Privacy policy

Information from Bosko spółka z ograniczoną odpowiedzialnością spółka komandytowa on the Processing of Personal Data of Contractors, Representatives, and Contact Persons Designated by the Contractor

1. Data Controller. The controller of your personal data is Bosko spółka z ograniczoną odpowiedzialnością spółka komandytowa, seated in Lublin, ul. Krakowskie Przedmieście 4, 20-002 Lublin (hereinafter "Bosko"), which can be contacted:

• by writing to the correspondence address
• by writing to the e-mail address: kontakt@lodybosko.pl

2. Categories of relevant data and the source of their collection. Acting as a data controller in the course of its business activities, Bosko collects personal data from the entity with which it cooperates — for example, under a contract, or with which it is negotiating one (hereinafter: "Contractor") — on whose behalf you act. The Contractor may provide us with your data, for example, in connection with the performance of a contract concluded by Bosko, from an employee or associate of the Contractor, or directly from you. Bosko may process data of:

2.a. Contractors and potential Contractors of Bosko (if they are natural persons), including first name, surname, business name, business address and other correspondence addresses, contact details (e-mail, phone number), tax identification number (NIP), business registration number (REGON), national identification number (PESEL), and identity document series and number;
2.b. Partners, statutory representatives, authorized representatives, and attorneys-in-fact of Contractors, including first name, surname, phone number, e-mail address, data concerning their status within the Contractor's structure (e.g., function, position, scope of authority, place of employment), PESEL number, identity document series and number, and contact and registration data;
2.c. Employees and associates of the Contractor, including contact persons indicated in contracts or related to contracts performed with our Contractor, and persons cooperating with Contractors, including first name, surname, phone number, e-mail address, and data concerning their status within the Contractor's structure (e.g., function, position, scope of authority, place of employment).
Bosko may also obtain additional information from publicly available sources, such as publicly accessible commercial registers maintained under applicable law (e.g., CEIDG, KRS), limited to data disclosed in such registers.

3. Legal basis and purpose of personal data processing. Bosko may process personal data:

3.a. Based on your voluntary consent, in accordance with Article 6(1)(a) of the GDPR. Bosko stores such data until consent is withdrawn. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal;
3.b. When it is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract, in accordance with Article 6(1)(b) of the GDPR — in situations where you are our Contractor;
3.c. Based on the legitimate interest of the controller, which consists of verifying the identity of persons representing Contractors and performing the contract, including maintaining ongoing contact, in accordance with Article 6(1)(f) of the GDPR — where you are a representative of the Contractor or a contact person on the Contractor's side;
3.d. When it is necessary for the fulfillment of legal obligations incumbent upon Bosko under applicable law, in accordance with Article 6(1)(c) of the GDPR — in particular, the provisions of the Tax Ordinance Act of 29 August 1997 (consolidated text: Journal of Laws 2022, item 2651, as amended) and the Accounting Act of 29 September 1994 (consolidated text: Journal of Laws 2023, item 120, as amended);
3.e. In accordance with Article 6(1)(f) of the GDPR, on the basis of the legitimate interests of the controller or a third party, which include: (i) establishing, pursuing, and defending claims arising from business activities and protection against such claims; (ii) maintaining ongoing contacts and settlements; (iii) designing and planning the development of Bosko's network and ensuring network continuity; (iv) responding to correspondence, applications, and requests; (v) document archiving; (vi) pursuing marketing objectives; (vii) detecting and preventing fraud.

4. Voluntary or mandatory nature of providing data. Providing certain data is necessary for entering into and performing a contract, including settlements, and for fulfilling obligations under applicable law. In other respects, providing data is voluntary, but may prove necessary, for example, to receive information about Bosko's product and service offers.

5. Data retention period. Personal data is processed for the duration of the contract, its performance, settlements, and fulfillment of legal obligations. Personal data processed on the basis of the controller's legitimate interest is retained for the duration of that interest, unless an objection to processing is submitted earlier. In each case, the retention period may be extended due to the establishment, pursuit, or defense of claims that may arise between Bosko and the Contractor — until such claims become time-barred.

6. Recipients of data. Bosko may disclose personal data only where justified by the purpose being pursued, to the following categories of recipients:

6.a. Entities and persons acting on behalf of and for Bosko — Bosko's subcontractors (including providers of accounting, tax, audit, and legal services; IT systems suppliers and IT service providers; cloud service providers; insurers; entities providing technical, organizational, and advisory support; entities providing archiving services; and entities providing personal and property protection services);
6.b. Administrative authorities, courts, and other procedural bodies acting within the proceedings they conduct;
6.c. Other entities, where necessary for the implementation of actions taken at the request of the data subject.

7. Bosko will not transfer personal data to a third country or international organization, subject to the reservation that if such a transfer proves necessary, it may take place with appropriate safeguards as referred to in Article 46 of the GDPR.

8. Rights of data subjects. A person whose data is processed by the Controller has the right to access their data and the right to rectification, erasure, restriction of processing, data portability, the right to object, and the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

9. Right to lodge a complaint. You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if you believe that the processing of your personal data violates applicable law.