Information on personal data processing by Nestobud Sp. z o.o.
based in Cracow
 

Introduction

We have prepared information for you regarding your personal data processing in our company pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of the EU L No. 119 in force, hereinafter referred to as "GDPR" as we care of comfort and security of those who entrust us with their personal data.

We wish to ensure you that processing of your data fulfils the highest standards as it is based on appropriate organisational and technical measures used at place that include the implementation of appropriate policies, procedures and internal training covering the personal data protection.

NESTOBUD Sp. z o.o., with its registered office in Krakow (30-349), at Zygmunta Miłkowskiego 7/U7, as the data controller determines the purposes and means of processing of personal data in various business processes., depending on the legal basis of the processing as well as its purpose, NESTOBUD sp. z o.o., with its registered office in Cracow provides each data subject, whose data are processed, with comprehensive information concerning the processing of his or her personal data in the form of personalised information clauses.
We are keen on transparency of information provided to you so information placed below sets out all the legally required information regarding the processing of personal data of individuals, depending on the processing procedure. Please take the time to familiarise yourself with its content.
Thank you for your trust. We hope that this information shall allow you to feel at ease and know your rights.
In case of questions or concerns, do not hesitate to contact us.
 

Who is who in the privacy policy?

We, Nestobud Sp. z o.o., with registered office in Cracow (30-349), at Zygmunta Miłkowskiego 7/U7.
You, i.e. the individuals whose personal data we process.

What is the purpose of the privacy policy?

Protecting your privacy and your personal data is one of our biggest concerns.
Our privacy policy explains how we use your personal data. You shall also find information about you rights arising from our processing your personal data and how you can exercise these rights.

Contact for all matters relating to personal data

You can contact NESTOBUD Sp. z o.o. on all matters relating to data protection as follows:

a. by e-mail: [email protected],  subject line of the: "Nestobud Sp. z o.o. personal data";
b. by post: "Nestobud Sp. z o.o.", Kraków (30-349), Zygmunta Miłkowskiego 7/U7, marked with a note: "IODO".

Information clauses on personal data processing for selected purposes and business processes carried out by Nestobud.

Nestobud Sp. z o.o. processes personal data in its day-to day business for the following purposes, in particular:

Proces (cel) przetwarzania	Processing legal basis and period	Legitimate interest (if any)
Marketing activities	Marketing activities Art. 6(1)(a) or Art. 6(1)(b) or Art. 6(1)(f) GDPR We shall process your data: a) until you withdraw your consent to their processing, if it is based on your consent, or b) as long as we act to conclude a contract, c) in terms of the Controller’s legitimate interest - until you raise an objection or until the meeting date	to arrange a meeting to discuss the Controller’s services and products
Conclusion and execution of a contract with a customer who purchased premises	Article 6(1)(b) or 6(1)(c) or 6(1)(f) GDPR and Article 9(2)(a) GDPR We shall process the data a) in terms of activities aimed at concluding a contract - for the period necessary to undertake such activities; b) in terms of performing a contract - for the period necessary to perform the contract; c) in terms of fulfilling legal obligations incumbent on the Controller - for the period necessary for the Controller to fulfil these obligations; d) in terms of customer satisfaction surveys and determining the quality of service and product - for the period no longer than the period specified in point 4(e); e) with regard to establishing, persuing or defending claims - for the period of limitation of such claims provided for by law; with regard to direct marketing - until an objection is raised	to carry out a customer satisfaction survey and to determine  service and product quality, and direct marketing of products and services
Conclusion and performance of a contract with a contractor	Article 6(1)(b) or Article 6(1)(c) or Article 6(1)(f) of the GDPR Data shall be processed a) in terms of performance of a contract - for the period necessary for the performance of that contract, b) in terms of  fulfilment of legal obligations incumbent on the Controller - for the period necessary for the Controller to fulfil those obligations, c) in terms of establishment, pursuing or defence claims - for the period of limitation of such claims provided for by law	pursuing or defence of claims
Pursuing or defence of claims	Art. 6(1)(f) GDPR We shall process the data until the expiry of the limitation periods for possible claims.	pursuing or defence of claims
Documentation storage	Art. 6 ust. 1lit. c) lub f) RODO Art. 6(1)(c) or (f) GDPR We shall process the data for the periods required by law for the particular type of documentation, e.g. we shall process tax settlement documents for 5 years after the end of the year in which the tax obligation occurred in order to safeguard the information in case of a legal need to prove the facts until the expiry of the limitation periods for possible claims.
Preparing statistics	Article 6(1)(f) GDPR We shall process the data until the expiry of any processing purpose accompanied by the preparation of statistics. The compilation of statistics is only a process accompanying other processes.	improving the quality of services provided and pursuing or defence of claims
Recruitment	Art. 6(1)(a) or Art. 6(1)(b) or Art. 6(1)(c) or Art. 6(1)(f) GDPR We shall process your data until the end of the recruitment process, unless you have consented to your data being processed in future recruitment processes - this shall be increased to 12 months.	pursuing or defence of claims
Communication with legal representatives	Art. 6(1)(f) GDPR We shall process the data until the expiry of the limitation periods for possible claims.	execution of activities within the scope of the power of attorney and pursuing or defence of claims
Processing incoming notifications	Art. 6(1)(f) GDPR We shall process the data until the expiry of the limitation periods for possible claims.	handling notification and pursuing or defence of claims
Processing of data from business cards when they have been recorded or included in an electronic system (e.g. when you have received an e-mail from us based on it).	Article 6(1)(f) GDPR We shall process your data until you raise an objection.	correspondence, establishing business contact and any other purpose for which they have been made available to us
Reception service	Article 6(1)(f) GDPR We shall process your data until you raise an objection.	arranging a meeting with a representative of the Controller and pursuing or defence of claims
Keeping social media profiles - processing of data provided by the user of the portal on this portal in connection with activity and following this profile	Article 6(1)(f) GDPR	- promotion of the brand, products and services, building and maintaining a community associated with the Company and for communication purposes - organizing customer satisfaction surveys and determining the quality of our products and services - analytical purposes -  establishing, pursuing or defending possible claims
Sending newsletter	Art. 6(1)(f) GDPR< We shall process data until you object or withdraw your consent to receive the newsletter	Legitimate interest of the Controller (Article 6(1)(f) GDPR) in relation to the consent to receive the newsletter

Nestobud shall each time inform you in detail of the recipients of your data in its information clauses provided to you. NESTOBUD Sp. z o.o. reserves the right to hold competitions and organise events and undertake other initiatives. Information about the processing of your data in connection with implementation of said activities shall be provided in separate documents, including separate regulations. As we use external tool and service providers, your personal data may be transferred to third countries, i.e. countries outside the European Economic Area. We assure you that, in such a case, the transfer of data shall be based on an appropriate legal basis allowing the transfer of personal data to a third country.

Nestobud Sp. z o.o. reserves the right to hold competitions and organise events and undertake other initiatives. Information about the processing of your data in connection with implementation of said activities shall be provided in separate documents, including separate regulations..

Nestobud Sp. z o.o. also reserves the right to present third-party products and services. Whenever an offer is made and a Customer decides to purchase a particular product or service from a third party, Nestobud shall request your consent to share your personal data with that third party and shall provide you with comprehensive information related to this process. Upon disclosure, the aforementioned third party becomes the recipient and at the same time a separate data controller of the personal data.
The data provision is necessary, for example, for contract conclusions and for fulfilment of legal obligations. Your personal data may be made available to Sento by an entity with which Sento has concluded a contract. In other cases, such data provision is voluntary.
Every individual whose data are processed by Buma Management has rights arising from applicable legislation, i.e. may request for:

•    access to personal data,
•    deletion of personal data
•    rectification of personal data,
•    may object to personal data processing
•    limiting personal data processing,
•    transfer of personal data.

We do not process personal data in a fully automated manner (including profiling). The decision to provide specific information is ultimately made by an employee of the data controller.
Below we provide you with information clauses containing selected information on the processing of your personal data, depending on process you are involved in. When you select a process identical to the business process you are involved a dedicated information clause shall be displayed for you. Please read its contents.

- Personal data processing due to the performance of marketing tasks - MARKETING

- Personal data processing due to the performance of video surveillance tasks - VISUAL MONITORING

- Processing of personal data of customers due to execution of premises purchase contract -  PURCHASE OF PREMISSES

- Personal data processing due to the need to communicate with legal representatives - COMMUNICATION WITH REPRESENTATIVES

 - Personal data processing in the process of executing contracts with contractors i.e. processing of personal data of employees/co-workers/representatives of our contractors - CONTRACTS WITH  CONTRACTORS - DATA OF EMPLOYEES; CO-WORKERS, REPRESENTATIVES;

- Personal data processing for the real estate purchase process - PURCHASE OF REAL ESTATE

- Personal data processing for the reception service process - RECEPTION SERVICE

- Personal data processing due to implementation of the construction and investment process, when personal data are collected for investment and construction documentation, e.g. minutes and notes of meetings - IMPLEMENTATION OF THE CONSTRUCTION AND INVESTMENT PROCESS

- Personal data processing within the process of an offer consideration that shall be or has been submitted to Buma Management and within other pre-contractual activities, e.g. publishing quotation requests – QUOTATION REQUESTS

- Personal data processing for keeping a register of people (other than employees) entering the construction site - RECORDING ENTRIES TO THE CONSTRUCTION SITE

- Personal data processing for processing various types of requests and enquiries sent to Buma Management. The clause applies in particular to enquiries submitted by you to the Data Protection Officer - PROCESSING OF INCOMING REQUESTS.

- Personal data processing for recruitment processes - RECRUITMENT

Complaints and comments

We are always very grateful for any suggestions and comments you may have, including those on the personal data processing. They allow us to improve the quality of our services. Should you wish to make them, as well as formulate a possible complaint about your personal data processing, please send details of your case to our Data Protection Officer:

a. by e-mail: [email protected], with "Nestobud Sp. z o.o. personal data" in the subject line of the message;
b. by post: "Nestobud Sp. z o.o", Krakow (30-349), at Zygmunta Miłkowskiego 7/U7, marked "GDPR".

Any message received shall be analysed in detail.
Individuals have the right to lodge a complaint with the supervisory authority in charge of personal data protection (President of the Data Protection Authority/ Prezes Urzędu Ochrony Danych Osobowych). Detailed information in this regard is at www.uodo.gov.pl