This privacy notice is intended to provide information on the rules governing the processing of personal data by MACTRONIC GROUP sp. z o.o. in connection with the processing of personal data obtained via the Apollo.io platform, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), as incorporated into the EEA Agreement and applicable in Norway.

1. Personal Data Controller

The Controller of your personal data is MACTRONIC GROUP sp. z o.o., entered in the Register of Entrepreneurs maintained by the District Court for Wrocław-Fabryczna in Wrocław, 9th Commercial Division of the National Court Register, under KRS number: 0000976373, NIP: 897-001-32-66, REGON: 931589124, with its permanent place of business at: ul. Stargardzka 4, 54-156 Wrocław, Poland.

2. Contact

The Controller may be contacted by email at: bok@mactronic.pl or in writing at the following address: MACTRONIC GROUP sp. z o.o., ul. Stargardzka 4, 54-156 Wrocław, Poland.

3. Data Protection Officer

The data subject may also contact the Data Protection Officer appointed by the Controller directly by email at: kasia@doradztwoprawne.org or in writing at the following address, marked for the attention of the “Data Protection Officer”: ul. Stargardzka 4, 54-156 Wrocław, Poland.

4. Purposes, Legal Basis and Data Retention Period

Personal data are processed for the purpose of establishing business contact and providing information about the Controller’s activities. The legal basis for the processing is Article 6(1)(f) GDPR, namely the legitimate interests pursued by the Controller in establishing business contacts with potential business partners and providing information about the Controller’s activities for the purpose of developing its business operations.

The data will be processed until a valid objection to the processing is made or until the activities related to establishing business contact are concluded, whichever occurs first.

5. Categories of Personal Data Processed

The following categories of personal data are processed: first name, surname, job title, company name, business email address and telephone number.

6. Source and Method of Obtaining the Data

Your personal data were not obtained directly from you. They were obtained via the Apollo.io platform, which aggregates information from publicly available sources, such as company websites, public registers, business directories and social networking platforms, as well as from business partners that make data available in accordance with applicable law. The data were obtained solely as contact details related to your professional activities or the position you hold.

7. Recipients of Personal Data

Personal data may be disclosed to entities providing IT, hosting, email, marketing tools and cloud services to the Controller, solely pursuant to data processing agreements and without the right to use such data for their own purposes.

8. Rights of Data Subjects

You have the right to access your personal data, rectify or erase them, restrict their processing and lodge a complaint with the competent supervisory authority.

Because the processing is based on the legitimate interests pursued by the Controller under Article 6(1)(f) GDPR, you also have the right to object at any time to the processing of your personal data, on grounds relating to your particular situation, in accordance with Article 21 GDPR.

9. Transfers of Personal Data to Third Countries or International Organisations

Personal data may be transferred to recipients located outside the European Economic Area (EEA) where this is necessary in connection with the Controller’s use of technology service providers, in particular cloud services, email services or other tools supporting its business operations.

Such transfers are made on the basis of an adequacy decision adopted by the European Commission, Standard Contractual Clauses adopted by the European Commission, or other appropriate safeguards provided for in Chapter V of the GDPR.

10. Automated Decision-Making

Your personal data are not used for automated decision-making or profiling.