Pursuant to art. 14.1 and art. 14.2 of the regulation of European Parliament and Council (EU) 2016/678 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, “GDPR”) we kindly inform that:

1.Data Controller and source of personal data

The Data Controller is Scythe Studio sp. z o.o., entered into National Court Register under no.: 0000855688, REGON: 386827230; tax ID: 1251708814, ul. Gen. Ottokara Brzozy-Brzeziny 13, 05-220 Zielonka (Poland). You can contact Scythe Studio by sending e-mail to [email protected], Your personal data originate from the entity, which entered into the contract with Scythe Studio and which employed you or cooperates with you. Therefore your personal data have not been obtained from you as the data subject (art. 14.1 GDPR).

2.Legal grounds for processing

Processing of your data concerns contact data, including email addresses, telephone no. and other similar data. The purpose of the processing is performance of the contract concluded between Scythe Studio and entity on behalf of which you act.

The legal basis for processing is article 6.1 letter “f” of GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Data Controller); legitimate interest represents necessity to perform the contract concluded by Scythe Studio with such entity or establishment, presentation of referrals of the entity, which employed you or cooperates with you, or exercise or defense of legal claims.

3.Data recipients

The recipients of your personal data are entities cooperating with Scythe Studio, especially subcontractors and contractors of Scythe Studio, including companies located outside the European Economic Area. Countries of the recipients outside the EEA according to the decision to the European Commission ensure the appropriate level of protection of personal data compliant with EEA standards. In case of recipients not included in the decision of the European Commission, Scythe Studio concludes agreements based on standard contract clauses according to the art. 46.2 GDPR. All information relating to protection of data may be obtained at the office of Scythe Studio or in e-mail sent to e-mail address listed above. Recipients of your data may also be entities and authorities entitled to receive your data – only in justified cases and on the grounds of applicable provisions of law.

4.Data retention period

Information can be processed on the basis of the above mentioned legal grounds no longer than for the duration of contract between Scythe Studio and entity, on behalf of which you act.

5.Rights of data subject

With regard to data processing you have the following rights: right to access data, right to correct, right to delete data, right to restrict processing, right to transfer data, right to object to processing, as well as right to file a complaint to the President of the Data Protection Office (address: ul. Stawki 2, 00-193, Warszawa, Poland). The rights apply in cases and to the extent provided in the applicable law, in particular the GDPR.

6.Information about automated decision-making

Based on data, Scythe Studio will not make automated decisions, including decisions resulting from profiling.