Privacy Policy
Due to the entry into force on May 25, 2018 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing the directive 95/46/EC (GDPR). We would like to inform you how, in accordance with the Privacy Policy below, your personal data is processed in the company after May 25, 2018:
DEFINITIONS
Administrator – means a natural or legal person, public authority, entity or other entity which, alone or jointly with others, determines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Personal data – means information about an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, the economic, cultural or social identity of the individual;
Recipient – means a natural or legal person, public authority, agency or other entity to which personal data are disclosed, regardless of whether it is a third party. However, public authorities which may receive personal data in the framework of a specific procedure under Union or Member State law shall not be considered as recipients; the processing of these data by these public authorities must comply with the data protection rules applicable to the purposes of the processing;
PKS Szczecin – Przedsiębiorstwo Komunikacji Samochodowej w Szczecinie Spółka z o. o.;
Processor – means a natural or legal person, public authority, agency or other entity that processes personal data on behalf of the controller;
Processors – entities to which we may transfer some of your personal data in connection with the performance of certain activities or services on our behalf. These entities cannot do anything with your personal data unless we instruct them to do so and only to the extent indicated by us. They will store your personal data securely and only for the period specified by us or required by applicable law;
Profiling – means any form of automated processing of personal data, which consists in using personal data to evaluate certain personal factors of a natural person, in particular to analyze or predict aspects regarding the performance of that natural person, his or her economic situation, health, personal preferences, interests, reliability , behavior, location or movement;
Processing – means an operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, adapting or modifying, downloading, viewing, using, disclosing by sending, disseminating or otherwise such sharing, alignment or combination, restriction, erasure or destruction;
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation Data);
Website – website operated by PKS Szczecin: https://pks.szczecin.pl ;
Third party – means a natural or legal person, public authority, agency or entity other than the data subject, controller, processor or persons who, with the authorization of the controller or processor, may process personal data;
You, your, yours – any natural person whose data is processed by PKS Szczecin in accordance with the law;
Device – means an electronic device through which the User gains access to the Website;
User – means a person or entity to whom, in accordance with the Regulations and legal provisions, services may be provided electronically or with whom an Agreement for the provision of electronic services may be concluded;
Consent – data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject, by means of a statement or a clear affirmative action, consents to the processing of personal data relating to him or her;
WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA AND HOW CAN YOU CONTACT US?
The controller of personal data within the meaning of the GDPR obtained and processed via the Website and provided in correspondence with you, including correspondence via your e-mail address during telephone conversations, is PKS Szczecin. This means that we decide how and for what purposes your personal data that you have provided to us is processed.
The Personal Data Protection Inspector is Mr. Bartłomiej Łazowski, who can be contacted by correspondence at the following address: PKS Szczecin Sp z oo ul. Leona Heyki 4, 71-063 Szczecin and to the e-mail address: rodo@pks.szczecin.pl – in all matters relating to the processing of personal data and the exercise of rights related to their processing.
WHAT ARE THE PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA AND FOR WHAT PERIOD WILL THEY BE PROCESSED?
The legal basis for processing your data for specific purposes is as follows:
PKS Szczecin informs that the legal basis for the processing of personal data may be the following provisions of the GDPR:
- a. art. 6 section 1 letter a) – consent, i.e. your voluntarily expressed consent to the processing of data (in the event of submitting such a declaration of will);
- b. art. 6 section 1 letter b) – if the personal data provided by you is necessary to conclude or perform a contract to which you are a party;
- c. art. 6 section 1 letter c) – if it results from statutory requirements, i.e. it is necessary for PKS Szczecin to fulfill legal obligations arising from legal provisions, e.g. related to handling complaints in accordance with Chapter 6 of the “Transport Law” Act;
- d. art. 6 section 1 letter d) – if the processing of the personal data provided by you is necessary to protect your vital interests;
- e. art. 6 section 1 letter e) – if processing is necessary to perform a task carried out in the public interest;
- f. art. 6 section 1 letter f) GDPR – if processing is necessary to pursue the legally justified interests of PKS Szczecin;
- g. art. 9 section 2 letter f) GDPR – if the processing of special category data is necessary to establish, pursue or defend claims;
With respect to the processing activities performed by PKS Szczecin, we determine the appropriate legal basis in accordance with the above. Processing may also be based on more than one legal basis.
Based on the above grounds for personal data processing, PKS Szczecin may process personal data obtained from you for the following purposes:
- a. for the purposes indicated in the consent (in the event of submitting such a declaration of will) – based on this consent – in such a case, you can withdraw your consent at any time, which will not affect the lawfulness of the processing carried out on the basis of the consent; withdrawal of consent or refusal to express it will result in PKS Szczecin not processing your data for the purposes indicated in the consent;
- b. to respond to you in accordance with the requests indicated in your correspondence;
- c. in order to handle inquiries and complaints, implement your instructions and conclude accompanying contracts and agreements;
- d. in order for PKS Szczecin to comply with legal provisions;
- e. in order to pursue claims and defend against claims arising from the legal relationship between us by transferring your data, e.g. to a business information office;
- f. for other legitimate purposes;
- g. to establish, pursue or defend claims.
PURPOSES OF DATA PROCESSING
- Sending a CV in connection with recruitment offers published on the website https://pks.szczecin.pl
- Law basics:
- Art. 6 section 1 letter a) GDPR – voluntary consent
- Processing period:
- until consent is withdrawn and in accordance with the information available at https://pks.szczecin.pl/kariera/informacja-o-przetwarzaniu-dani-osobch
- Law basics:
- Statistical measurements (hereinafter “statistics”), marketing of the administrator’s products and services (hereinafter also “own marketing”).
- Law basics:
- Art. 6 section 1 letter f) GDPR – legitimate interest of the administrator
- Processing period:
- until an effective objection is submitted
- Law basics:
- Sending information electronically by sending an email to the following address: turystyka@pks.szczecin.pl or by completing the electronic contact form available on the website https://pks.szczecin.pl/wynajem-autokarow-i-busow/
- Law basics:
- Art. 6 section 1 letter a) GDPR – voluntary consent
- Processing period:
- until consent is withdrawn
- Law basics:
- Sending information electronically by sending an email to the following address: vip@pks.szczecin.pl or by completing the electronic contact form available on the website https://pks.szczecin.pl/transfery-individual-vip/;
- Law basics:
- Art. 6 section 1 letter a) GDPR – voluntary consent
- Processing period:
- until consent is withdrawn
- Law basics:
- Sending information electronically for the purchase/lease/rental of PKS Szczecin real estate
- Law basics:
- Art. 6 section 1 letter b) GDPR – processing is necessary to perform a contract to which the data subject is a party or to take action at the request of the data subject before concluding a contract
- Processing period:
- Until the expiry of the contract between you and PKS Szczecin, with the reservation that sometimes this data may be processed also after the expiry of this contract, but only if it is permitted or required under applicable law, e.g. processing for archival purposes, settlement or to pursue claims
- Law basics:
Personal data obtained from you will not be transferred to third parties, however, in accordance with applicable law, PKS Szczecin may transfer your data to entities processing them on our behalf, e.g. IT service providers, auditors, advisors, on the basis of contracts for entrusting the processing of personal data and entities authorized to obtaining data on the basis of applicable law, e.g. courts or law enforcement authorities (if they make a request based on an appropriate legal basis) and other entities if it is necessary to obtain their position in connection with your correspondence.
Processors must ensure that they have implemented appropriate technical and organizational measures so that data processing meets legal requirements and the rights of data subjects are protected.
Categories of recipients of your personal data:
- a. Entities providing operation and security of the Website – PKS Szczecin uses the services of other entities to maintain the security and functionality of the Website. In order to provide these services, they process the IP addresses of people visiting the Website;
- b. IT service providers – PKS Szczecin uses an IT service provider to store your personal data in such a way that it is safe, up-to-date and confidential.
WHAT ARE YOUR RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA?
You have the right to request from the data controller access to your personal data, rectification, deletion or limitation of processing or to object to their processing, as well as the right to transfer data if it is granted pursuant to Art. 20 GDPR.
In order to facilitate the exercise of the above-mentioned rights, it is recommended to contact PKS Szczecin in writing or electronically, in particular by sending correspondence to rodo@pks.szczecin.pl.
In case of justified doubts as to your identity when submitting the above-mentioned requests, the administrator reserves the right to request additional information necessary to confirm your identity.
If your data is processed on the basis of consent, you can additionally exercise the right to withdraw consent to the extent to which it is processed on this basis. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
In addition, in connection with the processing of your personal data, you have the right to lodge a complaint with the supervisory authority competent for your place of stay or violation of personal data protection provisions.
Providing your personal data referred to in this information is voluntary and is related to correspondence with PKS Szczecin. Failure to provide the data necessary for correspondence may result in PKS Szczecin being unable to fulfill your inquiries, e.g. handling complaints.
If you provide PKS Szczecin with personal data of other people, PKS Szczecin asks you to inform these people:
- about the fact and scope of transferring personal data regarding these persons to PKS Szczecin;
- that PKS Szczecin is the administrator of their personal data and that it processes their personal data on the terms set out above;
- that you are the source from which PKS Szczecin obtained their data.
If you send the so-called special category personal data belonging to you or another person, e.g. data regarding your health condition, it is usually necessary to consent to the processing by PKS Szczecin of the provided personal data regarding the health condition/health condition of the person under care in order to consider and respond to sent correspondence.
If you do not consent to the processing of the above-mentioned data sent by you, personal data of special categories, this data will be deleted by PKS Szczecin and not taken into account when conducting the proceedings in question.