Newsletter – Information clause

The controller of your personal data is ALTO Tax Sp. z o.o. with its registered office in Warsaw (00-189), 4b Inflancka Street (building C), NIP 5252515019.

The controller can be contacted via e-mail address: rodo@altoadvisory.pl, or in writing to the registered office address.

Your personal data will be processed for the following purposes:

• • marketing purposes, consisting of sending, to the e-mail address provided by you, newsletters – the legal basis for processing, is the legitimate interest of the Controller, consisting of carrying out marketing of its own services (art. 6 sec. 1 lit. f GDPR), in connection with the consent to receive a newsletter; In terms of providing optional data, the basis for processing is consent (art. 6(1)(a) GDPR).In connection with your consent to receive marketing communications to your e-mail address, the legal basis for processing your personal data is also Article 10 of the Act on the provision of electronic services and Article 172 of the Telecommunications Act
  • analytical and statistical purposes – the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR), consisting of conducting analyses of users’ activity on the Website in order to improve the applied functionalities;
  • possible establishment and investigation of claims or defence against claims – the legal basis of the processing is the legitimate interest of the Controller (Article 6 (1) (f) GDPR), consisting of the protection of its rights.

Your personal data may be made accesible to entities cooperating with the Controller, and authorized  to it, among others, entities providing hosting and newsletter distribution services, including FlowMore sp. z o.o., based in Krakow, Poland, and Constant Contact, Inc., based in Waltham, USA.

Your personal data will be transferred outside the European Economic Area, to the USA, based on the European Commission’s implementing decision of 10.07.2023 in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Protection Framework or binding corporate rules or standard contractual clauses.

Your personal data will be processed for the duration of the legitimate interest of the controller, or until you object to the processing or withdraw your consent to marketing contact. With regard to data processed on the basis of your consent, the data will be processed for the duration of the legitimate interest of the controller or until your consent is withdrawn. The period of processing may be extended in each case by the period of limitation of claims, if the processing of your personal data is necessary for the Controller to establish or assert possible claims or to defend against such claims.

You have the right to access the content of your data and the right to obtain a copy of your data, to request rectification, erasure, restriction of processing and the right to data portability. To the extent that your personal data is processed on the basis of a legitimate interest of the Controller, you have the right to object to the processing of your data on the grounds of your particular situation.

To the extent that your data are processed on the basis of your consent, you have the right to withdraw it. The withdrawal of consent shall not affect the lawfulness of the processing carried out before its withdrawal. For evidence purposes, the Controller asks you to withdraw your consent in writing or electronically.

In order to exercise your rights, please contact the Controller using the contact details indicated above.

If you consider that the Controller processes your personal data in violation of the law, you have the right to lodge a complaint with a supervisory authority dealing with personal data protection – in particular in the EU Member State of your habitual residence, place of work or place of alleged commission. In Poland, such supervisory authority is the President of the Office for Personal Data Protection.

Provision of personal data is voluntary, but necessary to receive the newsletter.