Privacy Policy

1. Data Controller

The controller of your personal data is:

CamCam A. i W. Zych sp.j.
ul. Ludwinowska 22/9 m. 1
02-856 Warsaw
Poland
Tax ID (NIP): 9512388302

E-mail: biuro@camcam.pl
Tel.: +48 601 916 931

hereinafter referred to as the “Data Controller” or “CamCam”.

2. Purposes and legal bases for processing

Your personal data may be processed for the following purposes:

a) handling enquiries, reservations and taking steps prior to entering into an equipment rental agreement – pursuant to Article 6(1)(b) of the GDPR;

b) entering into and performing an equipment rental agreement, including preparing the order, communicating with you regarding the rental, handing over and returning equipment, settling the rental and processing payments – pursuant to Article 6(1)(b) of the GDPR;

c) compliance with legal obligations to which the Data Controller is subject, in particular accounting, tax and record-keeping obligations – pursuant to Article 6(1)(c) of the GDPR;

d) customer verification prior to entering into or performing an agreement, protection of the Data Controller’s equipment and property and prevention of misuse – pursuant to Article 6(1)(f) of the GDPR, based on the Data Controller’s legitimate interest in reducing the risks associated with renting equipment of significant value;

e) establishment, exercise or defence of potential legal claims arising from or relating to an agreement – pursuant to Article 6(1)(f) of the GDPR;

f) handling general correspondence and responding to enquiries that are not directly related to entering into an agreement – pursuant to Article 6(1)(f) of the GDPR, based on the Data Controller’s legitimate interest in communicating with persons interested in its services.

Where, in a specific case, the processing of your personal data is based on your consent, the legal basis will be Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

3. Source of personal data

As a general rule, we obtain your personal data directly from you, in particular when you place an order, complete a form, contact us by telephone or e-mail, enter into a rental agreement, or collect or return equipment.

If you act on behalf of a company or another organisation, your personal data may also be provided to us by that organisation or its representative.

4. Recipients of personal data

Your personal data may only be disclosed to the extent necessary to fulfil the purposes described above.

Recipients of your personal data may include:

• providers of IT systems and software used for reservations and rental management,
• providers of hosting, e-mail and IT infrastructure services,
• payment service providers, banks and other entities involved in processing payments,
• accounting firms, accountants and tax advisers,
• courier, transport and logistics service providers where equipment delivery or collection is requested,
• law firms, debt collection companies and other professional advisers where necessary for the establishment, exercise or defence of legal claims,
• public authorities and other entities authorised to obtain personal data under applicable law, including courts, law enforcement authorities and tax authorities.

Entities processing personal data on behalf of the Data Controller operate under appropriate agreements and are required to provide an appropriate level of personal data protection.

5. Transfers of personal data outside the European Economic Area

As a result of the Data Controller’s use of certain IT, cloud-based and technology service providers, your personal data may, in certain circumstances, be processed outside the European Economic Area.

Where such transfers occur, personal data will only be transferred in accordance with Chapter V of the GDPR, in particular on the basis of an adequacy decision issued by the European Commission or subject to appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Information about the safeguards applied and how to obtain a copy of them may be requested by contacting the Data Controller at:

biuro@camcam.pl

6. Data retention

Your personal data will be retained for no longer than necessary for the purposes for which it was collected.

In particular:

• data relating to an enquiry or a proposed rental will be processed for the period necessary to handle the enquiry or enter into an agreement;
• data relating to a rental agreement will be processed for the duration of the agreement and subsequently for the period necessary to settle the agreement;
• documents and data required under accounting or tax legislation will be retained for the period required by applicable law;
• data necessary for the establishment, exercise or defence of legal claims may be retained until the applicable limitation period has expired;
• data processed on the basis of the Data Controller’s legitimate interests will be retained until such interests cease to apply or an effective objection is made, unless there are overriding legitimate grounds for continuing the processing.

Once the applicable retention periods have expired, personal data will be deleted or anonymised unless further retention is required by law.

7. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• obtain access to your personal data and receive a copy of it,
• request the rectification of inaccurate personal data or completion of incomplete data,
• request the erasure of your personal data where the conditions set out in Article 17 of the GDPR are met,
• request restriction of the processing of your personal data,
• receive and transfer your personal data where the conditions set out in Article 20 of the GDPR are met,
• object, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR,
• withdraw your consent at any time where processing is based on your consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal and does not affect processing carried out on another legal basis, including where processing is necessary for the performance of an agreement or compliance with a legal obligation.

The right to erasure is also not absolute. The Data Controller may continue to retain personal data where retention is required by law or necessary for the establishment, exercise or defence of legal claims.

To exercise your rights, please contact the Data Controller at:

biuro@camcam.pl

8. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR or other applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority in Poland:

President of the Personal Data Protection Office
Personal Data Protection Office (UODO)
ul. Stawki 2
00-193 Warsaw
Poland

9. Provision of personal data

Providing personal data required to prepare and enter into a rental agreement is voluntary; however, failure to provide such data may make it impossible to process a reservation, enter into an agreement or provide the rental service.

Where certain personal data is required by law, providing such data may be necessary for the Data Controller to comply with its legal obligations.

Any personal data that is not necessary for entering into or performing an agreement is provided voluntarily.

10. Automated decision-making

The Data Controller does not make decisions concerning you based solely on automated processing of personal data, including profiling, where such decisions would produce legal effects concerning you or similarly significantly affect you.