Email: [email protected]UL. TECHNOLOGICZNA 2, 45-839 OPOLE
EMS PLEMS PLFundacja EMS PL

Privacy

Date: 24/05/2018

Translation pending legal review. The Polish text is the binding version.

The new personal-data rules were due to apply from 25 May 2018.

We prepared the information below so you can see how personal data are processed and what rights you have.

Where do we get your data?

The previous text said the data were received from you when an account was created, and later in connection with transactions you made. That wording is kept here because it is part of the published notice. This website has no shop and no customer account.

INFORMATION FROM THE CONTROLLER

  1. The controller, and how to contact the controller and the data-protection officer.

The controller is the EMS PL FOUNDATION. Correspondence address: FUNDACJA EMS PL, ul. Technologiczna 2, 45-839 Opole.

You can contact the controller at [email protected] or in writing at the address above.

For data-protection matters, including your rights, you can contact the data-protection officer appointed by the controller, by email at [email protected] or in writing at FUNDACJA EMS PL, ul. Technologiczna 2, 45-839 Opole.

Purposes and legal bases.

The published notice says that World Support Service sp. z o.o. may process your data in order to:

  1. present a marketing offer of a product from businesses cooperating with the EMS PL FOUNDATION — on the basis of consent, Article 6(1)(a) of Regulation (EU) 2016/679 (the GDPR);
  2. carry out direct marketing of services under a contract made through the foundation — on the basis of the controller’s legitimate interest, Article 6(1)(f), covering marketing of that establishment’s own services, within the scope of processing entrusted to World Support Service sp. z o.o., and marketing of the foundation’s own services;
  3. conclude and perform a contract, including a risk assessment — Article 6(1)(b), on the basis of processing entrusted to the foundation by a cooperating establishment;
  4. assess risk automatically, by profiling customers before a contract — Article 6(1)(c), on the basis of that entrusted processing;
  5. meet duties under accounting law — Article 6(1)(c);
  6. analyse, including profiling, the offer of products from businesses cooperating with the foundation, so that a product can be proposed that fits the needs of a person looking for services provided by World Support Service sp. z o.o. — Article 6(1)(f), and in due course Article 6(1)(c), in connection with Article 8(1) and (3) of the Act of 15 December 2017 on insurance distribution (Journal of Laws of 2017, item 2486);
  7. bring or defend claims connected with an insurance-product offer that was presented to you — Article 6(1)(f);
  8. handle requests you send us (for example through a contact form);
  9. contact you, including about the provision of services.

Automated decisions, including profiling.

The published notice says that decisions about you may be made automatically, without human involvement, and that they concern the amount of fees. They would be based on data including your name, PESEL number, date of birth and place of residence, and on profiling, described as an automatic assessment related to a contract.

Whether you must provide the data.

Providing data in connection with a contract is necessary to conclude and perform the contract and to assess risk. Without the data, the contract and the risk assessment are not possible. Providing data for marketing is voluntary.

How long the data are kept.

Your data are kept until claims expire or until a statutory duty to keep them ends. The controller will stop processing data used for profiling and analysis earlier if you object to that processing.

Recipients.

  1. Your data may be made available to bodies authorised by law and to establishments cooperating with the EMS PL FOUNDATION.
  2. Your data may be passed to processors acting for the controller, such as IT providers or partners of the foundation acting as agents. They process the data under a contract with the controller and only on the controller’s instructions.
  3. Your data will not be transferred to recipients established in, or processing data in, countries outside the European Economic Area.

Your rights.

  1. You have the right of access, and the right to ask for rectification, erasure or restriction.
  2. Where processing is based on consent, you may withdraw consent. Withdrawal does not affect processing that was lawful before the withdrawal.
  3. Where processing is based on a legitimate interest, you may object, including to profiling.
  4. Where your data are processed to conclude or perform an insurance contract, or on the basis of consent, you also have the right to data portability: to receive the data in a structured, commonly used, machine-readable format, and to send them to another controller.
  5. Where a decision is automated, you may challenge it, state your own position, and ask for the matter to be reconsidered by an employee of the insurance undertaking cooperating with the foundation.
  6. You may lodge a complaint with the President of the Personal Data Protection Office in Poland.

To use these rights, contact the controller or the data-protection officer at the addresses above, or contact the supervisory authority about a complaint.