Book of Condolences

INFORMATION CLAUSE FOR PERSONS MAKING ENTRIES IN THE BOOK OF CONDOLENCE

1. PERSONAL DATA CONTROLLER
The controller of your personal data is Farm Frites Poland S.A. with its registered office in Lębork, address: ul. Abrahama 13, 84-300 Lębork (hereinafter: "Controller").

2. DATA PROTECTION OFFICER, CONTACT REGARDING PERSONAL DATA
The Controller has appointed a Data Protection Officer, who can be contacted via e-mail: iod@ffp.com.pl or in writing to the Controller's registered office address.

3. SOURCE OF PERSONAL DATA
We process data provided directly by you.

4. NECESSITY OF PROVIDING DATA
Providing personal data is voluntary but necessary to post condolences in the Book of Condolence published on the Controller's website.

5. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
Personal data contained in the entries (such as name, surname, content of the entry) will be processed to commemorate the deceased and document expressions of sympathy. The legal basis for processing is Art. 6(1)(f) of the GDPR, i.e., the legitimate interest of the Controller consisting in enabling the expression of condolences and preserving the memory of the deceased.

6. RECIPIENTS OF YOUR PERSONAL DATA
Recipients of your personal data may include:
a) Persons visiting the Controller's website in the "Book of Condolence" tab,
b) Entities supporting us in our operations based on concluded agreements / commissioned services, such as:
• companies providing legal, advisory, and auditing services,
• companies providing IT services or solutions.

7. PERSONAL DATA RETENTION PERIOD
Personal data contained in the entries will be processed until the electronic publication of the book. After this period, the data will be permanently deleted.

8. IN CONNECTION WITH THE PROCESSING OF YOUR DATA, YOU HAVE THE RIGHT TO:
a) access your personal data and receive a copy thereof;
b) rectify (correct) your personal data;
c) restrict the processing of personal data;
d) erase personal data;
e) data portability;
f) withdraw consent to processing at any time – when it constitutes the basis for processing, provided that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and
g) object to processing at any time – if the legal basis for processing is the legitimate interest of the Controller or a third party (Art. 6(1)(f) of the GDPR). When objecting, you should indicate the reasons related to your particular situation.

9. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you consider that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for Personal Data Protection.

10. DATA TRANSFER OUTSIDE THE EEA
As a rule, your personal data will not be transferred outside the European Economic Area (hereinafter: EEA). However, bearing in mind the services provided by the Controller's subcontractors, the Controller may outsource certain IT tasks to recognized subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA. In such cases, the Controller ensures an adequate level of protection based on Standard Contractual Clauses (Art. 46(2)(c) of the GDPR). Copies can be obtained by contacting the Controller.

11. PROFILING
Your personal data will not be used for automated decision-making, including profiling as referred to in Art. 22(1) and (4) of the GDPR.