Information Clause for Marketing Activities

Pursuant to Article 13(1) and Article 13(2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016 no. 119, p. 1) (hereinafter “GDPR”, please be advised that:

1. Data Controller and Contact Details

The controller of your personal data is any of the following companies operating within our capital group. Each of the below listed companies shall individually be referred to as a “Controller”, and collectively as the “Controllers”. The Controllers have appointed officers, whom you may contact in respect of any matters relating to personal data protection:

1. 1) Dom Development S.A. – the appointed Data Protection Officer is available by email at iodo@domd.pl and by post at Pl. Piłsudskiego 3, 00-078 Warszawa
2. 2) Dom Development Kredyty Sp. z o.o. – the appointed Data Protection Officer is available by email at iodo@domd.pl and by post at Pl. Piłsudskiego 3, 00-078 Warszawa
3. 3) Dom Development Wrocław Sp. z o.o. – the appointed Data Protection Officer is available by email at iodo@domd.pl and by post at Pl. Piłsudskiego 3, 00-078 Warszawa
4. 4) Dom Development Kraków Sp. z o.o. – the appointed Data Protection Officer is available by email at rodo.krakow@domd.pl and by post at ul Wadowicka 3A, 30-347 Kraków
5. 5) Euro Styl S.A. – the appointed Data Protection Officer is available by email at daneosobowe@eurostyl.com.pl and by post at ul. Leszczynowa 6, 80-175 Gdańsk.

2. Purpose and Legal Basis of Data Processing

Your personal data will be processed for the following purposes:

1. a) direct marketing of products and services, where our legitimate interest is to send marketing information about Controller's products and services, such as information about planned events (Article 6(1)(f) of the GDPR), or
2. b) taking actions on your request prior to the conclusion of the contract, if requested by you (Article 6(1)(b) of the GDPR), or
3. c) holding a meeting with you with regard to the services and products delivered by the Controller, which is necessary due to the pursuit of Controller's legitimate interests (Article 6(1)(f) of the GDPR), or
4. d) presenting third-party offers based on your consent, which can be withdrawn at any time (Article 6 (1)(a) of the GDPR).

3. Categories of Personal Data Processed

Within the scope of the above listed purposes, we may process your personal data such as:

1. a) contact details, e.g. full name, telephone number, email address, etc., or 
2. b) shopping preferences, e.g. location, unit size, etc.

4. Data Source

Your personal data has been made available to the Controller by the entity whose services you have been using and which is listed in the header of this clause.

5. Retention Period

Your personal data will be processed:

1. a) as long as actions related to the conclusion of the contract are being taken, or
2. b) as long as the legitimate interest of the Controller is pursued, or
3. c) until the date you raise an objection or until the agreed meeting date, or
4. d) until you withdraw your consent to data processing, if the processing is based on your consent.

6. Data Recipients

Your personal data may be shared with entities that the Controller engages to perform tasks requiring data processing, such as email management, hosting, IT, marketing, administrative, legal, or advisory services. It may also be shared with providers of telecommunication, courier, insurance, billing, accounting, or customer satisfaction survey services, as well as any other parties to whom the Controller assigns tasks. Your personal data may also be shared with entities or authorities authorised to receive it – but only in justified cases and in accordance with applicable law.

7. Your Rights

With regard to the processing of personal data, you have the right to: access, rectify or delete your personal data, restrict its processing, and transfer your data. If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing for reasons associated with your particular situation. You also have the right to object to the processing of your personal data for direct marketing purposes. To the extent to which you have given consent to the processing of your personal data, you have the right to withdraw that consent at any time, without impacting on the legality of the processing of your personal data that has been done on the basis of your consent prior to its withdrawal. You have the right to file a complaint with the data protection authority (President of the Personal Data Protection Office).

8. Voluntary Data Provision

You provide your personal data voluntarily. Failure to provide such data will render it impossible for your personal data to be processed for the purposes of direct marketing of products and services or to take action on your request before the conclusion of the contract, or to arrange a meeting with you concerning the services provided and products offered by the Controller.

9. Automated Data Processing

The Controller will automatically process (profile) your personal data, including information about your website activity, in order to provide you with information about the products and services you might be most interested in purchasing. the decision to provide specific information to you will, however, be made by an employee of the Controller, which means that the decision is not a fully automated one.

10. Transfer of Data Outside the European Economic Area

As the Controller sources IT tools and services externally, some of your personal data may be transferred to countries outside the European Economic Area, but only on an appropriate legal basis.