Below you will find information about the principles and methods of processing your personal data, in connection with our business. In the Policy you will find the most important information about how Airtrans H. Watoła Sp. J . handles your personal information.

Who is the controller of my data?

The administrator of your personal data is Airtrans H. Watoła Sp. J., 90 Wolności St., 42-625 Pyrzowice (Ożarowice Municipality) entered in the register of entrepreneurs kept by the District Court of Katowice-Wschód in Katowice VIII Economic Department of the National Court Register under the number 0000904809, NIP: 6452384640. In matters concerning the protection of your personal data, you can always contact us by e-mail at ktwteam@airtrans.com.pl or by post at the address of our registered office, with the note “Personal Data”.

Where does the Administrator get my personal information from?

We obtain your personal data mainly from you. You give us your data to get in touch with us by sending us an email, filling out a contact form, or even -giving us your business card. We also obtain your data in connection with our business activities, i.e. your name, residential address, e-mail address, telephone number, PESEL number and the execution of transactions in the field of international transport and forwarding services, performed under the terms of the General Polish Forwarding Terms and Conditions 2002 (OPWS 2002).

Contractors and suppliers

If you are our contractor or supplier and run a sole proprietorship or represent a company or business unit, we obtain your personal data mainly from you. You give us your data to get in touch with , by sending us an email or filling out a contact form. We also obtain your data in connection with our business activities in the subject of handling international transport and forwarding services, performed in accordance with the principles indicated in the General Polish Forwarding Terms and Conditions 2002 (OPWS 2002).

If you are an employee of a company or organizational unit, and the Administrator processes your personal data, although you have never directly provided it to us – it happens that your data may be transferred to us by third parties, at your request or in connection with your official duties. Your data may

provide us with your employer to enable us to contact you in connection with the cooperation we undertake with the entity where you are employed.

Employees and applicants for employment

If you are our employee or contractor, we obtain your personal data mainly from you. You provide us with your personal data for purposes necessary from the perspective of your employment – when entering into an employment contract or filling out a personal questionnaire. As your employer or principal we need to process your personal data in order to be able to contact you and correctly settle all issues related to your employment, including for tax and social security purposes. Occasionally, some of your personal data will be provided to us by third parties, such as government authorities, who will contact us as your employer.

If you are just taking steps to establish a relationship with us and want to send us your resume or cover letter, we obtain your personal information from you so that we can contact you and include you in the recruitment process. Sometimes we use the help of external entities -dedicated portals for recruiting, or the help of entities that recruit employees. In this case, your personal information is provided to us by these entities, upon your consent and request.

For what purpose does the Administrator process my data?

Doing business

If we have obtained your personal data in connection with our business activities, your personal data will be used for the purpose of carrying out the sales and purchasing process. This includes, in particular, receiving contact information from you, allowing us to establish and maintain contact with you in the course of our cooperation.

We also use your address and registration data in order to deliver goods to the place indicated by you, issue sales documents, or settle our cooperation. We also need your personal data if you want to exercise your rights related to our cooperation – to make a complaint, exercise the warranty, or – where applicable – the guarantee.

If you run a sole proprietorship or represent a company or business entity -We also process your personal data for tax, legal and accounting purposes. We need them to disclose the relevant data on a contract or invoice, as well as -to use them in the conduct of our

tax records. However, always the processing of your personal data will be related to our business activities.

If you are an employee of our contractor or supplier, we will specifically need your personal data in order to establish and maintain contact with the entity where you work – again, for business purposes only.

Your personal data that we use for business cooperation purposes will not be used by us for other purposes without your consent. The exception to this is our use of your data for marketing purposes, based on our legitimate interest. We are committed to maintaining a relationship with you, so we want to be able to keep you informed about our new offers and promotions. If you don’t like it – you can object at any time, based on the terms described below in the Policy.

Running a website.

We process your personal data in order to provide the functionality of our website http://airtrans.com.pl/, in accordance with the applicable Terms of Service. In particular, we use your personal data to provide you with the ability to contact us and to track your shipments, as well as to provide you with forms related to ordering services from us.

Your personal data that we use for purposes related to the operation of the website will not be used by us for other purposes without your consent. In particular, we will not process your data for marketing purposes without your express consent.

Handling the employment relationship

If you are our employee or contractor, we use your personal data for purposes related to your employment. As your employer or contractor, we must fulfill a number of obligations – both in terms of the proper arrangement of our cooperation and in personnel and payroll matters. As an employer we are also entitled to certain rights -we use your personal data, for example, to be able to get in touch with you, or to monitor the results of your work.

We also need your personal information to provide you with access to benefits and entitlements.

We also use your personal data to provide you with benefits and support in the event of your illness or maternity, as well as in the event of an accident at work. Again, the purpose of processing your personal data is

then the proper handling of the employment or assignment relationship between us and the protection of your vital interests.

It may also happen that we use your personal information to provide information about you to third parties, such as to a bank where you apply for credit, to an insurer, or to a public authority that asks us. In these situations, your personal information will be disclosed for your benefit, at your request or in connection with legal obligations incumbent on us.

Your personal data that we use for purposes related to the employment or assignment relationship will not be used by us for other purposes without your consent. In particular, we will not process your data for marketing purposes without your express consent.

Recruitment

If you apply for employment with us, we use your personal data only for the purpose of the recruitment process. We use your data to get acquainted with your education and work experience, to assess your suitability for a job with us, and finally – to contact you and invite you for an interview.

If, after recruiting you, we decide to hire you, the personal information you provided during the recruitment process may be used for future employment – so that you do not have to provide it again. Most often, the personal data you provide in your resume and cover letter are stored in your employee file.

Your personal information that we use for recruitment purposes will not be used by us for marketing purposes without your consent.

Making contact

If you send us an email or make contact with us via the contact form on thehttp://airtrans.com.pl website, we use your personal information to correspond with you and respond to the questions you have asked, according to the content of your inquiry or message.

If you contact us for commercial purposes (e.g., to order goods or make use of our services), your personal data may then be used to direct a commercial offer to you – but only to the extent that you request it and in relation to the inquiry you have made.

Notwithstanding the foregoing, even if we establish communication for commercial purposes, we will not, without your consent, use your personal information for marketing purposes in connection with offers other than the one you have expressly requested by making contact.

Investigation and defense of claims

There are times when we may need to use your personal information to assert or defend our rights, including in court. We hope that this will not happen, but if any dispute arises between us – we may have to use your personal information in the course of litigation, arbitration or mediation.

In that case, we will use your personal data only to the extent necessary and in connection with discussions or proceedings. It may happen that we will use your personal data to call you as a witness in a case, or -if you are our contractor or supplier- in connection with being a party to a case.

Your personal data that we use for purposes related to the investigation or defense of claims will not be used by us for other purposes without your consent. In particular, we will not process your data for marketing purposes without your express consent.

Marketing objectives

We process your personal data in connection with the operation of our marketing database for our marketing purposes, i.e. in promoting our range of products and services. As part of our marketing, we want to be able to present you with our new range of products or services, as well as new commercial or business solutions used in our operations.

For marketing purposes, we process your personal data by invoking the so-called legitimate interest of the controller (Article 6(1)(f) RODO). It is necessary and desirable for us to keep our network of customers constantly informed about our activities. Thus, we have a legitimate interest in maintaining our marketing database and sending information to Customers. The provision and processing of your personal data in this regard is entirely voluntary and not based on a legal obligation. At any time you have the right to object to the processing of your data in this regard.

In some situations, we are keen to be able to publish your image on the social networks we run, including Facebook. The purpose of publishing your image is to build our company’s reputation as a trusted business that cares about our customers. When publishing your image, however, we try to minimize the data that is published about you and always publish it only with your consent. You have the right to withdraw your consent given in this regard at any time.

On what basis does the Administrator process my personal data?

The Administrator ensures that your personal data will only be processed in a lawful manner. This means that we will always process your personal data on a specific basis that we can demonstrate. The basis for processing your personal data may vary depending on the purpose for which we process your personal data.

Doing business

If we have obtained your personal data in connection with our business activities, we process your data firstly in order to fulfill the contract between us in the scope of cooperation, and secondly also to enable you to exercise your rights in terms of warranty or guarantee.

Thus, the basis for processing here will be the necessity of using your personal data to complete the transaction. If an entity other than you is a party to the Agreement (e.g., we obtained your data from your employer, or in communications you act as a representative of a company or organizational unit) the basis for processing your personal data will be the use of your data for purposes arising from the legitimate interests pursued by us and that entity (third party), e.g., to ensure the proper execution of a delivery or service.

Running a website

Cookies

We process data on your use of the website, which we obtain through so-called cookies, on the basis of your consent, given in accordance with Article 173 of the Telecommunications Law.

Cookies (so-called “cookies”) are IT data, in particular text files, which are stored in the Service User’s terminal equipment and are intended for use on the Service’s websites. Cookies usually contain the name of the website from which they originate, the time they are stored on the terminal equipment and a unique number.

The “cookies” we use are mainly used to optimize the use of our websites , to create statistics on their visits and to maintain the user’s session after logging in to certain pages (no need to re-enter the login and password during the specified session time).

The processing of your personal data in this regard is done on the basis of our legitimate interest, that is, on the basis referred to in Article 6(1)(f) of the RODO and on the basis of your consent, expressed by you by accepting the collection and use of cookies by us in the web form.

News on social networks

If you contact us through social networks, we process your personal data on the basis of your consent, given in connection with making an inquiry and establishing contact.

In both cases, the basis for the processing of your personal data will be the necessity of their processing in order to establish contact and provide you with a satisfactory answer or solution to your problem.

Handling the employment relationship

All personal data that the Administrator processes in connection with an already established cooperation on the basis of an employment contract or a contract of mandate are used in order to properly fulfill the role of the employer. The use of this data is necessary for us to fulfill the obligations imposed on us by the provisions of Polish law governing the given form of employment or cooperation, as well as -to enable us to exercise our rights as an employer.

Occasionally, your sensitive (health) data will also be used as necessary to carry out obligations imposed by social security or preventive health or occupational medicine regulations.

The basis for the processing of your personal data is therefore the necessity of their use for the proper performance of the employment contract that binds you to us, as well as the fulfillment of a legal obligation incumbent on us under labor law or civil law. With regard to your health data, the basis for processing is the necessity of their use for the fulfillment of obligations and the exercise of specific rights by the controller or the data subject in the field of labor law, social security and social protection, as well as for the purposes of preventive health or occupational medicine, to assess an employee’s fitness for work, medical diagnosis, the provision of health care or social security.

Recruitment

In recruitment processes, we seek your consent to process your personal data for recruitment purposes whenever possible by asking you to include the relevant consent in the resume or cover letter you submit to us. This avoids any doubt as to whether we have the right to use all the personal data you disclose in the documents you submit or during the recruitment process.

However, even if you do not consent to the processing of your personal data for recruitment purposes (e.g., you send us your resume without the necessary consent), we will still be able to process your personal data to the extent necessary for the recruitment process.

The basis for the processing of your personal data will therefore be your consent, and in the absence of such consent – the absence of consent to use your data to undertake recruitment activities aimed at concluding a contract of employment or a contract of mandate.

Thus, in this case, the basis for the processing of your personal data will be your expressed consent, or the necessity to use your personal data to take action in accordance with your request, prior to the conclusion of the Agreement. If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time, which, however, will not deprive the lawfulness of the processing of your personal data during the period in which your consent was in force.

Your consent in this regard is voluntary, but necessary to carry out the recruitment process. This is because without your consent to process your data in this regard, we will not be able to contact you and carry out the recruitment process

Making contact

If you contact us by email, phone or using social networks -We may process your personal data:

– on the basis of your consent-if you gave it in the course of filling out the contact form;

– because it is necessary to take action on your request – to answer your question, conclude a contract, clarify your doubts, etc. This applies, for example, to contact via e-mail, where the processing of your personal data is necessary for us to take action on your request, according to the content of your inquiry or message.

Thus, in this case, the basis for the processing of your personal data will be your expressed consent, or the necessity to use your personal data to take action in accordance with your request, prior to the conclusion of the Agreement. If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time, which, however, will not deprive the lawfulness of the processing of your personal data during the period in which your consent was in force.

Your consent in this regard is voluntary, but necessary for us to make contact. This is because without your consent to process your data in this regard, we will not be able to contact you

Investigation and defense of claims

If we use your data in connection with the collection or defense of claims, the basis for the processing of your personal data will be the legitimate legal interest of the Administrator as a personal data controller. This is because the use of your data will be necessary to protect our interests, e.g. in the collection of claims, defense against unfounded allegations, etc.

Marketing objectives

We will process your personal data for marketing purposes by invoking the so-called legitimate interest of the controller (Article 6(1)(f) RODO), authorizing us to send you commercial and marketing messages. As part of our marketing, we make sure to present you with up-to-date information about our new range of products or services, as well as new commercial or business solutions applied in our business.

Sometimes, however, we use your data (including your image) to boast about our activities and show that we have met your expectations as a customer. For this purpose, we publish certain messages on our social network. In this case, the basis for processing your personal data will always be your consent.

The provision and processing of your personal data in this regard is entirely voluntary and not based on a legal obligation. At any time you have the right to object to the processing of your data in this regard

How long does the Administrator keep my personal data

The period for which we process your personal data depends on the purpose of the processing. Thus, respectively:

– if you are our contractor or supplier, or acting on their behalf-Wewill process yourpersonal data for the period of performance of the contract or the period of cooperation. After this period, we will process your data for the purposes of accountability of our activities within the framework of personal data protection, as well as for the period of limitation of claims related to cooperation under relevant laws, but no longer than for a period of ten(10)years. The processing of data during this period is also conditioned by customs regulations and the need to reproduce past orders for customs procedures;

– if you are our employee or contractor -We process your personal data for the entire period of your cooperation or employment, as well as for the period required by law for the retention, or archiving of documents and information relating to your employment, but for no longer than a period of fifty (50) years. As of January 1, 2019, this period will be reduced to ten (10) years;

– if you disclose your personal data to us in connection with an ongoing recruitment process-Yourpersonal data will be retained for the duration of the recruitment process, and if we are not currently recruiting, for a period of one (1) year from the date we receive your resume or cover letter. Keeping your personal data for this period will allow us to contact you if we initiate employment activities at a later date;

– if you enter into communication with us -We keep your personal data for the entire period of communication and correspondence, and after settling the matter or providing you with a complete response -We still keep this data for a period of no more than ten (10)years from the end of the communication, in order to enable you to return to previous conversations and issues if necessary, and to account for our data protection activities;

– the acquired data about the way you use our service – will be used by us for the entire period of cooperation, and for a period of ten (10)counting from the time you last visited our service;

– personal data used by us for marketing purposes – will be processed by us for the entire period when you are our customer and later for a period of five (5)years counting from the time you stopped using our offer and did not purchase our products.

Remember, however, that if we process your data on the basis of your consent, we will, in any case, cease to do so after you withdraw that consent.

Who is the recipient of my personal data processed by the Administrator?

We make sure that your personal data is shared only with those people who need to have access to it for our proper fulfillment of our cooperation, or in connection with our legal obligations. Your personal data will be shared with:

– employees and associates of the Administrator, involved in the handling of the cooperation or the issue-in each case, however, we will ensure that these persons have the authorization to process your personal data and undertake to maintain confidentiality in this regard;

– Entities providing IT and hosting services to the Administrator -We also process your personal data electronically, which means that access to your personal data will be provided to entities that support us from the IT side, as well as to hosting providers on whose servers we keep our data, including email;

– to shipping or transportation companies – for delivery of goods or other items (e.g. documents) to the address you indicated at the time of purchase or in the course of cooperation;

– entities providing legal, tax, accounting, and HR and payrollservices to the Administrator –to the extent that disclosure of your data is necessary to ensure the accuracy of tax, HR and payroll settlements, or in connection with ongoing proceedings. To the same extent, access to your personal data will be provided to entities serving us from the legal side, involved, for example, in the review of documents on which your personal data is included;

– to public authorities, courts and tribunals-insofaras the transfer of your personal data will be necessary or required due to pending proceedings or in connection with the obligation to provide data to certain authorities under the law (settlements with the Tax Office and the Social Insurance Institution, etc.).

Under no circumstances will the Administrator share your data with third parties for commercial purposes. We do not sell yours, so you do not have to fear that it will go to anyone to whom you did not want to share your data.

How is my personal information processed and protected?

Principles of personal data processing

We make every effort to ensure that your personal data are processed in accordance with applicable law and in compliance with the principles of their processing indicated in the RODO. The basic principles and standards for the processing of personal data in our company are set out in a detailed Personal Data Protection Policy, with which it is mandatory for each of our employees and associates to familiarize themselves. This ensures that all persons involved in our business are aware of the importance of ensuring the proper processing of your personal data.

The basic principles that guide us in the processing of your personal data are:

– Principle of lawful, fair and transparent processing of personal data – we strive to ensure that our processing of your personal data always takes place on a lawful basis, and that the processes of processing your personal data, as well as the purposes of the processing, are clear and understandable to you;

– The principle of data minimization – we make every effort to process only those of your personal data that are adequate, relevant and limited to what is necessary for the purposes for which they are processed. We share your personal data only with such recipients as are necessary to achieve the purpose for which we process your data. We share with these recipients only as much of your data as is necessary to fulfill that purpose;

– Purpose limitation principle -We collect your data only for specific, explicit and legitimate purposes and do not further process them in a manner incompatible with those purposes. We strive to provide you with due and precise information as to why and for what purposes we will process your data;

– Principle of correctness – we take care that the data we process are always truthful, correct and, if necessary, updated, so that there are no mistakes, misrepresentations or other irregularities. If you find that in some area your personal data has not been updated by us or is incorrect, please contact us at: ktwteam@airtrans.com.pl.

– Data retention time limitation principle-We will process and store your personal data only for such period as is necessary to achieve the purpose for which we process your data. At the point when we no longer need your data for any purpose-we will delete all your data from our databases and systems;

– Principle of integrity and confidentiality – we apply the necessary measures to safeguard the confidentiality and integrity of your personal information. Our priority is to ensure the full security and protection of your personal information, by applying up-to-date and appropriate safeguards;

– The principle of accountability – when it comes to the protection of personal data, we not only comply with the terms and conditions of processing, but we also make every effort to be able to demonstrate compliance with these standards and regulations at all times. The rules for processing your personal data are written down in procedures so that if you ask us, we can provide you with full and reliable information regarding what activities we have performed on your data.

Security of personal data

As we mentioned above, we use appropriate technical and organizational measures aimed at ensuring the full security of your personal data against their (culpable or accidental) destruction, loss, modification, unauthorized disclosure or unauthorized access.

These measures consist of technical safeguards (due protection of the premises and systems where we process your personal data; safeguards to prevent outsiders from reading the contents of documents containing personal data, back-ups, etc.) and rules and procedures that we require all our employees and associates to follow.

Together, the measures in place allow us to properly protect your personal information from loss or disclosure. In addition, we are improving them all the time, along with the changing environment and technological advances.

What rights do I have regarding the processing of my personal data?

In connection with our processing of your personal data, you have a number of rights that you can exercise at any time. Exercising these rights

is free of charge, and the Administrator makes every effort to make it simple to implement as well.

Rights related to the processing of personal data

In relation to our processing of your personal data, you have the following rights:

– The right to access your personal data – at any time you can ask us whether and to what extent we process your personal data, and to obtain information about the terms of processing your personal data;

– The right to rectification – you can ask us to correct or update your data at any time if you learn or believe that your data is incorrect or out of date. For the avoidance of doubt, we may ask you to provide us with information that identifies you and confirms that your data has been changed or updated;

– The right to limit processing-ifyou believe that we are processing too much of your personal data for a particular process, you have the right to request that we limit that processing. Unless your request is in opposition to requirements imposed on us by applicable law, or it is necessary for the performance of a contract, we will limit the processing of your personal data to the minimum necessary or cease further processing;

– The right to erasure (the right to be forgotten) -if you consider that we are processing your personal data without a legal basis, or that we are processing it although we no longer need it for the purposes for which we collected it-you have the right to request that we erase your personal data from our databases and systems. We will grant your request as long as there is no other legitimate interest in the processing of your personal data, or an obligation to continue processing your personal data. In any case, we will try to fulfill your request to the fullest extent possible, and if this is not possible – we will try to modify it in such a way that the data can no longer be attributed to you (within the framework of so-called pseudonymization);

– The right to data portability – in those cases in which we process your personal data on the basis of consent or in connection with the performance of the Agreement, and the processing of the data is carried out by automated means (e.g., in a computer system), we will, at your request, export the data we process to a separate file in a common format to enable its transfer to another data controller.

The rights referred to above may be exercised by reporting them to our email address ktwteam@airtrans.com.pl and by letter to:

Airtrans H. Watoła Sp. J. 90 Wolności Street, 42-625 Pyrzowice, marked “Personal Data”. You are also welcome to contact us at this address in all situations where you have concerns, questions or doubts about how we process your personal data.

Right to object

Separately, we would like to inform you that you have the right to object to the processing of your data. If you consider that in a situation of processing of your personal data based on the public interest or legal interest of the Administrator or any third party – we are processing your data too broadly (in an inadequate manner) – you can request that we restrict the processing of your data. You have the same right if at any time you decide that you do not want us to process your data for direct marketing purposes. Once you object-we will no longer process your data to that extent and for that purpose, unless it is necessary due to the existence of some valid legitimate basis for our processing of your data, overriding your interests, rights and freedoms; or to establish, assert or defend our claims.

The rights referred to above may be exercised by reporting them to our email address ktwteam@airtrans.com.pl or by letter to: AirTrans H. Watoła Sp. J. Wolności 90 Street 42-625 Pyrzowice with the note “Personal Data”. You are also welcome to contact us at this address in all situations in which you have concerns, questions or doubts about the Administrator’s processing of your personal data.

You can exercise your right to object by submitting a request to our e-mail address: ktwteam@airtrans.com.pllub by mail to: Airtrans H. Watoła Sp. J. Wolności 90 Street 42-625 Pyrzowice, with the note “Personal data”.

The right to file a complaint

If you believe that we have in any way violated the rules for processing your personal data then you have the right to file a complaint directly with the supervisory authority, which is the President of the Office for Personal Data Protection.

In exercising this right, you should give a full description of the situation and indicate what action you consider to have violated your rights or freedoms. The complaint should be submitted directly to the supervisory authority.