I. Personal data controller
The administrator of your personal data is the Foreign Trade Enterprise "Baltona" S.A., with its registered office in Warsaw, ul. Komitetu Obrony Robotników 49, 02-146 Warsaw (hereinafter: the Administrator).
You may contact the Administrator and/or the Data Protection Officer by writing to the following email address
rodo@baltona.pl
II. Purpose, Scope, Legal Basis, and Processing Period
The personal data you provided in the complaint report will be processed for the purpose of:
- proper handling and resolution of the submitted complaint (Article 6(1)(f) GDPR),
- performance of a contract related to the complaint (Article 6(1)(b) GDPR – if you are a party to the contract),
- conducting settlements, accounting, and financial reporting (Article 6(1)(c) GDPR),
- processing refunds for a positively reviewed complaint (Article 6(1)(c) GDPR – if you are a party to the contract; Article 6(1)(f) GDPR – if you are the owner of the bank account to which the refund is made and a different person than the party to the contract),
As well as for the legitimate interests of the Administrator (Article 6(1)(f) GDPR):
- to establish, exercise, and defend legal claims,
- for statistical purposes related to improving the quality of services and tailoring them to recipients.
Your personal data will be stored until the complaint has been processed, the period resulting from tax and accounting regulations, and the expiration of the limitation periods for claims.
Generally, we process the data you provide: name, surname, mailing address, phone number, email address, bank account number, and information regarding the complaint. If you did not provide your data yourself, the source is the person who listed your data in the complaint as the bank account holder for a refund resulting from a positively reviewed complaint.
III. Information on Data Recipients
In connection with the processing of your personal data for the purposes mentioned in section II, recipients of your data may include:
- subcontractors and service providers of the organization,
- companies providing IT services or solutions,
- companies archiving and destroying documents,
- banks and other financial and payment institutions,
- public authorities receiving data in connection with the Administrator’s legal obligations,
- courier and postal service companies.
Your data will not be transferred to third countries (i.e., countries outside the EU/EEA) or international organizations.
IV. Rights Related to Personal Data Processing
In connection with the processing of your personal data, you have the following rights:
- — access your data and receive a copy of it,
- — rectify (correct) your data,
- — delete your data,
- — restrict the processing of your data,
- — data portability – if the legal basis for processing is consent (Article 6(1)(a) or Article 9(2)(a) GDPR) or a contract (Article 6(1)(b) GDPR),
- — object to the processing of your personal data – if the legal basis is a legitimate interest (Article 6(1)(f) GDPR)
- — withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
More information about your rights is included in Articles 12–23 of the GDPR. Additionally, you have the right to lodge a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office. More information is available at:
https://uodo.gov.pl/pl/501/2271
V. Obligation to Provide Data
Providing your personal data is voluntary, but necessary to fulfill the purpose specified in section II. Failure to provide data will result in the inability to process your complaint.
VI. Profiling
Your personal data will not be used by the Administrator to make automated decisions, nor will it be subject to profiling now or in the future.