INFORMATION OBLIGATION
1. The Controller of your personal data is Cordia Management Poland sp. z o. o. with its seat in Warsaw, address: ul. Koszykowa 61B, 00-667 Warsaw, entered into the National Court Register [Polish abbr.: KRS]kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Business Division of the KRS under number 0000392081 (hereinafter the “Controller”).
2. You can contact the Controller by e-mail, by writing to the following address: rodo@cordiahomes.com .
3. Your data is processed for the following purposes:
1. Performance of services provided by the Controller pursuant to Article 6 (1) (b) of the GDPR (for the performance of a contract),
2. Forwarding of marketing information concerning the Controller’s and its groupss products and services pursuant to Article 6 (1) (f) of the GDPR (the legitimate interests pursued by the Controller),
3. Forwarding of commercial information by the Controller pursuant to Article 6 (1) (a) of the GDPR (the data subject has given consent to the Controller), if consent was expressed,
4. Making telephone calls for direct marketing purposes with the assistance of telecommunications devices pursuant to Article 6 (1) (a) of the GDPR (the data subject has given consent to the Controller), if consent was expressed,
4. The recipients of your personal data shall be external entities which process data on behalf of the Controller pursuant to entrustment agreements (for example, a hosting provider) and entities of the Controller’s group of companies (for internal administrative purposes).
5. Your personal data shall be stored for the period of performance of services by the Controller or for the period after which claims, consumer rights, book-keeping or other rights in this regard become time-barred.
6. You are entitled to the following rights in connection with the processing of your personal data by the Controller:
1. You are entitled to information as to what category of personal data concerning you is being processed by the Controller and to receive a copy of such data (right of access). The first copy shall be free of charge; the Controller may charge a fee for further copies.
2. Where the data under processing are no longer topical or are incomplete (or in any other manner inaccurate), you are entitled to demand their rectification;
3. Under certain situations you are entiled to demand the erasure of your personal data by the Controller, i.e. the personal data are no longer necessary in relation to the purposes for which you were advised; when you withdraw consent for processing (where there is no other legal ground for the processing); the personal data have been unlawfully processed; or the personal data have to be erased for compliance with a legal obligation of the Controller;
4. Where your personal data are processed by the Controller pursuant to granted consent or in the performance of a contract with the Controller, you are entitled to transmit those data to another controller;
5. The Controller processes your personal data for the purpose of, inter alia, marketing operations concerning its products and services. The ground for such processing is “the Controller’s legitimate interest”. In the case of such processing, you are entitled to object. Accordingly, the Controller shall cease the processing of your data for the foregoing purpose;
6. The Controller has requested your consent for processing your data for certain purposes associated with its business. This consent may at any time be withdrawn in an e-mail sent to the Controller. This will have the effect that processing prior to the withdrawal of consent shall not cease to be lawful, whereas after the withdrawal of consent, the Controller shall no longer process data for the purposes for which consent was expressed;
7. If you deem that the data under processing is inaccurate, processing performed before consent was withdrawn is unlawful or the Controller has no further need of certain data or where you object to processing, you may also demand that for a specified necessary period of time (for example, for verifying data accuracy or pursuit of claims) the Controller does not perform any operations with the data, but merely stores it;
7. You may lodge a complaint with the President of the Personal Data Protection Office
if you deem that the processing of your personal data constitutes an infringement of GDPR provisions.
8. The provision of personal data by you is a pre-condition of concluding any contract with the Controller. You are obliged to provide such data, and failure to do so shall prevent the Controller from performing any services.