GDPR Legal Information

In Poland, as a Member State of the European Union, is obliged to GDPR, whose full name is: Regulation of the European Parliament 2016/679 of the European Parliament and of the Council of 27 April 2016 on the on the protection of natural persons with regard to the processing of personal data on the free movement of such data, and on the free movement of such data, and on the repealing Directive 95/46/EC (General Agricultural Protection Regulation) data). The rules for handling personal data are also established by The Personal Data Protection Act of 10 May 2018 (Journal of Laws of 2018, item 1000). This document describes how and in what way BBA ONE processes your personal data. Data processing that BBA-ONE carries out an economic activity in the field of in the field of geodetic services and software distribution. Application personal data may be a prerequisite for concluding a contract, granting a license and handling sales and services. According to legal definition, personal data is any information relating to the identified or identifiable natural person, such as name and surname, PESEL number, location data, Online identifier. Data of collective entities such as companies or associations are not covered by the protection of the GDPR.

1. The administrator of your data is the company BBA-ONE with its registered office: 4A Rysia Street, Adamowizna, 05-825 Grodzisk Mazowiecki, Poland - entered into the register of entrepreneurs CEIDG - NIP 8251213536, REGON 360519105

Data Contact BBA ONE You can contact us at the following Ways:

telephone: +48 720 310031

email: [email protected]

Writing – to the following address: BBA ONE, 4A Rysia Street, Adamowizna, 05-825 Grodzisk Mazowiecki, Poland

2. At this address, we provide assistance in all matters related to processing of your personal data and the exercise of your powers in this regard.

3. Purposes of personal data processing, legal basis, interests depending on whom and what data has been provided to the collected, they will be processed for the following purposes:

a) performance of a contract or taking action at your request before Contractual

– are are issues such as invoicing, complaints, (Article 6(1)(b) GDPR);

b) compliance with legal obligations to which we are subject under the Polish or EU law, including in particular archiving data and documents (Article 6(1)(c) of the GDPR);

c) carrying out tasks carried out in the public interest, in the event of a if such a task were imposed on us by Polish law or EU (Article 6(1)(e) of the GDPR);

d) direct marketing of our products and services, in particular including profiling and statistics, this is the case for the means adapting our proposals to your preferences in online shopping, which is our legal right to legitimate interest (Article 6(1)(f) of the GDPR);

e) establishing, pursuing or defending against claims, which is necessary to our legitimate interest (Article 6(1)(f) of the GDPR);

4. Recipients of data Your data may be reasonably real Other Parties, in the following categories:

a) postal operators and courier companies,

b) banks and card payment operators,

c) accounting firms,

d) IT service contractors,

e) marketing and analytical companies,

5. Data transfers outside the EEA In accordance with the GDPR, transfers of data within the EEA within the European Union, as well as to Iceland, Liechtenstein and Norway is treated in the same way as in Poland.

Into conclusion of a software sale agreement and granting a license Your personal data is transferred to: ActCAD LLC USA, Redmond, Washington DC, United States of America.

No we intend to transfer your data to other countries.

6. Retention period Your personal data will be for an appropriate period of time, depending on the purpose of their Processing. These periods are calculated as follows:

a) performance of the contract – until termination or expiry Agreement;

b) fulfilling legal obligations – until the expiry of the data retention obligations;

c performing tasks in the public interest – until the expiry of the data retention obligations;

d) marketing – until the cessation of activity, or objection;

e) establishing, pursuing or defending legal claims, until the time of the limitation of claims related to personal data.

7. Rights of the data subject The data subject has the the following rights:

a) access to their personal data and to obtain information (Article 15 of the GDPR);

b) rectification of erroneous data or completion of incomplete data (Article 16 of the GDPR);

c) request erasure of data – the right to be forgotten (Article 17 of the GDPR);

d) restriction of data processing (Art. 18 GDPR);

e) objection to the processing of personal data, concerns the processing of for the purposes of public tasks and marketing (Article 21 of the GDPR)

8. Right to lodge a complaint If you believe that processing of personal data is unlawful, the right to You can lodge a complaint with the President of the Office for Personal Data Protection (website Internet: https://uodo.gov.pl).

9. The full text of the main provisions is available in the Internet. You can consult the rules on the personal data protection:

a) Regulation (EU) 2016/679 of the European Parliament and of the Council of Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (general rules on the Data Protection Regulation)

– under Address: https://eur-lex.europa.eu/legal-content/PL/TXT/PDF/?uri=CELEX:32016R0679b) The Act of 10 May 2018 on the Protection of Personal Data – under Address: http://prawo.sejm.gov.pl/isap.nsf/DocDetails.xsp?id=WDU20180001000.