_Information Clause for persons using the contact form

Fulfilling the information obligation resulting from art. 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (“GDPR”), we indicate that:

The Controller of your personal data is Transition Technologies PSC S.A. with its registered office in University Business Park, Building B, Wolczanska Street 180, 90-530 Lodz, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0000930989, tax ID number (NIP): 7292712388, statistical registration number (REGON): 365249538, with the share capital of PLN 1,468,800.00, whose registration files are kept by the District Court for Łódź-Śródmieście in Łódź, Business Division XX for National Court Register (is referred to as TT PSC).

1. You can contact the Data Controller by way of:
   1. traditional mail at: University Business Park, Building B, Wolczanska Street 180, 90-530 Lodz;
   2. electronic mail at: contact@ttpsc.com;
   3. telephone at: +48 661 799 553;
   4. the Data Protection Inspector:  gdpr@ttpsc.com;
   5. the e-mail address indicated in point d above, for the purposes of obtaining a copy of the information on safeguards used for processing of data outside the EEA or of information regarding the places where they are made available.
2. Your data will be processed for the following purposes:
   1. answering the question asked, the basis for processing is the consent of the person who contacts TT PSC using the contact form (legal basis of Article 6.1.a of the GDPR),
   2. presenting an offer, the basis for processing is taking action at the request of the data subject before concluding the contract (legal basis of Article 6.1.b of the GDPR) or the legitimate interest of the Data Controller consisting in acquiring a new client, if the person using the contact form acts on behalf of a legal person (legal basis of Article 6.1.f of the GDPR),
   3. to conduct marketing activities based on automatic processing of personal data, such as: personalization of communications, segmentation of audiences and management of marketing schemes (legal basis Article 6. paragraph 1. a GDPR),
   4. direct marketing of own services, which is the legitimate interest of the Data Controller (legal basis of Article 6.1.f of the GDPR),
   5. determining or pursuing any claims or defending against them, which is the legitimate interest of the Data Controller (legal basis: Article 6.1.f of the GDPR).
3. Your data will be processed for the period of:
   1. necessary to answer a question or present an offer;
   2. from the time of expression until withdrawal of consent (when processing based on consent);
   3. in the case of direct marketing of our own services, until the legitimate interests of Data Controller constituting the basis for processing are fulfilled or until you object to such processing;
   4. until the statute of limitations for claims under the generally applicable provisions of Polish law in the case of data processed for the purpose of establishing the investigation or defense against claims.
4. You have the right to:
   1. access, rectify, request erasure of your data, as well as the right to restrict processing of your data, the right to data portability, and the right to object to the processing of your data,
   2. withdraw your consent at any time without such withdrawal affecting the lawfulness of the processing carried out on the basis of said consent prior to its withdrawal, insofar as the processing is carried out on the basis of Article 6.1.a or Article 9.2.a GDPR- if you provide the data listed in Art. 9 sec. 1 GDPR,
   3. lodge a complaint with the President of the Office for Personal Data Protection (Prezes Urzędu Ochrony Danych Osobowych), st. Stawki 2, 00-193 Warsaw, if in your opinion your personal data are processed in violation of the rules on personal data protection.
5. Automated decision-making, including profiling, may occur in connection with the processing of personal data, which you have expressly consented to in the form. When you complete a contact form, your data is automatically transferred to a customer relationship management (CRM) system, which allows TT PSC to use such data to analyze user behavior and preferences in order to create more personalized interactions and offers. The consequence of profiling will be that TT PSC will tailor communications and offers to the user’s individual needs and preferences.
   If, in connection with automated decision-making, you receive information that is not of interest to you, you may express your own position or challenge such decision at any time by contacting a representative of the Administrator who is an individual. The Administrator may be contacted in accordance with Section I of this clause.
6. Your personal data may be transferred to:
   1. providers of IT systems (including: analytical services) and hosting services for the TT PSC,
   2. companies from the capital group of TT PSC, if the answer to the question is related to the services provided by individual companies,
   3. law firms (in justified cases),
   4. TT PSC’s business partners and subcontractors,
   5. entities providing marketing services to the Administrator.
7. Your personal data may be transferred outside the European Economic Area. This situation may occur when:  using the services of Microsoft Corporation and its affiliates, i.e. Office 365, Windows, MDM InTune or other software that processes data outside the EEA,
   Any transfer of your data outside the European Economic Area will involve TT PSC implementing solutions to protect your rights and freedoms.
   
   The transfer will be carried out in line with the safeguards permitted under the GDPR, that is:
   1. to a country with regard to which the European Commission has issued a decision affirming the adequacy of safeguards applied in the area of personal data protection (Article 45.1. of the GDPR), or
   2. pursuant to the standard contractual clauses referred to in Article 46.2.c of the GDPR.
8. Providing your personal data is voluntary, however, the consequence of not providing data is the inability to answer the question asked and to achieve the other purposes for which personal data is processed.
9. Should the Data Controller plan to process your personal data for any purpose other than the purposes defined in Section II above, you will be informed in advance of any such other purpose and any relevant information regarding such processing by placing the appropriate information on the Website of Data Controller.