Privacy Notice

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), please be informed that:

1. The controller of your personal data is BGC Group Prosta Spółka Akcyjna, ul. Księdza Piotra Wawrzyniaka 6, 53-022 Wrocław.
2. The controller has appointed Andrzej Burkiewicz as Data Protection Officer. You can contact the Data Protection Officer in writing at the controller’s address or by email at iod@bosetti.pl.
3. Purposes of Personal Data Processing and Legal Basis for Processing

 

Your data will be processed for the purpose of monitoring an employee’s business email based on the legitimate interest of the employer (Article 6(1)(f) of the GDPR). This legitimate interest consists in ensuring efficient work organization that enables full use of working time and proper use of work tools provided to the employee during the employment period. Where information obtained through email monitoring constitutes evidence in legal proceedings, or where the controller becomes aware that it may constitute evidence in such proceedings, this data will be processed for the purpose of pursuing or defending claims until the expiry of the relevant limitation periods and, where proceedings have been initiated, until their legally binding conclusion and the expiry of any new limitation periods arising from those proceedings.

4. Data Recipients and Other Entities

Your data may be shared with IT service providers. Personal data may also be

disclosed to entities which, under applicable regulations, are not considered data recipients, such as public authorities that may receive personal data collected through monitoring in specific proceedings in accordance with EU or Member State law. These may include law enforcement authorities, courts, and organizationally related business partners, Brix PSA and BGC Real Estate.

5. Data Retention Period

Your personal data will be stored until the end of your employment or until the underlying business purposes no longer apply.

6. Obligation to Provide Data

Providing your data is voluntary but necessary to use business email.

7. Automated Decision-Making and Transfer of Data to Third Countries

Your personal data will not be subject to automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR. Your personal data will not be transferred outside the European Economic Area (EU Member States, Iceland, Norway, and Liechtenstein).

8. Rights of the Data Subject

Subject to the conditions laid down in Articles 15-22 of the GDPR, you have the right to:

• Access your personal data and obtain a copy thereof;
• Rectify (correct) your personal data;
• Restrict the processing of your personal data;
• Erase your personal data;
• Data portability;
• Object to the processing of your personal data;
• Lodge a complaint with the President of the Personal Data Protection Office.