Main points of the arrangements set out in the ALUPROF SA Joint Controller Agreements
We are pleased to inform you that:
ALUPROF SA, having its registered office at ul. Warszawska 153, 43-300 Bielsko-Biała, Poland, hereinafter referred to as ‘Joint Controller 1’;
ALUPROF SYSTEM CZECH s.r.o., having its registered office in Ostrava, Hrabová, Na Rovince 879, PSČ 720 00, Czech Republic, hereinafter referred to as ‘Joint Controller 2’;
ALUPROF Deutschland GmbH, having its registered office at Steller Heide 20, 28790 Schwanewede, Germany, hereinafter referred to as ‘Joint Controller 3’;
ALUPROF Hungary Kft., having its registered office in 2120 Dunakeszi, Bagoly 11, Hungary, hereinafter referred to as ‘Joint Controller 4’;
ALUPROF SYSTEM UKRAINA s.r.o., having its registered office in Ukraine, in 04116 Kyiv, Sholudenka Street, Building 3, hereinafter referred to as ‘Joint Controller 5’;
ALUPROF SYSTEM – ROMANIA S.R.L., having its registered office at CA Rosetti No. 17, et2, Office No. 201, Campus 17, Sector 2, Bucharest, Romania, hereinafter referred to as ‘Joint Controller 6’;
ALUPROF BELGIUM NV, having its registered office in Industriepark Hoogveld (Zone 1) Wissenstraat 2,9200 Dendermonde, Belgium, hereinafter referred to as ‘Joint Controller 7’;
and Aluprof Netherlands B.V., having its registered office at Platinawerf 20g, 6641 TL Beuningen, The Netherlands, hereinafter referred to as ‘Joint Controller 8’,
have entered into an agreement for the joint control of your personal data, where applicable. The Companies unanimously declare that each of them has access to data collected on the basis of consents, the Data Protection Officers of which are the Companies as regards Client’s data in the form of given names, surnames, registration data, e-mail addresses, telephone/fax numbers, logins and Client numbers and potential Clients’ data, in the form of given names, surnames, registration data, e-mail addresses, telephone/fax numbers and logins, the said data being processed in relation to the use of the following tools: the Newsletter, the Catalogue for Architects and the Authorised Zone. These data are only processed if the Client/Potential Client has given their consent to the Company in question to do so for marketing purposes, depending on the Client’s/Potential Client’s consent to such activities on the basis of Article 6 1 (a) of the GDPR.
In accordance with recital 37 of the GDPR, ALUPROF SA is the controlling undertaking exerting control over the Subsidiary. Furthermore, in respect of recital 48 of the GDPR, Data Protection Officers which are part of a group of undertakings within the meaning of Article 4 1 (19) of the GDPR have a legitimate interest in transmitting personal data within the group of undertakings for internal administrative purposes, including client or employee data. In order to carry out the processing of the aforementioned personal data properly, each Company undertakes:
- to implement the principles of data processing, as follows: compliance with the law, transparency, accuracy, data minimisation, data storage limitation and ensuring confidentiality and integrity, in particular as regards Article 5 of the GDPR;
- to ensure that personal data shared with other Companies has been lawfully obtained on the legal basis set out in Articles 5, 6 and/or 9 of the GDPR;
- to fulfil their obligations to provide data subjects with information, including information concerning the sharing of their data with the other Companies and the collection of the applicable consents, in particular for marketing activities;
- to exercise the rights of data subjects with respect to the personal data of which a specific Company is the Data Protection Officer, as set out in Articles 12 to 22 of the GDPR, with an emphasis on the obligations arising from Articles 13 and 14 in respect of ALUPROF SA’s data;
- to provide the proper safeguards for the personal data made available and obtained under this agreement, in particular by limiting the access of unauthorised persons to the data;
- to grant access rights to personal data to staff members who undertake to keep it confidential;
- to delete personal data of which it is the Data Protection Officer when the processing period has expired;
and - to fulfil other obligations arising from the provisions of the regulations on the protection of personal data.
Any and all enquiries arising from data protection regulations concerning personal data collected as part of the service enrolment form should be addressed to ALUPROF SA, ul. Warszawska 153, 43-300 Bielsko-Biała, Poland, e-mail: ido_aluprof@grupakety.com.