This information has been prepared to demonstrate that your personal data is being processed, but also secured in accordance with the requirements of the law regarding the principles of data processing and protection, and in particular that it is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Please read the information below carefully.

What data do we process?

1. We process personal data – information that allows us to identify you – collected in connection with the enquiry you have submitted.
2. We process:
   • First and last name
   • Company name
   • Phone number
   • Email address

Who is the controller of your personal data?

1. The controller of your data is Gran Holding sp. z o.o. with its registered office in Luboń, ul. Graniczna 3, 62-030 Luboń, entered in the register of entrepreneurs of the National Court Register under KRS number: 0001068428, as well as our Trusted Partners.
2. For matters related to your data, you may contact us at the email address provided in the contact section.

What is the purpose of processing your data?

We process this data for the purpose of:

1. performing a contract or service and to the extent necessary for its execution,
2. offering commercial products and services – for marketing purposes,
3. delivering the presentation you have requested and carrying out activities related to that order and its fulfilment,
4. fulfilling a legal obligation arising from applicable law (e.g. tax, accounting, anti-crime regulations),
5. pursuing the legitimate interests of the Company, such as:
   • ensuring the safety of persons and Company property,
   • pursuing or defending claims of the Company,
   • if you give your consent – data may be processed in an automated manner, including profiling (e.g. gender, age, location, interests) in order to tailor marketing offers.

Other purposes of data processing

The above sets out the primary purposes of data processing. The Company may also process data for other purposes where they are related to the above:

1. transferring data to an archive
2. audits or investigative proceedings
3. implementation of business and management control mechanisms
4. statistical, historical or scientific research
5. business, economic or legal advisory

How long will we process your data?

In general, data will be processed for as long as is required by the purpose for which it was collected, but no longer than 3 years. After this period, data will be deleted within the operationally necessary timeframe.

This period also depends on legal provisions, consents and other declarations:

1. Project submission – for the time needed to review and execute it, and if not executed – for 3 years or longer if required by law
2. Archival data – up to 10 years after the end of the legal relationship (or longer in the case of legal proceedings)
3. Court rulings – up to 10 years from the date the ruling becomes final

• Consent – until consent is withdrawn or for the period indicated in the consent itself

The above periods do not accumulate – data may be processed separately according to the purpose and legal basis.

What are the legal bases for processing your data?

All data processing takes place on a lawful basis. The most common bases are:

• Your consent (e.g. marketing, analytics, promotion)
• Performance of a contract or service
• A legal obligation incumbent on the controller
• The legitimate interests of the controller

To whom may we transfer your data?

Your data may be transferred to:

1. Entities authorised under applicable law
2. Entities acting on our behalf under contracts (e.g. IT services, archiving, accounting, law firms)
3. Third parties – if you have given your consent

Data will not be transferred outside the territory of the European Union.

What are your rights in connection with data processing?

1. The right to access your data, rectify it, erase it, or restrict its processing
2. The right to withdraw consent at any time
3. The right to object to processing
4. The right to data portability or to obtain a copy of your data (the first copy is free of charge)
5. The right to lodge a complaint with the President of the Personal Data Protection Office
6. Further information can be found in our Privacy Policy