Privacy policy

The purpose of processing:

Legal grounds and period of personal data storage

Legitimate interest:
(article 6 paragraph 1 letter f GDPR):

Activities aimed at concluding and implementing a contract with a client or contractor.

article 6 paragraph 1 letter b GDPR

(applies to customers);

article 6 paragraph 1 letter f GDPR

(applies to cooperating persons on behalf of the client).

The need to contact employees / associates of clients and contractors in connection with actions taken to conclude a contract or its implementation.

Consideration of complaints and claims

article 6 paragraph 1 letter b, c and f GDPR

For the duration of the contract or until the warranty expires or the complaint is settled.

For the period of limitation of claims under the contract – in accordance with applicable law.

Processing data of clients or contractors and their employees / associates in connection with the establishment, investigation of complaints and defense of claims.

Keeping accounting and financial reporting.

article 6 paragraph 1 letter c GDPR

Until the data storage obligations resulting from legal provisions expire, in particular the storage of accounting documents (as a rule, for 5 years after the year in which the legal event that required the issuance of the accounting document occurred).

Conducting marketing activities (including using electronic means of communication).

article 6 paragraph 1 letter f GDPR

In the case of marketing using a telephone number or e-mail address, the administrator will obtain consent for the communication channel in accordance with the Act on the provision of electronic services or the Act – Telecommunications Law. Until the objection is raised, i.e. you show us in any way that you do not want to stay in touch with us or receive information about our actions, or until the claims are time-barred.

Conducting marketing activities.

Monitoring on the premises of the data controller in order to increase the safety of employees and protect property as well as to keep information confidential.

article 6 paragraph 1 letter f GDPR

Data processing in connection with the control of access to the data processing area and the security of the property and facilities of the data controller.

Video surveillance with the use of industrial cameras records only the image, including separate communication routes and locations. The recordings are kept for a period not exceeding three months, in particular:

– monitoring of the secretariat (2nd floor, building A-206A) – storage of the recordings for 3 months;

– monitoring of the room in front of the entrance to the secret office (4th floor, building A-206A) – storage of the recordings for a period of 3 months;

– monitoring of the entrance room to the office building (ground floor, building A-206A) – storage of the recordings for a period of 14 days;

– monitoring of the entrance to the IT department rooms (2nd floor, building A-206B) – storage of the recordings for a period of 14 days;

– monitoring of the entrance to the cloakroom (2nd and 3rd floor, building A-210) – storage of the recordings for a period of 3 months;

– monitoring outside the buildings and structures and around the employer’s premises – storing the recordings for 30 days (monitoring and supervision carried out by SUFO for PGZ SW under the concluded contract).

The monitoring of the IT system consists in the use of NVISION software that enables the control of end devices (i.e. monitoring of employees’ activity while working on business computers), network traffic, printouts, e-mail, blocking external media (pendrives), etc., in particular:

– e-mail monitoring – for a period of 30 days;

– monitoring activity in the IT network – for a period of 30 days;

– activity monitoring (data retention – system logs, hardware inventory, license inventory) – for a period of 30 days.

Conducting access control for persons residing at the premises of PGZ Stocznia Wojenna is our legitimate goal, and in the case of employees, it results from the law (Article 221 of the Code of Commercial Companies).

Data processing on social networks

article 6 paragraph 1 letter f GDPR

The data are co-administrated and controlled by PGZ Stocznia Wojenna and the YouTube /LinkedIn portal.

The data will be processed until an objection to data processing is raised.

Conducting current correspondence using the tools provided by the portal.

Processing cookies.

article 6 paragraph 1 letter f GDPR

The data will be processed for the periods specified in the cookie policy or until an objection to data processing is raised.

The objection may only be made by changing the end user’s browser settings, which will prevent the collection of information using cookies.

Adapting the content of websites to the needs of users, including for marketing purposes, optimizing the use of websites.

Keeping statistics

article 6 paragraph 1 letter f GDPR

Until another processing operation indicated in this table is carried out. We do not store personal data for statistical purposes only. Having information about the statistics of the activities conducted by the Administrator allows for the improvement of the conducted activity.

Streamlining our business with conclusions drawn from statistical activities.

Human resource management – employees and associates, including sub-processes:

– reporting data to ZUS (Department for Work and Pensions) and Urzad Skarbowy (the Tax Office)

– a sub-process related to occupational health and safety and health protection

– sub-process related to employment in the license to manufacture and trade in explosives, weapons, ammunition as well as products and technology for military or police purposes

– sub-process of calculating and paying wages

– sub-process of training and participation in conferences

– documentation archiving sub-process

article 6 paragraph 1 letter a, b, c and f GDPR;

article 9 paragraph 2 letter b RODO

In accordance with applicable regulations

– employee documents are kept for 50 years;

– documents of costs of examinations of an occupational medicine doctor and costs of periodic training are kept for a period of 5 years, counting from the end of the calendar year in which the tax payment deadline expired;

– Civil law contracts will be kept until the expiry of the limitation periods for the resulting claims;

– payrolls are kept for 50 years.

PGZ Stocznia Wojenna collects personal data resulting from:

• from the provisions on the universal duty of defense (including the ordinance of 15 June 2004 on notifying military commanders of supplements on persons subject to compulsory active military service and issuing by employers, schools and other organizational units certificates in matters of universal defense obligation and the regulation of September 21, 2004 on advertising against the obligation to perform active military service in the event of mobilization and during the war;

• provisions of the Act of June 13, 2019. on the performance of economic activity in the field of production and trade in explosives, weapons, ammunition, as well as products and technology for military or police purposes.

Company Social Benefits Fund

Data processing for the purpose of processing applications for social benefits

article 6 paragraph 1 letter a, b, c GDPR;

– employee documents are kept for 50 years

– documents regarding applications, data of family members, health condition, incurred expenses and other information necessary to grant the benefit are for a period of 5 years from the end of the calendar year in which the tax payment deadline expired

– payrolls for benefit payment are kept for 50 years

Keeping internships and practices.

Data processed for the purpose of:

• conclusion and implementation of a contract or agreement concluded with a person or other entity regarding the internship or internship

• fulfillment of the legal obligation and the right related to the internship or internship resulting from the provisions on the internship or internship.

• fulfillment of the obligation resulting from the provisions on taxes and accounting.

• ensuring security, including information security, through access control or monitoring.

article 6 paragraph 1 letter a, b, c and f GDPR;

Legal grounds for processing

1) the data is necessary for the conclusion and implementation of the contract or agreement regarding the internship or internship;

2) due to the law:

• the Act of 14 December 2016  Educational Law,

• the Act of 27 July 2005 – Law on Higher Education,

• the Act of 17 July 2009 on graduate internships,

• the act of 20 April 2004 on employment promotion and labor market institutions,

• the Act of August 29, 1997 – Tax Ordinance,

• the act of July 26, 1991 on personal income tax,

• the Accounting Act of September 29, 1994;

3) our legitimate interests;

4) consent of the trainee / apprentice

The data will be stored until the data storage obligations resulting from legal provisions expire, in particular for the storage of tax documents (as a rule, for 5 years after the year in which the legal event that required the issuance of the document occurred).

Recruitment.

article 6 paragraph 1 letter a and c GDPR

(applies to candidates for employees);

article 6 paragraph 1 letter a and b GDPR

(applies to candidates for associates)

At 6 months after the end of the recruitment process and in the case of consent for further recruitment processes no longer than a year.