Information clause on the receipt of whistleblowing notifications addressed to whistleblowers and persons who are the subject of a notification
Information clause on the receipt of whistleblowing notifications addressed to whistleblowers and persons who are the subject of a notification
The controller of personal data is IdoBooking sp. z o. o. (also referred to as the ‘Operator’) with its registered office at al. Piastów 30, 71-064 Szczecin, entered in the register of entrepreneurs kept by the District Court Szczecin-Centrum in Szczecin, XIII Business Division of the National Court Register under the number 00001118562 NIP: 8522710288; REGON: 529324888; with the share capital of PLN 200,000.00.
In matters concerning personal data, IdoBooking may be contacted by e-mail: sales@idobooking.com and by phone: +48 91 443 66 00.
The Data Protection Officer at IdoBooking is Rafał Malujda, e-mail address: gdpr-inspector@idobooking.com.
The purpose of the processing of your personal data is to receive reports of violations of the law and to take appropriate follow-up actions.
The legal basis for the processing is Article 6(1)(c) GDPR, i.e. the processing is necessary for the fulfillment of a legal obligation incumbent on the controller.
Your personal data will be stored for a period of 3 years after the end of the calendar year in which the follow-up actions have been completed, or after the proceedings initiated by these actions have been concluded.
Recipients of your data may be entities to whom your personal data must be made available in order to comply with a legal obligation, e.g. public authorities, courts and trusted entities entrusted by the controller with data processing.
You have the right to request the controller of personal data to access, rectify, erase or restrict processing of your personal data.
You have the right to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection, if you consider that the processing of your personal data by the controller violates the provisions on personal data protection.
Providing personal data is voluntary, however, it may be necessary to accept reported infringements of the law and take appropriate follow-up actions if the Administrator decides not to accept anonymous reports.
