GDPR – information on data processing

Working draft. Before publication it requires legal review – fields marked [TO BE PROVIDED] must be completed and the content confirmed by the person responsible for compliance.

Below we explain who is responsible for your data, why we process it and what rights you can exercise. More information about how the website works can be found in the privacy policy.

Who the data controller is

The controller of personal data is IndoConnect Paweł Marczak, ul. Suwalska 18/9, 54-104 Wrocław, Poland, VAT ID (NIP) 7342901069, REGON 120122836.

Contact for data protection matters: contact@indoconnect.eu, phone +48 608 678 816.

What data we process

We process the data you provide yourself when contacting us: full name, company or brand name, e-mail address, enquiry topic and planned timing of the project, optionally a phone number, as well as the content of your enquiry and any materials you attach. If you ask us to call you back, we process your full name and phone number.

For what purpose and on what basis

• Responding to your enquiry and preparing a quote – Art. 6(1)(b) GDPR, i.e. steps prior to entering into a contract, and Art. 6(1)(f) GDPR, i.e. our legitimate interest in handling business enquiries.
• Sending the lookbook – Art. 6(1)(a) GDPR, i.e. your consent given by ticking the relevant box in the form.
• Establishing, pursuing or defending claims – Art. 6(1)(f) GDPR.
• Tax and accounting obligations, if cooperation follows – Art. 6(1)(c) GDPR.

Is providing data mandatory

Providing data is voluntary. Without your name and an e-mail address or phone number, however, we cannot respond to your enquiry. The remaining fields of the form help us prepare a more accurate answer.

How long we keep data

• Enquiries that did not lead to cooperation – [TO BE PROVIDED: period, e.g. 24 months from the last contact].
• Data related to the performance of a contract – for the duration of the cooperation and the period required by tax and accounting regulations.
• Data processed on the basis of consent – until it is withdrawn.

Who we pass data to

Recipients of data may be entities processing data on our behalf: the hosting and e-mail provider, the form handling service provider, the accounting office and legal advisers – in each case to the extent necessary to perform the service and on the basis of a data processing agreement.

List of providers: cyber_Folks S.A., ul. Franklina Roosevelta 22, 60-829 Poznań, Poland (website hosting and form handling); [TO BE PROVIDED: e-mail provider, accounting office].

If delivering your order requires contact with a manufacturer or partner in Indonesia, any transfer of data outside the European Economic Area will take place on the basis of a mechanism provided for in Chapter V of the GDPR – [TO BE PROVIDED: the mechanism used]. We will inform you of such a transfer before it takes place.

Your rights

You have the right to request access to your data, its rectification, erasure or restriction of processing. You may also object to processing based on our legitimate interest and request the portability of data processed on the basis of consent or a contract.

You can withdraw your consent to receiving the lookbook at any time by writing to contact@indoconnect.eu. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Complaint to the supervisory authority

If you believe we process your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

Profiling and automated decisions

We do not make decisions solely by automated means and we do not profile your data.