Information Clause for Contractors of Firstscore Sp. z o.o. and their Employees/Associates
In fulfillment of the legal obligation arising from Art. 13 and Art. 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR", we inform you that:
1. Personal Data Controller The controller of your personal data is Firstscore Sp. z o.o. with its registered office in Żyrardów, ul. 1 Maja 54, 96-300 Żyrardów, Poland, entered into the Register of Entrepreneurs of the National Court Register (KRS) under number 0001170021, NIP (Tax ID): 8381889858, REGON: 54156561900000.
2. Data Protection Officer (DPO) In matters concerning the protection of your personal data, you can contact us by writing to the e-mail address: privacy@firstscore.io or to the correspondence address of our registered office.
3. Categories, Purposes, and Legal Bases for Data Processing
A. If you are our Contractor (a natural person conducting business activity): We will process your personal data for the following purposes:
- To conclude and perform a contract for the provision of services, including participation in tender procedures (legal basis: Art. 6(1)(b) GDPR).
- To comply with legal obligations, e.g., tax and accounting regulations (legal basis: Art. 6(1)(c) GDPR).
- To establish, pursue, or defend against claims, which is our legitimate interest (legal basis: Art. 6(1)(f) GDPR).
- To conduct business analyses to optimize our operations, which is our legitimate interest (legal basis: Art. 6(1)(f) GDPR).
B. If you are an employee/associate of our Contractor: We have received your personal data, which typically includes your first name, last name, job title, and business contact details (e-mail, phone number), from your employer or the entity with which you cooperate, in connection with the conclusion or performance of a contract with Firstscore Sp. z o.o. We will process your data for the following purposes:
- For ongoing communication and proper performance of the contract with our Contractor (e.g., for project management, technical support, billing), which is our legitimate interest (legal basis: Art. 6(1)(f) GDPR).
- To comply with legal obligations, to establish, pursue, or defend against claims, and to conduct business analyses (on the same legal basis as in point 3A).
4. Data Retention Period Your personal data will be stored for the period necessary to perform the contract, and after its termination – for the period required by law (e.g., tax and accounting regulations) and for the limitation period of any potential claims.
5. Your Rights In connection with our processing of your personal data, you have the following rights: a) the right to access your personal data, b) the right to rectify your data, c) the right to erase your data (in cases specified in the GDPR), d) the right to restrict the processing of your data, e) the right to data portability (if applicable), f) the right to object to the processing of your data (if the processing is based on our legitimate interest).
To exercise these rights, please contact us as indicated in point 2. We will respond to your request within one month of its receipt.
6. The Right to Lodge a Complaint If you believe that our processing of your personal data infringes the law, you have the right to lodge a complaint with a supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) in Poland.
7. Data Recipients Your personal data may be shared with entities that process data on our behalf (so-called data processors), such as:
- IT service providers (e.g., hosting, e-mail),
- accounting and legal service providers,
- our trusted subcontractors, to the extent necessary for the performance of the contract. Your data may also be transferred to entities authorized to receive it under applicable law.
8. Transfer of Data outside the European Economic Area (EEA) In connection with the use of global technology providers (e.g., for cloud infrastructure or communication tools), your personal data may be transferred outside the EEA. In such cases, we ensure that the transfer is based on appropriate legal mechanisms, such as Standard Contractual Clauses approved by the European Commission, which guarantee an adequate level of data protection.
9. Voluntariness of Data Provision Providing your personal data is voluntary but necessary to conclude and perform a contract with Firstscore Sp. z o.o. In the case of employees/associates of Contractors, the processing of data is necessary for the purposes of our legitimate interest, which is the proper performance of the contract with the Contractor.