Big Picture Sp. z o.o. contractor personal data protection policy

  • This data protection policy (hereinafter: "Policy") provides the rules and regulations for the processing by Big Picture Sp. z o.o. (hereinafter: "Administrator") of personal data belonging to:

  • natural persons who are Administrator’s contractors or who intend to cooperate with the Administrator as part of conducting business activity;

  • natural persons who are employees of the Administrator's contractors (regardless of the form of employment), who have been designated by such contractor as persons responsible for cooperating or establishing such cooperation with the Administrator.

– hereinafter jointly referred to as the "Representatives".

  • This Policy applies to personal data collected by the Administrator (or on its behalf) both from the Representative's employer and directly from the Representative (hereinafter: "Personal Data").

  • This Policy constitutes the fulfillment of the obligation referred to in  Article 13 and Article 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

  • Upon receipt of Personal Data, the Administrator assumes the function of the administrator of personal data of Representatives within the meaning of the GDPR. The Administrator's contact details are Big Picture spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (00-542) at ul. Mokotowska 51/53, apt. 46.

  • The Controller may process the following Representative data: name, surname, place of work, position, contact details (correspondence address, telephone number, e-mail address, accounts on social networks).

  • The Administrator's legitimate interest shall constitute the basis for processing representatives' data – the possibility of establishing and continuing cooperation or contact with the contractor, through the Representative (art. 6 (1) (f) GDPR).

  • The Representatives' Personal Data will be processed until the definitive termination of cooperation between the Administrator and the contractor. Personal Data may be deleted at an earlier date – in the event that the Administrator obtains an objection to processing from a Representative, as well as in the event the Administrator considers such is no longer necessary to achieve its legitimate purpose (contact with the contractor).

  • Personal Data shall not be deleted by the Administrator within the limit resulting from the preceding sentence if storage of such results from applicable law or will be necessary to make settlements or pursue claims as part of the contractor's and its Representative activities.

  • Personal Data may be made available by the Administrator to entities that provide services to the Administrator (including external IT, courier, personnel, accounting companies, dealing with contractors). Personal data may also be transferred to other interested entities (also independent of the Administrator) if the Representative has made them available in a form that clearly indicates it desired third party contact in business matters.

  • Each Representative has the right to:

    • obtain information on the processing of Personal Data, including the categories of Personal Data processed and possible recipients of the data,

    • request the correction of erroneous Personal Data or the completion of incomplete Personal Data,

    • request deletion or limitation of Personal Data processing – whereby the request will be performed if it meets requisite legal requirements,

    • submit an objection – in the case of data processing on the basis of the Administrator's legitimate interest (art. 6 1 point f) GDPR,

    • transfer Personal Data – by receiving data from the Administrator in a format that allows such to be transferred to a selected third party,

    • file a complaint to the supervisory authority (the President of the Personal Data Protection Office) at Stawki 2, 00 – 193 Warsaw – in the event that it is found that Personal Data is being processed unlawfully.

  • All requests, questions and requests related to the processing of Personal Data should be addressed to info@big-picture.pl.

  • Each of the Administrator's contractors shall inform its employed Representatives regarding Policy content.

  • This Policy shall become effective on 25 May 2018.