Privacy Policy
25.02.2025 r.
Pietrucha International Sp. z o.o.
ul. Przemysłowa 10, 98-235 Błaszki
tel. +48 43 829 20 51,
e-mail: biuro@pietrucha.pl;
NIP: 7282264793
KRS: 0000034784
Preliminary Information
Respecting the right to privacy of individuals who have entrusted their personal data to Pietrucha International Sp. z o.o., including users of our services, our contractors and their employees, as well as individuals interested in our commercial offer—including those requesting product quotations—we declare that the data collected is processed in compliance with national and European legal regulations and under conditions ensuring its security.
To ensure transparency in our data processing procedures, we present the personal data protection principles applicable at Pietrucha International Sp. z o.o., as established under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
Data Controller
The controller of your personal data, meaning the entity that determines the purposes and methods of processing, is Pietrucha International Sp. z o.o., headquartered in Błaszki (98-235), 10 Przemysłowa Street.
For matters related to personal data processing, you may contact our Data Protection Officer at rodo@pietrucha.pl or in writing at the Administrator’s registered office address.
Data Collection and Purpose of Processing
Pietrucha International Sp. z o.o. provides comprehensive solutions in the civil and water engineering sector. In conducting our business operations, we process personal data for the following purposes:
| Purpose of Processing | Legal Basis and Data Retention Period | Legitimate Interest (if applicable) |
| Actions aimed at concluding and executing contracts with customers or contractors, including preparing offers, providing consultancy, delivering commercial offers and the organisation of meetings and webinars | Art. 6(1)(b) GDPR (for customers); Art. 6(1)(f) GDPR (for individuals cooperating on behalf of the customer/contractor). | Need to contact customers/employees/co-workers of customers and contractors regarding contract execution. |
| Handling complaints, requests, and claims | Art. 6(1)(b), (c), and (f) GDPR Duration of the contract or until the warranty period expires or the complaint is resolved | Need to contact employees/co-workers of customers to resolve complaints, requests, and claims. |
| Establishing, pursuing, and defending claims. | Art. 6(1)(f) GDPR Until the expiration of the limitation period for claims resulting from the contract, in accordance with applicable law | Processing of customer/contractor and their employees/co-workers’ data in connection with establishing, pursuing, and defending claims. |
| Carrying out settlements, accounting, and financial reporting | Art. 6(1)(c) GDPR Until the expiration of legal obligations regarding data retention, especially accounting document retention (generally 5 years after the legal event requiring document issuance) | – |
| Conducting statistics | Art. 6(1)(f) GDPR As long as another processing operation specified in this table is being conducted, personal data is not stored exclusively for statistical purposes. | Improving business operations based on statistical analysis. |
| Marketing activities (including using electronic communication). | Art. 6(1)(f) GDPR Until an objection is raised or the claim limitation period expires. If marketing is conducted via phone/email, consent for this communication channel is obtained per the Electronic Communications Law. | Conducting marketing activities and promoting products and services. |
| Surveillance of the data controller’s premises in order to increase the security of staff and property and to maintain the confidentiality of information. | Art. 6(1)(f) GDPR Image recordings will only be processed for the purposes for which they were collected and will be retained for a maximum period of 3 months from the date of the recording or until a reasoned objection is received, unless the recording is used as evidence in legal proceedings, in which case it will be retained until the final outcome of the proceedings. | The implementation of access control for persons entering the premises of Pietrucha International Sp. z o.o. is our legitimate purpose, and in the case of employees it is based on a legal provision (Art. 222KP). |
Processing data within Pietrucha International Sp. z o.o.’s social media profiles (Facebook, LinkedIn, YouTube, Instagram). | Art. 6(1)(f) GDPR The data is co-administered by Pietrucha International Sp. z o.o and Facebook, Linkedin, YouTube, Instagram. The data will be processed until you raise objection to data processing. | Keeping up to date correspondence using using the tools provided by Facebook, Linkedin, YouTube, Instagram, including Messenger and carrying out other marketing activities. |
Processing cookies. | Art. 6(1)(f) GDPR The administrator uses the necessary cookies in order to enable the operation of basic functions of the website. In addition, in the case of research statistical research, marketing or to record user’s preferences using cookies, the administrator will obtain your consent to save cookies on your device user’s device. In this case, the data will be processed for the periods indicated in the Policy cookies or until you raise object to the processing. The objection can only be made by clicking on the ‘Change cookie consent’ option | Enabling the operation of the basic functions page. Adaptation of the web content to the needs of the users, including for marketing statistics, optimisation of the use of the sites. |
| Human resources management – employees and co-workers. | Art. 6(1)(a), (b), (c), and (f) GDPR Art. 9(2)(b) GDPR In accordance with current legislation requiring the retention of employment records, i.e. personnel files, we retain personal records for 50 or 10 years. The 10-year retention period for documents relating to the employment relationship and the employee’s personal file applies to all employees hired after 1 January 2019. In accordance with the current legislation on the archiving of employment documents, i.e. personnel files, personal records are kept for 50 or 10 years. The 10-year retention period for records relating to the employment relationship and the employee’s personal file applies to all employees hired after 1 January 2019. For employees hired after 31 December 1998 and before 1 January 2019, documents relating to the employment relationship and the employee’s personal file will be kept for 50 years from the date of termination or expiry of the employment relationship; for those of the above-mentioned employees for whom the employer submits an information report pursuant to Article 4, point 6a of the Act of 13 October 1998 on the Social Insurance System, the period for keeping documents and records is reduced to 10 years from the end of the calendar year in which this report was submitted. If the retention period of the selected documents is shorter, the manager will comply with this shorter period. Civil law contracts will be kept until the expiry of the limitation periods for claims arising from them. | Dissemination of the image of an employee /co-worker on the on the basis of consent copyright. |
| Conducting recruitment. | Art. 6(1)(a) and (c) GDPR (for job candidates); Art. 6(1)(a) and (b) GDPR (for co-worker candidates). Up to 6 months after recruitment ends; if consent is given for future recruitment, no longer than 1 year. | – |
If the time limits for the retention of documents specified under the heading ‘Accounting, bookkeeping and financial reporting’ are longer than the time limits applicable to the assertion of potential claims, the longer time limits shall apply.
Data Recipients
In connection with its business activities, Pietrucha International Sp. z o.o. will disclose your personal data to the following entities
- Persons carrying out business activities, including marketing, who cooperate with Pietrucha International Sp. z o.o. in relation to providing consultancy services to clients of Pietrucha International Sp. z o.o.
- State authorities or other entities authorised by law,
- Entities supporting us in our operations on our behalf, in particular: providers of external ICT systems supporting our operations, including Microsoft, entities auditing our operations, the entity providing accounting services or entities cooperating with accounting services or entities cooperating with Pietrucha International Sp. z o.o. within the framework of marketing campaigns, whereby these entities process data on the basis of an agreement with Pietrucha International Sp. z o.o. and only in accordance with our instructions,
- To payment service providers within the meaning of the Payment Services Act of 19 August 2011, e.g. banks, in the event that settlements need to be made,
- In the case of job applicants, also to online recruitment portals.
Your Rights
Any person whose personal data is processed by Pietrucha International Sp. z o.o. has the right to
- Access to their data and obtain a copy of their data,
- Rectification of their data,
- Deletion of their data,
- Restriction of the processing of their data,
- Portability of their data – if the legal basis for the processing is consent (Art. 6 (1) (a) or Art. 9 (2) (a) GDPR) or contract (Art. 6 (1) (b) GDPR),
- Object to the processing of his/her personal data – if the legal basis for their processing is based on a legitimate interest (Art. 6 (1) (f) GDPR).
- Withdraw consent at any time, without prejudice to the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal.
For more information on the rights of data subjects, please refer to Arts. 12-23 GDPR.
Furthermore, the person whose data is processed by Pietrucha International Sp. z o.o. has the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection. More information on this subject can be found on the website of the Office.
Do You Have to Provide Your Personal Data?
The provision of the data is necessary for the conclusion of contracts and the processing of transactions, as well as for Pietrucha International Sp. z o.o. to comply with legal requirements. This means that if you wish to use the services offered by us, become our contractor (supplier) or employee, you must provide us with your personal data.
If your employer or other entity has designated you as a contact person in connection with the conclusion/performance of a contract with Pietrucha International Sp. z o.o., your data will be processed to the extent disclosed by this entity (by default, this is your name, surname, position, e-mail address and telephone number).
In all other cases (especially when Pietrucha International Sp. z o.o. for marketing purposes), the provision of data is voluntary.
Transfer of Data to Third Countries
However, with regard to the provision of services by our subcontractors for the support of IT services and infrastructure, Pietrucha International Sp. z o.o. may outsource certain IT activities or tasks to recognised subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA.
In accordance with the European Commission’s decision, recipient countries outside the EEA must ensure an adequate level of protection of personal data in accordance with EEA standards. The Commission’s decision in relation to the United States covers companies participating in the Privacy Framework programme. Pietrucha International Sp. z o.o. only works with companies participating in this programme. For more information: https://www.dataprivacyframework.gov/s/
The method used by the data controller to protect your data is in accordance with the principles set out in Chapter V of the GDPR. You may request further information on the security measures applied, obtain a copy of these measures and find out where they are available.
Automated Decision-Making in Data Processing
Your personal data will not be used for the purpose of automated decision making (including in the form of profiling) where such automated processing could result in decisions that would produce legal effects or similar effects on customers, contractors, their employees or associates, as well as employees or associates of the controller or job applicants.