KPL SOLUTION SP. Z O.O. is committed to safeguarding the privacy and personal data of our clients, customers, employees, and partners. This GDPR Compliance Statement outlines our procedures for ensuring compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Polish Data Protection Act.
1. Data Controller
KPL SOLUTION SP. Z O.O. acts as the data controller for personal data collected and processed. Our contact details are:
- Company Name: KPL SOLUTION SP. Z O.O.
- Address: Zawodzie 20, 80-726 Gdańsk
- Email: info@kplsolution.pl
- Telephone: +44 7477 538066
2. Personal Data We Collect
We collect and process the following types of personal data:
- Customer Data: Name, contact information (email, phone number), payment information, and service usage details.
- Employee Data: Name, contact information, payroll information, employment history, and other HR-related data.
- Client Data: Business contact information, contractual data, and communications.
3. Purpose of Data Processing
We process personal data for the following purposes:
- To deliver and manage our services
- To maintain communication with clients, customers, and partners
- To manage employment-related activities
- To fulfill legal obligations and regulatory requirements
4. Legal Basis for Processing
The legal bases on which we process personal data include:
- Consent: When you have given explicit consent for specific data processing activities.
- Contract: When data processing is necessary for the performance of a contract to which you are a party.
- Legal Obligation: When processing is necessary for compliance with a legal obligation to which KPL SOLUTION SP. Z O.O. is subject.
- Legitimate Interests: When processing is necessary for the purposes of legitimate interests pursued by KPL SOLUTION SP. Z O.O., except where such interests are overridden by your interests or fundamental rights and freedoms.
5. Data Subject Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request access to the personal data we hold about you.
- Right to Rectification: You can request the correction of inaccurate or incomplete data.
- Right to Erasure: You can request the deletion of your personal data under certain conditions.
- Right to Restrict Processing: You can request the limitation of the processing of your personal data under certain circumstances.
- Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your personal data under certain conditions.
- Right to Withdraw Consent: You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
- Right to Lodge a Complaint: You can lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
To exercise any of these rights, please contact us at info@kplsolution.pl.
6. Data Security
We take the security of personal data seriously and implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of personal data.
7. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. After the retention period expires, we securely delete or anonymize the data.
8. Data Transfers
If personal data is transferred outside the European Economic Area (EEA), KPL SOLUTION SP. Z O.O. will ensure that adequate safeguards are in place, in line with GDPR requirements, to protect the data.
9. Data Breach Notification
In the event of a data breach that may pose a risk to individuals' rights and freedoms, KPL SOLUTION SP. Z O.O. will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Affected individuals will also be informed without undue delay.
10. Website and Contact Form
Data entered in the contact form, including your enquiry and any attachment, is processed on the basis of your consent (Article 6(1)(a) GDPR) in order to respond to you. It is sent by email to our company address, and attachments are not stored on the website server. Providing this data is voluntary but necessary to handle your enquiry.
Contact form data is kept for as long as necessary to handle your enquiry and related correspondence, and then until consent is withdrawn or any potential claims become time-barred.
When you use the website, the server processes your IP address and technical browser data to keep the website working and secure (Article 6(1)(f) GDPR). Your IP address is used to determine your country and display the appropriate language version. To protect the contact form against abuse, the server briefly stores a hash of your IP address.
With your consent (Article 6(1)(a) GDPR), we use Google Analytics, provided by Google Ireland Limited, to compile visit statistics. This covers data about your use of the website, such as pages viewed, country, and device and browser type. Statistical data is kept for up to 14 months. It may be transferred outside the EEA, including to the United States, using the mechanisms provided for in the GDPR. You can withdraw your consent using the “Cookie settings” link in the website footer.
Our service providers include our website hosting provider (OVHcloud), email provider (Zoho) and, with your consent, our analytics provider (Google Ireland Limited). We do not use this data for automated decisions that produce legal effects concerning website visitors. Our use of cookies is described in the Cookie Policy.
11. Contact Us
If you have any questions about this GDPR Compliance Statement or wish to exercise your data protection rights, please contact us at:
- Email: info@kplsolution.pl
- Telephone: +44 7477 538066