Privacy Notice on the Processing of Personal Data

The controller of personal data is 3D Estate Sp. z o.o., with its registered office in Mikołów (43-190), ul. Wyzwolenia 27, Poland. Contact: rodo@3destate.pl.

1. Personal data are processed for the following purposes:

• to respond to enquiries submitted through our website or by e-mail, which constitutes a legitimate interest of the Controller within the meaning of Article 6(1)(f) GDPR;
• to carry out marketing activities promoting the Controller, which constitutes a legitimate interest of the Controller within the meaning of Article 6(1)(f) GDPR; in the case of direct marketing, the processing takes place on the basis of consent given voluntarily in each individual case, i.e. under Article 6(1)(a) GDPR;
• to run the Controller's business, including acquiring orders and establishing and maintaining cooperation with business partners, which constitutes a legitimate interest of the Controller within the meaning of Article 6(1)(f) GDPR;
• in the case of the Controller's business partners, to perform the contract concluded with the Controller and to take steps prior to its conclusion, on the basis of Article 6(1)(b) GDPR where the other party to the contract is a natural person, or Article 6(1)(f) GDPR where the other party is a different type of entity;
• to settle the contract referred to above and to exercise the rights and fulfil the obligations arising from tax law, social security law (where applicable) or other regulations, on the basis of Article 6(1)(c) GDPR;
• to protect and pursue claims arising from concluded contracts or from other events, and also to measure satisfaction with the quality of service provided in connection with the Controller's services and to handle any related complaints, which constitutes legitimate interests of the Controller within the meaning of Article 6(1)(f) GDPR.

2. Personal data are or may be disclosed to the following third parties:

• tax authorities, public administration bodies, and law enforcement or judicial authorities, to the extent that this is an obligation of the Controller under generally applicable law;
• entities cooperating with the Controller and providing support services to the Controller, including, among others, providers of advisory and audit services and providers of legal, financial, accounting and tax services.

Where the Controller uses the services of other entities, personal data may be disclosed to them under data processing agreements, and those entities are obliged to keep the data they process confidential.

3. Providing personal data is voluntary, but it is necessary in order to take steps prior to the conclusion of a contract and to perform that contract, as well as to carry on correspondence in response to an enquiry.

4. Data may be transferred outside the European Economic Area only on the basis of mechanisms ensuring an adequate level of data protection (for example, the Standard Contractual Clauses approved by the European Commission).

5. The Controller processes personal data for the period of:

• handling the enquiry, or pursuing claims connected with it or defending against such claims;
• cooperation and performance of the contract, and after it ends, for the period required by generally applicable law (including tax law), for the period necessary to protect or secure claims arising from that cooperation or contract, and for the retention period required by law for financial and accounting records;
• necessary to protect or secure claims available to the Controller or pursued against the Controller, until the relevant limitation period expires.

6. You have the right to:

• access your data (including obtaining a copy of it) and to information on how it is processed;
• request rectification of your data;
• request erasure of your data; note, however, that in view of the limitations set out in Article 17(3) GDPR we will not always be able to comply with such a request;
• request restriction of the processing of your data;
• object to the processing of your data;
• withdraw your consent to further processing of your personal data where consent is the legal basis for the processing, without affecting the lawfulness of processing carried out on the basis of that consent before its withdrawal.

You can exercise all of the above rights by contacting the Controller at rodo@3destate.pl.

7. You also have the right to lodge a complaint with the supervisory authority, i.e. the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), if you consider that the processing of your personal data infringes the GDPR. A complaint may be lodged in writing at: ul. Stawki 2, 00-193 Warsaw, Poland, or through the ePUAP e-government platform.

8. Your personal data will not be used for automated decision-making, including profiling.