1. The controller of the personal data is ASTEK Polska sp. z o.o. with its registered office in Warsaw, Al. Jana Pawła II 22, 00-133 Warszawa, Poland, under KRS no. 0000271963 (here-inafter referred to as the “Controller”).

2. The Controller has appointed a Data Protection Officer, who can be contacted via e-mail address: privacy@astek.pl or by correspondence to the address: ASTEK Polska sp. z o.o., Al. Jana Pawła II 22, 00-133 Warszawa.

3. Your personal data are processed:

a) for the purpose of handling the request included in the contact form on the basis of the consent given (Article 6(1)(a) of the GDPR/RODO);
b) for the purpose of producing analyses, reports, handling complaints on the basis of the Controller’s legitimate interest (Article 6(1)(f) of the GDPR/RODO).

4. With regard to the handling of the enquiry contained in the contact form, we will keep your data for a period of time until the handling of the enquiry contained in the contact form is completed, and thereafter for the period and to the extent required for ASTEK Polska to pursue the legitimate interest of the Controller.

5. The recipients of the data may be, e.g. entities operating the Controller’s ICT systems or providing the Controller with ICT tools, entities providing advisory or consultancy services to the Controller, etc.

6. Your data will be processed by automated means, but will not be subject to profiling.

7. In relation to the processing of your personal data, you have the right:

a) to access to the content of your personal data, including the right to obtain a copy of that data;
b) to request the rectification (amendment) of your personal data where the data are inaccurate or incomplete;
c) to request the deletion of your personal data (the so-called the “right to be forgotten”);
d) to request the restriction of your personal data processing;
e) to object to the processing of your personal data;
f) to data portability;
g) to withdraw consent to the processing of your personal data, to the extent that consent has been given, at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

8. If you consider that the Controller’s processing of personal data violates the provisions of the GDPR/RODO, you have the right to lodge a complaint with the appropriate supervisory authority, i.e. the President of the Personal Data Protection Office.