The GDPR, a new personal data protection regulation, came into force on 25 May 2018 in all member states of the European Union.

We strive to adapt our activities to new legal requirements. All this to guarantee the highest level of personal data security and to inform you about the processing of personal data, access to them and other rights that the regulation guarantees you. As the controller of your personal data, we operate based on the highest data processing standards. We will keep you updated on all changes regarding our services and documentation that may have any impact on you and your data. The controller, i.e. the entity deciding on how your personal data will be used, is KSW sp. z o.o. sp. k. with its registered office in Warsaw (00-739), Stępińska 39 Street.

How to contact us to obtain more information about the processing of your personal data?

In all matters relating to the processing of personal data and the exercise of data processing rights, you can contact us at the email address: rodo@kswmma.com

Purposes and basis of processing:

We process your personal data in order to answer your inquiry regarding the services offered on our KSWMMA portal (www.kswmma.com). The basis for the processing of your personal data is your consent to the processing of personal data (Article 6(1)(a) of the GDPR).

Data retention period:

We will process your personal data until the account you have created on the www.kswmma.com website has been removed or until the claims between the parties arising out of the concluded agreement or negotiations have expired.

Data recipients:

In the course of their processing, your personal data may be disclosed to the following categories of recipients: employees and associates of our company authorised by us, entities entrusted with the processing of your personal data for the purpose of providing services and authorised persons employed in these entities.

Transfer of data to third countries or international organisations:

The personal data processed will not be transferred to recipients located in countries outside the European Economic Area (European Union countries and Iceland, Liechtenstein and Norway).

Rights of the data subject

We ensure that all data subjects whose data are processed by us are afforded the rights provided under the GDPR, i.e.:

1. the right to access personal data, including the right to obtain a copy thereof;
2. the right to request a rectification (correction) of personal data, if the data are incorrect or incomplete;
3. the right to request the deletion of personal data (the so-called "right to be forgotten") - in the case where (i) data are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) the data subject has objected to the processing of personal data, (iii) the data subject has withdrawn the consent on which the processing is based and there are no other legal grounds for processing, (iv) the data is processed unlawfully, (v) the data must be deleted in order to fulfil an obligation resulting from the provisions of law;
4. the right to request limitation of the processing of personal data - if: (i) the data subject questions the correctness of personal data, (ii) data processing is unlawful and the data subject opposes data deletion, requesting instead their limitation, (iii) the controller no longer needs the data for their purposes, but the data subject needs them to assert, defend or pursue claims, (iv) the data subject has objected to the processing of the data - pending determination whether the legitimate grounds on the part of the controller override the grounds for the objection;
5. the right to transfer personal data if: (i) the processing takes place on the basis of an agreement concluded with the data subject or on the basis of a consent expressed by such person, and (ii) the processing takes place in an automated manner;
6. the right to object to the processing of personal data, including profiling, where (i) there are reasons related to your particular situation, and (ii) data processing is based on the basis of indispensability for purposes arising from our legitimate interest referred to in clause II above.

If you want to exercise these rights, write to us at rodo@kswmma.com

Right to withdraw the consent to personal data processing

To the extent that you gave us consent to the processing of your personal data, you have the right to withdraw your consent to the processing of personal data. Withdrawal of consent does not affect the lawfulness of the processing of data carried out on the basis of the consent before its withdrawal.
If you want to exercise these rights, write to us at rodo@kswmma.com

Right to file a complaint with the supervisory authority

In the event of concluding that our processing of your personal data violates the GDPR, you have the right to file a complaint with the competent supervisory authority.

Voluntary provision of data:

Providing data is voluntary. However, without your consent we will not be able to inform you of the forthcoming events and promotions.

Profiling and automated decision-making:

Your personal data will not be used for profiling or taking automated decisions concerning you.