We hereby present the privacy policy issued by “ORIENTA POLSKA” Sp. z o.o. (hereinafter referred to as the Company), which is necessary to protect your personal data in accordance with the relevant legal requirements.
The information provided below will help you understand:

• which entities process your data and how to contact them;
• how and why your data is processed;

Useful contacts

Orienta Polska is the company processing your data for legal purposes and is considered the data controller. As such, it is responsible for ensuring that the necessary and appropriate organisational and technical measures are in place to protect your data. The company’s registered office is located in Warsaw at the following address: ul. Łucka 18 lok.7, 00-845 Warsaw.
The person responsible for data processing, i.e. the designated individual working with the data controller on the implementation of specific protective measures, is the designated pro-tempore contact person on behalf of their branch or central administrative office, based at the Company’s premises.
Furthermore, the Company has appointed a data protection officer whose duty is to ensure compliance with the regulations protecting your privacy; you may contact them regarding matters related to the processing of your personal data at the following address: Orienta Polska Sp. z o.o., ul. Łucka 18 lok. 7, 00-845 Warsaw [email protected]). Further information regarding your rights can be found in the section entitled ‘Your rights’ later in this document.

Information on data processing

We would like to emphasise that all personal data you provide to us will be processed in accordance with applicable privacy regulations; the Company therefore undertakes to process such data in accordance with the principles of fairness, lawfulness and transparency, in accordance with the purposes set out below, as well as to collect such data only to the extent necessary for processing, to use it only as personal data for a purpose consistent with the consent given and in the agreed form, and to ensure the necessary confidentiality of the information provided.
The Company collects, records, consults and generally processes, in particular, your personal and identification data, such as, for example, your first name, surname, address, telephone number and email address, exclusively to the extent necessary to fulfil the purposes set out in the contract signed with the Company.
The Company may use your data for the following purposes:

• to fulfil obligations arising from civil and fiscal law, EU regulations, as well as regulations, codes or procedures approved by the authorities and other competent institutions (e.g. tax and fiscal audits, anti-money laundering)
• enabling the proper legal, technical and economic management of the contract;
• asserting or defending its rights before the courts or administrative bodies, or in arbitration and mediation proceedings in cases provided for under applicable laws, EU directives and regulations;

The processing of the aforementioned personal data is necessary for the performance of the contract; therefore, refusal to give consent will prevent the establishment of a contractual relationship.

Period of data storage

The Company will retain your data until the contract ends, and for a further period of 10 years (the period after which the rights arising from the contract become time-barred).

Transfer and access to your data

The Company – without the need to obtain your consent – may transfer your personal data to the categories of entities listed in more detail below, such as:

•  Companies belonging to the Orienta Group, including those not operating within the EU, for the purposes of carrying out monitoring activities and managing staff.
• Third parties (such as specialist firms, consultants, insurance companies for the provision of insurance services, etc.) who provide outsourcing services to the data controller as external entities responsible for data processing;
• Judicial authorities, insurance companies for the purpose of providing insurance services, as well as entities to which such data must be disclosed in accordance with applicable law. The aforementioned entities will process the data as independent data controllers.

Your rights

With regard to the data being processed, the Company guarantees you the right to:

• obtain confirmation as to whether or not your personal data is being processed, and to receive a copy of such data in a legible form;
• update, rectify or complete your data;
• request the erasure of personal data under the conditions provided for by law or request that it be anonymised;
• object, in whole or in part and on legitimate grounds, to the processing of personal data concerning you;
• restrict processing in the event of a breach, a request for rectification or an objection;
• request the portability of data processed electronically, provided on the basis of consent or a contract;
• withdraw consent to the processing of your data at any time, if a request has been made.

To this end, the Company has provided a form which should be sent to the following email address: [email protected]. Alternatively, you may visit one of our offices or send your request by registered post to the following address: Warsaw 00-845, ul. Łucka 18, flat 7.
Please note that the Company is obliged to respond to your requests within one month, except in particularly complex cases, where this may take up to a maximum of 3 months.
In any case, the Company will explain the reason for the delay within one month of the request being submitted.
The outcome of the request will be sent in writing or electronically. If you request rectification, erasure or restriction of data processing, the Company undertakes to communicate the outcome of the request to each recipient of your data, unless this is impossible or would involve a disproportionate effort.
Please note that the withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.
The Company states that a fee may be charged if your requests are manifestly unfounded, excessive or repetitive; to this end, the Company has established a register to track your requests for intervention.