Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter: “GDPR”, be informed that:
1. The controller of your personal data is Polski Holding Nieruchomości S.A. with its registered office in Warsaw, address: Aleja Jana Pawła II number 12, postcode 00-124, entered in the Register of Entrepreneurs kept by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Department of the National Court Register, under no. KRS 0000383595, tel. 48 (22) 850 91 00, sekretariat@phnsa.pl (“Controller”).
2. In matters related to the processing of personal data, you can contact the Controller via e-mail: iod@phnsa.pl.
3. Personal data will be processed in order to present rental offers of real estate owned by PHN S.A. and entities from the PHN Capital Group.
4. Personal data will be processed on the basis of consent (the data subject has consented to the processing of his/her personal data for one or more specific purposes) in accordance with Article 6(1)(a) of the GDPR.
5. Provision of personal data is voluntary, however, refusal will result in the inability to carry out direct marketing of products by PHN Group entities.
Consent to the processing of personal data may be withdrawn at any time, without affecting the lawfulness of any processing effected on the basis of such consent before it has been withdrawn.
6. Personal data will be stored for a period of 5 years from the moment of consent to the presentation of offers.
7. You have the following rights with regard to the Controller: request access to personal data, rectification, erasure or restriction of processing, as well as the right to portability.
8. The right to file an objection to the processing of personal data.
9. If you consider that the Controller has violated data protection laws, you have the right to lodge a complaint with the supervisory authority – the President of the Office for Personal Data Protection;
10. Recipients of personal data will be the entities to which the data will be made available in connection with the Controller’s activities as well as entities providing services related to the Controller’s day-to-day activities under the relevant data processing agreements and ensuring that the aforementioned entities apply adequate technical and organizational measures to ensure data protection.
11. Personal data will not be transferred to a third country or to an international organization.
12. Personal data will not be subject to automated decision-making, including profiling.