1. Identity of the Personal Data Controller.

The personal data Controller is KATIKA Expat Assistance – Anna Wołonciej with headquarters in Warsaw, Nowogrodzka 44/4.

2. Contact details of the Personal Data Inspector.

The Personal Data Controller has designated a Personal Data Inspector who may be contacted by phone, e-mail, or post at:

Phone: +48 664 982 300
e-mail: suasponte@suasponte.pl
address: KATIKA Expat Assistance – Anna Wołonciej, ul. Nowogrodzka 44/4, 00-695 Warszawa

3. The purpose of data processing and legal basis.

Depending on the purpose of data collection, the processing of personal data has different legal bases.

Individual clients:
The purpose of data processing of natural persons who intend to use or are using the services of KATIKA is the actions necessary for the conclusion or proper execution of a contract within the scope of providing services with regards to legalization of stay or obtaining a work permit in Poland, and storing documents. The legal basis in this case is point (b) of Article 6(1) and point (a) of Article 9(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
In terms of personal data processed on the basis of consent, the consent may be revoked at any time through the submission of an appropriate statement which does not affect the legality of data processing up to the moment of submission.

Contact with the Controller:
The purpose of data processing of persons who contact KATIKA to obtain information about the Controller’s business is to provide all information correctly. The legal basis of data processed in such a way is point (f) of Article 6(1) of the GDPR. The Controller has a substantiated legal interest in processing personal data obtained in this way in the form of enabling proper contact and responding to the submitted question.

Recruitment:
The purpose of processing personal data obtained during recruitment processes is activities aimed at starting cooperation or undertaking employment. In connection with the ongoing recruitment processes the personal data is processed on the basis of point (b) of Article 6(1) and/or point (a) of Article 9(2) of the GDPR, and also in cases in which consent is obtained for the sent application to be used in future recruitment processes undertaken by the Controller, the legal basis will be consent i.e. point (a) of Article 6(1) of the GDPR.
In terms of personal data processed on the basis of consent, the consent may be revoked at any time through the submission of an appropriate statement which does not affect the legality of data processing up to the moment of submission.

4. Information on transferring the data to a third country.

The Controller does not transfer personal data to third countries and international organizations, unless it is purposeful and proper consent was obtained.

5. Recipients of data or categories of recipients.

The Controller will entrust, or if necessary, share the obtained personal data to a specified group of cooperative entities i.e. courier firms, sworn translators, notaries etc. as well as notified bodies and governmental institutions.
The full list of firms currently in cooperation is available at the headquarters of KATIKA Expat Assistance – Anna Wołonciej, Nowogrodzka 44/4 00-695 Warsaw, upon prior request and setting an appointment date.

6. Duration of data retention, and if it cannot be determined, the criteria of determining the duration.

Depending on the purpose of data collection, the personal data is retained for different periods.

Individual clients:
The personal data is retained for the period necessary for the execution of services, and after that for the duration of the limitation period of any claims arising from the provision of services, outlined in specific regulations and in particular the Civil Code. In terms of the documentation retained as part of the contract which was not previously collected by the data subject, the contract requires renewal 10 years after its acquisition.

Contact with the Controller:
The personal data are processed until the topic of the contact has been completed, no longer than 6 months after the termination of the contract.

Recruitment:
The personal data are retained until the ongoing recruitment processes are completed, no longer than 100 days after their completion. If consent was given for the purposes of future recruitment processes the data is retained until the consent is revoked or until a year has passed, whichever comes first.

7. Remaining information.

Each data subject has the right to:

• access their personal data,
• make corrections,
• demand the deletion of or restrict the processing of data,
• object to the processing of data,
• transmit the submitted data, if the processing is carried out by automated means, on the basis of Article 20 of the GDPR.

Additionally any data subject has the right to file a complaint against the unlawful processing of personal data to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

The personal data will not be subject to a decision based solely on automated processing or to profiling.