Data protection principles 4.1. When processing data, the Manager shall follow these principles: 4.1.1. to process personal data in such a way, to ensure adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, by using appropriate technical or organizational arrangements. The controller shall comply appropriate events to ensure that the processing of personal data happens in accordance with the requirements of regulatory enactments; 4.1.2. to process personal data in a lawful, fair and transparent manner for the Data Subject; 4.1.3. to collect personal data only for specified, explicit and legitimate purposes and to not process them further in a way incompatible with those purposes. Unless it is necessary to perform the functions and duties required by law. 4.1.4. to process personal data adequately, appropriately and to process only the data that is necessary to achieve purposes of the processing; 4.1.5. to process only accurate personal data and, if necessary, update them; 4.1.6. to keep personal data for no longer than it is necessary for the purposes in which the relevant personal data are processed; 4.2. Personal data provided by the Data Subject is not transferred or processed outside the European Union and the European Economic Area.
Categories of personal data which are being processed 6.1. The categories of personal data processed by the Manager depend on the Manager's services used by individuals. For instance: a) when communicating with the Manager in writing, the content and timing of the communication, as well as information on the communication tool used (e-mail address,) may be saved; b) on the basis of an agreement concluded with the Customer, its employee, within the framework of which the following personal data is processed: name, surname, position, telephone number, e-mail address, assigned “id” user name and initial password;
Storage of personal data 7.1. The Manager shall store personal data for the period of time specified in regulatory enactments or until the purpose for which the data was collected has been achieved. 7.2. Personal data provided by the Data Subject on the basis of his consent shall be kept by the Manager until the purpose for which the data were collected has been achieved or until the Data Subject withdraws his consent.
Rights of the Data subject 8.1. Before obtaining personal data or at the time when personal data is obtained, the Manager will provide the Data Subject with information on why the Manager needs the Data Subject's personal data. The Data Subject may be informed by separate information sheets, information on application forms, information contained in contracts, informative messages or orally why the Manager needs the Data Subject's personal data and what the Manager will do with it in accordance with Article 13 of the General Data Protection Regulation. 8.2. The Data Subject has the right, by submitting an application to the Manager in person and presenting an identity document or by sending an electronically signed document: 8.2.1. to contact the Manager and request information on the personal data that is being processed by the Manager; 8.2.2. to request the addition or correction, deletion or restriction of processing personal data or to object to the processing of Data Subject’s personal data, as well as the right to data portability. The Manager will evaluate the Data Subject's request and pursue the Data Subject's rights in accordance with the requirements of regulatory enactments; 8.2.3. to withdraw the consent to process Data Subject’s personal data if the basis of processing personal data of the Data Subject is the consent of the Data Subject, but this does not affect the lawfulness of the processing operations performed when the consent was valid. 8.2.4. to submit a complaint regarding illegal processing of personal data to the Data State Inspectorate, if the Data Subject has suspicion about it; 8.2.5. in any case, pursue all his rights as a Data Subject under Chapter III of the General Data Protection Regulation. 8.3. The Manager will evaluate the Data Subject's request and pursue the Data Subject's rights in accordance with the requirements of regulatory enactments. The Manager will provide a response to the Data Subject's application no later than within one month, but in certain cases, the Manager may extend the response time for another two months, about which the Manager will inform the Data Subject;
Communication with the Manager 9.1. In case of any questions or uncertainties related to the processing of personal data by the Manager, the Data Subjects must contact the Manager by using the contact information specified in Clause 1.