Information on the processing of personal data by AUTO-BLAK Group companies
(Valid from 16.03.2023.)
Processing of personal data AUTO BLAK Ltd. – Basic information
| Personal Data Administrator: | AUTO-BLAK Sp. z o.o. ul. Farbiarska 25a, 02-862 Warsaw, rodo@auto-blak.pl; tel. +48 22 899 19 66 |
| Joint controllers of personal data (direct marketing – name, contact information) | AUTO-BLAK Marcin Kozyra, 146 Modlińska St., 03-170 Warsaw; rodo@auto-blak.pl |
| Data Protection Officer: | not established |
| Purpose of personal data processing: | conclusion and performance of a contract for direct marketing of the controller’s own services, including through electronic means of communication |
| Legal basis for processing: | Article 6(2)(a), (b) and (f) RODO |
| Recipients of personal data: | entities cooperating with the administrator in the execution of the order – to the extent necessary for the proper performance of the contract insurance companies – in the case of coverage of repair costs by the insurer |
| Data retention period: | 5 years from the end of the calendar year in which the contract was concluded duration of the consent – data processed for marketing purposes on the basis of consent video surveillance records – 2 weeks or until the end of the proceedings |
| Sources of data origin | Data subjects; insurance companies |
| Categories of data subject to processing | name and surnameaddress of residencePESEL, NIP, REGONaddress of business activitycontact data (telephone number, e-mail address) billing datadata on the operation of vehiclesvideo surveillance records |
| Special categories of data | special categories of personal data are not subject to processing |
| Profiling | data is not the basis for automated decision-making, including profiling |
Processing of personal data AUTO BLAK Marcin Kozyra – Basic Information
| Personal Data Administrator: | AUTO-BLAK Marcin Kozyra, 146 Modlińska St., 03-170 Warsaw; rodo@auto-blak.pl |
| Joint controllers of personal data (direct marketing – name, contact information) | AUTO-BLAK Sp. z o.o. ul. Farbiarska 25a, 02-862 Warsaw, rodo@auto-blak.pl; tel. +48 22 899 19 66 |
| Data Protection Officer: | not established |
| Cel przetwarzania danych osobowych: | conclusion and performance of a contract for direct marketing of the controller’s own services, including through electronic means of communication |
| Legal basis for processing: | art. 6 ust. 2 lit a), b) i f) RODO |
| Recipients of personal data: | entities cooperating with the administrator in the execution of the order – to the extent necessary for the proper performance of the contract insurance companies – in the case of coverage of repair costs by the insurer |
| Data retention period: | 5 years from the end of the calendar year in which the contract was concluded duration of the consent – data processed for marketing purposes on the basis of consent video surveillance records – 2 weeks or until the end of the proceedings |
| Sources of data origin | Data subjects; insurance companies |
| Categories of data subject to processing | name and surnameaddress of residencePESEL, NIP, REGONaddress of business activitycontact data (telephone number, e-mail address) billing datadata on the operation of vehiclesvideo surveillance records |
| Special categories of data | special categories of personal data are not subject to processing |
| Profiling | data is not the basis for automated decision-making, including profiling |
Basis and purposes of personal data processing
- Your personal data is processed by the entities of the AUTO-BLAK Authorized Car Service Group (hereinafter referred to as AUTO-BLAK) pursuant to Article 6 (1) (a), (b) and (f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”).
- The provision of personal data processed for the conclusion and execution of the contract is voluntary, nevertheless necessary for the conclusion and execution of the contract
- The purpose of the processing of your personal data by AUTO-BLAK is the conclusion and performance of the contract
- Your personal data may also be processed by AUTO-BLAK for the purpose of direct marketing of its own services, whereby direct marketing by means of electronic communication requires your separate consen
- The marketing of AUTO-BLAK’s own services also includes the sending of offers for property and personal insurance via an insurance mulitiagency operated by AUTO-BLAK Ltd.
- Granting consent for the processing of data for marketing purposes is not a condition for the conclusion and execution of a contract, although it may be a condition for the granting of a discount or participation in another type of promotional action
Transfer of personal data
- Your personal data may be transferred to entities that cooperate with AUTO-BLAK in the performance of the contract – to the extent necessary for the proper performance of the contract
- If AUTO-BLAK is authorized by you to represent you in claims handling by the insurance company providing cover for you or the perpetrator of the claim, your personal data may be forwarded to insurance companies to the extent necessary for the claim handling.
- Personal data shall not be transmitted by AUTO-BLAK to other entities for any other purpose, unless this is necessary for the legitimate interests of the administrator, in particular for the establishment and assertion of claims or the defense against claims
Co-administration
- Based on your consent, the Joint Administrators jointly process your personal data for the purpose of direct marketing of their own services
- Depending on the scope of your consent, you may receive commercial information from each of the Joint Administrators via telephone or email
- This data is not transferred to other entities
- On the basis of the agreement concluded by the Joint Administrators, for the exercise of the rights to which you are entitled in relation to the processing of personal data and the fulfillment of the information obligations referred to in Art. 13 RODO is the responsibility of AUTO-BLAK sp. z o.o. in Warsaw, which also operates a point of contact for matters related to personal data protection (ul. Farbiarska 25a, 02-862 Warsaw, rodo@auto-blak.pl). Notwithstanding the above arrangements, you may exercise your rights against any of the Joint Administrators.
Rights of data subjects
- At any time, you may object to the processing of your personal data, as long as the basis for the processing activity is the need to pursue the legitimate interests of the controller or a third party; once an objection has been lodged, the controller shall no longer be allowed to process such personal data unless it demonstrates the existence of valid legitimate grounds for the processing overriding the interests, rights and freedoms of the data subject, or grounds for establishing, asserting or defending claims
- Object at any time to the processing of your personal data for direct marketing purposes; once an objection has been lodged, the controller is no longer allowed to process the personal data for such purposes
- The consent you have given for the processing of your personal data for the purposes of personal marketing via electronic communications may be withdrawn at any time in any form; for the avoidance of doubt, we recommend that any statement be made in writing or electronically
- Revocation of consent does not affect the legality of previous data processing activities
- At any time you have the right to inspect the personal data concerning you and the right to request rectification or updating of inaccurate data.
- If you withdraw your consent to processing, and if the intended period of data processing has expired, you have the right to demand erasure of the data, and further processing is not justified by the need to establish, assert or defend claims.
- You have the right to request the transfer of your data to another controller of personal data (the so-called right to data portability) under the terms of the RODO
- You may at any time request a restriction of the processing of your personal data if:
- you believe that the processed data is inaccurate,
- you believe the processing is unlawful, and you object to the deletion of your personal data, requesting instead a restriction on its use;
- the controller no longer needs the personal data for the purposes of the processing, but they are needed by the data subject to establish, assert or defend claims
- Once you request a restriction of processing, your data will not be processed except for storage; however, they may continue to be processed for the purpose of establishing and asserting claims or defending against claims
- Upon your request, the controller will provide you with copies of the data subject to processing.
- Due to the need to protect the rights and freedoms of third parties and the purposes of data processing in the video surveillance system, copies of the recordings shall be made available only at the request of authorized authorities. The storage period of the monitoring records is 2 weeks; in the case of securing the recordings for the purposes of proceedings under the law, the data may be processed until the proceedings are completed.
Dealing with personal data processing issues
- You may submit any requests and statements related to the processing of your personal data in writing to the data controller.
- If you have indicated in writing an electronic mail address for contact, statements, requests and demands regarding the processing of your personal data may be submitted electronically, only using the previously indicated electronic mail address. Only this e-mail address will be allowed to be used for communications related to the processing of personal data.
- AUTO-BLAK will not be responsible for the continued security of your personal data if sent to the indicated e-mail address.
- If you make a request to correct inaccurate data, to update or complete the data, or if you make a request to restrict data processing or to delete the data, you will be informed how the request or demand will be handled no later than 30 days after the request. In justified cases, this deadline may be extended for a further 2 months.
The right to complain
- In connection with the processing of your personal data, you have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing of personal data concerning you violates the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).