Personal data protec.on together with the privacy policy
Ladies and gentlemen,
We wish to inform you that as of May 25, 2018, the Regulation of the European Parliament and of the Council of the European Union of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data, hereafter referred to as “GDPR” entered into force, superseding Directive 95/46/EC. Considering the personal data of our current and potential customers interested in new cars, cars from Poland, and used cars from Poland, we have updated our privacy policy to provide you with the highest possible security standard. In accordance with the obligation resulting directly from Art. 13 GDPR, we have compiled information regarding the principles of personal data processing that we will adhere to when collecting your data. Please read the following information. Your consent to the processing of personal data should be provided by signing and sending a form that includes, inter alia, consenting to our defined goals.
1. The administrator of personal data
The data administrator is IRYDIUM EUROPE Sp. z o.o. Sp.k. with its registered office in Zielona Góra 65-517 ul. Wiśniowa nr. 1 entered in the Register of Entrepreneurs kept by the District Court in Zielona Góra – VIII Commercial Division of the National Court Register under the number KRS 0000576260, REGON 362789406, NIP: 9291871708
Address: Irydium Europe Sp.z.o.o Sp.k Zielona Góra (65-517) ul. Wiśniowa 1, Poland
Website: eu-neuwagen.pl/
E-mail: office@eu-neuwagen.pl
1. Legal basis for the processing of personal data
Irydium Europe bases its privacy policy on the following provisions
3. The basis for the processing of personal data and the purpose of their processing
We process our Clients’ personal data in accordance with the law, thereby complying with the principles of legality, clarity and transparency. We do not exclude that during a single
data processing, the client’s data will be processed for different purposes and on the basis of different legal bases in order to achieve a specific goal or goals.
Pursuant to the Act in force, the processing of personal data is in accordance with the law, among others when the data subject has consented to the processing of personal data for one or more specified purposes
Consent provides the legal basis when:
– The customer sends us a voluntarily completed application form in order to take action by the Administrator at the request of the Customer whose data is applicable before entering into the contract, i.e. using the database that all Clients use after consenting to the processing of personal data in the purposes we have set and after announcing to familiarize yourself with our information clause. Consent to the processing of personal data collected on the application form is granted by clicking the „Send“ button.
– expresses a voluntary agreement for the purpose of future marketing consisting in sending current offers of cars in the Irydium Europe-Newsletter database, commercial information, the use of telecommunications devices such as telephone, computer, tablet, to send e-mails, for making telephone calls initiated by Irydium.
In the event that consent to the processing of personal data concerns more than one of the purposes, the User’s request for consent for data processing will be presented in a clear and simple manner, so that the User can distinguish one query from the other.
The purposes of personal data processing:
– in order to gain access to the database, and so to take action at the request of the data subject before concluding the contract
– direct marketing – presenting Irydium Europe offer, – in order to subscribe to the Newsletter,
– in order to maintain a business relationship that allows contact to collaborate on ongoing orders,
– for claims
Further, the processing of personal data is lawful when it is necessary for the performance of the contract, to which the person whose personal data refers to or to take ac.on on behalf of the person to whom the personal data pertains is a party.
– preparation and sending by us the offer of a given product changes the legal basis of the action, to the action aimed at concluding the contract, in accordance with art. 6 section 1 point b of the GDPR
Legally legitimate interests
Pursuant to Article 6 (1) (f) GDPR, we may process personal data based on our legitimate interest, which are:
– provision of services provided electronically in order to secure them, reporting complaints, defects, non-compliance of the goods with the contract,
– implementation of clients’ rights and proof of their service,
– securing information / documents in the event of legal protection against claims, for the purpose of pursuing claims and for the purpose of proof of facts,
– personal data of persons contacting on behalf of corporate clients interested in the offer, or regarding the use of Irydium Europe services will be processed within the aforementioned interest in order to provide ongoing contact regarding a given business relationship.
4. Rules for the processing of personal data
In accordance with the European Union Regulation, we provide the personal data of our clients:
– we collect only to a minimum extent, so to the extent necessary to achieve the above goals,
– the goals we provide are based on the law, thus we do not process the data in a way that is against the law,
– in accordance with the law, we store personal data only for the time necessary to achieve the purposes for which they are collected,
– every customer has access to their personal data,
– every customer has the right to request the removal of their personal data from the database at any time without giving a reason, thus every customer has the right to request the change of his personal data in the database, limit the processing of personal data and may withdraw consent to the processing of personal data, and also may object to the processing of personal data
– we protect the personal data of our clients in particular against loss, accidental loss or change, against access to unauthorized persons,
– the personal data of our clients are and will be processed by the Administrator during the period of maintaining business relations, for the period required by the provisions of national law and for the period necessary to establish claims,
We do not share in any way our clients’ personal data with other entities, except public authorities, which may receive data in a given proceeding, defined by EU regulations or as part of a specific procedure defined by national law
We do not process our clients’ personal data in the process of automated decision making, including profiling.
5. What are the entitlements to our clients in relation to the personal data processed by us?
In connection with the processing of personal data by us, our current and future Customers have the right to:
– “being forgotten” – a request for immediate deletion by the administrator of personal data, an exception in this regard is art. 17 of GDPR
– the user whose data relates to objects to the processing of his personal data,
– the right to rectify personal data that is incorrect, supplement incomplete personal data, including by providing an additional statement,
– the right to information as well as for what purpose Irydium processes personal data of the Customer,
– the right to access data,
– the right to limit the processing of personal data,
– the right to transfer personal data, i.e. the right to receive from the Administrator information on personal data being processed in a structured commonly used machine- readable format and has the right to send this data to another Administrator, to the extent that the client’s data is processed if the processing takes place on the basis of consent or on the basis of a contract – the right to transfer personal data to another administrator,
Applications should be sent to:
We execute our clients’ requests without unnecessary delay, no later than one month after receiving the application, however, we reserve the right to request a further 2 months due to the number of requests or the nature of the request to extend the deadline.
How do we collect our customers’ data?
We collect personal data of our clients when filling out the application form voluntarily on the website of our car base, where each client is asked to read our privacy policy in the message appearing at the bonom of the internet database, then is asked to consent to the processing of personal data appearing in Each customer will also receive the consent on sending the commercial information given in the application form by e-mail with current car offers. IRYDIUM EUROPE Sp. z o.o. Sp.k. via electronic means of communication, consent to the use of telecommunications terminal equipment such as telephone cell, computer, tablet, e-mail and automatic calling systems in the form of voice messages or SMSs, MMS, as well as for initiating telephone calls, consent, consent to the verification of personal data through the collection and verification of a copy of the National Court Register, in the case of foreign clients and Polish consent to verify the economic operator data, to verify whether the economic entity is a VAT payer in your country, through VIES and through the website of the Ministry of Finance and a statement on familiarization with our privacy policy – the content of the information clause.
Providing personal data is voluntary, but may be necessary to provide the service. We do not use an automated system to make decisions towards clients, including profiling. In our database we do not use cookies, thus the personal data of our clients are not collected in cookies.
What kind of data can we process?
Personal data of people who are already our clients include personal data that appear on the voluntarily completed application form, we can also use previous data that we have collected as part of business cooperation, this range of data may vary depending on how long the business cooperation lasts and whether our client is a natural person or an economic entity. Thus, we collect personal data of people who are already our clients only to the extent necessary for the purposes we set. If you are not yet our client, personal data that we collect includes only personal data that appear on the voluntarily completed application form in the database, these data are used only to the extent necessary for the purposes we have set out. As part of the development of cooperation with new clients, the scope of personal data collected by us will be varied, but these data will always be used only to the extent necessary and limited to the objectives set by us, goals that are consistent with the law.
How we can process personal data: first name and last name, that is, identification of our current and future customers – differentiating whether our client is a natural person or an economic entity, contact details of a natural person, email address, home address, business address, registered office address firmy-, VAT no., identification details of the contact person, in the case of business entities, we can also check whether our customer is a VAT taxpayer. In the case of foreign entities, we can check whether the entity is a taxpayer in your country by hnp://ec.europa.eu/taxation_customs/vies/. Regardless of whether our client is a natural person or an economic entity, we can process information about the vehicle, including brand, model year, price, VIN number of the vehicle, service, complaints, inquiries, orders, data on transport services – whether the customer used the transport service of the subcontractor of Irydium, or arranged transport in its scope, however, if the client does not use the service of a subcontractor Irydium, Irydium may initiate a telephone connection with a carrier selected by the Customer in order to establish cooperation as part of the proper fulfillment of the contract and process the carrier’s personal data with his/her consent in the event of legal protection against claims, for claims and for the purpose of proving the facts.
What personal data can we process?
Information obtained from telecommunications devices such as telephone, computer, tablet, SMS, MMS, e-mail messages, initiated telephone calls by Irydium and telephone calls initiated by customers and future clients. We may also provide Customers’ personal data to subcontractors who entrust us with the processing of personal data for the purpose of transport services.
We would like to emphasize that your personal data will remain in your ownership, your control, and their processing is only intended to improve the quality of services provided to you and personalize the products delivered.
How long do we store data?
We know that the personal data of our clients can not be stored indefinitely, and therefore without time limit, which is why we store our customers’ personal data for as long as it is necessary for the purposes in which personal data is processed – if possible we try to give a specified period. When personal data of the Customer are processed on the basis of the consent given by him, the data will be stored for no longer than 20 years or until it is withdrawn. This period may change, i.e. personal data may be stored longer if necessary to establish, investigate or defend claims, this period may also be extended if such obligation results from EU regulations or national law.
How do we ensure the security of personal data being processed?
We know that the protection of personal data is a fundamental human right to privacy, we recognize that every person has the right to protect and has the right to demand protection of personal data. In order to meet this law, we protect the personal data of our current and future customers with protection, providing protection against illegal or unlawful processing and accidental loss, destruction or damage, thus we provide all physical, technical and organizational measures, including protection of access security, backup system, monitoring and viewing of personal data. The personal data processing security policy we provide ensures our clients’ confidentiality, and thus the protection of personal data against unauthorized persons. Each of our employees has the authorization to process personal data of our clients, each of us is obliged to confidentiality regarding the personal data of our clients.
Is it possible to withdraw consent to the processing of personal data?
Consent to the processing of personal data by each of our current and future clients does not mean that we will process personal data for us eternally. Every customer has the right to withdraw consent at any time. What does this mean in practice? In accordance with our goals, each customer will be asked by us to consent to the processing of personal data in order to get access to the database, for marketing purposes and to subscribe to our newsletter, thus the consent of our clients is the legal basis for the processing of personal data.
In the case of personal data processing for marketing purposes, withdrawal of consent in this respect will take place by sending us a withdrawal consent form (withdrawal form for processing personal data for marketing purposes, which can be found on the website) to the e-mail address: gdpr@eu-neuwagen.pl
In case of withdrawal of consent to receive newsletter from us, please send us a form – withdrawal of consent for the processing of personal data for the purpose of subscribing to the newsletter located on the website of our database at the e-mail address: gdpr@eu-neuwagen.pl
Is it possible to withdraw consent to the processing of personal data?
Consent to the processing of personal data by each of our current and future clients does not mean that we will process personal data for us eternally. Every customer has the right to withdraw consent at any time. What does this mean in practice? In accordance with our goals, each customer will be asked by us to consent to the processing of personal data in order to get access to the database, for marketing purposes and to subscribe to our
Newsletter, thus the consent of our clients is the legal basis for the processing of personal data.
In the case of personal data processing for marketing purposes, withdrawal of consent in this respect will take place by sending us a withdrawal consent form (withdrawal form for processing personal data for marketing purposes, which can be found on the website) to the e-mail address: gdpr@eu-neuwagen.pl
In case of withdrawal of consent to receive newsletter from us, please send us a form – withdrawal of consent for the processing of personal data for the purpose of subscribing to the newsletter located on the website of our database at the e-mail address: gdpr@eu-neuwagen.pl
However, withdrawal of consent to the processing of personal data contained in the car database also requires sending the completed form to the above e-mail address – withdrawal of consent for the processing of personal data contained in the car database)
Withdrawal of consent to the processing of personal data for marketing purposes, to subscribe to the newsletter will cause that you will not be informed about our new offers and our services.
Withdrawal of consent to the processing of personal data contained in the car database, is tantamount to the fact that you do not want to be further our customers, the mere withdrawal of consent to the processing of personal data will not cause negative consequences for you.
However, we point out that the withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
The application for withdrawal of consent for the processing of personal data will be processed as soon as possible, after its consideration you will receive information by e-mail about the cessation of personal data processing.
Changes in the Policy
We update our privacy policy on an ongoing basis, changes in policy may result from the need to adapt our policy to changes in EU or internal law or privacy standards. We will inform about every change in the privacy policy with an appropriate message on the website of our internet database.
This information on the processing of personal data by IRYDIUM EUROPE Sp. z o.o. Sp.k. with its registered office in Zielona Góra 65-517 ul. Wiśniowa nr. 1, Poland is an information document – an information clause, its purpose is to fulfill the information obligation resulting from the provisions of the GDPR.