Considering the content of Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), below we provide information on the processing of your personal data:

Personal Data Controller

The Controller of your personal data is NDI ENERGY Spółka z ograniczoną odpowiedzialnością – hereinafter referred to as NDI ENERGY, ul. Innowatorów 8, Dąbrowa 62-070 Dopiewo, KRS 0000484200, NIP 585 146 73 67, REGON 221983046.

Contact details of NDI ENERGY and the Data Protection Officer

You can contact NDI ENERGY at the e-mail address ndienergy@ndi.com.pl or in writing at the address indicated above (with the annotation “Personal Data Protection”).

NDI ENERGY has appointed a Data Protection Officer, who can be contacted at the address indicated above, as well as at the e-mail address: ndienergy@ndi.com.pl.

Purposes of personal data processing, legal grounds and legitimate interests of NDI ENERGY

Your personal data will be processed for the purpose:

• specified in the consent, expressed by you fully voluntarily, i.e. pursuant to Article 6(1) letter a) GDPR, i.e. in order to answer your inquiry sent to NDI ENERGY via the contact form;
• for the purpose of establishing, pursuing or defending ourselves against claims – pursuant to Article 6(1) letter (f) GDPR, i.e. to implement a legitimate interest of NDI ENERGY, which is the possibility of establishing, pursuing or defending ourselves against claims

Categories of personal data recipients

The recipients of your personal data can be entities of the following categories:

• companies from the NDI Capital Group;
• authorised to receive them on the basis of applicable law (in particular courts and public administration bodies);
• providing services: in the field of delivery of correspondence and parcels, archiving, IT and new technologies, legal, auditing and control, financial and accounting

Personal data storage period

Your personal data shall be processed in the following periods, depending on the purpose:

• for the purpose specified in the consent – until you withdraw your consent or until a moment clearly indicated in the consent – depending on which of these events occurs first
• establishing, pursuing or defending ourselves against claims – until the limitation period has expired for the claims related to the inquiry to submit an offer or claims related to the processing of personal data or until the objection is considered.

Your rights

You have the right to:

• access the content of your personal data, rectify it, limit its processing, transfer or delete it;
• withdraw the consent granted at any time, without affecting the lawfulness of the processing performed by NDI ENERGY on the basis of the consent before it was withdrawn;
• lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the GDPR.

Right to object

You also have the right to object at any time to the processing of personal data in order to implement the legitimate interests of NDI ENERGY.

Information about the requirement to provide your data or the voluntary nature of its provision and the consequences of not providing it

Providing your personal data has been voluntary, but necessary to process your inquiry, and the withdrawal of consent shall not have any consequences.