According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, we inform you that:

I. Data Controller

The data controller of your data is SSC Master Sp. z o.o. located in Toruń, at ul. Polna 100, registered in the Entrepreneurs Register kept by the District Court in Toruń, 7th Economic Department of the National Court Register under KRS number 0000535582, with Tax Identification Number (NIP) 956-23-097-01 and National Business Registry Number (REGON) 360338668.

II. Purposes and Legal Bases of Personal Data Processing

As the Data Controller, we will process your data for the following purposes:

  • Provision of SSC Master services;
  • Provision of technical support and maintenance services;
  • Offering you products and services (marketing) based on your consent (legal basis: Article 6(1)(a) of the GDPR);
  • Conclusion of a sales contract based on your interest in our offer (legal basis: Article 6(1)(b) of the GDPR);
  • Fulfillment of legal obligations incumbent on the Controller, i.e., personal data protection (legal basis: Article 6(1)(c) of the GDPR);
  • Processing of personal data because it is necessary to protect your vital interests or the vital interests of another natural person (legal basis: Article 6(1)(d) of the GDPR);
  • Analytical purposes (better selection of services to our Clients’ needs, general optimization of our products, optimization of service processes, building knowledge about our Clients, financial analysis) as part of our legitimate interest (legal basis: Article 6(1)(f) of the GDPR);
  • Archival (evidentiary) purposes as part of our legitimate interest in securing information in case of legal need to demonstrate facts (Article 6(1)(f) of the GDPR);
  • Possible establishment, investigation, or defense against claims as part of our legitimate interest (legal basis: Article 6(1)(f) of the GDPR);
  • Customer satisfaction research as part of our legitimate interest in determining the quality of our service and the satisfaction level of our clients with products and services (legal basis: Article 6(1)(f) of the GDPR);
  • Offering you (marketing) products and services of companies cooperating with us (our Partners), e.g., in the form of discount coupons, including tailoring them to your needs, i.e., profiling, as part of our legitimate interest and the legitimate interest of our Partners (legal basis: Article 6(1)(f) of the GDPR).

III. Data Recipients

In connection with the processing of data for the purposes indicated in point II, your personal data may be disclosed to:

  • Our Partners, i.e., companies with which we cooperate, supporting us in providing services, handling correspondence, in the customer service process;
  • Entities processing your personal data on our behalf based on a data processing agreement, especially accounting firms, legal firms, IT companies, marketing agencies;
  • Postal or courier service providers;
  • Entities acquiring receivables in case of non-payment by you or your represented organization of our receivables;
  • Bailiffs.

IV. Data Retention Period

Your personal data will be processed for the period necessary to achieve the purposes specified in point II:

  • Personal data resulting from the conclusion of a contract will be processed for the period during which claims related to this contract may arise, in accordance with the limitation periods specified in the Civil Code;
  • If no contract is concluded, your personal data related to discussions about this transaction will be deleted, except for data necessary for marketing purposes;
  • Personal data processed for marketing purposes of our products and services may be processed until you object to their processing for this purpose or until we determine that they have become obsolete;
  • Data necessary to fulfill a legal obligation incumbent on the Controller will be stored for the period during which the law requires us to keep data, e.g., tax regulations.

V. Customer Rights

In connection with the processing of your personal data, you have the following rights:

  • The right to access your data and receive copies of them;
  • The right to rectify (correct) your data;
  • The right to erase data, restrict data processing;
  • The right to object to data processing;
  • The right to data portability;
  • The right to lodge a complaint with the supervisory authority.

Additionally, in the case of processing data based on your consent to the processing of personal data, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on your consent before its withdrawal.

In the event of objections to the processing of your data, we will stop processing your data unless we can demonstrate that there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, or your data are necessary for the establishment, exercise, or defense of legal claims.

VI. Voluntary Provision of Data

Providing data is voluntary. Failure to provide data will result in the inability to conclude a contract/execute a transaction or exchange appropriate correspondence.

VII. Automated Decision Making

For the purposes of direct marketing, we make decisions in an automated manner, including profiling, based on the data provided. Profiling involves the processing of personal data in computer systems using your personal data to assess some of your characteristics, particularly for analysis or forecasting of aspects related to your preferences or future behaviors and determining which offer may be most interesting to you.

VIII. Personal Data Deletion

To delete personal data, please contact us at the email address contact@sscmaster.com or by post at: 87-100 Toruń ul. Polna 100.

IX. Contact Form

Who will be the Controller of your personal data provided to us through the form?

The controller of your personal data provided to us via the contact form will be SSC Master Sp. z o.o. based in Toruń (87-100), at ul. Polna 100 (hereinafter: Controller), with whom you can directly contact at the address indicated above or through the Data Protection Officer.

Have we appointed a Data Protection Officer?

YES, we have appointed a Data Protection Officer, whom you can contact using the email address iod@sscmaster.com for all matters related to the processing of your personal data by us.

What purposes do we need your personal data for?

Your personal data will be processed by us to respond to your inquiry or message – if you decide to contact us via the contact form available on the website or in any other form.

The legal basis for processing your personal data by us will be Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Controller in handling your requests or inquiries (which you address to us) and providing responses to them.

Your personal data may also be processed by us for the marketing purposes of the data controller. The legal basis for their processing will be Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Controller in directing marketing information about the products and services of the Controller.

Who can be the recipient of your data?

Recipients of your personal data may be entities providing IT and legal services to the Controller.

How long will we process your data?

We will process your personal data for the purpose related to the conduct of recruitment until the end of the recruitment process in which you participate and for archival purposes, but not longer than for a period of 3 years from the date of submitting the application or completion of the recruitment process.

What rights do you have?

You have the right to:

  • Access your personal data and receive copies of processed personal data;
  • Rectify your inaccurate personal data;
  • Request the deletion of your personal data (right to be forgotten);
  • Request the restriction of processing your personal data in cases specified in Article 18 of the GDPR;
  • Object to the processing of your personal data in cases specified in Article 21 of the GDPR;
  • Transfer the data provided by you and processed in an automated manner.

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority, which in the Republic of Poland is the President of the Office for Personal Data Protection (PUODO, ul. Stawki 2, 00-193 Warsaw).

Will your personal data be processed based on automated decision-making?

NO, your personal data will not be processed based on automated decision-making, including profiling.


X. Recruitment

The administrator of your personal data provided to us as part of the recruitment process will be SSC MASTER Sp. z o.o. based in Toruń (87-100), at 100 Polna Street (hereinafter: SSC MASTER).

For what purpose and on what basis do we process your personal data?

Your personal data will be processed for the purpose of conducting the recruitment process. The legal basis for processing your personal data by SSC MASTER for the purpose of conducting the recruitment process for the purpose of concluding a possible employment contract is Article 6(1)(b), Article 6(1)(c), Article 6(1)(f) of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR, in conjunction with Article 221 of the Labour Code of 26 June 1974. The legally justified interest of the data administrator expressed in Article 6(1)(f) of the GDPR is to protect SSC MASTER against any claims arising from recruitment process. In the event of you including a clause consenting to the processing of personal data to participate in the recruitment process, the legal basis for processing your personal data will also be consent – Article 6(1)(a) of the GDPR. At any time, you have the right to withdraw your consent, which will not affect the lawfulness of processing based on consent before its withdrawal. Providing personal data is not mandatory but necessary to conduct the recruitment process.

Where will your personal data be processed?

SSC MASTER will transfer your personal data to other recipients to whom the processing of personal data has been entrusted on behalf of and for the benefit of SSC MASTER. Entities entrusted with the processing of your personal data belong in particular to the category of providers of infrastructure solutions and may process your personal data in accordance with the GDPR in a third country. These entities may also use further entities to process your personal data, which will process them in a third country. Recipients to whom SSC MASTER has entrusted the processing of personal data also include, among others: its subcontractors, suppliers, and external entities cooperating with SSC MASTER, which provide services such as personnel and payroll services, accounting, consulting, administrative support. Your personal data will not be transferred to entities domiciled outside the European Economic Area. Additionally, SSC MASTER will disclose your personal data to other recipients if such obligation arises from the law or the disclosure results from the relationship between you and SSC MASTER.

How long will we process your personal data?

SSC MASTER will process your personal data for the purpose related to the conduct of recruitment until the end of the recruitment process in which you participate and for archival purposes, but not longer than for a period of 3 years from the date of submitting the application or completing the recruitment process.

What rights do you have?

You have the right to:

access your personal data and obtain a copy of the personal data being processed; rectify your incorrect personal data; request the deletion of your personal data (right to be forgotten); request the restriction of the processing of your personal data in cases specified in Article 18 of the GDPR; object to the processing of your personal data in cases specified in Article 21 of the GDPR; transfer the personal data provided by you, processed in an automated manner. If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority, which in the territory of the Republic of Poland is the President of the Office for Personal Data Protection (PUODO, ul. Stawki 2, 00-193 Warsaw).