PERSONAL DATA PROCESSING INFORMATION CLAUSE
Personal data controller
The controller of your personal data is Morska Agencja Gdynia sp. z o.o. (hereinafter: MAG), based in Gdynia, ul. Wendy 15.
You can contact us as follows:
1. by mail, to the registered office of the controller: ul. Tadeusza Wendy 15, 81-341 Gdynia
2. by telephone: +48 (58) 785 37 00
3. by email: email@example.com
Inspector for Personal Data Protection
The Inspector for Personal Data Protection is Marlena Luleńska. You can contact her by mail:
ul. Tadeusza Wendy 15, 81-341 Gdynia, or by email: firstname.lastname@example.org
Purposes of and basis for processing
We will process your personal data if:
– you have consented to the processing of your personal data (e.g.: under the contact form at https://www.mag.pl/kontakt/) – art. 6(1)(a) of the Regulation of the European Parliament and Council (UE) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter: the GDPR,
– the processing is necessary to perform an agreement or take action before entering into agreement (e.g. to prepare the offer, to complete the forwarding order, for direct authorisation to customs clearance, to enter into rent agreement etc.) – art. 6(1)(b) of the GDPR,
– it fulfils the statutory obligation of the administrator (e.g. pursuant to the Traffic Right Act, the Convention for the International Carriage of Goods by Road, the regulations
on accounting, and tax and archiving obligations) – art. 6(1)(c) of the GDPR,
– the processing is necessary for the purposes resulting from the legally justified interests pursued by MAG (e.g. marketing of services, in which the justified interest is to operate direct marketing; contact, in which the justified interest is customer care, debt collection; any determination of the pursuit of claims or defence against claims; provision of the safety of persons and property within MAG premises, e.g. by recording the image by the monitoring) – art. 6(1)(f) of the GDPR.
Personal data recipients
The recipients, to which your personal data can be transferred, are the subcontractors – processing entities and other recipients we collaborate with: entities providing agency, warehouse, loading, transport, customs agency, postal services, entities authorised to operate deliveries, shipment recipients, entities providing documents and media destruction, documentation resources management and storage services, entities providing the legal and tax service and debts collection services, as well as brokerage and insurance services, damage liquidators, entities supporting MAG in service provision by electronic means, including entities providing payment servies and entties, with whom the controller entered into agreement for IT systems maintenance services.
Data retention period
The retention period for the personal data collected by MAG depends on the purpose,
for which the data is collected. In case of processing based on:
– declaration of consent – until the consent is revoked,
– performance of an agreement or action before entering into agreement – for the duration of the agreement,
followed by the period, in which claims arising from it may appear, for up to 20 years from the end date of performance of the agreement,
– fulfilment of a statutory obligation – for the period specified in statutory regulations,
– legally justified interests pursued by the controller, including:
> marketing of services and contact – until objection is raised to such processing,
> collection of debts due; any determination of the pursuit of claims or defence against claims – until the claims expire.
> provision of the safety of persons and property – for the period of up to 30 days or until the claims arising from the personal or property safety breach expire.
Rights of the data subjects
Under the GDPR, you are entitled to:
1. the right to access and obtain copies of your data,
2. the right to correct your data, if erroneous or outdated, as well as the right to delete it if the purpose of data processing is not to fulfil an obligation arising from a regulation,
3. the right to restrict or object to data processing, however separate regulations can exclude the use of this right,
4. the right to revoke the consent given,
5. the right to complain to the President of the Personal Data Protection Office,
ul. Stawki 2, 00-193 Warszawa).
Transfer of your data to a third country
Your personal data can be transferred to a third country or international organisation under the following circumstances:
– the transfer is necessary to perform the agreement between the data subject
and the controller or to introduce the pre-agreement measures requested by the data subject (e.g. a shipowner, to fulfil forwarding orders);
– the transfer is necessary to enter into or perform an agreement entered into in the interest of the data subject between the controller and another natural or legal person; (e.g. shipowners, to book a container);
– based on the consent of the data subject (e.g. as job agency in the maritime industry)
– the transfer is necessary for the determination, pursuit or protection of claims.