CONTACT FORM

1. Data Controller

The administrator of your personal data is MGGP AERO Sp. z o.o. with its registered office in Tarnów, at ul. Karola Kaczkowskiego 6, 33-100 Tarnów, Poland, KRS: 0000026913, NIP: 8731256310, REGON: 850414002.

2. Data Protection Officer

The Administrator has appointed a Data Protection Officer supervising the correctness of personal data processing, who can be contacted via e-mail: iod@mggpaero.com or in writing (by post) to the Administrator's address indicated above (marked "IOD" or "Data Protection Officer").

3. Purposes of data processing

4. Basis of Data Processing

The legal basis for processing personal data is:

• Our Customers

  • in terms of sending a reply to your inquiry and possibly concluding and performing an agreement with you for the provision of services by electronic means or other agreements, including contacting you in connection with the concluded agreements, providing you with support in terms of services provided by electronic means, handling possible complaints - processing is necessary for the performance of the agreement to which you are a party or to take action at your request before concluding the agreement (Article 6(1)(b) of the GDPR);
  • in terms of our billing and accounting - the processing is necessary to fulfil our legal obligations, in particular under tax and accounting legislation (Article 6(1)(c) of the GDPR);
  • in terms of establishing and maintaining contact with you, including in order to answer your questions sent via the contact form and the exchange of current correspondence not related to the conclusion of an agreement for the provision of services by electronic means or another agreement - processing is necessary for the purposes arising from our legitimate interests (Article 6(1)(f) GDPR), consisting in establishing and maintaining contact with you, including in order to answer your questions sent via the contact form and the exchange of current correspondence;
  • in terms of our direct marketing of our own products or services - processing is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the GDPR), consisting of our direct marketing of our own products or services;
  • for the establishment, investigation and defence against possible claims - processing is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the GDPR) consisting of being able to take action to establish, investigate and defend against possible claims;

• Employees/co-workers of our clients

  • in terms of ensuring contact with the entity which is a party to the contract concluded with us, verification whether you are authorised to take action on behalf of that entity, proper performance of the contract concluded with us - processing is necessary for the purposes arising from our legitimate interests (Article 6(1)(f) GDPR) consisting in the possibility of ensuring contact with the entities which are a party to the contract concluded with us, verification whether you are authorised to take action on behalf of that entity, proper performance of the contract concluded with us;
  • in terms of our direct marketing of our own products or services - processing is necessary for the purposes of our legitimate interests (Article 6(1)(f) of the GDPR), consisting of our direct marketing of our own products or services;
  • in terms of establishing, investigating and defending against possible claims - processing is necessary for the purposes arising from our legitimate interests (Article 6(1)(f) GDPR) consisting of being able to take action to establish, investigate and defend against possible claims;
  • in terms of our billing and accounting - the processing is necessary to fulfil our legal obligations, in particular under tax and accounting legislation (Article 6(1)(c) of the GDPR).

5. Data recipients

We may transfer your personal data to entities that provide advisory services (legal, tax) and IT services to us.

6. Transfers of data to third countries and international organizations

We will not transfer your personal data to third countries (i.e. outside the European Economic Area) or to international organisations.

7. Categories of personal data concerned

We process the following categories of your personal data: name and surname, name of the institution (company), order area, telephone number, e-mail address.

8. Data retention period

Your personal data will be processed for the period necessary for the purposes of the processing specified above, i.e.

• for the duration of the exchange of correspondence related to the inquiry sent by you via the contact form;
• within the scope of our provision of services by electronic means or performance of other contracts - for the duration of the contract;
• to the extent and for the duration required by applicable law;
• in terms of establishing, investigating or defending against possible claims - for the period and to the extent necessary to establish, investigate or defend against possible claims;
• in the case of an objection to the processing of data, resulting in the obligation to consider it - until the objection is considered.

9. Rights of the data subject

In relation to the processing of your personal data, you have the right to:

• access to your data and receive a copy of your data;
• rectify (amend) your personal data;
• erasure of personal data;
• to restrict the processing of personal data;
• movement of personal data where processing is carried out by automated means, on the basis of consent or on the basis of a contract.

To the extent that your personal data are processed for purposes arising from our legitimate interests, i.e. on the basis of the processing basis of Article 6(1)(f) of the GDPR, you also have the right to object to such processing.

If you wish to exercise any of the above rights, please contact us at the address given in the "Data Controller" section or the "Data Protection Officer" section.

10. Complaint to the supervisory authority

If you believe that our processing of your personal data violates applicable law, you have the right to file a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office.

11. Automated Decision Making

We will not make automated decisions in relation to you, nor will we carry out its profiling.

12. Obligation to Provide Data - Customers

Providing your personal data marked with an asterisk (*) is voluntary, however, failure to provide such personal data may prevent us from contacting you, in particular from answering the questions you send us, from corresponding with you, and it may prevent us from concluding a contract with you and providing services to you. Provision of other data is voluntary, however, failure to provide such data may prevent us from presenting you with information on the products or services offered by us.

13. Source of data

Your personal data has been obtained by us as a result of you entering this data in the contact form or providing your personal data by: (i) indicating you as a person authorised to represent the entity that has entered into the contract with us or a contact person in the contract entered into with us, (ii) otherwise providing your personal data during the term of the contract entered into with us for the purposes necessary for the proper performance of that contract, or (iii) from publicly available sources (e.g. the Central Registration And Information On Business).

For further information on how we process your personal data, please see Privacy Policy.