Information clause

Information on personal data processing

The administrator of your personal data is Bazy i Systemy Bankowe Sp. z o.o. with its registered office in Bydgoszcz, ul. Kasprzaka 3, 85-321 Bydgoszcz (hereinafter: “BSB”). You can contact us in the following ways:

email address: office@bsb.pl
phone number: (+48 52) 325 13 00
fax: (+48 52) 373 47 56

For matters related to personal data protection, please contact our Data Protection Officer (DPO):

correspondence address: ul. Kasprzaka 3, 85-321 Bydgoszcz
email address: iod@bsb.pl

    Purposes, legal bases, and scope of personal data processing

    BSB processes your personal data based on:

    1. Legitimate interest of the data administrator (Art. 6 sec. 1 lit. f of the GDPR) – including for contact purposes, service provision, conducting business activities, and defence against claims.
    2. Consent to personal data processing (Art. 6 sec. 1 lit. a of the GDPR) – if granted.

    The scope of processed personal data includes: first name, last name, phone number, email address, position, and other data necessary for achieving specific purposes.

    Sharing personal data

    Your personal data may be disclosed to the following categories of recipients:

    1. entities supporting BSB in its activities, including: courier companies, Poczta Polska, providers of IT, accounting, auditing, archiving, and document shredding services,
    2. supervisory authorities, statutory auditors, and public authorities, if there is an appropriate legal basis (e.g., courts, law enforcement agencies).

    Data will not be transferred to third countries or international organisations.

    Data retention period

    Your personal data will be stored for a period:

    • necessary to achieve the processing purposes,
    • resulting from legal provisions regarding document archiving and limitation periods for claims,
    • specified in the granted consent, if applicable.

    Rights of the data subject

    You have the right to:

    • Access your personal data and receive a copy of them.
    • Rectify inaccurate or incomplete data.
      Erase data (“right to be forgotten”) if there is no basis for further processing.
    • Restrict data processing in specific cases.
    • Data portability to another administrator.
    • Object to data processing based on the legitimate interest of the administrator.
    • Withdraw consent at any time (if processing is based on consent).

    To exercise the above rights, please contact our DPO.

    Right to lodge a complaint

    You have the right to lodge a complaint with the supervisory authority dealing with personal data protection, i.e., the President of the Personal Data Protection Office (PUODO), if you believe that data processing violates GDPR provisions.

    Please refer to the full Privacy Policy available on our website