Information on processing of personal data for commercial communication receivers

Fulfilling the obligations according to the Art. 13 (1, 2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter be referred to as “GDPR” the data controller informs that:

  1. PwC Advisory spółka z ograniczoną odpowiedzialnością sp.k. or another PwC entity which is a newsletter author - list of entities: https://www.pwc.pl/pl/o-nas/lista-spolek-pwc.html, with its registered seat in Warsaw (00-633), Polna 11 Street, („PwC”, “we”) will be the controller of your personal data.

  2. PwC processes your personal data for the following purposes and on the following legal bases:

 

A legal basis

A purpose of the processing

Art. 6 (1)(f) of the GDPR – legitimate interests pursued by the PwC

  1. Direct marketing of the products and services provided by PwC

  2. Sending commercial information by electronic means, in particular newsletters, invitations to events, PwC publications informing about the activities and scope of PwC services and offering PwC products and services;

  3. Conducting direct marketing activities via a telecommunication device (mobile);


Commercial information will be sent only to persons who gave consent to receive commercial information from PwC, pursuant to Art. 10 (2) of the Act of July 18, 2002 on the provision of electronic services.


Direct marketing via a telecommunication device (mobile) will be conducted only in relation to people who have consented to this form of marketing, in accordance with Art. 172 (1) of the Act of July 16, 2004 - Telecommunications Law.

3. Your personal data will not be disclosed to third parties except the following recipients:

  • service providers that aren’t members of the PwC network (“third party service providers”) to process on a PwC’s behalf. Third party service providers may include providers of IT services, including identity management, website hosting, marketing automation and management, data analysis, data back-up, security and storage services in so far as it refers to the purposes mentioned above in pt 2;
  • governmental or regulatory authorities, courts and law enforcement authorities or agencies as required by and/or in accordance with applicable law or regulation.

4. Your personal data may be transferred to countries outside the European Economic Area (EEA) – third countries, based on:

  • art. 45 sec. 1 of the GDPR - European Commission’s adequacy decision (applies for countries, which were subject of decision);
  • art. 46 sec. 2 let. c) of the GDPR - standard data protection clauses adopted by the European Commission.

5. Personal data will be processed by PwC until you resign from receiving PwC commercial information or withdraw your consent to use a telecommunication device for marketing purposes, or until you will raise the right to object to the processing of personal data for marketing purposes.

6. In accordance with processing your personal data you have the following rights:

  • right of access, to rectification (updating), to erasure, to restriction of processing, and to data portability and to object; You can exercise these rights by using the form available here.
  • to lodge a complaint with a supervisory authority (Prezes Urzędu Ochrony Danych Osobowych).

7. The provision of personal data is voluntary.