Conducting correspondence

Information Clause

Data Controller and Contact Details, DPO:

The controller of your personal data is Asseco Cloud Sp. z o.o., with its registered office at ul. Królowej Korony Polskiej 21, 70-486 Szczecin, Poland (the Controller).
For matters related to personal data protection, please contact the Data Protection Officer at:
Asseco Cloud Sp. z o.o  ul. Narutowicza 136, 90-146 Łódź, Poland
Email: iod@asseco.cloud | Tel.: +48 782 800 381

Purposes and Legal Basis for Processing:

Your personal data will be processed for the following purposes:

• Effective correspondence exchange, particularly in response to your inquiry, sending offers, servicing concluded contracts, and conducting arrangements – pursuant to Article 6(1)(b) GDPR;
• Carrying out necessary settlements in connection with legal obligations imposed on the Controller – pursuant to Article 6(1)(c) GDPR;
• Establishing, exercising, or defending legal claims – based on the legitimate interest of the Controller, which is the ability to pursue or defend against claims – pursuant to Article 6(1)(f) GDPR.

Data Recipients:

Your data may be disclosed to:

• Entities authorized under separate legal provisions,
• The Controller’s contractors,
• Entities processing personal data on behalf of the Controller to support its ongoing business operations (e.g., subcontractors, service providers, external system providers), provided that such entities process data under a contract with the Controller and strictly in accordance with its instructions.

Data Transfers Outside the European Economic Area (EEA):

Due to the global nature of the Controller’s operations and the IT infrastructure and telecommunications services used, your personal data may be transferred outside the EEA. Such transfers are carried out based on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision by the European Commission (e.g., EU-U.S. Data Privacy Framework).

Data Retention Period:

Your data will be retained for the duration necessary to maintain correspondence related to the Controller’s ongoing operations and cooperation, as well as for the period required to fulfill legal obligations. Data is subject to periodic reviews to ensure it remains relevant to the purpose for which it is processed.

Your Rights in Connection with Data Processing:

You have the following rights:

• Right of access to your personal data and rectification;
• Right to erasure, under the conditions set out in Article 17 GDPR;
• Right to restriction of processing, under the conditions set out in Article 18 GDPR;
• Right to object, under the conditions set out in Article 21 GDPR.

If you have concerns about the lawfulness of the processing of your personal data, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

Requirement to Provide Data:

Providing your data is voluntary but necessary to conduct correspondence as part of cooperation with the Controller.

Automated Decision-Making and Profiling:

We do not make any decisions that significantly affect you in an automated manner, including profiling.