Information about processing personal data for contractors
Fulfilling the obligations according to the art. 13 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter be referred to as “GDPR” the data controller informs that:
PwC Advisory spółka z ograniczoną odpowiedzialnością sp.k. or another PwC entity which you have cooperation with - list of entities: https://www.pwc.pl/pl/o-nas/lista-spolek-pwc.html, with its registered seat in Warsaw (00-633), Polna 11 Street, („PwC”, “we”) will be the controller of your personal data.
PwC processes your personal data for the following purposes and on the following legal bases:
A legal basis |
A purpose of the processing |
art. 6 sec. 1 let. b) of the GDPR– the performance of a contract to which the data subject is a party |
Concluding and executing the contract |
art. 6 sec. 1 let. c) of the GDPR – a legal obligation,
art. 9 sec. 2 let. b) and h) of the GDPR – carrying out the obligations and exercising specific rights in the field of social security and social protection law and the provision of health or social care or treatment or the management of health or social care systems and services
|
Collecting:
Applies only for people for whom PwC is obliged to run activities above. |
art. 6 sec. 1 let. f) of the GDPR – legitimate interests pursued by the PwC |
|
3. Your personal data will not be disclosed to third parties except the following recipients:
- other PwC member firms. For details of our member firm locations, please visit the website: https://www.pwc.com/gx/en/about/corporate-governance/legal-entities.html. We may share personal data with other PwC member firms where necessary for administrative purposes and purposes of processing referred to in pt 3;
- service providers that aren’t members of the PwC network (“third party service providers”) to process on a PwC’s behalf. Third party service providers may include providers of IT services, including identity management, website hosting, data analysis, data back-up, security and storage services in so far as it refers to the relation with PwC;
- PwC’s current and prospective clients, PwC’s professional advisors, PwC’s current and prospective suppliers and providers of goods and services exclusively to the extent necessary to contact with you and to enable your proper performance of professional duties;
- governmental or regulatory authorities, courts and law enforcement authorities or agencies as required by and/or in accordance with applicable law or regulation.
4. Your personal data may be transferred to countries outside the European Economic Area (EEA) – third countries, based on:
- art. 45 sec. 1 of the GDPR - European Commission’s adequacy decision (applies for countries, which were subject of decision);
- art. 46 sec. 2 let. c) of the GDPR - standard data protection clauses adopted by the European Commission.
5. Your personal data will be retained for a term of your contract. After that, personal data might be stored only for the period indicated by statutory provisions of law or as long as you or us may pursue legal claims towards each other.
6. In accordance with processing your personal data you have the following rights: right of access, to rectification (updating), to erasure, to restriction of processing, and to data portability and to object; the exercise of the above rights is possible through the form available here.
7. The provision of personal data is a condition for concluding the contract and legal obligation in the field of compliance with legal obligations to which the controller is subject.
This privacy statement was last updated on 08.07.2024
