INFORMATION CLAUSE - REGISTRATION OF AN ACCOUNT ON THE WEBSITE

1. Data Controller

The administrator of your personal data is MGGP AERO Sp. z o.o. with its registered office in Tarnów, at ul. Karola Kaczkowskiego 6, 33-100 Tarnów, Poland, KRS: 0000026913, NIP: 8731256310, REGON: 850414002.

2. Data Protection Officer

The Administrator has appointed a Data Protection Inspector supervising the correctness of personal data processing, who can be contacted via e-mail: iod@mggpaero.com or in writing (by post) to the Administrator's address indicated above (marked "IOD" or "Data Protection Officer").

3. Purposes of data processing

Our Customers

If you are our Customer, your personal data will be processed in order to provide you with the service of creating and managing your user account on the My Tree Map website [www.mytreemap.com] as well as to provide you with other services by electronic means which require having an account on the website, including contacting you with regard to the services provided, providing you with support with regard to the services provided, handling potential claims, in accordance with the provisions of Terms and Conditions of the My Tree Map service.

In addition, your personal data may be processed for the purposes of our service billing and accounting.

Your personal data may also be processed for the purposes of our direct marketing of our own products or services and the establishment, investigation and defence of potential claims.

Employees/co-workers of our clients

If you are an employee/co-worker of our Clients, your personal data will be processed for the purposes of ensuring contact with the entity which is a party to the contract concluded with us, verification whether you are entitled to take actions on behalf of this entity, proper implementation of the contract concluded with us.

In addition, your personal data may be processed for billing and accounting purposes by us.

Your personal data may also be processed for the purposes of our direct marketing of our own products or services and the establishment, investigation and defence of potential claims.

4. Basis of Data Processing

The legal basis for processing personal data is:

  • Our Customers

    • within the scope of the service of creating and managing a user account and providing you with other electronic services requiring an account, the implementation of these services, including contacting you in connection with the provided services, providing you with support in the scope of the provided services, handling possible complaints - the processing is necessary for the performance of the contract to which you are a party or to take action at your request before the conclusion of the contract (art. 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation hereinafter "GDPR");
    • in terms of our billing and accounting - the processing is necessary to fulfil our legal obligations, in particular under tax and accounting legislation (Article 6(1)(c) of the GDPR);
    • in terms of our direct marketing of our own products or services - processing is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the GDPR), consisting of our direct marketing of our own products or services;
    • for the establishment, investigation and defence against possible claims - processing is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the GDPR) consisting of being able to take action to establish, investigate and defend against possible claims;
  • Employees/co-workers of our clients

    • in terms of ensuring contact with the entity which is a party to the contract concluded with us, verification whether you are authorised to take action on behalf of that entity, proper performance of the contract concluded with us - processing is necessary for the purposes arising from our legitimate interests (Article 6(1)(f) GDPR) consisting in the possibility of ensuring contact with the entities which are a party to the contract concluded with us, verification whether you are authorised to take action on behalf of that entity, proper performance of the contract concluded with us;
    • in terms of our direct marketing of our own products or services - processing is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the GDPR), consisting of our direct marketing of our own products or services;
    • in terms of our billing and accounting - the processing is necessary to fulfil our legal obligations, in particular under tax and accounting legislation (Article 6(1)(c) of the GDPR);
    • in terms of establishing, investigating and defending against possible claims - processing is necessary for the purposes arising from our legitimate interests (Article 6(1)(f) GDPR) consisting of being able to take action to establish, investigate and defend against possible claims.

5. Data recipients

We may transfer your personal data to entities providing consulting (legal, tax) and IT services to us, as well as to payment service providers processing payments on our website, whom you have authorized the access to your personal data.

6. Transfers of data to third countries and international organizations

Your personal data may be transferred by us to our processing partners in so-called third countries (i.e. outside the European Economic Area), but only to the extent necessary in order for these partners to provide their services to us, in particular IT services and payment services on our website.

When we transfer your data to our partners, we always act on the basis of mechanisms that ensure an adequate level of protection for this data in third countries. In particular, the transfer of personal data in relations with our partners may be based on an adequacy decision of the European Commission or on standard contractual clauses adopted by a decision of the European Commission.

If you would like more information about our safeguards for transferring data to third countries, including obtaining a copy of such additional safeguards, please contact us at the address listed under "Controller" or under "Data Protection Officer".

7. Categories of personal data concerned

We process the following categories of your personal data:

Private individuals

  • name and surname, e-mail address, telephone number, street, house number, postal code, town, country;

Companies

  • name and surname, e-mail address, telephone number, street, house number, postal code, town, country, Tax ID, company.

8. Data retention period

Your personal data will be processed for the period necessary for the purposes of the processing specified above, i.e.

  • with regard to the provision of services by electronic means - for the duration of the performance of the agreement for the provision of such services;
  • to the extent and for the duration required by applicable law;
  • in terms of establishing, investigating and defending against possible claims - for the period and to the extent necessary to establish, investigate or defend against possible claims;
  • in the case of an objection to the processing of data, resulting in the obligation to consider it - until the objection is considered.

9. Rights of the data subject

In relation to the processing of your personal data, you have the right to:

  • access to their data and receive a copy of their data,
  • rectify (amend) your personal data,
  • erasure of personal data,
  • to restrict the processing of personal data,
  • movement of personal data where processing is carried out by automated means, on the basis of consent or on the basis of a contract.

To the extent that your personal data are processed for purposes arising from our legitimate interests, i.e. on the basis of the processing basis of Article 6(1)(f) of the GDPR, you also have the right to object to such processing.

If you wish to exercise any of the above rights, please contact us at the address listed in the "Data Controller" section.

10. Complaint to the supervisory authority

If you believe that our processing of your personal data violates applicable law, you have the right to file a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office.

11. Automated Decision Making

We will not make automated decisions in relation to you, nor will we carry out its profiling.

12. Obligation to Provide Data - Customers

Providing your personal data marked with an asterisk (*) is voluntary, however, failure to provide such data will prevent us from registering your user account on the website and providing you with services requiring an account. Provision of other data is voluntary, however, failure to provide such data may prevent us from presenting you with information on the products or services offered by us.

13. Source of data

Your personal data has been obtained by us as a result of you entering such data in the account registration form or providing your personal data by: (i) designating you as a person authorised to represent the entity that has entered into the contract with us or a contact person in the contract entered into with us, (ii) otherwise providing your personal data during the term of the contract entered into with us for the purposes necessary for the proper performance of that contract, or (iii) from publicly available sources (e.g. the Central Registration And Information On Business).

For further information on how we process your personal data, please see Privacy Policy.