Data Processing

INFORMATION CLAUSE

In accordance with Art. 14 of the General Data Protection Regulation of 27 April 2016 (GDPR), I inform you that:

1. The controller of your personal data is LiFactor.
2. We process only data of persons acting on behalf of or authorized by companies or entities cooperating with the controller or companies or entities that are potential recipients of marketing campaigns carried out by the controller, in particular the name and surname of these persons, their position or function, email address, contact phone number.
3. We do not process special categories of personal data within the meaning of Art. 9 GDPR.
4. Personal data will be processed:
   1. for the purpose of implementing joint business ventures and executing orders or concluded cooperation agreements;
   2. for marketing services offered by the controller's partners;
   3. for searching for optimal offers and solutions in the field of business services based on information about the activities of potential recipients of campaigns conducted by the controller (marketing database).
5. The basis for processing is Art. 6(1)(f) GDPR in conjunction with recital 47, last sentence of GDPR, i.e., the legally justified interest of the controller in the form of direct marketing purposes. The information we obtain is provided voluntarily by the company, e.g., through announcements or cooperation proposals posted in the public domain (internet, press), which is justified by the special needs of the controller as an entity with a database of entities interested in commercial cooperation in the area covered by the announcement or cooperation offer. In the case of persons who have consented to marketing contact, the basis is also voluntary consent (Art. 6(1)(a) GDPR).
6. Personal data of contact persons in partner companies may be transferred to entities cooperating with the controller as part of its business activities, including software providers for mailing, cloud software providers, software providers used for communication between persons authorized to process the data of the controller's employees and associates, entities for whom marketing campaigns are carried out to the extent that they have their own legitimate legal interest.
7. In our current activities and organization of marketing campaigns, we use Google Cloud services (Gmail, Google Drive) and other cloud services. This means that your personal data may be transferred by us to third countries, i.e., outside the EU and EEA. When transferring personal data to third countries, we meet the conditions specified in Chapter V of the GDPR ("Transfer of personal data to third countries or international organizations"). We use so-called standard contractual clauses / standard data protection clauses. Additional information on how these companies collect and use personal data to provide services can be found at:
   • https://policies.google.com/privacy?fg=1 – Google LLC
8. Personal data of contact persons in partner companies or entities will be stored until we receive information that they are outdated or until we receive a request for their deletion.
9. Every person whose data is processed has the right to access their personal data and the right to rectify, delete, restrict processing, the right to data portability, the right to object, the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.
10. Any person who believes that our processing of personal data violates the provisions of the General Data Protection Regulation of 27 April 2016 (GDPR) or other provisions on personal data processing has the right to lodge a complaint with the supervisory authority.
11. Our processing of personal data of contact persons in partner companies or entities is a necessary condition for proper performance of the contract or order and provision of our services. The consequence of not providing personal data or withdrawing consent for processing may be the inability to provide services or continue cooperation.
12. In our business activities, we do not profile personal data of representatives of our business partners nor do we make automated decisions based on profiling.