Information Policy on the Protection of Personal Data for Individuals Contacting Memos Ltd., Including Individuals Receiving Marketing Information from Memos Ltd.
Memos Ltd.
1. According to Article 4(7) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”), the data controller for personal data of individuals contacting Memos Ltd., including individuals receiving marketing information from Memos Ltd., is Memos Ltd., with its registered office at 43 Mogilska Street, 31-545 Krakow, Poland (hereinafter referred to as “the Company“).
2. For matters related to personal data protection, you can contact us via email at info@wx-cowork.com or by traditional mail to the Company’s registered office.
3. Personal data may be processed for the following purposes and based on the following legal grounds:
a) conducting correspondence, including ongoing communication related to inquiries addressed to the Company, which constitutes the legitimate interest of the Company (legal basis for data processing: Article 6(1)(f) of the GDPR),
b) conducting statistical analysis, which constitutes the legitimate interest of the Company (legal basis for data processing: Article 6(1)(f) of the GDPR),
c) storing data for archiving purposes and for demonstrating compliance with legal obligations imposed on the Company, which constitutes its legitimate interest (legal basis for data processing: Article 6(1)(f) of the GDPR),
d) conducting direct marketing activities, which constitutes the legitimate interest of the Company (legal basis for data processing: Article 6(1)(f) of the GDPR),
e) sending commercial information electronically (e.g., Newsletter) – if a specific individual has separately provided consent to receive commercial information electronically to the provided email address (legal basis for data processing: Article 6(1)(a) of the GDPR),
f) conducting marketing communication using telecommunications end devices (e.g., telephone) and automatic calling systems – if a specific individual has separately provided consent to receive such information to the provided telephone number (legal basis for data processing: Article 6(1)(a) of the GDPR).
4. Personal data may be disclosed to the following entities:
· entities supporting the Company in technical and IT services (including delivery, implementation, and maintenance of software and IT hardware, hosting services, and similar services),
· law firms providing legal services to the Company, as well as entities providing debt collection services,
· consulting, auditing, and advisory entities – for the purposes of services provided to the Company by these entities.
5. Personal data will not be transferred by the Company outside the European Economic Area (EEA).
6. Personal data will be stored by the Company:
a) for the period necessary to document compliance with legal obligations by the Company before public administration authorities, including the supervisory authority in the field of personal data protection,
b) for archiving purposes, relating to the history of conducted correspondence and provided responses to inquiries – for a period not exceeding 2 years from the acquisition of the data,
c) for direct marketing purposes – until the objection to the processing of data is raised or until the data is determined to be outdated,
d) for sending commercial information electronically (e.g., Newsletter) – until the withdrawal of consent to carry out this purpose or until the data is determined to be outdated,
e) for marketing communication using telecommunications end devices (e.g., telephone) and automatic calling systems – until the withdrawal of consent to carry out this purpose or until the data is determined to be outdated.
7. The Company ensures the right to exercise the rights provided under the GDPR, including the right to request access to personal data, the right to rectification, erasure, or restriction of processing, the right to data portability, as well as the right to object to the processing of data, in accordance with the rules and conditions specified in the GDPR.
8. In case of processing personal data for the purposes of the legitimate interests of the Company (as mentioned above), we inform about the right to object to the processing of data for reasons related to the specific situation, as well as the right to object at any time in the case of processing data for direct marketing purposes.
9. In cases of processing personal data based on the provided consent, we inform about the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
10. We inform about the right to lodge a complaint regarding the processing of personal data with the supervisory authority, which is the President of the Personal Data Protection Office.
11. Providing personal data for the above-mentioned purposes is voluntary but necessary to fulfill the described purposes.