I. General Information
The Policy applies to all cases in which Merida Poland is the controller and processes personal data obtained from the data subject, as well as cases in which personal data has been obtained from other sources with the exception of personal data of employees and those processed under entrustment agreements.
II. Personal data controller
III. Data protection contact information
Please direct any inquiries or requests related to the processing of personal data by Merida Polska to the addresses below:
Merida Poland Sp. z o.o.
Street. M.C. Skłodowska 35
Or at the email address:
IV. Purposes, legal basis and retention period of personal data
|Purpose of data processing||Legal basis||Processing period|
|Register an account on our portals||Art. 6(1a) RODO consent of the data subject||until such time as consent is withdrawn|
|Performance of a contract, order to which the data subject is a party||Article 6(1)(b) RODO performance of a contract, order to which the data subject is a party||until the performance of such contract, order and the statute of limitations for claims under the law|
|Performance of contract, order – personal data of persons indicated in contracts or for contact||Art. 6(1)(f) RODO legitimate interest of the controller||pending|
and statute of limitations on claims under the
|Recruitment||Art. 6(1)(a) RODO consent of the data subject||4 months from the end of recruitment|
|Newsletter||Art. 6(1)(a) RODO consent of the data subject||until such time as you withdraw your consent|
|Response to inquiry||Art. 6(1)(a) RODO consent of the data subject||until a response is given and for a period of 3 years from the end of contact (limitation period for possible claims) or the withdrawal of consent by the inquirer|
|Complaint||Art. 6(1)(f) RODO legitimate interest of the administrator||until the statute of limitations for claims arising from|
|Accounting, tax||Art. 6(1)(c) RODO||For a period of 6 years from the date of completion of the service, contract, order|
|Investigating claims or protecting against claims||Article 6(1) f RODO legitimate interest||Necessary for the performance of an obligation and the statute of limitations on claims|
|Marketing of products and services including profiling||Art. 6(1)(a) RODO consent of the data subject||until such time as you withdraw your consent|
|Marketing of products and services including profiling||Art. 6(1)(f) RODO legitimate interest of the administrator||until an objection is filed|
|Organization and promotion of the event||Art. 6(1)(f) RODO legitimate interest of the administrator||until the end of the event and the statute of limitations on claims|
|Contests, tests||Art. 6 (1 a ) RODO consent of the data subject||Until the withdrawal of consent or until the end of the competition, tests|
and statute of limitations on claims
V. Source of data obtained and type of data provided by others
Merida Poland receives personal data directly from data subjects or through other persons ( from the person’s employer, from another employee or other entity with which the person continuously cooperates).
Where we obtain personal data directly from you, you have direct control over the extent of data collected by Merida Poland.
In the case of sharing of data by another person, Merida Polska usually collects contact data related to professional activities, such as: name, surname, telephone number, e-mail address, company name, position or function, and possibly other data resulting from the order, contract on the basis of which the data is shared.
VII. Automated decision-making
The data you provide may be processed for the purpose of profiling and tailoring the marketing content, offers or information we send to your interests and business or professional activities.
The data you provide will not be processed for the purpose of automated decision-making.
VIII. Consequences of not providing data
- In cases of electronic forms (e.g., contact forms), providing data is voluntary, only failure to provide data indicated as mandatory will result in the inability to send the form, participate in the event or subscribe to the newsletter.
- In the case of data of persons who are parties to the contract/order, the provision of data necessary for the performance of the contract and legal obligations is a condition for the conclusion and performance of the contract.
- In the case of data collected by representatives for marketing, purchasing, sales activities, their submission is fully voluntary. The consequence of not providing them is that you cannot be contacted in the future.
IX. Recipients of personal data
We transfer personal data to other entities only when permitted by law. In such cases, we enter into agreements with a third party that include provisions and security mechanisms to ensure adequate protection of personal data and to maintain our standards.
Merida Poland is part of a worldwide network and, together with other professional service providers, conducts its business through third parties
based in other countries. Your personal data may therefore be transferred to a country outside the EU.
In the case of transfer of data to a third country for which there has not been a decision of the European Commission establishing an adequate level of protection, the transfer shall be carried out only on the basis of an agreement taking into account EU requirements
Regarding the transfer of personal data outside the EEA.
The data we store may be transferred:
- Entities that process personal data under entrustment agreements (processors)
- Providers of web hosting and website management services
- Providers of software delivery services, software and hardware maintenance services, backup, security, data analysis
- Entities implementing marketing campaigns
- Providers of survey services including customer satisfaction surveys
- Debt collection companies
- Auditors, experts, legal and tax advisors
- Law enforcement, regulatory, state and local government bodies under the law
X. Rights of data subjects
Under the RODO, you have the right to:
- access to data, including obtaining a copy of the data
- rectification (change, update) of data
- deletion of data (in cases indicated in the RODO )
- restrictions on the processing of personal data
- object to the processing
- Data portability where the basis of the processing is your consent or a contract to which you are a party
- withdraw your consent in case your data is processed on the basis of consent.In case you wish to unsubscribe from the newsletter, the link to unsubscribe of the service can be found in any message sent to you or please to use the data contained in point III “Contact details for data protection matters”
If you wish to withdraw your consent to data processing, please use the the contact details in Section III “Contact details for data protection matters”
- lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection. A list of supervisory authorities in other EU member states is available at:
Merida Poland reserves the right to exercise the above rights after positive verification of the identity of the person applying for the exercise of the right.
The realization of the aforementioned rights depends on the specific conditions set forth in the RODO. If your request is denied, you will receive a response with the following
With reasons for the refusal.
If you wish to exercise your rights, use the data indicated in section III “Contact details for data protection matters”
Please do not send special categories of personal data (revealing racial or ethnic origin, political views, world views, trade union membership, information on physical or mental health, genetic data, biometric data, information on sexual life, sexual orientation, criminal convictions and violations of law) via contact forms, websites. If you provide such information, this will constitute your express consent to Merida Poland’s collection and use of such information in the manner specified in the form, the document in which the data was disclosed to us.
In order to ensure the security of personal data, Merida Polska selects and applies appropriate technical and organizational measures to ensure the protection of the processed data and applies safeguards to protect the data from being disclosed to unauthorized persons, as well as from being processed in violation of applicable laws. We have implemented appropriate data protection policies, procedures and training, and regularly review whether the measures in place are adequate to safeguard the data we hold.
XII. Note from the administrator
Last updated on 22/05/2018.