Privacy policy of the service www.prs.pl
§ 1
General
- The Publisher of the service www.prs.pl : Polski Rejestr Statków Joint Stock Company seated in Gdańsk, gen. Józefa Hallera 126; 80-416 Gdańsk, e-mail: mailbox@prs.pl (further referred to as: „PRS”) is the Data Controller of your personal data.
- For matters concerning personal data subject rights, the PRS designated Data Protection Officer shall be contacted under: email: iod@prs.pl, phone: + 48 058 751 12 97, address: al. gen. Józefa Hallera 126 80-416 Gdańsk.
- PRS, by law, protects your personal data.
- Your personal data are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (called further GDPR).
- PRS does not collect purposefully „sensitive” personal data, unless such obligation is consequent upon mandatory law regulations, for example for the purpose of recruitment.
§ 2
Scope of Processed Data
- The Administrator, through the Service and other forms of communication, collects and processes Users’ personal data provided as part of the following processes:
• purchasing;
• recruitment;
• contact;
• application. - The scope of processed data includes, in particular:
• first and last name,
• residential address,
• email address,
• phone number.
§ 3
Objectives, legal basis and period of personal data processing
- PRS uses your personal data for the below objectives:
- monitoring and maintaining statistic records;
- conducting marketing activities;
- providing and developing interactive products;
- submitting offer inquiry, contact inquiry;
- providing interactive services;
- assessing our services;
- conducting recruitment processes;
- transmitting to trusted third parties, including Google LLC;
- establishing and managing your account(s);
- executing newsletter services;
- implementing sales processes, publications and training;
- responding to inquiries submitted with the use of available forms and e-mail boxes.
- Your personal data are processed by PRS upon various legal bases and with different purposes, in particular:
- the data acquired by forms, when you are asked to give your consent for processing data in specified purpose – based on your consent, with the purpose adequate to the form (Customer assessment questionnaire, response to questions sent by contact form, newsletter subscription, etc.), for a period of 3 years from the last contact in relevant matter or until withdrawal of your consent (art. 6 (1a) of GDPR);
- the data acquired for the execution of agreement or for taking actions at your request prior to concluding the agreement – which are indispensable for the service execution (e.g. for conducting the training) and for informing on changes and new/similar PRS services (so called direct marketing of own services), which you may be interested in, until terminating co-operation or withdrawal of your consent, and in case of processing data for tax, accounting etc. purposes – until the day defined by legal regulations (art. 6 (1b) of GDPR);
- the data of employment candidates – in accordance with consent expressed by the candidate for data processing within one or several (future) recruitment processes – for the recruitment period for the defined job you have applied for and for the purpose of future recruitments depending on the contents of your consent (art. 6 (1a) of GDPR);
- at the exercising so called legitimate interests, e.g. at receipt of your inquiry and giving response to it for the time necessary for executing of the goal (art. 6 (1f) of GDPR);
- when the processing is necessary for the execution of legal obligation incumbent on us, e.g. when personal data are to be made available to state authorities (art. 6 (1c) of GDPR).
§ 4
Freedom of submitting personal data
Submitting data is voluntary and is not result of any legal obligation. If you do not provide your personal data, PRS will not be able to provide services to you nor answer your questions, send offers, newsletters, match contents of PRS webpage to your interests, disclose misuses in services, carry out statistic measurements, improve services.
§ 5
Rights related to personal data processing by PRS
- In accordance with GDPR, with regard to processing your personal data by PRS, you have the right to:
- access your data and receive their copy;
- demand rectification (correction) of your data;
- erase data, restrict data processing;
- transfer data;
- withdraw already expressed consent to process data;
- submit a claim to the President of the Personal Data Protection Office in respect of breaching the right for protection of personal data or other rights consequent upon GDPR.
- With the purpose to exercise the rights referred to in item 1 (1 – 5), the Data Protection Officer shall be contacted, as given in § 1.
§ 6
Data security
- With the use of appropriate technical and organizational means, your data while stored will be secured against unauthorized or unlawful processing and accidental loss, destruction or damage.
- Authorized employees/co-workers are recipients of your data, and they may be given access thereto for conducting their duties.
§ 7
Data transfer to other objects, transfer to the Processors established in third countries (outside European Economic Area EEA)
- Your personal data may be disclosed also to the Processors from PRS capital group (subsidiaries) and to PRS (Polish and foreign) Branches.
- Your data may be accessible for PRS sub-contractors (sub-processors), such as marketing, accounting, law and IT firms.
- Your data may be stored in services located outside the European Economic Area (the EEA includes all EU countries plus Norway, Iceland and Liechtenstein), as PRS uses external systems and that means that PRS may transmit any data transferred by you by means of Internet websites or applications or services from outside EEA.
- Data transfer outside is carried out maintaining appropriate measures protecting access thereto by unauthorized persons.
§ 8
Automated data processing (profiling)
- In some cases, PRS and service suppliers use „cookies”, web beacons and other technologies in order to automatically collect specified kind information during users visits on our webpage or by e-mail addresses. Collecting such kind of information allows to better understand and improve operation, function and performance of PRS Internet services and to determine efficiency of marketing activities.
- Information so collected are not each time personal data, i.e. it may be the case that the given user is identifiable, however, when the IP address or information on location may be related to a specified e-mail address of the user.
§ 9
Identifiers of appliances – cookies, IP addresses and data on network traffic
- Similar to majority of webpages, also the PRS Internet service you are just viewing, may use “cookies”. They are IT data sent by webpage and stored in terminal facility (e.g. on hard disc) of the service user. They are usually simple text files including the name of mother webpage, their storage time in the terminal and a unique number. They are used for identification of the browser during the use of the service and thus information on the webpage to be displayed may be found and contents offered by the Publisher may be adjusted to your individual preferences.
- By using PRS webpage, you expresses your consent for using “cookies” and identifiers of appliances for the execution of services. If you do not express your consent for using ”cookies” by us, you should block them in your browser settings.
- On our servers, in automatic event log, a record is kept of network traffic data, such as your IP address and information on the appliance.
INFORMATION CLAUSE REGARDING TELEPHONE CALLS AT THE HEAD OFFICE OF THE POLISH REGISTER OF SHIPPING S.A.
In accordance with the regulation of art. 13 item 1 and item 2 of the Regulation EU 2016/679 of European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), (Official Journal of the European Union 2016.119.1 of 04.05.2016), called further RODO, Polish Register of Shipping Joint Stock Company seated in Gdańsk, called further the Company, informs that:
§ 1
Personal Data Controller – Polish Register of Shipping Joint Stock Company seated in Gdańsk (address: Al. Gen. Józefa Hallera 126, 80-416 Gdańsk, tel.: + 48 058 346 17 00, + 48 058 751 11 00, e-mail: mailbox@prs.pl) is the Controller of your personal data .
§ 2
Data Protection Officer – The Company has designated the Data Protection Officer, who is your contact person in matters of protection of your personal data under tel: + 48 058 751 12 97, e-mail: iod@prs.pl or in writing to the address of Company’s Head Office, indicated in para. I.
§ 3
Purpose and basis of data processing
1. Your personal data is processed for purposes arising from legitimate interests pursued by the Controller pursuant to Article 6(1)(f) of RODO, i.e. to enable telephone contact.
2. The Company does not intend to process your personal data for the purpose other than that for which your data have been collected. Where the data need to be processed for another purpose, the Company shall inform you thereon before planned processing and shall provide any other appropriate information in this respect.
§ 4
Right to object
You have the right to object at any time against processing your data by the Company. The Company shall no longer process the personal data for that purpose, unless the Company demonstrates compelling legitimate grounds for the processing which override Your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
§ 5
Period of data storage
Your personal data will only be processed during the telephone conversation – the conversation will not be recorded.
§ 6
Data recipients
Your data may be accessed by Company’s employees.
§ 7
Rights of persons providing the data
According to RODO, you have the below rights:
1) right to access to own data and to obtain their copy;
2) right to rectify (correct) own data;
3) right to erase data and to restrict data processing;
4) right to object against data processing;
5) right to transmit data;
6) right to lodge a claim to supervising body;
7) the right to lodge a claim to the President of Personal Data Protection Office (PUODO) if You consider that processing your personal data breaches the RODO regulations.
§ 8
Information on voluntary provision of data
Providing personal data is voluntary, however, it is necessary for the execution of the above purpose.
§ 9
Automated decision-making
1. Within the process of agreement conclusion and execution, the Company will not make decisions in automated manner based on data provided by You.
2. Your data shall not be processed in automated manner and will not be profiled. In accordance with the provision of art. 4 (4) of RODO, “profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, its economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.