Personal Data Controller
The Personal Data Controller is Euro-Light Sp. z o.o., Auralight Polska Sp. z o.o., Organic Lighting Sp. z o.o. or Light Club Sp. z o.o. respectively (depending on with which of the Companies you share the purpose indicated below) with the registered office at ul. 1 Maja 46a, 05-555 Tarczyn,
Contact details of the data controller are as follows:
Purposes and bases for personal data processing, retention period
We process personal data for the purposes and on the bases specified below:
Data collected for the purpose of a Light Planner account creation and provision of services
The personal data provided in the registration form at www.lightplanner.pl are processed for the purpose of performance of the lighting configuration service (Article 6(1)(b) of GDPR*) and based on the legitimate purpose which is keeping in contact (Article 6(1)(f) of GDPR). The data will be processed until the limitation of possible claims following the deletion of the account. If an order is performed, the data related to the bill/invoice will be processed until the period of limitation of tax obligation expires and until the limitation of claims or the end of the guarantee period. The data processed on the basis of a legitimate purpose will be processed until objection is made.
Data collected for recruitment purposes
The personal data (and contact details if provided) are processed for the purpose of conducting present and future recruitment processes, based on the consent given (Article 6(1)(a) of GDPR) and the legitimate purpose which is the protection against claims (Article 6(1)(f) of GDPR). The data collected in the recruitment processes are stored for no longer than 3 months, and after a consent is given to participate in future recruitment processes, the data are stored until the consent is withdrawn.
Data collected for marketing purposes, including newsletter sending
The personal data are processed for the purpose of sending commercial communications by electronic means, including the newsletter, on the basis of a consent given (Article 6(1)(a) of GDPR). The data are processed until the withdrawal of the consent to their further processing.
Data collected for contact purposes
The personal data provided in the correspondence are processed for the purpose of handling the inquiry sent on the basis of the legitimate purpose which is a reply (Article 6(1)(f) of GDPR) for a period of 10 years following the end of the correspondence.
Data collected for the purpose of performing the contracts concluded
The personal data are processed for the purpose of performance of the contracts concluded (Article 6(1)(b) of GDPR*) and on the basis of the legitimate purpose which is keeping in contact to restart the cooperation (Article 6(1)(f) of GDPR). The data are processed until the period of limitation of tax obligation expires in the case of accounting documents and until the limitation of claims or the end of the guarantee period. The data processed on the basis of a legitimate purpose are processed until objection is made.
Data collected through social networking sites
We maintain profile pages on social networking sites in order to share our content with their users and to contact the users of those sites:
In this context, we process your personal data when you are a user of these profiles and visit or interact with these profiles (likes, comments, messages sent), thus we also collect data about your activities on this profile. We process the data on the basis of our legitimate interest which is to enable us contacting other users of the sites and to take other actions in accordance with the terms and conditions of such sites.
The social networking sites have their own regulations and rules of operation, which are independent of us, therefore, as users of a social networking site both you and we are also bound by the privacy policies and terms and conditions accepted on such a social networking site. The data related to your activity in profiles on social networking sites will be stored until you delete your activity or Company profile is deleted. As users of a social networking site, you can also manage your account and content published in accordance with the regulations of such a site.
Recipients of the personal data
The recipients of the data are Companies belonging to the capital group, i.e. Euro-Light Sp. z o.o., Auralight Polska Sp. z o.o., Organic Lighting Sp. z o.o. or Light Club Sp. z o.o., data processors upon the order of and on behalf of the data controller, on the basis of a personal data processing contract, to provide the services specified in the services contract, i.e.: entity providing IT services, including the delivery of electronic mail, entities providing transport services and entities authorized under the law.
Rights of the data subjects
You have the following rights:
President of the Office for Personal Data Protection
If the processing of your personal data is found to violate the provisions of the Regulation, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection with its registered office in Warsaw, ul. Stawki 2, who can be contacted as follows:
Obligation to provide personal data
The provision of data is voluntary, but necessary for the above purposes.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing the Directive 95/46/EC;