Privacy Notice for Contact Persons

Data Controller

The data controller is Towarzystwo Ubezpieczeń ZDROWIE S.A. with its registered office in Gdynia, ul. Śląskiem 17, 81-319 Gdynia. Contact with the controller: biuro@tuzdrowie.pl.

Data Protection Officer

E-mail contact: iod@tuzdrowie.pl or in writing to the registered office address.

Purposes and basis of processing in connection with the contract:

Art. 6(1)(f) of the GDPR – the controller’s legitimate interest in order to perform this contract. The controller’s legitimate interest is to enable communication related to the conclusion and performance of this contract, to receive and transmit declarations of intent of the parties to the contract, to direct any complaints and claims; and after the termination of the agreement, the necessity to establish, pursue or defend against possible claims.

Personal data recipients

Personal data recipients may be primarily:

a.      entities operating our ICT systems (i.e. hosting companies, IT service providers);

b.      entities providing us with legal, personnel, accounting, tax or advisory services;

c.      state authorities (e.g. ZUS [National Social Insurance Institution], tax offices, and other entities authorized on the basis of legal regulations) - in order to fulfil the obligations incumbent on the controller;

d.      entities providing postal services (i.e. the Polish Post Office and couriers).

 Data retention period

Data will be stored until the expiry of the contract, satisfaction of potential claims, the provisions of law, or until you make an objection.

The personal data provided to the Controller

The personal data provided to the Controller are as follows: first and last name, position or function, and business contact information: email address, and phone number.

Personal data rights

Personal data rights: access to personal data, rectification of data, erasure (insofar as this does not hinder the performance of the contract or the controller’s obligations under the law), restriction of processing, data portability, objection to processing and not being subject to profiling.

In addition, you have the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection) if you think the processing of personal data violates the provisions of the GDPR.