INFORMATION ON THE PROCESSING OF PERSONAL DATA BY ONDE S.A.

1. WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?

ONDE S.A. is the controller of personal data (hereinafter “Data”) processed by us in connection with our business activities. with headquarters in Toruń, ul. Wapienna 40 (87-100), hereinafter referred to as the Administrator or ONDE S.A.

ONDE S.A. is a member of the ERBUD Capital Group. The list of all companies from the Erbud Group is available here [link].

The data is processed in accordance with the currently applicable regulations, including the General Data Protection Regulation (GDPR).

Data means any information relating to an identified or identifiable natural person. An identifiable natural person is a person who can be directly or indirectly identified, in particular on the basis of an identifier such as name and surname, identification number, location data, internet identifier or one or more specific physical, physiological, genetic, mental factors, the economic, cultural or social identity of a natural person.

2. HOW DO WE PROCESS THE DATA?
ONDE S.A. makes special diligence to protect the interests of data subjects, and in particular ensures that the collected Data are:

processed in accordance with the law, fairly and in a transparent manner for the data subject;
collected for specific, explicit and legitimate purposes and not further processed in a manner inconsistent with these purposes;
adequate, relevant and limited to what is necessary for the purposes for which they are processed;
correct and updated as necessary;
stored in a form which permits the identification of the data subject for no longer than is necessary for the purposes for which the Data are processed;
processed in a manner that ensures appropriate data security, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures.

3. WHEN DO WE PROCESS THE DATA?

We process data in many situations. These may be situations in which you have provided us with your Data personally through various communication channels (e.g. submitting your application, sending an inquiry / offer by e-mail or telephone) or as part of our cooperation when signing or implementing the contract, but also when we have obtained Your Data from other sources (e.g. from the company with which you cooperate and which is our contractor / client).

4. DATA PROCESSING IN CONNECTION WITH BUSINESS RELATIONS AND CONTACT.

What Data do we process in connection with business relations and contact?
As the Administrator, we process the Data of our business partners (investors, subcontractors, contractors), their employees / associates, Data of other persons provided to us as part of the performance of contracts, as well as other people who contact us via telephone or e-mail.

In connection with business relations and contact, we can process the following Data: Identification data, Contact details, Data on the job position and professional qualifications and other Data provided to us in connection with cooperation or contact.

We obtain the above Data directly from data subjects, as well as from other people, e.g. from their employers / principals.

What is the purpose and basis of Data processing in connection with business relations and contact?
In connection with business relations and contact, we process Data for the following purposes:

establishing cooperation;
conclusion and performance of the contract;
settlement of contracts;
responding to any inquiries or requests and conducting further correspondence / contact in this regard;
marketing and contact regarding other information and services of ONDE S.A .;
defense against potential claims, as well as for the purpose of possibly directing claims.
The basis for data processing by ONDE S.A. is:

indispensability to perform the contract or take action before its conclusion at the request of the data subject;
implementation of legal obligations imposed on the Administrator;
the Administrator’s legitimate interest in the form of marketing of the Administrator’s or third party’s products and services, contact, including correspondence and defense against potential claims.
Providing the Data is voluntary, but it may be necessary for the conclusion or performance of the contract or for answering an inquiry or for correspondence.

How long will the Data be processed in relation to business relations and contact?
The data collected for the purpose of concluding and performing the contract will be processed for the duration of the contract, and then until the expiry of the limitation period for any claims.

Data of persons who contacted ONDE S.A. will be processed for the period necessary to answer and possibly conduct correspondence,

and then until the expiry of the limitation period for any claims.

Who is the recipient of the Data in relation to business relations and contact?
The data processed by us in connection with business relations and contact may be transferred to other companies from the Erbud Group, our business partners (e.g. investors and subcontractors as part of cooperation on a given project / investment) and our other contractors supporting us in the organization of work, IT services and marketing.

Data processing in connection with recruitment.

5. WHAT DATA DO WE PROCESS IN CONNECTION WITH RECRUITMENT?

As the Administrator, we process the Data of applicants for employment provided through all available recruitment channels, including in particular all Data provided to us as part of the application and collected as part of the recruitment process.

In connection with recruitment, we may process the following Data (the processing of some Data may depend on your consent): Identification data, Contact details, Education data, Data on skills and previous employment, Data on entitlements and other Data provided to us during the recruitment process .

What is the purpose and basis of Data processing in connection with recruitment?
In connection with recruitment, we process the Data for the following purposes:

– consideration of the candidacy and implementation of the recruitment process, and in the event of consent, also for the purposes of future recruitment or recruitment within the Erbud Group;

– defense against potential claims, as well as for the purpose of possibly directing claims.

The basis for the processing of Data by the Administrator are the provisions of the applicable law, in particular the Labor Code and implementing acts, and to the extent wider than specified in these provisions and in the field of future recruitment, your consent.

Providing Data is voluntary, but necessary to carry out the recruitment process and establish possible further cooperation.

How long will Data be processed in connection with recruitment?
The data will be processed for the purposes set out above for the duration of the recruitment process or future recruitment, and then until the expiry of the limitation period for any claims.

Who is the recipient of Data in connection with recruitment?
The data processed by us in connection with recruitment may be transferred to other companies from the Erbud Group and entities supporting us in the recruitment process and providing IT services to us.

6. DOES YOUR DATA TRANSFER OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)?

Your Data does not go outside the European Economic Area, and if in the future it would be transferred to a place outside the EEA, ONDE S.A. takes appropriate steps to ensure the protection of the Data, in particular by:

the use of specific contractual clauses called “standard contractual clauses”, which have been approved by the European Commission; or
transfer to countries for which the European Commission has issued an adequacy decision.
In this case, you have the right to obtain a copy of the relevant safeguards.

7. WHAT ARE STATE RIGHTS?

Under the terms of applicable law, you have the right to:

access to the Data, including the right to obtain a copy of it;
request their rectification, deletion or limitation of processing;
object to processing;
transfer them to another administrator (to the extent that the basis for their processing is the necessity to perform the contract or your consent).
If the processing of Data takes place on the basis of consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.

You also always have the right to lodge a complaint with the President of the Personal Data Protection Office.

8. CONTACT

ONDE S.A. has not appointed the Data Protection Officer. In matters relating to the processing of personal data, you can contact us by e-mail at the following e-mail address: iod@onde.pl.