The principles for the processing of personal data in ALTO

Information clause of ALTO TAX sp. z o.o. with its registered office in Warsaw, on the processing of personal data:

The Controller of your personal data is ALTO TAX Sp. z o.o. with its registered office in Warsaw (00-189), Inflancka 4b (building C).

The Controller may be contacted by email at: rodo@altoadvisory.pl or by letter sent to the address of the Controller’s registered office.

This information clause constitutes the fulfilment of the information obligation of the Controller related to the execution of a commercial contract towards:

• • clients who are sole proprietors; and
  • contact persons or representatives designated by the client, in case a commercial company is a party to the contract.

If you are a sole proprietor, your personal data will be processed in connection with taking action to enter into a contract and for the purpose of its performance. In this regard, the legal basis for the processing is the necessity for the performance of a contract to which you are a party (Article 6(1)(b) of the GDPR).

If you have been designated as a contact person, your personal data have been made available to the Controller by your employer (employing entity), in connection with the performance of the commercial contract between your employer (employing entity) and the Controller. In this regard, the legal basis for the processing is the legitimate interest of the Controller and your employer (Article 6(1)(f) of the GDPR) to enable the Controller to perform the contract efficiently on an ongoing basis.

If you have been designated as a representative, your personal data have been provided by the client of the Controller whom you represent. In this regard, the legal basis for the processing is the legitimate interest of the Controller and such entity (Article 6(1)(f) of the GDPR) to provide reliable identification of the contracting party and its representatives.

Regardless of the provisions of sections 5-7 above, your personal data will be processed for the following purposes:

• • accounting and bookkeeping services – the legal basis for the processing is the necessity to fulfill legal obligations incumbent on the Controller (Article 6(1)(c) of the GDPR) resulting from tax and accounting regulations;
  • for internal administrative purposes of the Controller – the legal basis for data processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to manage its business efficiently;
  • for internal administrative purposes of the ALTO Group – the legal basis for data processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to manage Group companies efficiently;
  • to establish or exercise possible claims or to defend against such claims by the Controller – the legal basis for data processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to protect its business interests.

Your personal data will be processed for the term of the contract to which you are a party or, in the case of processing of your data on the basis of the legitimate interest of the Controller – until you raise an effective objection to the processing of your personal data. The processing period may be extended each time by the period of the statute of limitations of claims, if the processing of your personal data is necessary for the Controller to establish or exercise possible claims or to defend against such claims by the Controller. After this period, the data will be processed only to the extent and for the period required by law.

Your personal data may be transmitted to entities providing services to the Controller, as well as the providers of IT systems and services.

Your personal data may also be shared with ALTO Group entities. The basis for sharing your personal data is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to manage a database of business contacts.

You have the right to: access the content of your data and the right to obtain a copy of it, request their rectification, erasure, restriction of processing, and the right to personal data portability. If your data are processed on the basis of the legitimate interest of the Controller, you have the right to object to the processing of data due to your particular situation.

In order to exercise your rights, please contact the Controller using the contact information indicated above.

If you consider that the Controller processes your personal data in breach of the provisions of law, you have the right to lodge a complaint with a supervisory authority competent for the protection of personal data, in particular, in the EU Member State of your habitual residence, place of work or place of the alleged infringement. In Poland, such a supervisory authority is the President of the Personal Data Protection Office.

The provision of data by you is voluntary, but necessary for the Controller to achieve the purposes described in sections 4-7 above.

Information clause of ALTO ACCOUNTING sp. z o.o. with its registered office in Warsaw, on the processing of personal data:

The Controller of your personal data is ALTO ACCOUNTING Sp. z o.o. with its registered office in Warsaw (00-189), Inflancka 4b (building C).

The Controller may be contacted by email at: rodo@altoadvisory.pl or by letter sent to the address of the Controller’s registered office.

This information clause constitutes the fulfilment of the information obligation of the Controller related to the execution of a commercial contract towards:

• • clients who are sole proprietors; and
  • contact persons or representatives designated by the client, in case a commercial company is a party to the contract.

If you are a sole proprietor, your personal data will be processed in connection with taking action to enter into a contract and for the purpose of its performance. In this regard, the legal basis for the processing is the necessity for the performance of a contract to which you are a party (Article 6(1)(b) of the GDPR).

If you have been designated as a contact person, your personal data have been made available to the Controller by your employer (employing entity), in connection with the performance of the commercial contract between your employer (employing entity) and the Controller. In this regard, the legal basis for the processing is the legitimate interest of the Controller and your employer (Article 6(1)(f) of the GDPR) to enable the Controller to perform the contract efficiently on an ongoing basis.

If you have been designated as a representative, your personal data have been provided by the client of the Controller whom you represent. In this regard, the legal basis for the processing is the legitimate interest of the Controller and such entity (Article 6(1)(f) of the GDPR) to provide reliable identification of the contracting party and its representatives.

Regardless of the provisions of sections 5-7 above, your personal data will be processed for the following purposes:

accounting and bookkeeping services – the legal basis for the processing is the necessity to fulfill legal obligations incumbent on the Controller (Article 6(1)(c) of the GDPR) resulting from tax and accounting regulations;

for internal administrative purposes of the Controller – the legal basis for data processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to manage its business efficiently;

for internal administrative purposes of the ALTO Group – the legal basis for data processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to manage Group companies efficiently;

to establish or exercise possible claims or to defend against such claims by the Controller – the legal basis for data processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to protect its business interests.

Your personal data will be processed for the term of the contract to which you are a party or, in the case of processing of your data on the basis of the legitimate interest of the Controller – until you raise an effective objection to the processing of your personal data. The processing period may be extended each time by the period of the statute of limitations of claims, if the processing of your personal data is necessary for the Controller to establish or exercise possible claims or to defend against such claims by the Controller. After this period, the data will be processed only to the extent and for the period required by law.

Your personal data may be transmitted to entities providing services to the Controller, as well as the providers of IT systems and services.

Your personal data may also be shared with ALTO Group entities. The basis for sharing your personal data is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR) to manage a database of business contacts.

You have the right to: access the content of your data and the right to obtain a copy of it, request their rectification, erasure, restriction of processing, and the right to personal data portability. If your data are processed on the basis of the legitimate interest of the Controller, you have the right to object to the processing of data due to your particular situation.

In order to exercise your rights, please contact the Controller using the contact information indicated above.

If you consider that the Controller processes your personal data in breach of the provisions of law, you have the right to lodge a complaint with a supervisory authority competent for the protection of personal data, in particular, in the EU Member State of your habitual residence, place of work or place of the alleged infringement. In Poland, such a supervisory authority is the President of the Personal Data Protection Office.

The provision of data by you is voluntary, but necessary for the Controller to achieve the purposes described in sections 4-7 above.