Regarding the processing of personal data by RESTAURACJA CONCORDIA Sp. z o.o. with its registered office at Zwierzyniecka 3, 60-813 Poznań.

In accordance with Article 13 of the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”), we hereby inform you that:

The controller of your personal data is RESTAURACJA CONCORDIA Sp. z o.o. with its registered office at Zwierzyniecka 3, 60-813 Poznań. Contact: Zwierzyniecka 3, 60-813 Poznań; email: restauracja@concordiataste.pl or by phone: +48 609 002 964. You can contact the Data Protection Officer at the following address: RESTAURACJA CONCORDIA Sp. z o.o. with its registered office at Zwierzyniecka 3, 60-813 Poznań or via email at iod@concordiataste.pl.

Your personal data is processed based on the GDPR, in particular:

• Article 6(1)(a) of the GDPR – the data subject has given consent to the processing of their personal data for one or more specific purposes;
• Article 6(1)(b) of the GDPR – processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• Article 6(1)(c) of the GDPR – processing is necessary for compliance with a legal obligation to which the controller is subject;
• Article 6(1)(d) of the GDPR – processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• Article 6(1)(f) of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

If you have provided relevant consents regarding marketing and sales activities through specific communication channels, we will process your personal data for the purpose of conducting direct marketing of our products and services. The legal basis for processing your personal data for this purpose will be Article 6(1)(f) of the GDPR, which refers to the legitimate interest of conducting marketing and sales activities in relation to the consents you have provided regarding receiving marketing content through specific communication channels. If you have given consent for the use of personal data for marketing activities, your data will be processed based on Article 6(1)(a) of the GDPR.

Providing your personal data is voluntary but necessary for the fulfillment of the purposes for which they were collected. Failure to provide this data may result in the inability to achieve these purposes.

An integral part of achieving the aforementioned purposes is maintaining contact with you through various communication channels, such as traditional mail, email, and telephone contact.

Your personal data may be disclosed to relevant recipients, in particular institutions authorized to control the activities of the controller or entities authorized to obtain personal data based on separate legal provisions. The recipients of your personal data will also include, among others, service providers supplying the Controller with technical solutions and organizational management, entities providing legal and advisory services, as well as entities providing assistance to the Controller in the recovery of due claims.

You have the right to:

• rectify your inaccurate personal data;
• request the erasure of data (the right to be forgotten) in the circumstances provided for in Article 17 of the GDPR;
• request therestriction of processing in cases specified in Article 18 of the GDPR;
• object to the processing of data in cases specified in Article 21 of the GDPR.

In relation to your personal data, no decisions will be made in an automated manner, as provided for in Article 22 of the GDPR.

Your personal data will not be subject to profiling and will not be transferred to countries outside the European Economic Area.

Your personal data will be processed and stored for a period of 2 years from the moment of giving consent for their processing in connection with the inquiry you have made regarding the offered services. In the event of entering into an agreement, your data will be processed for the entire duration of the agreement and for the time necessary for its settlement. This period is 5 years, but it may be extended according to the provisions of applicable law. After the expiration of the aforementioned period, personal data will be deleted or anonymized.

Your data processed for marketing purposes based on the consent you have given will be stored for a period of 5 years or until you object to this processing purpose, withdraw your consent, or request the erasure of data.

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority (the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw)