GDPR
information
clause

Information on the processing of your personal data

1. the administrator of your personal data is Infinity Group Sp. z o.o., Składowa st. 12, 15-399 Białystok, phone +48 85 652 09 20, e-mail: [email protected].
2. In all matters concerning the processing of personal data and the exercise of rights related to data processing, you may contact the Data Protection Officer by e-mail at: [email protected] or in writing to the administrator’s registered office address with the note “GDPR”.
3. the personal data you provide in the contact form will be processed:
   • for the purpose of conducting correspondence and responding to your inquiry – the legal basis for processing is Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the administrator consisting in handling correspondence and inquiries addressed to the administrator;
   • for archival (evidential) purposes in order to secure information in the event of a legal need to demonstrate facts – the legal basis for processing is Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the administrator consisting in securing information for evidential purposes;
   • for the purpose of establishing, pursuing or defending against claims – the legal basis for processing is Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the administrator consisting in the possibility of establishing, pursuing or defending claims.
4. Recipients of your personal data may include entities providing services on our behalf, in particular:
   • hosting and email service providers,
   • legal service providers,
   • other entities processing data on behalf of the administrator – solely to the extent necessary to achieve the purposes indicated above.
5. In connection with the use of services provided by technology suppliers, your data may be transferred to countries outside the European Economic Area (EEA).
   
   Data transfers are carried out on the basis of:
   • a decision of the European Commission confirming an adequate level of data protection (EU–US Data Privacy Framework) – Article 45 of the GDPR; and
   • standard contractual clauses approved by the European Commission – Article 46(2)(c) of the GDPR.

   Information on the safeguards applied and a copy of such safeguards may be obtained by contacting the administrator.

6. Your data will be processed for the duration of the correspondence and thereafter for the period of limitation of claims resulting from civil law provisions (as a rule up to 6 years, and in the case of claims related to business activity – up to 3 years).
7. You have the right to:
   • access your personal data,
   • rectify your data,
   • erase your data,
   • restrict processing,
   • object to the processing of your data.

   You have the right to object at any time to the processing of your data based on the administrator’s legitimate interest. Following an objection, we will no longer process the data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or grounds for the establishment, exercise or defense of legal claims.

   You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Poland).

8. Providing your data is neither a statutory nor a contractual requirement, nor a condition for entering into a contract; however, it is necessary in order to respond to your inquiry.
9. Your personal data will not be subject to automated decision-making or profiling.