Personal data administrator
The administrator of personal data is Golden Rush Poland. Personal data is processed on the principles set out in the provisions on the protection of personal data, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and free movement such data and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) and in Polish regulations issued in connection with the GDPR, including the Act of 10 May 2018 on the protection of personal data. The administrator keeps personal data confidential and protects them against unauthorised access by third parties on the terms stipulated in the abovementioned legal acts.
Personal data administrator
If you have questions about data processing, please contact us by email: firstname.lastname@example.org
The scope and aim of personal data processing
As part of the business activity, personal data is collected and processed:
(a) for purposes resulting from legitimate interests pursued by the Administrator of personal data: to provide services to Customers, for marketing of the Administrator’s services, including informing about new products offered by the Administrator and about the Administrator’s activities (e.g. through the newsletter), as well as for analytical and statistical purposes and to ensure IT security related to the Administrator’s website (legal basis Article 6 para. 1(f) of the GDPR);
(b) to perform contracts concluded by the Administrator with clients, including the organization of training, cooperation with suppliers and other entities cooperating with the Administrator (legal basis Article 6 para. 1(b) of the GDPR);
(c) to recruit people interested in working or cooperating with the Administrator (legal basis, respectively, Article 6 para. 1(c) and Article 6 para. 1(a) of the GDPR);
Additionally, we process the personal data in the scope of fulfilling the legal obligations incumbent on the Administrator (legal basis Article 6 para. 1(c) of the GDPR).
The processing of the personal data is carried out on a voluntary basis, however, depending on the circumstances, refusing to provide data or requesting their removal may prevent us, e.g. from contacting you, providing you with information about the Administrator’s activities or provision of the services. The processing of personal data as part of the provision of legal assistance services is regulated in contracts concluded with clients or in the general conditions regarding the provision of legal services. Sending commercial information by electronic means, e.g. by e-mail, requires your prior consent by subscribing to the newsletter or by submitting an instruction to receive specific information, including thematic legal alerts. In accordance with the principles set out in legal provisions on the protection of personal data and within the scope provided for therein, you have the right to access the personal data, the right to rectify it, delete or limit processing and the right to transfer data. Some of these rights may not apply to data processing as part of the provision of legal assistance. If you do not want the Administrator to process your personal data for marketing purposes, you can object to the processing of personal data for this purpose at any time.
The right to file a complaint
You have the right to file a complaint related to the processing of personal data by the Administrator to the President of the Office for Personal Data Protection (until the entry of the Act of 10 May 2018 on the protection of personal data into force – to the Inspector General for Personal Data Protection).
Personal data will be processed, respectively, until the fulfilment of relevant legitimate interests pursued by the data Administrator related to the processing of specific data, until the expiry of the prescription periods related to the contract to which the processing of personal data is related, or related to the prescription of obligations arising from legal provisions, until the time of objection to the processing for marketing purposes. The newsletter and other similar information are sent until the objection.
Transfer of personal data to other entities
The recipients of the personal data may be, in particular, entities directly or indirectly associated with the Administrator, in particular in an organisational or personal manner, with their registered office in one of the Member States of the European Union, as well as external service providers (e.g. entities providing IT services, including cloud computing services, entities providing call centres services and marketing and promotional activities, other entities processing data on behalf of the Administrator on the basis of a contract entrusting the processing of personal data).
The personal data is processed at the office of the Administrator. Personal data is not transferred to countries outside the European Union. In the event of transferring personal data to third countries outside the EU, the Administrator will use appropriate instruments to ensure the security of the personal data.
The administrator, in connection with cooperation with its suppliers and other law firms, may entrust the processing of your personal data to the above-mentioned entities. However, in each case, these entities will be obliged to keep the personal data confidential and to process it in accordance with the provisions on the protection of personal data and the relevant instructions of the Administrator.
The personal data will be subject to profiling as one of the forms of automated processing of personal data in accordance with art. 22 para. 1 and 2 of the GDPR in order to prepare the best offer for you.