- The Data Administrator.
- The data administrator is SILESIAN LOGISTICS Sp. z o.o. with its registered office at: 43-370-Szczyrk, Beskidzka 90a. Contact with the Administrator is possible via the above-mentioned correspondence address, as well as via the e-mail address: rodo@silesianlogistics.pl.
- The administrator attaches particular importance to respecting privacy and the rules for the processing of personal data in accordance with the provisions of the European Parliament and Council Regulation 2016/679 dated April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95 / 46 / EC (General Data Protection Regulation) (Journal of Laws UE L 119 of 2016), hereinafter referred to as “GDPR”.
- The administrator ensures that the data is collected only to the extent necessary for the indicated purpose and processed only for a period in which it is necessary.
- Type of Personal Data
- The administrator processes personal data necessary to achieve a specific processing purpose, in particular: name, surname, e-mail address, correspondence address, telephone number, address of residence which were provided in the course of the activity conducted by the Administrator.
- Providing data is necessary for the provision of services and the settlement of business activities. In the remaining scope providing data is voluntary, however, depending on the circumstances, a refusal to provide data or a request for its removal may prevent the Administrator from providing information about his/her activities and maintaining contact.
- Through the mentioned website, personal data is processed on the basis of the consent expressed by the User. The scope of processed personal data depends on the forms available on the website www.silesianlogistics.pl. When visiting the website, information about the User’s visit is also automatically collected, e.g. IP address, name of domain, browser type, operating system type, etc.
- The scope and purposes of Personal Data processing
- Cooperation with contractors and clients, including potential clients
- The administrator processes personal data in the following areas: name, surname, e-mail address, correspondence address, telephone number, residence address, VAT, REGON, and in strictly defined cases also: series and number of the driving license, ID card and passport. The Administrator obtains personal data directly from the person to whom they relate, the entity that the natural person represents, commercial offers, from transport exchanges, or from public registers (KRS, CEIDG).
- The Administrator processes the Personal Data to:
- execute contracts, transport orders – the basis for data processing is an action necessary to perform the contract with the data subject, i.e. art. 6 sec. 1 point b) GDPR;
- protect against possible claims – the basis for data processing is acting in the legitimate interest of the data Administrator, which is protection against possible claims, i.e. art. 6 sec. 1 point f) GDPR;
- prepare fulfillment of tax and accounting obligations – the legal basis of art. 6 sec. 1 lit. c) GDPR in relation to the Accounting Act
- ongoing contact in connection with the conclusion or execution of a contract, presentation of an offer, sending an order, answers to questions – legal basis of Art. 6 sec. 1 lit. a) or f) GDPR;
- test the quality of provided services, including optimization of service processes, building knowledge about customers, financial analysis of the Company – legal basis: art. 6 sec. 1 lit. a) or f) GDPR.
- Provision of services
In the case of collecting data for the purpose of executing a specific contract, the Administrator provides the data subject with information regarding the processing of his data (including the scope, purpose and period of storage) at the time of concluding the contract.
- Correspondence and telephone contact.
- Scope and source of data.
The administrator processes personal data in the following areas: name, surname, e-mail address, correspondence address, telephone number. The Administrator obtains personal data directly from the data subject.
- Purposes of processing.
The Administrator processes the data to:
- Conduct e-mail correspondence and traditional correspondence related to the activity conducted by the Administrator – legal basis: art. 6 sec. 1 letter f) GDPR;
- telephone contact related to the activity conducted by the Administrator, including information about services – legal basis: art. 6 sec. 1 letter a) or f) of the GDPR;
- bongoing contact not related to services provided to persons who are senders of correspondence in order to resolve or finalize a case to which the correspondence relates – legal basis art. 6 sec. 1 letter a) or f) of the GDPR;
- other legitimate purposes related to establishing and maintaining contacts and creating a network of contacts (legal basis of Article 6 (1) (a) or (f) of the GDPR).
- Contact via the website
- The administrator processes Personal Data in the following scope: name, surname, e-mail address. The Administrator obtained personal data directly from the person to whom they relate via the contact form available on the website www.silesianlogistics.pl.
- The administrator processes data in order to answer questions sent via the contact form – legal basis: art. 6 sec. 1 lit. a GDPR.
- The data storage period
The administrator will process personal data for the period necessary to fulfill the purpose for which they were collected:
- cooperation with contractors and clients, including potential clients: for the period necessary to execute the contract, as well as for the period of limitation of claims under the contract. In the case of data processing on the basis of the Administrator’s legitimate interest – the data will be processed for a period enabling the implementation of this interest or until an effective objection to the data processing is raised.
- correspondence and telephone contact: for the period necessary to achieve the purpose of contact and for the period of maintaining current relations, including the exchange of correspondence, and after the termination of this relationship, for a period of 3 years. In the case of data processing on the basis of the Administrator’s legitimate interest – the data will be processed for a period enabling the implementation of this interest or until an effective objection to data processing is raised.
- contact via the website: during the period of maintaining current relations, including the exchange of correspondence, and after the termination of this relationship, for a period of 3 years.
The processing period may be extended within the limits of the law if the processing of personal data is necessary to assert or defend against claims. After the processing period, the data will be deleted or anonymized.
- Data recipients
In connection with the activities conducted by the Administrator, to the extent necessary, personal data may be transferred to external entities, including in particular:
- entities directly involved in the execution of transport orders,
- entities providing accounting services,
- entities running postal or courier activities,
- banks, if it is necessary to conduct settlements,
- hosting service providers,
- cloud computing providers (including FireUp Software sp. z o. o., Google Inc.),
- TRANS.EU platform providers,
- invoicing system providers,
- entities responsible for the operation of IT systems and equipment,
- state authorities or other entities authorized under the law, in order to perform the obligations incumbent on the Administrator,
- other entities to the extent to which the Administrator will be obliged to do so by law.
- Transferring data outside the European Economic Area
The processed personal data may be transferred to a country which does not belong to the European Economic Area or to an international organization within the meaning of the GDPR, as part of entrusting the processing of personal data or making it available under the law, however, provided always under one of the conditions:
- The European Commission stated that it is a third country or an international organization that ensures an adequate level of protection of personal data, in accordance with Art. 45 GDPR,
- a third country or an international organization provides adequate safeguards and has enforceable rights of data subjects and efficient legal measures for protection in accordance with Art. 46 GDPR,
- there is a case referred to in art. 49 sec. 1, second paragraph of the GDPR.
- Rights of data subjects.
The processing of personal data as part of the provision of services is regulated by law or contracts concluded with customers. Situations specified in the provisions of law, data subjects are entitled to:
- the right to access the content of one’s data,
- the right to rectify inconsistencies or errors in the data being processed or to supplement them,
- the right to information about the data being processed, including the purposes of the processing,
- the right to limit the processing of personal data,
- the right to withdraw consent at any time without affecting the lawfulness of processing, as long as the processing is carried out on the basis of consent,
- the right to transfer personal data,
- the right to object to processing for marketing purposes or based on the legitimate interest of the Administrator,
- the right to lodge a complaint to the supervisory body, i.e. the President of the Personal Data Protection Office, if it is found that the processing of personal data violates the law, including the GDPR.
- Automated decision making
Personal data is not used for the purpose of automated decision making (including in the form of profiling).
- Protection of personal data.
The data administrator declares that he/she applies technical and organizational measures to ensure the protection of personal data processing appropriate to the threats and categories of data, and in particular, protects Users’ personal data against loss, misuse, unlawful processing or modification. Access to personal data is granted only to persons authorized to process them and obliged to keep such data confidential.
The website www.silesianlogistics.pl contains links to other websites. The administrator is not responsible for the privacy practices of these websites. After switching to these websites, read the privacy policy or cookie policy of a given website.
If the current privacy policy is changed, its content will be amended accordingly.