GDPR

Pursuant to Articles 13, 14 and 15 of Regulation 2016/679 of the European Parliament and the Council of the EU, of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) – referred to below as GDPR, please be informed that:

1. The administrator of the personal data of individuals is Pomerania Brokers Sp. z o.o., with its registered address in Szczecin, Ks. Bogusława X 1-2, No. 2/3, 70-440 Szczecin
   tel. 91 433 64 12, e-mail: poczta@pomeraniabrokers.pl
2. Personal data is processed on the basis of the agreement and consent of persons to whom the data relates, under Article 6(1)(a, b, c, d, f, or Article 9(2)(a, b, c, h) of the GDPR.
3. At Pomerania Brokers Sp. z o.o., in the main office in Szczecin, sensitive personal data and non-sensitive personal data are processed depending on the purpose and legal basis for such processing.
4. Personal data is obtained from employees, customers and public authorities depending on the performed activities. Recipients of the data may be entities authorized by the law or by a contract of entrustment of data processing.
5. Personal data will be retained for a period of time specified by generally applicable regulations, or after fulfilling the purpose, for which the consent to process the data was granted.
6. The data subject has the right, upon demand to the administrator, to access their personal data, the right to rectify, erase, restrict the processing of data, the right to object, under the terms of GDPR, to the processing, as well as the right to transfer the data under the terms of GDPR.
7. The person providing the data is entitled to lodge a complaint to the supervisory authority – the Personal Data Protection Office, on the grounds that personal data is processed by the controller in violation of the provisions of GDPR.
8. In the case of data processing based on consent, the data subject has the right to withdraw consent at any time without affecting the legal compliance of the processing which was carried out on the basis of consent prior to its withdrawal.
9. Providing personal data is either voluntary or mandatory depending on the purpose and legal basis of processing. However, failure to provide data to the extent required by the administrator may result in the inability to fulfill the purpose of processing.
10. Personal data shall not be transferred to a third country/international organization.
11. Personal data shall not be processed by automated means and shall not be profiled.