PERSONAL DATA PROCESSING NOTICE
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
- The data controller of personal data is The Royal Sport Management limited liability company with its registered office in Szczecin, address: Al. Piastów 54/4, 70-311 Szczecin, registered in the entrepreneurs’ register of the District Court Szczecin-Centrum in Szczecin, 13th Economic Department of the National Court Register under KRS number: 0000536119, NIP: 8522611066, REGON: 360350280 (hereinafter: “TRSM”).
- Personal data obtained from customers and/or entities acting on their behalf will be processed for the purpose of concluding a contract and/or fulfilling obligations arising from the contract (Art. 6(1)(b) GDPR). This includes identifying information (e.g., name, PESEL – if required by law or necessary for the proper performance of the contract), contact details (correspondence address, phone number, email address, etc.), communication metadata (e.g., contact date), and content. Depending on the destination country or the presented offer, data from ID cards or passports necessary for contract fulfillment may include: document series and number, place of birth, citizenship, facial image, maiden name, issue date, and expiration date. The Administrator may also process special categories of data, including health data, for individuals with disabilities requiring special care. Providing data is voluntary but may be necessary to conclude or perform the contract.
- When processing is necessary to fulfill a legal obligation incumbent upon TRSM (e.g., tax or accounting obligations), the legal basis for processing is Art. 6(1)(c) GDPR. If processing is based on TRSM’s legitimate interests, such as the need to establish, assert, or defend claims, conduct correspondence, including marketing, or conduct market or statistical analyses, the legal basis for processing is Art. 6(1)(f) GDPR.
- Considering that some of TRSM’s contractors may be located outside the European Economic Area (EEA), TRSM ensures appropriate physical, technical, and organizational measures to protect personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use, or access, in accordance with agreements meeting GDPR requirements.
- TRSM will process personal data for no longer than necessary to achieve the specific purposes for which they are processed. Generally, personal data collected for the purpose of concluding and performing a contract are processed for the period necessary to fulfill the obligations arising from that contract unless legal regulations, especially accounting or tax laws, require TRSM to process personal data for a longer period and/or until the expiration of the limitation period for possible claims, depending on which of the above-mentioned periods is longer. The mentioned processing periods may be appropriately extended in the case of claims and proceedings, e.g., legal ones – for the duration of these proceedings and their settlement.
- The person whose personal data is processed has the right to access their data, as well as the right to rectify, erase, restrict processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal, and the right to lodge a complaint with the supervisory authority (President of the Office for Personal Data Protection).
- This information may be subject to changes from time to time.