Personal data protection - Baltona Shipchandlers

Privacy and cookies policy

We are the controller of your personal data. Taking care of the security of your personal data is not only our obligation but mostly the issue of trust which we are committed to build mutually.

This is why we have created this document. You can find here information about why we use your data, why we have the right to do so, and who long we will process your data. Additionally, you will learn here what rights do you have thanks to the GDPR.

The information is grouped into two sections:

In the first section we discuss your data – we inform when and how long we process your data,
In the second section we explain how cookies and other tools used to track your web activity work.

Candidates

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	To take steps at your request necessary to enter into a contract (Article 6.1(b) of the GDPR).
Purpose	To carry out the recruitment process within the scope arising directly from the provisions of law, including but not limited to Article 22(1) § 1 of the Labour Code (Article 6.1(c) of the GDPR).
Purpose	To carry out the requirement process if your provide voluntarily data other than those required by the provisions of law (Article 6.1(a) of the GDPR). NOTE: It the candite provides information exceeding the minimum scope of data required by the labour law, it is an explicit action equal to giving consent to the processing of such data for the purpose of the recruitment process.
Purpose	For the Controller to pursue the legitimate interests consisting in the establishment, exercise or defence of legal claims (Article 6.1(f) of the GDPR, and where special categories of data are provided, also Article 9.2(f) of the GDPR).
Purpose	To consider you as a candidate in future recruitment processes, if you give additional consent (Article 6.1(a) of the GDPR).
How long will we process your data?	The data will be stored until the end of the recruitment process and for a period of 3 months thereafter, so that we can contact you should we decide to hire you in that additional period. If – in the course of the recruitment process or within 3 months thereafter – we become aware of a need to defend legal claims arising from the recruitment process carried out, then the data will be stored until the claim limitation period expires. If you are hired, we will continue to process your data in accordance with the storage periods applicable for an employee/a contractor. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted. If we process specific data based on your consent (Article 6.1(a) of the GDPR) and you withdraw your consent before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until you withdraw your consent.
Which of your data do we process?	Normally, we process those data which you provide to us yourself, namely the data contained in your application documents. Those include, but are not limited to, your contact details, data regarding your qualifications or experience. In the course of the recruitment process, we must also collect additional data, e.g., data provided verbally during the interview.
Where do we get your data from?	Normally, we collect data directly from you.
Do you have to provide us with your data?	Providing some data is the candidate’s statutory obligation, especially the data referred to in Article 22(1) § 1 of the Labour Code (name(s) and surname, date of birth, contact details named by you, education, professional qualifications, your employment history). Providing some data may also be a condition to enter into the employment contract/ cooperation contract.
What will happen if you do not provide us with your data?	If you do not provide the data the provision of which is a statutory or contractual obligation, we will not be able to carry out the recruitment process, and thus we will not be able to hire you.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – providers of recruitment tools, – providers of IT tools to store your data, – healthcare facilities which conduct occupational medical check-ups if we decide to hire the candidate, – HR service providers.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions, namely decisions without human intervention, based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How can you contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

Employees and contractors under civil-law contracts

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	To perform the employment contract / civil-law contract (Article 6.1(b) of the GDPR).
Purpose	To maintain accounting and financial reporting (Article 6.1(c) and (f) of the GDPR).
Purpose	To exercise rights regarding labour law, social security and social protection (Article 6.1(c) and Article 9.2(b) of the GDPR).
Purpose	For the Controller to pursue the legitimate interests consisting in the establishment, exercise or defence of legal claims (Article 6.1(f) of the GDPR, and where special categories of data are provided, also Article 9.2(f) of the GDPR).
Purpose	To comply with the Controller’s legal obligations, including but not limited to those arising from the provisions of labour law, which we understand also as compliance with obligations towards the Social Insurance Institutions, the Tax Office or the National Health Fund, obligations regarding health and safety at work, obligations regarding Employee Capital Plans, settlement of any receivables, archiving personnel files (Article 6.1(c) and Article 9.2(b) of the GDPR).
Purpose	The purposes stated in the consents to the processing of personal data, if any (Article 6.1(a) of the GDPR, Article 9.2(a) of the GDPR).
Purpose	To ensure organising work in a way to enable full utilisation of working time and proper use of the working tools made available to the employee or the contractor, including company cars – GPS (Article 6.1(f) of the GDPR).
Purpose	To ensure safety for persons staying at the organisation’s premises and protection of property, including by use of a video surveillance system (Article 6.1(f) of the GDPR).
Purpose	To perform contracts with clients, contracting parties and suppliers of the Controller (Article 6.1(f) of the GDPR).
Purpose	To conduct marketing of products and services of the Controller for potential clients, using personal data of employees/ contractors under civil-law contracts (Article 6.1(f) of the GDPR).
How long will we process your data?	The data will be stored for a period of 10 years from the end of the calendar year in which the employment relationship is terminated, if the relationship was established on or after 01.01.2019. The data will be stored for a period of 50 years from the end of the calendar year in which the employment relationship is terminated, if the relationship was established before 01.01.2019. In respect of contractors under civil-law contracts, the data will be stored until the expiry of the limitation periods regarding claims arising from the contract or the expiry of the data storage obligations arising from provisions of law, including but not limited to the storage of accounting documents. The video surveillance footage will be stored for up to three months, and where necessary for the purpose of the establishment, exercise or defence of legal claims – until the claims are finally satisfied or until the limitation period expires. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted. If we process specific data based on your consent (Article 6.1(a) of the GDPR) and you withdraw your consent before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until you withdraw your consent.
Which of your data do we process?	Upon the moment of hiring you we process the data which you provide to us yourself. Those are data which are necessary in order to enter into the employment contract or the civil-law contract – also data relating to the performance of a number of the employer’s obligations, such as data regarding your family members, your disability, or your inability to work. During the term of the employment contract or the civil-law contract, we collect a number of new data about you. Those are data about training courses which you complete, data regarding your utilisation of employee benefits, data regarding your geolocation (in respect of company cars) and a number of other data the list of which may vary for particular stages of the employment contract or the civil-law contract.
Where do we get your data from?	Normally, we collect data directly from you. In exceptional cases we collect such data from sources other than from you. An example of such a situation is a receipt of a seizure by a court enforcement officer, which the employer is obliged to comply with.
Do you have to provide us with your data?	Providing some data is the statutory obligation of an employee employed under an employment contract, especially the data referred to in Article 22(1) § 1 of the Labour Code. Providing some data may also be a condition to enter into the employment contract/ cooperation contract.
What will happen if you do not provide us with your data?	If you do not provide the data the provision of which is a statutory or contractual obligation, we will not be able to hire you or to comply with your rights / our obligations arising from specific provisions of law.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – state authorities or other entities entitled under provisions of law – where necessary for the compliance with legal obligations, – our clients, – our suppliers, including providers of the services referred to below, – suppliers of IT tools to store your data or entities which have access to your data in the course of IT system maintenance, – our auditors, – providers of accounting, HR and legal services, – providers of services of destruction and archiving of documents and other data storage devices, – providers of courier and postal services, – healthcare facilities, – banks, social insurance companies and other financial and payment institutions, including Employee Capital Plans, – provides of security services, – providers of training services, – agents and intermediaries, – seaports for the purpose of the performance of contracts with clients and business partners, – our shareholders.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions, namely decisions without human intervention, based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How can you contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

Business partners (including suppliers) and their representatives

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	To perform a contract with the business partner or in order to take steps prior to entering into a contract at the request of the business partner expressed in any manner whatsoever, e.g. by filling in the online contact form or in an e-mail (Article 6.1(b) of the GDPR – if you are a business partner; Article 6.1(f) of the GDPR – if you are a natural person acting for or on behalf of the business partner).
Purpose	To comply with legal obligations, including but not limited to tax and accounting obligations (Article 6.1(c) of the GDPR).
Purpose	For the Controller to pursue the legitimate interests consisting in the establishment, exercise or defence of legal claims (Article 6.1(f) of the GDPR).
How long will we process your data?	The personal data will be stored until the expiry of the limitation periods regarding claims arising from the contract with the business partner. Specific data will be also stored until the expiry of the data storage obligations arising from specific provisions of law, including but not limited to the obligation to store accounting documents. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted.
Which of your data do we process?	In principle our business partners (parties to the contract) are institutions (e.g., commercial companies). Nevertheless, we do not process the personal data of the institutions, but personal data of persons acting on behalf of the institution, e.g., the president, the attorney or the contact persons for the performance of the contract. Before entering into the contract with the business partner, we collect data necessary in order to enter into negotiations as to the terms and conditions of the cooperation. Usually those are basic contact details such as the name and surname, e-mail address, telephone number. During the term of the contract with the business partner we collect or process other data, such as e.g. data regarding invoices issued by the business partner or data regarding generally the cooperation history.
Where do we get your data from?	Your personal data may be collected from another source – e.g. from our business partner – the company if you are an employee or a representative of the company. Sometimes we collect personal data from the so-called business intelligence agencies if we wish to verify the business partner before entering into cooperation.
Do you have to provide us with your data?	Providing some of the data is necessary in order to enter into and thereafter to perform the contract. Please bear in mind that a contract may be entered into in various ways, e.g. through placing an order in the online store.
What will happen if you do not provide us with your data?	If you do not provide the data the provision of which is the condition to enter into the contract, it will not be possible to enter into the contract.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – state authorities or other entities entitled under provisions of law – where necessary for the compliance with legal obligations, – our suppliers, including providers of the services referred to below, – suppliers of IT tools to store your data or entities which have access to your data in the course of IT system maintenance, – our auditors or experts, – providers of accounting or legal services, – providers of services of destruction and archiving of documents and other data storage devices, – providers of courier and postal services, – banks and other financial and payment institutions, – agents and intermediaries, – seaports for the purpose of the performance of contracts with clients and business partners.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions, namely decisions without human intervention, based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How you can contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

Clients and their representatives

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	To perform a contract with the client or in order to take steps prior to entering into a contract at the request of the client expressed in any manner whatsoever, e.g. by e-mail (Article 6.1(b) of the GDPR – if you are a client; Article 6.1(f) of the GDPR – if you are a natural person acting for or on behalf of the client).
Purpose	To comply with legal obligations, including but not limited to tax and accounting obligations (Article 6.1(c) of the GDPR).
Purpose	For the Controller to pursue the legitimate interests consisting in the establishment, exercise or defence of legal claims (Article 6.1(f) of the GDPR).
How long will we process your data?	The personal data will be stored until the expiry of the limitation periods regarding claims arising from the contract with the client. Specific data will be also stored until the expiry of the data storage obligations arising from specific provisions of law, including but not limited to the obligation to store accounting documents. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted.
Which of your data do we process?	In principle our clients (parties to the contract) are institutions (e.g., commercial companies). Nevertheless, we do not process the personal data of the institutions, but personal data of persons acting on behalf of the institution, e.g., the president, the attorney or the contact persons for the performance of the contract. Before entering into the contract with the client, we collect data necessary in order to submit an offer. Usually those are basic contact details such as the name and surname, e-mail address, telephone number. During the term of the contract with the client we collect or process other data, such as e.g. data regarding transactions effected or data regarding generally the cooperation history.
Where do we get your data from?	Your personal data may be collected from another source – e.g. from our client – the company (if you are an employee or a representative of the company). Sometimes we collect personal data from the so-called business intelligence agencies if we wish to verify the client before entering into cooperation.
Do you have to provide us with your data?	Providing some of the data is necessary in order to enter into and thereafter to perform the contract.
What will happen if you do not provide us with your data?	If you do not provide the data the provision of which is the condition to enter into the contract, it will not be possible to enter into the contract.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – state authorities or other entities entitled under provisions of law – where necessary for the compliance with legal obligations, – our suppliers, including providers of the services referred to below, – suppliers of IT tools to store your data or entities which have access to your data in the course of IT system maintenance, – our auditors, – providers of accounting or legal services, – providers of services of destruction and archiving of documents and other data storage devices, – providers of courier and postal services, – banks and other financial and payment institutions, – agents and intermediaries, – seaports for the purpose of the performance of contracts with clients and business partners.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions, namely decisions without human intervention, based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How can you contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

Marketing

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	Marketing of products and services of the Controller, including via the website (Article 6.1(f) of the GDPR).
Purpose	The purposes stated in the consents to the processing of personal data, if any (Article 6.1(a) of the GDPR, Article 9.2(a) of the GDPR).
Purpose	For the Controller to pursue the legitimate interests consisting in the establishment, exercise or defence of legal claims (Article 6.1(f) of the GDPR).
Purpose	To perform legal obligations, including but not limited to those arising from the provisions of the Telecommunication Law and the Act on Providing Services by Electronic Means (Article 6.1(c) of the GDPR).
How long will we process your data?	Personal data will be stored until an objection to marketing is filed. Specific data will be also stored until the expiry of the data storage obligations arising from specific provisions of law, including but not limited to the provisions of the Telecommunication Law. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted. If we process specific data based on your consent (Article 6.1(a) of the GDPR) and you withdraw your consent before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until you withdraw your consent.
Which of your data do we process?	Name, surname, IP address, e-mail address, telephone number, cookies.
Where do we get your data from?	Normally, we collect data directly from you.
Do you have to provide us with your data?	Providing the data is not a contractual obligation nor a statutory obligation.
What will happen if you do not provide us with your data?	No consequences due to the above.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – state authorities or other entities entitled under provisions of law – where necessary for the compliance with legal obligations, – our suppliers, including providers of the services referred to below, – suppliers of IT tools to store your data or entities which have access to your data in the course of IT system maintenance, – providers of marketing activities and services in this regard, e.g. printing houses, – providers of accounting and legal services, – providers of services of destruction and archiving of documents and other data storage devices, – providers of courier and postal services.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions, namely decisions without human intervention, based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How can you contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

Video surveillance (persons in the footage)

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	To ensure safety for persons staying at the Controller’s premises by recording image of persons staying at such premises (Article 6.1(f) of the GDPR).
Purpose	In case of employees and contractors of the Controller, the purpose of the video surveillance is also to maintain confidentiality of information the disclosure of which could expose the employer to damage (Article 6.1(f) of the GDPR).
Purpose	For the Controller to pursue the legitimate interests consisting in the establishment, exercise or defence of legal claims (Article 6.1(f) of the GDPR).
How long will we process your data?	The basic surveillance data storage period is 3 months from the date of recording the footage. Due to so-called overwriting of data caused by a limited data storage space, such data may be erased earlier. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted.
Which of your data do we process?	Your image.
Where do we get your data from?	You are the source of the data, we do not collect your image from other entities.
Do you have to provide us with your data?	Providing the data is not a contractual obligation nor a statutory obligation.
What will happen if you do not provide us with your data?	No consequences due to the above. Simultaneously, technically it is not possible to enter the Controller’s premises without being recorded by the surveillance cameras.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – state authorities or other entities entitled under provisions of law – where necessary for the compliance with legal obligations, – suppliers of IT tools to process your data, – provides of security services.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions, namely decisions without human intervention, based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How can you contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

Members the authorities of the Controller (the Management Board, the Supervisory Board)

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	To perform the legal obligations of the Controller with regard to appointing and later activities of the members of the Management Bord and the Supervisory Board (Article 6.1 (c) of the GDPR), with regard to complying with the Articles of Association of the company relating to the functioning of the Company’s authorities (Article 6.1(f) of the GDPR),
Purpose	To perform the contract or another legal relationship under which the member of the Management Board or of the Supervisory Board holds the office (Article 6.1(b) of the GDPR),
Purpose	To comply with your rights and the Controller’s obligations arising from provisions of law regarding social security, health insurance, employee capital plans, taxes, accounting (Article 6.1(c) and Article 9.2(b) of the GDPR).
Purpose	To comply with obligations imposed on the Controller under provisions of law, including but not limited to the Commercial Companies Code, the Act on the National Court Register, the Act on the rules for managing state property relating to bookkeeping and reporting, accounting and tax settlements (Article 6.1(c) of the GDPR).
Purpose	For the Controller to pursue the legitimate interests consisting in the establishment, exercise or defence of legal claims (Article 6.1(f) of the GDPR).
How long will we process your data?	The personal data will be processed for the period required by specific provisions of law. Data will processed for the purpose of the establishment, exercise or defence of legal claims util the date of the until the claims limitation periods expire. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing before the end of the basic storage period, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted.
Which of your data do we process?	Name, surname, date of birth, PESEL number / identity document number, residence address, address for service, telephone number, e-mail address, education and employment history, licences and certificates, image, bank account number, data relating to verification of rights to sick leaves and other relating to social security, data regarding no criminal record, other data which enable to confirm the compliance with the criteria required for members of the authorities of companies owned by the State Treasury as specified in the Act on managing state property.
Where do we get your data from?	In principle, we process data provided by you. If you did not provide us with your data, we collected such data from our shareholder.
Do you have to provide us with your data?	In principle, providing the data is voluntary, but in respect of some data it may be a statutory obligation arising, inter alia, from the provisions of commercial law.
What will happen if you do not provide us with your data?	No possibility of being a candidate for or holding an office in the authorities of the Controller.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – state authorities or other entities entitled under provisions of law – where necessary for the compliance with legal obligations, – suppliers of IT tools to process your data, – providers of HR, accounting, or legal services, – providers of audit and tax services, – providers of services of destruction and archiving of documents and other data storage devices, – our shareholders.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions, namely decisions without human intervention, based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How can you contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

Website users (data originating from cookies or other tracking technologies)

Who is the controller of your data?	Baltona Shipchandlers Sp. z o. o. with its registered office in Świnoujście, ul. Fińska 1, 72-602 Świnoujście
How can you contact the data controller?	by post: ul. Fińska 1, 72-602 Świnoujście, by e-mail: rodo@baltona.pl
How can you contact the data protection officer?	rodo@baltona.pl
What are the purposes of and the basis for our processing of your personal data?
Purpose	To ensure the functionality of the website and to facilitate the use of the website (Article 6.1(f) of the GDPR).
Purpose	To keep analysis and statistics regarding the users’ use of the Controller’s website (Article 6.1(f) of the GDPR)
Purpose	To pursue the Controller’s legitimate interest consisting in analysing the activities of logged-in or not logged-in users, and then using such data for the purpose of so-called remarketing (e.g. advertising to you those products and services you are interested in) (Article 6.1(f) of the GDPR)
Purpose	The purposes stated in the consents to the processing of personal data, if any (Article 6.1(a) of the GDPR, Article 9.2(a) of the GDPR).
Purpose	To perform legal obligations, including but not limited to those arising from the provisions of the Telecommunication Law and the Act on Providing Services by Electronic Means (Article 6.1(c) of the GDPR).
How long will we process your data?	Specific data will be also stored until the expiry of the data storage obligations arising for specific provisions of law, including but not limited to the provisions of the Telecommunication Law. If we process specific data on the basis of the legitimate interests of the Controller (Article 6.1(f) of the GDPR) and you file a reasoned objection to the processing, then for the specific purpose your data will be processed for a shorter period, namely until your objection is granted. If we process specific data based on your consent (Article 6.1(a) of the GDPR) and you withdraw your consent, then for the specific purpose your data will be processed for a shorter period, namely until you withdraw your consent.
Which of your data do we process?	Normally those include such data as the IP address and any and all information about you originating from cookies or use of so-called other tracking technologies. Those may include e.g. information about the device from which you connect with us (visit our website), information about your browser, information about what you “clicked” on our website. You will find detailed information as to such data in the cookies policy section.
Where do we get your data from?	Normally, we collect data directly from you – our website user.
Do you have to provide us with your data?	Providing the data is not a contractual obligation nor a statutory obligation.
What will happen if you do not provide us with your data?	No consequences due to the above.
Who are the recipients of your data – processors and separate controllers?	The recipients are third parties to whom we transfer your data. We transfer your data to: – state authorities or other entities entitled under provisions of law – where necessary for the compliance with legal obligations, – our suppliers, including providers of the services referred to below, – suppliers of IT tools to store your data, including entities providing so-called tracking technologies, – marketing agencies.
Will we transfer your data to third countries, namely outside the European Economic Area?	No, we will not transfer your data outside the European Economic Area.
Will we make automated decisions based on your data?	No, we will not make automated decisions (namely decisions without human intervention) based on your data.
What are your rights?	You have the right of access to your data – within the limits of Article 15 of the GDPR.
	You have the right to rectification of your data – within the limits of Article 16 of the GDPR.
	You have the right to erasure of your data – within the limits of Article 17 of the GDPR.
	You have the right to restriction of processing of your data – within the limits of Article 18 of the GDPR.
	You have the right to portability of your data – within the limits of Article 20 of the GDPR.
	You have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent shall not, however, affect the lawfulness of processing based on consent before its withdrawal.
How can you file an objection to the processing of your data?	If you wish to exercise your right to file an objection, contact us. Your will find the contact details in the section How can you contact the Data Protection Officer.
How can you lodge a complaint with the Personal Data Protection Office?	If you believe that we process your personal data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office [Polish: Prezes Urzędu Ochrony Danych Osobowych]. More information in this regard is available from the website of the Office.
Latest revision date	22.12.2023

I. What cookies are?

Cookies are small text files which are saved on the your computer or smartphone while displaying our website. There are various types of cookies. We grouped them into two groups for you:
1. essential cookies that are necessary in order to use our website,
2. other.
Thanks to essential cookies our website is stable. Those cookies measure the website traffic and protect us against the website overload. They remember your privacy preferences or how you fill in our forms. We use such cookies by default. This means that we save them on your computer or smartphone when you visit our website.
[Article 173.3 of the Telecommunication Law]
We use other cookies only if you consent to the same.

II. Which cookies do we use?

Essential cookies ensure the correct functioning of our website and its basic functions. You will not be able to use our online services correctly without such cookies. We are not required to have your consent to use such cookies. [Article 173.3 of the Telecommunication Law]
Name	Purpose	Storage period
pll_language	To remember the language selected by the user	1 year
cookie_notice_accepted	To remember the cookies storage settings	1 year

Analytics cookies – our website uses cookies provided by Google. Thanks to analytics cookies we can track the number and sources of visits. Thus we measure and improve the performance of our website. This allows us to understand better which pages you visit most often and to understand your behaviour on such pages. You can refuse to accept such cookies. Your decision will not affect the functioning of our website.
Name	Purpose	Storage period
_ga_SM1J95F95S	To maintain session state	2 years
_ga	To differentiate between the users	2 years

III. Consent to cookies installation

When you visit our website, a banner will be displayed to inform you that we use cookies. If you select the “Consent to all” option this will mean that you accept all cookies. Thus you also acknowledge to know what the cookies we use are and for which purpose we use them, and when we transmit the data from cookies to our partners.
Rember that we do not require your consent in order to use essential cookies. [Article 173.3 of the Telecommunication Law]

IV. Refusal to consent to cookies installation

If you do not wish that cookies be saved on your device, please select the “Reject all” option. If you select that option you will reject all cookies other than essential cookies.

V. Modifying cookie settings

If you wish to manage your cookie preferences, please select the “Personalise” option.

VI. Withdrawing the consent

Remember that you can change consent preferences any time. To do so, please click the blue clip icon. You will find that icon in at the bottom left corner of our website.

Amending the privacy policy

We have the right to amend the privacy policy any time. Whenever we update the privacy policy, we will publish the latest revised version on our website.