Rules for the processing of personal data at Sports Advantage S.A.
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the GDPR), and in accordance with national personal data protection regulations, Sports Advantage Spółka Akcyjna (hereinafter: the Company) informs persons having a legal or factual relationship with the Company that they have the rights set out below in connection with the Company’s processing of their personal data.
In accordance with Article 6 of the GDPR, the Company processes personal data where at least one of the following conditions is met:
the data subject has given consent to the processing of their personal data for one or more specific purposes;
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps
at the request of the data subject prior to entering into a contract;processing is necessary for compliance with a legal obligation to which the controller is subject;
processing is necessary in order to protect the vital interests of the data subject or another natural person;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Data controller
The controller of personal data is Sports Advantage Spółka Akcyjna, 20 Ceramiczna Street, 43-346 Bielsko-Biała, Poland.
Data Protection Officer
The Company has not appointed a Data Protection Officer (hereinafter: DPO). For matters related to the processing of personal data, contact may be made by e-mail at: anna.wrzol@gmail.com .
Relevant correspondence may also be sent by post to the Data Controller’s address, marked “GDPR-Sports Advantage S.A.”.
Purposes of data processing by the Company
The Company processes personal data for the following purposes:
taking steps, at the request of the data subject, with a view to entering into a contract with the Company (legal basis: Article 6(1)(b) GDPR);
performance of a contract concluded with the Company (legal basis: Article 6(1)(b) GDPR);
performance of a contract concluded with the Company by the data subject acting as an attorney under a power of attorney granted by a principal who is a party to the contract with the Company (legal basis: Article 6(1)(b) GDPR);
performance of a contract concluded with the Company by the data subject acting as a representative of an organisational unit without legal personality or a legal person that is a party to the contract with the Company (legal basis: Article 6(1)(b) GDPR);
fulfilling legal obligations incumbent on the Company in connection with its business activities and the performance of concluded contracts
(legal basis: Article 6(1)(c) GDPR);marketing and promotion of products and services offered by the Company (legal basis: Article 6(1)(a) GDPR);
the Company’s internal administrative purposes, including statistics and internal reporting (legal basis: Article 6(1)(b) GDPR).
Source of personal data
The sources of the personal data of the natural persons referred to in points 3 and 4 above are natural persons, organisational units or legal persons that are parties to contracts concluded with the Company.
Disclosure of data to other recipients
In connection with the processing described in the section “PURPOSES OF DATA PROCESSING BY THE COMPANY”, personal data may be disclosed to other recipients. Recipients may include in particular:
(i) entities with which the Company has concluded an appropriate data processing agreement in connection with its activities, such as providers of accounting, IT and operational support services, providers of external archiving or data destruction services, and audit and consulting firms,
(ii) entities and authorities to which the Company is required to disclose data under generally applicable law.
Period of personal data processing by the Company
Personal data is processed for the period necessary to achieve the purposes specified in the section “PURPOSES OF DATA PROCESSING BY THE COMPANY”, namely:
for performance of a contract concluded by the data subject, until its performance is completed and thereafter for the period and to the extent required by law or necessary to secure potential claims;
for fulfilling legal obligations incumbent on the Company in connection with its business activities and concluded contracts, until those obligations have been fulfilled by the Company;
for marketing and promotion of products and services offered by the Company, until the data subject withdraws consent to such processing;
for internal administrative purposes, until the Company’s legitimate interests forming the basis for such processing have been fulfilled or until the data subject objects to such processing.
Your rights
Where data is processed for the purpose of entering into and performing a contract with the Company, provision of the data by the data subject is a condition for entering into that contract. Providing the data is voluntary; however, failure to provide it will make it impossible to enter into and perform a contract with the Company.
Automated decision-making and profiling
The Company does not process personal data by automated means, including profiling.