Privacy Policy

Pursuant to Article 13(1) and (2), as well as Article 14(1–3) of Rozporządzenie Parlamentu Europejskiego i Rady (UE) 2016/679 z dnia 27 kwietnia 2016 r. w sprawie ochrony osób fizycznych w związku z przetwarzaniem danych osobowych i w sprawie swobodnego przepływu takich danych oraz uchylenia dyrektywy 95/46/WE (hereinafter: “RODO”), we inform you that: 

1. controller of your personal data is SIIAMI Spółka z ograniczoną odpowiedzialnością, with its registered office in Gdańsk (80-837), ul. Straganiarska 20-22/35, entered into the Rejestr Przedsiębiorców kept by the Sąd Rejonowy Gdańsk – Północ w Gdańsku under KRS number: 0000942149; NIP: 5833442552 and REGON: 520767510; hereinafter referred to as: “the Controller”, “SIIAMI”. 
2. For matters related to the protection of personal data, please contact the Data Protection Officer appointed by the Controller — Panią Marzeną Chrostowską, via email at: iod@siiami.pl or in writing to the address of the Controller’s registered office. 
3. SIIAMI has received and processes your personal data as a result of concluding an agreement with you for cooperation in the provision of accounting services, HR services, legal services, and consultancy related to your business activities. Your personal data will be processed exclusively for the purposes necessary to carry out the actions specified in the cooperation agreement or assignment, as well as for purposes arising from the Ustawa z dnia 30 marca 2021 roku o zmianie ustawy o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu oraz niektórych innych ustaw. 
4. Your personal data will be processed solely for the following purposes:
   
   • conclusion, performance, and execution of the service agreement (legal basis: art. 6 ust. 1 lit. b RODO); 
   • communication necessary to conclude the agreement or perform other pre-contractual actions, solely in your legitimate interest (legal basis: art. 6 ust. 1 lit. b RODO); 
   • compliance with legal obligations of the Controller, including accounting, HR, and tax-law obligations (legal basis: art. 6 ust. 1 lit. c RODO); 
   • establishment, exercise, or defense of legal claims (legal basis: art. 6 ust. 1 lit. f RODO); 
   • performance of legal obligations of the Controller (e.g., issuing and storing invoices/sales documents, other accounting documents, complaint handling) (legal basis: art. 6 ust. 1 lit. c RODO); 
5. SIIAMI may also act as a data processor of personal data provided under an outsourcing agreement, for instance, with regard to employees or business partners of the Client, whose data is included in the submitted accounting, tax, and HR/payroll documentation.
6. Your personal data may be transferred to public authorities within the scope of actions specified in the agreement or assignment, as well as to other entities cooperating with SIIAMI, which process data based on a data processing agreement with the Controller and solely upon its instructions.
7. Your personal data will be stored for the period during which either party to the agreement may assert rights against the other, but not less than the period required by law for the retention of such data. 
8. In connection with SIIAMI’s processing of your personal data, you have the right to access your data (art. 15 RODO), rectify it (art. 16 RODO), erase it (art. 17 RODO), restrict processing (art. 18 RODO), the right to data portability (art. 20 RODO), and the right to object to processing (art. 21 RODO). If you have provided the Controller with data on the basis of consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of the processing carried out before its withdrawal. 
9. If you believe that the processing of your personal data violates the provisions of RODO, you also have the right to lodge a complaint with the Prezes Urzędu Ochrony Danych Osobowych. 
10. Providing the required personal data is a condition for concluding an agreement or assignment. While providing data is voluntary, failure to do so will result in the inability to conclude the relevant agreement or assignment with SIIAMI. 
11. Your data will not be processed by automated means, including profiling. 
12. The Controller does not intend to transfer your data to third countries or international organizations.