Personal data processing policy (transparency policy)
Definitions
Administrator: FEROPORTO Sp. z o.o. with its registered office in Bielsko-Biala (43-300) at 5 Gasownicza Street, lok 1 under KRS number: 0000964776, REGON: 521682571, NIP: 5472230589; e-mail: info@malcosta.com, tel: +48123002025
Personal Data/Data: any information about an identified or identifiable natural person through one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of the natural person, including the IP number of the device, location data, Internet identifier and information collected through cookies and other similar technologies.
Policy: this Privacy Policy.
Data Subject: any individual who visits the Site or uses one or more of the services or features available on the Site.
We collect and process your personal data in connection with your use of our Sites. Below you will find detailed rules and purposes for the processing of your Personal Data collected during your use of the Website.
Data processing by the administrator
In connection with its business activities, the Administrator collects and processes Personal Data in accordance with the relevant regulations. The Administrator ensures transparency in data processing. The Administrator shall ensure that the data is collected only to the extent necessary for the indicated purpose and processed only for the period of time necessary. When processing data, the Administrator shall ensure its security and confidentiality, as well as access to information about such processing for data subjects. In the event that, despite the security measures in place, there is a breach of personal data protection (e.g., data "leakage" or loss of data), the Administrator shall inform data subjects of such an event in accordance with the regulations.
Contacting the controller
Contact with us is possible via e-mail address: or in writing to: info@malcosta.com or in writing to: 5/1 Gazovnicza Street, 43-300 Bielsko-Biala, Poland. The Administrator has appointed a Data Protection Officer who can be contacted via e-mail info@malcosta.com regarding any questions regarding the processing of your personal data.
Security of personal data
In order to ensure data integrity and confidentiality, the Administrator has implemented procedures that allow access to personal data only to authorized persons and only to the extent necessary due to the tasks they perform. The Administrator uses organizational and technical solutions to ensure that all operations on personal data are recorded and performed only by authorized persons.
In addition, the Administrator shall take all necessary measures to ensure that also its subcontractors and other cooperating entities provide guarantees of the application of appropriate security measures whenever they process personal data on behalf of the Administrator.
Purposes and legal grounds for processing personal data by the Administrator
E-mail and traditional correspondence
When e-mail or traditional correspondence is addressed to the Administrator that is not related to the services provided to the sender or any other agreement concluded with the sender, the personal data contained in such correspondence is processed solely for the purpose of communication and settlement of the matter to which the correspondence related.
The legal basis for the processing is the legitimate interest of the Administrator, consisting of correspondence addressed to it in connection with its business activities. The Administrator processes only personal data relevant to the matter to which the correspondence relates. All correspondence is stored in a manner that ensures the security of the personal data and other information contained therein and is disclosed only to authorized persons.
Telephone contact
When contacting the Administrator by telephone, on matters unrelated to the contract concluded or services provided, we may request personal data when it is necessary to handle the matter to which the contact relates.
Telephone conversations may also be recorded. The calls are recorded to verify the quality of the service provided and to verify the work of consultants, as well as for statistical purposes. The recordings are available to the Administrator's employees.
Personal data in the form of a call recording are processed:
- for customer service purposes;
- for the purposes of monitoring the quality of service and verifying the work of employees
Collection of data in connection with the provision of services or performance of other contracts
If data are collected for purposes related to the performance of a specific contract, the Administrator shall provide the data subject with detailed information regarding the processing of his/her personal data at the time of entering into the contract.
Collection of data in other cases
In connection with its operations, the Administrator also collects personal data in other cases - such as during business meetings, at industry events, or through the exchange of business cards - for the purposes of establishing and maintaining business contacts. Personal data collected in such cases are processed only for the purpose for which they were collected, and the Administrator ensures their adequate protection.
Recipients of the data
In connection with the conduct of activities requiring the processing of personal data, they may be disclosed to external entities, including, in particular, suppliers responsible for the operation of IT systems, entities providing legal or accounting services, couriers, marketing or recruitment agencies.
The Administrator reserves the right to disclose selected information concerning the data subject to the competent authorities or to third parties who make a request for such information, based on the relevant legal basis and in accordance with the provisions of the applicable law.
Transfer of data outside the European Economic Area
The level of protection of personal data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers personal data outside the EEA only when necessary and with an adequate level of protection.
Period of personal data processing
The period of data processing by the Administrator depends on the type of service provided and the purpose of the processing. The period of data processing may also result from regulations, if they provide the basis for processing. If the data are processed on the basis of the legitimate interest of the Administrator - e.g. for security reasons - the data are processed for a period that allows for its implementation or until an effective objection to the processing is made. If processing is based on consent, data are processed until the consent is withdrawn. If the basis for processing is the necessity to conclude and perform a contract, data will be processed until the contract is terminated.
The processing period may be extended if the processing is necessary to establish, assert or defend against possible claims, and thereafter, only if and to the extent required by law. After the expiration of the processing period, the data are irreversibly deleted or anonymized.
Submission of requests for the exercise of rights
A request for the exercise of rights of data subjects, can be submitted:
- in writing to the address: 5/1 Gazovnicza Street, 43-300 Bielsko-Biala, Poland;
- by e-mail to: info@malcosta.com
The request should, as far as possible, indicate precisely what the request concerns, i.e. in particular:
- what right the requesting person wishes to exercise;
- what processing the request relates to;
- what purposes of processing the request relates to.
Changes to the personal data processing policy
The Policy is reviewed on an ongoing basis and updated as necessary. The current version of the Policy was adopted on 01/05/2022.