Privacy Policy

This clause covers information regarding the processing of personal data by Marineworks S.A., entered into the register of entrepreneurs of the National Court Register under KRS number: 0000956059, NIP: 5842814680, REGON: 521366568, in a fully or partially automated manner as well as in a non-automated manner for personal data constituting or intended to constitute part of a data filing system, as required by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR". This clause is addressed to natural persons who are contractors or potential contractors of the Company, representatives, employees or persons designated to contact on behalf of specific entities, or other types of stakeholders and correspondents of the Company.

I. Data Controller

The controller of your personal data is Marineworks S.A., entered into the register of entrepreneurs of the National Court Register under KRS number: 0000956059, NIP: 5842814680, REGON: 521366568. You may contact us as follows:

• by mail to: ul. Ateny 10, 80-299 Gdańsk / Poland (marked "RODO"),
• by email: [email protected],
• by phone: +48 58 324 49 30.

II. Processing of Personal Data of "Representatives"

(including employees, persons representing a given entity/person, including proxies, persons designated to contact or provide information, or to perform specific tasks) of the following entities:

• contractors or potential contractors of the Company,
• organizational units, legal persons/natural persons or other types of entities cooperating with the Company on a basis other than a contract,
• entities from the Company's business environment,
• other types of entities contacting the Company in any matter,
• personal data of persons corresponding in their own matters, other than current or potential contractors.

1. If you are a "representative" or a person referred to in point II above, your personal data is processed on the basis of Art. 6(1)(c) of the GDPR, for the purpose of fulfilling legal obligations, or on the basis of Art. 6(1)(f) of the GDPR, for purposes arising from our legitimate interests, consisting in conducting business activity, including, depending on the circumstances of a given case, for the purpose of:

• communication and handling of correspondence,
• establishing or maintaining contacts regarding the subject of the Company's activity,
• presenting an offer or considering a received offer or otherwise establishing cooperation,
• concluding a contract and performing activities preceding its conclusion, such as negotiations, exchange of documents,
• related to the performance of a contract concluded with a contractor,
• document circulation,
• performing required actions before competent authorities, including public administration,
• determining or pursuing possible claims, or defending against such claims.

2. If we have not obtained personal data directly from you, it comes from the entity on whose behalf you act or the party to the contract concluded with the Company, or from publicly available registers/databases, including the National Court Register, the Central Registration and Information on Business Activity, the Public Information Bulletin, or websites.

If data is obtained in a manner other than directly from you, we may process the following categories of personal data: basic identification data, including name and surname, identification data assigned by public authorities, electronic identification and location data, address data, contact data (email address, phone number), data regarding place of employment and position held or function performed, professional qualifications, or other data provided to the Company in connection with cooperation or contact.

3. Personal data processed on the basis of the Company's legitimate interest will be kept until such interest ceases, and in particular for the period necessary to secure information in case of a legal need to prove facts or until the expiry of the limitation period for potential claims.

4. Recipients of data may include:

• persons authorized by us to process data in the performance of their official duties,
• other entities, if necessary for us to fulfill obligations arising from concluded contracts or legal provisions, including proper performance of a service, or to exercise our rights,
• entities providing postal and courier services, banks, insurers, tax advisors, law firms,
• entities to which we have entrusted services related to the processing of personal data,
• courts and public authorities to which the Company is obliged or authorized to disclose your data.

5. You have the right to access your personal data, the right to request rectification and completion of personal data, the right to request erasure of personal data in the circumstances indicated in Art. 17 of the GDPR, the right to request restriction of processing of personal data in the cases indicated in Art. 18 of the GDPR, the right to data portability of your personal data which we process automatically on the basis of a contract or consent, the right to object, and the right to lodge a complaint with the supervisory authority dealing with the protection of personal data, i.e. the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych).

6. You have the right to object to the processing of your data for purposes arising from our legitimate interests.

7. Providing data is voluntary but necessary to achieve the purpose for which the data is processed. In some cases, providing personal data is a statutory or contractual requirement.

8. Your data will not be subject to automated decision-making, including profiling.

9. We do not transfer your data outside the EU/European Economic Area.

III. Processing of Personal Data of Natural Persons Who Are Contractors or Potential Contractors

1. If you are our contractor or potential contractor, we process your personal data on the basis of Art. 6(1)(b) of the GDPR for the purpose of concluding a contract and performing activities preceding its conclusion, such as negotiations, exchange of documents, or for the performance of a contract, or on the basis of Art. 6(1)(c) of the GDPR for the purpose of fulfilling obligations specified in legal provisions, including tax obligations, or Art. 6(1)(f) of the GDPR for purposes arising from our legitimate interests, consisting in the functioning of our enterprise and conducting business activity, and in particular, depending on the circumstances of a given case, for the purposes of:

• communication and handling of correspondence,
• establishing or maintaining contacts regarding the subject of the Company's activity,
• presenting an offer or considering a received offer or otherwise establishing cooperation,
• concluding a contract and performing activities preceding its conclusion, such as negotiations, exchange of documents,
• related to the performance of a contract concluded with a contractor,
• document circulation,
• performing required actions before competent authorities, including public administration,
• determining or pursuing possible claims, or defending against such claims.

2. If we have not obtained your data directly from you, this data comes from publicly available registers/databases, including the National Court Register, the Central Registration and Information on Business Activity, the Public Information Bulletin, or websites. If data is obtained in a manner other than directly from you, we may process the following categories of your personal data: basic identification data, including name and surname, identification data assigned by public authorities, financial identification data, electronic identification and location data, address data, contact data (email address, phone number), data regarding professional qualifications, or other data provided to us in connection with cooperation or contact.

3. Your data obtained for the purpose of concluding and performing a contract will be kept until the end of the limitation period for possible claims arising from it; data processed in our legitimate interest will be kept until such interest ceases, and in particular for the period necessary to secure information in case of a legal need to prove facts or until the limitation of possible claims; and data processed for the purpose of fulfilling a legal obligation will be kept for the period resulting from legal provisions.

4. Recipients of data may include:

• persons authorized by us to process data in the performance of their official duties,
• other entities, if necessary for us to fulfill obligations arising from concluded contracts or legal provisions, including proper performance of a service, or to exercise our rights,
• entities providing, among others, postal and courier services, banks, insurers, tax advisors, law firms,
• entities to which we have entrusted services related to the processing of personal data,
• courts and public authorities to which the Company is obliged or authorized to disclose your data.

5. You have the right to access your personal data, the right to request rectification or completion of personal data, the right to request erasure of personal data in the circumstances indicated in Art. 17 of the GDPR, the right to request restriction of processing of personal data in the cases indicated in Art. 18 of the GDPR, the right to data portability of your personal data which we process automatically on the basis of a contract or consent, the right to object, and the right to lodge a complaint with the supervisory authority dealing with the protection of personal data, i.e. the President of the Personal Data Protection Office.

6. You have the right to object to the processing of your data for purposes arising from our legitimate interests.

7. Providing data is voluntary but necessary to achieve the purpose for which the data is processed. In some cases, providing personal data is a statutory or contractual requirement.

8. Your data will not be subject to automated decision-making, including profiling.

9. We do not transfer your data outside the EU/European Economic Area.