right to personal data protection is a fundamental right of every individual, we hereby inform you that:
2. The Personal Data Administrator is MS WAY Sp. z o.o. with its registered office in Wyszków, Komunalna 3 street, 07-200 Wyszków, represented by the Management Board.
3. For matters concerning the processing of personal data, you may contact the administrator at the provided address.
4. The purpose of processing personal data is as follows: Personal data are processed in connection with the expressed consent for their processing (Article 6(1)(a) of the GDPR), the necessity to perform a contract or take actions before its conclusion (Article 6(1)(b) of the GDPR), fulfilling legal obligations incumbent upon the Administrator (Article 6(1)(c) of the GDPR), or due to the Administrator’s legitimate interest (Article 6(1)(f) of the GDPR).
5. The legally justified interest pursued by the administrator – which serves as the basis for processing your personal data – is processing data necessary to fulfill services resulting from the Company’s business profile, i.e., transportation services of specified goods and performing other tasks as specified in received orders.
6. Personal data of the contractor or personal data of individuals representing the contractor, as well as individuals whose personal data have been provided to the Company by other entities – collaborating entities – in order to fulfill an order (e.g., driver data received from cooperating transport companies: name, surname, contact telephone number), are processed to maintain contact and cooperation necessary for the execution of the contract/order.
7. Data of individuals contacting the Company, acting on behalf and for the benefit of potential contractors of the Company:

• first name and last name,
• email address,
• phone number.

They are processed to provide a response to the user’s inquiry or to establish contact and cooperation with the contractor.

8. Furthermore, personal data are processed for the following purposes:

• defense of rights and pursuit of claims by the data controller in connection with their business activities (legal basis: Article 6(1)(f) of the GDPR),
• performance of the contract by the Company (based on Article 6(1)(b) of the GDPR), taking action at the request of the data subject prior to the conclusion of the contract (based on Article 6(1)(b) of the GDPR),
• compliance with legal requirements (including tax and accounting regulations) (legal basis: Article 6(1)(c) of the GDPR),
• archival purposes (legal basis: Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR),
• direct marketing of services, which constitutes a legitimate interest pursued by the Company (legal basis: Article 6(1)(f) of the GDPR).

 

9. The recipients of processed data may include:

• entities authorized under applicable law,
• entities processing data on our behalf, e.g., accounting office,
• entities providing information technology (IT) and IT services to the Company,
• entities engaged in postal or courier services,
• entities cooperating with the Company in the provision of legal services,
• employees, collaborators, partners, contractors, and subcontractors of the Company for the purpose of fulfilling their obligations.

10. In the event that the Company carries out orders outside the European Union, personal data necessary for the provision of services are transferred to a third country. In such cases, appropriate security measures are implemented, and the data subject has the opportunity to obtain a copy of the data and information about the location where the data is made available.
11. The personal data provided by you will not be transferred to an international organization but may be transferred to a third country, provided that the transportation is carried out to a third country (data transfer to a recipient based in a third country), only if the disclosure of such data is necessary to provide services by the Company resulting from the profile of the activity performed and the type of order.
12. The recipients of personal data are the Company’s employees – individuals authorized by the Company to use the data in the performance of their official duties.
13. Providing your personal data is voluntary but necessary to conclude a contract and utilize the services of the Company.
14. By accepting the transport contract through direct messaging to the internet mailbox or by signing the aforementioned contract, the contractor consents to the processing of personal data.
15. The personal data provided will be processed for the period necessary to achieve the purpose of processing and will be stored for the period resulting from specific provisions regarding the storage of documentation. The personal data provided by you will be stored for the duration of the transportation contract, the statute of limitations for claims, and for the period required by mandatory provisions of law.
16. The data subject has the right to access their data, correct it, delete it, or limit its processing, the right to object to the processing, and the right to data portability. To exercise these rights, please contact the Administrator.
17. The data subject has the right to lodge a complaint with the President of the Personal Data Protection Office if they believe that the Administrator has violated the provisions on the protection of personal data.