Information clause
(for individuals making contact via the website)
In accordance with Articles 13 and 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 of 27 April 2016. (Official Journal of the EU L 119 of 04.05.2016), hereinafter referred to as the “Regulation”, we are providing the following:
Details of the Data Controller
The Controller of your personal data is Respect Energy Holding S.A. with its registered office in Warsaw, 17 Bonifraterska Street, 00-203 Warsaw (hereinafter referred to as “Controller”).
Contact with the Controller is possible at its:
postal address: ul. Bonifraterska 17, 00-203 Warsaw, or
email address: iod@respect.energy.
The Controller is responsible for the security of the provided personal data and for processing it in accordance with the law.
Purposes and legal grounds for the processing of personal data
Your personal data will be processed on the basis of the Regulation for the following purposes:
To provide answers to questions asked via the contact form available on the Website https://czystamocenergii.pl (legal basis: Article 6(1)(f) GDPR – “legitimate interest”).
To send marketing information, including carrying out promotional and information activities related to the Grant Programme (with the consent of participants, if and when a separate consent is given to the use of data for this purpose (legal basis: Article 6(1)(a) of the GDPR – “consent”).
To carry out direct marketing (of the Controller’s own products and services), including personalisation of marketing content (legal basis: Article 6(1)(f) GDPR – “legitimate interest”). The Controller may process personal data in order to prepare and present the personalised offer as referred to in the Terms and Conditions. Such data will also be processed in an automated manner, but the decisions made will not have legal effects against the customer.
To defend against or pursue claims on the basis of a legitimate of the Controller (legal basis: Article 6(1)(f) of the GDPR).
Provision of the data requested in the contact form is voluntary, but necessary in order to answer the question asked. In the event of refusal to provide the required personal data, a response cannot be sent to the User.
The provision of data in order to receive marketing communication via the chosen communication channel (i.e. e-mail address, telephone number) is voluntary, but necessary to receive marketing information. In the event of refusal to provide personal data, the User will not be able to receive marketing content (e.g. information about promotional offers).
Scope of data processing
The Controller processes the following categories of personal data:
identification details (name, surname, position),
contact details (e-mail address, telephone number, mailing address),
details of the applicant institution (name, address, VAT number, REGON),
Recipients of personal data
Personal data may be shared with:
entities cooperating in the implementation of the programme, e.g. experts evaluating submissions,
providers of services to the Controller (e.g. data hosting, IT support),
public authorities if required by applicable law.
Rights of data subjects
You have the following rights:
The right to access your personal data (Art. 15 GDPR), including to obtain a copy of your data (Art. 15 par. 3 GDPR),
The right to rectify (amend) or complete incomplete personal data (Art.16 GDPR),
The right to demand erasure of your personal data in cases provided for by law (Art. 17 GDPR),
The right to request restriction of the processing of your personal data (Art. 18 GDPR),
The right to receive your data in a structured commonly used format and to have it transferred, where the processing is based on your consent or a concluded contract, and where the processing is carried out by automated means (Art. 20 GDPR),
The right to object to the processing of your personal data where it is processed for the legitimate interest of the Controller, on grounds relating to his/her particular situation, including profiling (Art. 21 GDPR).
Data retention period
Personal data will be kept for the duration of the Grant Programme and for the period required by law for archiving and accountability purposes.
Data security
The Controller shall apply appropriate technical and organisational measures to ensure the security of personal data, including its protection against unauthorised access, loss or destruction.
President of the Office for the Protection of Personal Data
In cases where you consider that the processing of your personal data violates the provisions of the Regulation, you have the right to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection based in Warsaw, ul. Stawki 2, who can be contacted:
by post: ul. Stawki 2, 00-193 Warsaw
via the electronic mailbox available at https://www.uodo.gov.pl/pl/p/kontakt
by telephone: (22) 531 03 00
Automated decision-making
The Controller does not make decisions towards data subjects based solely on automated processing of personal data, including profiling.
Transfers of data outside the European Economic Area (EEA)
Your personal data will not be transferred outside the European Economic Area.
