communicated pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), OJ EU.L.2016.119.1 (hereinafter: “GDPR“)

1. ADMINISTRATOR OF PERSONAL DATA

The administrator of the personal data is Skylar Jakub Ferek, Nowy Świat 33 lok. 13, 00-029 Warsaw, registered in the Central Register and Information on Business Activity, Tax Identification Number: 8792662961 (hereinafter “Administrator” or “Skylar”).

The Administrator is the owner of the website located at www.skylar.pl, and in addition to postal contact at the address of the registered office, it can also be contacted by e-mail at: kontakt@skylar.pl.

2. PURPOSE AND LEGAL BASIS OF THE PROCESSING OF PERSONAL DATA

Personal data are processed for the purpose of:

1. PROCESSING CORRESPONDENCE, including responding to messages sent to the Administrator, on the basis of Skylar’s legitimate interest (Art. 6(1)(f) GDPR) which is to provide contact to persons interested in the Administrator’s activities,

2. the ARCHIVING of materials and communications produced by Skylar in the course of its business, based on Skylar’s legitimate interest(Art. 6(1)(f) GDPR) to document the conduct of its business in accordance with applicable legislation.

3. RECIPIENTS OF DATA AND TRANSFER OF PERSONAL DATA OUTSIDE THE EEA

1. Personal data may be transferred to entities that cooperate with Skylar on a contractual basis. In particular, data may be shared with entities that provide Skylar with IT support services, including IT system support and maintenance, data hosting and cloud services, email service providers, archiving and shredding of documentation, postal operators or couriers and consultancy companies with which Skylar cooperates. In addition, personal data may be communicated to public authorities or entities (or those performing public tasks) entitled to obtain the data under applicable law.

2. As a general rule, personal data will not be transferred outside the European Economic Area. However, if such a transfer of personal data were to take place in the future – which may happen, among other things, in connection with the Administrator’s possible use of IT solutions based on cloud solutions or serviced by a service centre located outside the European Economic Area – the Administrator shall ensure a mechanism which, in accordance with the European Union law, legalises the transfer and provides adequate personal data protection guarantees. Data subjects will be informed in advance of such transfer.

4. RETENTION PERIOD OF PERSONAL DATA

Personal data will be retained for the time necessary to deal with the enquiry and thereafter for a period of 12 months for archiving purposes.

5. VOLUNTARINESS OF PROVIDING PERSONAL DATA

The provision of personal data is necessary in order to correspond with the Administrator.

6. PROFILING AND AUTOMATED DECISIONS

Data processed for the purposes described herein will not be subject to profiling and no automated decisions will be taken against data subjects.

7. RIGHTS OF PERSONAL DATA SUBJECTS

1. In relation to Skylar’s processing of personal data, data subjects have the following rights:
a. under the terms of Article 15 GDPR – the right of access to their personal data;
b. under the terms of Article 16 GDPR, the right to rectification of their personal data;
c. under the terms of Article 17 GDPR, the right to request the erasure of your personal data;
d. under the terms of Article 18 GDPR, the right to request the restriction of processing of your personal data;
e. pursuant to the principles set out in Article 21 GDPR – the right to object to the processing of your data, insofar as the processing is based on a legitimate interest of the Administrator.

2. The above rights may be exercised by making an appropriate request to the Administrator at the contact addresses indicated in paragraph 1. “Administrator of Personal Data” of this notice.

3. In connection with Skylar’s processing of personal data, data subjects shall furthermore have the right to lodge a complaint with the competent supervisory authority, in particular in the country of their habitual residence, their place of work or the place where the alleged infringement was committed. In Poland, the supervisory authority is the President of the Office for the Protection of Personal Data, ul. Stawki 2, 00-193 Warsaw.