Information Clause Regarding the Processing of Personal Data

Personal Data Controller

The controllers of your personal data are: K2 Agro Spółka z ograniczoną odpowiedzialnością with its registered office in Poznań, ul. Krokusowa 21, 61-175 Poznań, entered into the Register of Entrepreneurs of the National Court Register under KRS number: 0001192921, Tax Identification Number (NIP): 779 259 37 51 (hereinafter referred to as the “Controller”). The Controller has not appointed a Data Protection Supervisor (DPO).

Purpose and legal basis for personal data processing

Your data will be processed in connection with the use of services offered by the Controller or participation in a conference or training organized by the Controller, and thus the conclusion of a contract with the Controller, as well as for the purpose of establishing, pursuing, or defending against claims, for archival, evidentiary, statistical, and reporting purposes, for marketing and promotional purposes (using photos and recordings from training and conferences in promotional materials and event reports or posts on social media and the Controller’s website), and for the Controller to offer you products and services directly (direct marketing). Providing personal data is voluntary, but necessary to conclude the aforementioned contracts. Failure to provide personal data will result in the inability to participate in the conference or training and the inability to conclude the aforementioned contracts. You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Your personal data may be processed by the Controller for the following purposes:

• concluding and performing a contract or taking steps at the request of the data subject before entering into a contract (legal basis: Art. 6.1.b) GDPR);
• complying with the Controller’s obligations arising from legal provisions (legal basis: Art. 6.1.c) GDPR);
• and pursuing the Controller’s legitimate interests indicated above (legal basis: Art. 6.1.f) GDPR).

The processing of your personal data covered by the declaration of consent will be based on Art. 6.1.b) GDPR. a) GDPR, to the extent and for the purpose specified therein. In terms of your consent to the processing of your image:

• processing is based on the consent granted in accordance with the provisions of this document, without territorial or time restrictions;
• the consent covers the use of the image both as a standalone material and as part of other works;
• the Administrator is entitled to modify the image to enable its inclusion in a larger whole and thus combine it with other works, including audio-visual works, extract individual layers of the material containing the image, including the extraction of audio and video layers;
• the consent covers the use of the image for marketing and promotional purposes indicated in this document.

The use of the image, which is also its processing as personal data, means:

• recording and reproduction in any manner, including in computer memory, on both digital and analog data carriers, using digital recording techniques and techniques Printing and reprographic works (e.g., digital photos, printed posters);
• Distribution by placing copies on the market, distribution without the use of copies by displaying, reproducing, broadcasting, or rebroadcasting in analog and digital formats, via teleinformatic networks (including the Internet), telephone networks, and mobile devices;
• Distribution in the mass media.

The legal basis for processing is Article 81(1) of the Act of 4 February 1994 on Copyright and Related Rights.

Recipients of personal data

The following categories of entities may have access to your personal data:

• authorized employees and associates of the Controller,
• service providers providing the Controller with technical and organizational solutions enabling the provision of services (entities operating infrastructure or IT systems, subcontractors, entities providing services related to conference or training events, e.g., banks, advertising agencies, couriers or carriers, speakers, trainers), advisors (e.g., accounting or legal services), auditors;
• separate entities with which the Controller has concluded appropriate personal data processing agreements;
• public authorities, provided they are authorized to do so by applicable law (upon the submission of an appropriate request by the relevant authorities).

Transfer of personal data to third countries or international organizations

The Controller will not transfer or allow the transfer of your personal data outside the European Economic Area, except in situations where:

• this occurs at your request;
• The Controller has taken the necessary measures to ensure that the transfer complies with applicable data protection regulations; These measures may include, in particular, transferring your data to a country that, in accordance with the European Commission’s decision, ensures adequate protection for your data, or to a recipient in the United States that has certified compliance with the EU-US Privacy Shield or standard contractual clauses approved by the European Union. Your personal data will not be transferred to any international organization.

  Information regarding personal data profiling

  Your personal data may be used for automated decision-making, and therefore your personal data may be subject to profiling.

  Your rights

  You have the right to:

  • In justified cases, access to your data and receive a copy thereof;
  • Delete your data (if technically possible) – if there is no basis for the Controller to process your data;
  • Restrict data processing (if technically possible) – if the Controller has inaccurate data about you or processes it without justification;
  • Object to data processing based on a legitimate interest for purposes other than direct marketing, as well as when processing is necessary for the Controller to perform a task carried out in the public interest or to exercise public authority;
  • Portability of data (if technically possible) – you have the right to receive from the Controller in a structured, commonly used form. You may also instruct the Controller to send this data directly to another entity in a machine-readable format;
  • Lodging a complaint with a supervisory authority – if the Controller processes your data unlawfully, you may file a complaint with the President of the Personal Data Protection Office;
  • Withdrawing consent to data processing (withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal).

  Each request will require individual consideration in terms of the existing basis for data processing, the purpose, and the scope of processing.

  Data Retention Period

  The Controller will process personal data for the period necessary to achieve the purposes for which they were collected, i.e.:

  • within the scope of the performance of the contract concluded with the Controller – for the duration of the contract, and thereafter for the period required by law or for the pursuit of the Controller’s legitimate interests, including for the protection and pursuit of potential claims;
  • within the scope of the Controller’s legal obligation – for the period and to the extent required by law;
  • if personal data are processed to pursue the Controller’s legitimate interests referred to above – for the period until such interests are fulfilled or an objection to such processing is raised.

  Personal data processed for the purposes covered by the declaration of consent will be processed for these purposes until consent is withdrawn.