INFORMATION ON PCC’S PERSONAL DATA PROCESSING POLICY

INFORMATION ON THE RULES FOR PROCESSING PERSONAL DATA IN CONNECTION WITH TRAINING COURSES
AND RESPONDING TO ENQUIRIES

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the “GDPR”), we hereby inform you that:

1. The controller of your personal data is PCC-CERT Group sp. z o.o., with its registered office in Kobierzyce (55-040), at ul. Sportowa 29, Tax Identification Number (NIP): 896-15-39-543.
2. Your personal data will be processed to the extent provided by you via registration forms and other means of contact for the purpose of providing services related to conducting training courses, pursuant to Article 6(1)(b) of the GDPR (processing necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract); contacting training participants to provide them with organisational information concerning the training; providing access to post-training materials pursuant to Article 6(1)(f) of the GDPR (pursuing the legitimate interests of the controller); pursuing potential claims against the Participant pursuant to Article 6(1)(f) of the GDPR (pursuing the legitimate interests of the controller); and, where additional consent has been given, pursuant to Article 6(1)(a) of the GDPR, to the extent and for the purposes specified in such consent.
3. We will not disclose your personal data to anyone without your explicit consent.
4. We are entitled to disclose your personal data to authorised public authorities, including the Tax Office.
5. Your personal data will not be transferred to a third country or an international organisation.
6. Furthermore, we may disclose your personal data to the following groups:
   • persons authorised by us—our employees and associates who require access to the data to perform their duties,
   • data processors commissioned by us to perform activities requiring the processing of personal data.
7. You have the right to request access to your personal data, its rectification or erasure, restriction of its processing, the right to object to its processing, as well as the right to data portability.
8. If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the supervisory authority.
9. Your personal data will be processed until the contract has been performed and, following its completion, for purposes related to:
   • pursuing claims connected with the performance of the contract (as a general rule, for a maximum period of six years from the date on which the performance of the contract was completed),
   • fulfilling obligations arising from applicable law, including, in particular, tax and accounting obligations (as a general rule, for five years from the end of the calendar year in which the tax payment deadline expired).
10. Providing the personal data contained in the registration form, registration email or submitted via other electronic registration methods is a condition for entering into a contract. If you do not provide your personal data, we will be unable to provide services related to conducting the training course.
11. Providing your personal data is voluntary but necessary if it is required to respond to your enquiry submitted via a contact form, email or electronic messaging service. Refusal to provide personal data will be deemed a voluntary withdrawal of the submitted enquiry.
12. Your personal data will not be used for automated decision-making based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.