Log in
Privacy Policy
of the BHP Panic system
of the BHP Panic system
1.
General information
This Privacy Policy sets out the rules for processing personal data in connection with the use of the BHP Panic system, operated by CLOUDPANIC sp. z o.o. This document fulfils the information obligation arising from Art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
2.
Personal data controller
The personal data controller is:
CLOUDPANIC sp. z o.o.
Share capital: PLN 50,000
KRS (National Court Register): 0001095579
NIP (tax ID): PL 725-234-17-67
ul. Henryka Sienkiewicza 85/87/8
90-057 Łódź
Contact on matters concerning the protection of personal data is via the contact details given on the Controller's website.
CLOUDPANIC sp. z o.o.
Share capital: PLN 50,000
KRS (National Court Register): 0001095579
NIP (tax ID): PL 725-234-17-67
ul. Henryka Sienkiewicza 85/87/8
90-057 Łódź
Contact on matters concerning the protection of personal data is via the contact details given on the Controller's website.
3.
Nature of the
BHP Panic system
BHP Panic system
The BHP Panic system is an IT tool supporting the execution of occupational health and safety processes. The Controller makes the system available to Customers on the basis of a concluded agreement.
With regard to personal data processed in the system:
With regard to personal data processed in the system:
- the Customer is the controller of the personal data of its employees and associates,
- CLOUDPANIC sp. z o.o. acts as a processor, on the basis of a personal data processing agreement.
4.
Scope of data
processed
processed
The following may in particular be processed in the BHP Panic system:
The scope of data depends on the system configuration and the processes carried out by the Customer.
- first name and surname,
- contact data (e.g. email address, phone number),
- data on the job position and employment,
- data related to OHS training, medical examinations and qualifications,
- data contained in OHS documentation, registers, reports and summaries.
The scope of data depends on the system configuration and the processes carried out by the Customer.
5.
Purposes and legal bases of processing
Personal data is processed for the purpose of:
The legal basis for processing data is in particular:
- providing services within the BHP Panic system,
- fulfilling the Customer's legal obligations arising from OHS and labour law,
- ensuring the security of the system and data,
- performing agreements concluded with Customers.
The legal basis for processing data is in particular:
- Art. 6(1)(b) GDPR (performance of a contract),
- Art. 6(1)(c) GDPR (legal obligation),
- Art. 6(1)(f) GDPR (legitimate interest of the Controller).
6.
Recipients of data
Personal data may be passed only to:
Data is not transferred to third countries unless the Customer decides otherwise under individual arrangements.
- authorised employees and associates of the Controller,
- entities providing IT, hosting or maintenance services to the Controller,
- other entities only to the extent required by law.
Data is not transferred to third countries unless the Customer decides otherwise under individual arrangements.
7.
Data retention
period
period
Personal data is retained:
Detailed data retention periods are determined by the Customer as the data controller.
- for the duration of the agreement with the Customer,
- and after it ends for the time required by law or necessary to secure possible claims.
Detailed data retention periods are determined by the Customer as the data controller.
8.
Newsletter
- If you tick the relevant box in the contact form (/formularz), we will send a newsletter to the e-mail address you provided, containing news about the BHP Panic system and occupational health and safety tips.
- Data scope: first and last name, e-mail address, company name; and the date and wording of the consent given, the address of the page on which it was given, and the IP address, in order to document it.
- Legal basis: your consent (Art. 6(1)(a) GDPR). Consent is voluntary. Not giving it does not affect your ability to submit an enquiry or how we handle it.
- Recipients: we share the data with Brevo, the provider of our e-mail delivery service, which acts as a processor, and with the entities referred to in section 6 of this Policy.
- Retention: until you withdraw your consent. After withdrawal, we may keep the data proving that consent was given for as long as necessary to defend against possible claims (Art. 6(1)(f) GDPR).
- Withdrawing consent: at any time, by clicking the unsubscribe link in the footer of every message or by writing to us at the address given on the Controller's website. Withdrawal does not affect the lawfulness of processing carried out before it.
- For matters related to the newsletter, CLOUDPANIC sp. z o.o. is the controller of your data, and we handle the rights listed in section 9 of this Policy (access, rectification, erasure, restriction, portability, objection, complaint to the President of the UODO) directly, not through the Client.
9.
Rights of data subjects
Persons whose data is processed have the right to:
For data processed in the BHP Panic system, rights are exercised through the data controller (the Client). For data submitted through the contact form and for the newsletter, we handle rights directly.
- access to data,
- rectification of data,
- erasure or restriction of processing,
- object to processing,
- data portability,
- lodge a complaint with the President of the Personal Data Protection Office (UODO).
For data processed in the BHP Panic system, rights are exercised through the data controller (the Client). For data submitted through the contact form and for the newsletter, we handle rights directly.
10.
Data security
The Controller applies appropriate technical and organisational measures to ensure the protection of personal data, in particular against loss, unauthorised access or breach.
11.
Changes to the
Privacy Policy
Privacy Policy
The Controller reserves the right to make changes to the Privacy Policy. The current version of the document is always published on the BHP Panic website.
12.
Final provisions
This Privacy Policy applies from the day of its publication.
