Privacy policy

Information on data protection

The processing of your personal data should be legal, reliable and transparent. Therefore, we want to inform you on what terms and for what purpose we process personal data and make you aware of the related rights and ways of their implementation. This is one of the elements of the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), and, commonly referred to as the General Data Protection Regulation („RODO”).

The use of our website is possible, in principle, without providing your personal data. However, there are cases of obtaining your data, about which we write below.

Who is the controller of your personal data?

The Personal Data Administrator is Infra SILESIA S.A. with its registered office in Rybnik at Klokocinska 51 Street.

How can you contact us for more information about the processing of your personal data?

Infra SILESIA S.A. has appointed a Plenipotentiary for. Personal Data Protection:

Mr Dariusz Kańtoch

Contact:

Infra SILESIA SA.

Dariusz Kańtoch

Plenipotentiary for. Protection of Personal Data

Klokocinska 51 Street

44-251 Rybnik

E+ mail: daneosobowe@deutschebahn.com

Contact number +48 32 788 93 53

How did we receive your personal data?

We have received personal data from you:

  • if you have consented to the processing of personal data for marketing purposes or for the purpose of receiving commercial and marketing correspondence from Infra SILESIA S. A., including by electronic means and through electronic devices used, by, such as phone, computer and others,
  • if you have contacted the company to conclude a contract or have established cooperation with us by concluding a contract, the following,
  • if you have provided us with your personal data for recruitment purposes,
  • if you have consented to the processing of personal data for other purposes.

What are the purposes and grounds for processing personal data?

We collect and process your personal data only for specific purposes.

  • in the event that you contact us by sending correspondence by e-mail or traditional not related to the concluded contract or services provided, the following, Your personal data contained in e-mail or traditional correspondence may be processed by us only for the purpose of communication and conducting the case to which the correspondence relates. Providing personal data is then required by us only if it is necessary to conduct the case, a failure to provide data results in the inability to implement it – the legal basis for processing is the legitimate interest of the Administrator (art. 6 paragraph 1 litre f) of the General EU Regulation on data protection (GDPR)), consisting in conducting correspondence in a matter addressed to him in connection with his business activity.
  • If you contact us by phone, in matters not related to the concluded contract or services provided, we may request personal data only if, when it is necessary to handle and carry out the reported case to which the contact relates, a failure to provide data will result in the inability to implement this case – the legal basis is in this case the legitimate interest of the Administrator (art. 6 sec. 1 Lit f) of the General EU Regulation on data protection (GDPR)), consisting in the need to implement a case reported by phone related to business activity.
  • where it is necessary for the purpose of concluding and performing a contract concluded with you, including to enable the provision of the service, as well as to conduct the case in the event of, when you file a complaint handling the notifications that are addressed to us (eg via the contact form), contacting you, including for purposes related to the provision of – services, the legal basis for processing is then Article 6, paragraph 1, b) of the General EU Regulation on data protection (GDPR). In addition, when the law requires us to process your data for tax and accounting purposes – the legal basis for processing is then art. 6 paragraph 1 lit. c) the EU General Data Protection Regulation (GDPR).
  • If it is necessary to comply with legal obligations incumbent on the Data Administrator (eg the storage of tax documentation) – the legal basis for processing is Article 6, paragraph 1, lit. c) the EU General Data Protection Regulation (GDPR).
  • in order to ensure the safety of people and property in our facilities, we use video monitoring and control access to premises and to the area managed by us as an Administrator. The personal data collected in this way can only be used to protect persons and property, which means that they cannot be used for any other purposes – the basis for the processing of personal data is the legitimate interest of the Administrator (art. 6 paragraph 1 lit. f ) General EU Regulation on data protection (GDPR)). In this case, providing data is required by the Administrator in order to allow access to the premises or to the area managed by the Administrator, and refusal to provide them results in the inability to enter.
  • in order to establish, investigate or defend against claims, which is our legitimate interest – the basis for the processing of personal data is the legitimate interest of the Administrator (art. 6 section 1 letter. f ) General EU Regulation on data protection (GDPR)).
  • for archival (evidence) purposes to secure information in the event of a legal need to prove facts – the legal basis for processing is a legitimate interest pursued by the Administrator; the legitimate interest of the Administrator is to protect against all allegations and claims of third parties and to ensure accountability (showing compliance with our obligations under the law) – the basis for the processing of personal data is the legitimate interest of the Administrator (art. 6 paragraph 1 point f ) of the EU General Data Protection Regulation (GDPR)).
  • in order for us to offer you products and services directly (direct marketing), in order to send you invitations to events organized by the company, what is our legitimate interest – the basis for the processing of personal data is the legitimate interest of the Administrator (art. 6 paragraph 1 letter f ) of the General EU Regulation on data protection (GDPR)).
  • in order for us to offer you products and services directly (direct marketing), in order to send you invitations to events organized by the company, what is our legitimate interest – the basis for the processing of personal data is the legitimate interest of the Administrator (art. 6 paragraph 1 letter f ) of the General EU Regulation on data protection (GDPR)).
  • if it results from other legitimate interests of the Data Administrator – the basis for the processing of personal data is the legitimate interest of the Administrator (art. 6 paragraph 1 lit. f ) General EU Regulation on data protection (GDPR)).
  • in the case of applying for the recruitment process, the Administrator processes your personal data only to the extent covered by the provisions of labor law, and to the extent not required by law only on the basis of your voluntary consent. Personal data is processed:
  • in order to perform the obligations arising from the law, related to the employment process, including primarily the Labour Code – the legal basis for processing is the legal obligation incumbent on the Administrator (art. 6 sec. 1 Lit c) of the General EU Regulation on data protection (GDPR) in connection with the provisions of the Labour Code);
  • in order to carry out the recruitment process in the scope of data not required by law, as well as for the purposes of future recruitment processes – the legal basis for processing is consent (art. 6 para. 1 Lit a) of the EU General Data Protection Regulation (GDPR));
  • in order to establish, investigate or defend against possible claims – the legal basis for data processing is the legitimate interest of the Administrator (art. 6 sec. 1 Lit f) of the EU General Data Protection Regulation (GDPR)).
  • if it results from other legitimate interests of the Data Administrator – the basis for the processing of personal data is the legitimate interest of the Administrator (art. 6 paragraph 1 lit. f ) General EU Regulation on data protection (GDPR)).
  • in the case of applying for the recruitment process, the Administrator processes your personal data only to the extent covered by the provisions of labor law, and to the extent not required by law only on the basis of your voluntary consent. Personal data is processed:
    – in order to perform the obligations arising from the law, related to the employment process, including primarily the Labour Code – the legal basis for processing is the legal obligation incumbent on the Administrator (art. 6 sec. 1 Lit c) of the General EU Regulation on data protection (GDPR) in connection with the provisions of the Labour Code);
    – in order to carry out the recruitment process in the scope of data not required by law, as well as for the purposes of future recruitment processes – the legal basis for processing is consent (art. 6 para. 1 Lit a) of the EU General Data Protection Regulation (GDPR));
    – in order to establish, investigate or defend against possible claims – the legal basis for data processing is the legitimate interest of the Administrator (art. 6 sec. 1 Lit f) of the EU General Data Protection Regulation (GDPR)).
  • in the event that we are entitled or obliged to process your personal data on the basis of consent, the basis for data processing is the consent given voluntarily (art. 6, paragraph 1, lit. a) the EU General Data Protection Regulation (GDPR)). You have the right to withdraw your consent to their processing at any time without affecting the lawfulness of the processing, which was made on the basis of consent expressed before its withdrawal. A statement of withdrawal of consent to the processing of personal data requires its submission in writing or electronically to the e-mail address: daneosobowe@deutschebahn.com
  • We store and analyze user data obtained from online sources pseudonymously so that we can constantly improve our offer. The legal basis for this is Article 6, paragraph 1, f) of the EU General Data Protection Regulation (GDPR).
  • your personal data may also be processed when, for technical reasons, they have to be collected and saved when visiting the website www.infrasilesia.pl (in particular, this applies to data such as the date and duration of the visit, visited pages, identification data of the browser and operating system used and the website from which you were redirected to the Infra SILESIA S.A.).

 To whom do we transfer personal data?

Your personal data may be made available to entities from our capital group (DB Cargo Polska S.A., DB Cargo Spedkol Sp. z o.o., DB Port Szczecin Sp. z o.o.) and subcontractors, that is, entities that we use when processing them, such as accounting companies, law firms, information technology companies, insurance companies (damage liquidators), consulting companies, couriers, and, marketing and recruitment agencies and authorized institutions, when required by law.

The third-party service providers we work with are carefully selected and subject to strict contractual obligations. Service providers follow our instructions and guidelines, have technical and organizational measures, and are subject to our controls and audits to ensure data security.

Do we transfer personal data to countries outside the European Economic Area?

Data is not transferred to third countries outside the EU/EEA or to international organisations unless appropriate guarantees are provided. These include the EU standard contractual clauses and the European Commission’s decision on the appropriate level of protection.

How long do we keep personal data?

The period of data processing depends on the type of service provided and the purpose of processing.

  • in the case of collecting personal data for the purpose of concluding a contract, we store the data from the moment of collecting the data before the conclusion of the contract for the period of negotiating the contract and until the end of the calendar year following the year, the last time you contacted us.
  • in the case of collecting personal data in connection with the implementation of the order or the conclusion and performance of the – contract, we process them from the moment of collecting data until the end of the limitation period for potential claims from the contract.
  • in the case of collecting personal data in order to fulfill the obligations arising from the law or in connection with the implementation of tasks in the public interest – we process them for the period of performance of duties and tasks resulting from individual legal provisions.
  • in the case of data processing on the basis of the legitimate interest of the Administrator –, for example, for security reasons – data are processed for a period enabling its implementation or to submit an effective objection to data processing.
  • to the extent that the data is processed in order to ensure security in the form of monitoring recordings, they are stored for a period of 3 months.
  • we store basic contact data for the purposes of direct marketing of our products and services until: You object to their processing for this purpose, withdraw your consent, processing them on the basis of the so-called. marketing consent will be outdated, we will determine that they have become outdated.
  • if the processing is based on your consent, the data is processed until it is withdrawn.
  • the period of data processing may be extended if the processing is necessary to establish, assert or defend against possible claims, and after this period, only in the case and in the scope of, in what the law will require. After the end of the processing period, the data is irreversibly deleted or anonymized.

What rights do they have?

If we process your personal data for a specific purpose, we provide:

  • the right to access personal data (information about the data we process, including the right to obtain a copy of this data),
  • have the right to request rectification (correction) of personal data when the data is incorrect or incomplete,
  • ‘the right to request the deletion of personal data (called „the right to be forgotten”); if in your opinion there are no grounds for us to process the data, you must submit a request for their deletion,
  • the right to restrict the processing of your personal data; you can request the restriction of the processing of your personal data only for their storage or for the performance of mutually agreed actions, such as, if you believe that we have incorrect data on this subject or we process it unreasonably; or you do not want us to delete it, because you need it to establish, assert or defend claims, or, or for the duration of your objection to the processing of your data,
  • the right to object to the processing of data: “marketing objection”. You have the right to object to the processing of your data for the purpose of direct marketing. If you exercise this right – we will stop processing your data for this purpose.
  • object because of the particular situation; you also have the right to object to the processing of your data on the basis of a legitimate interest for purposes other than direct marketing, and, where the processing is necessary for us to perform a task carried out in the public interest. We should then be reminded of the specific situation that you believe justifies our cessation of the processing of the data subject to the objection. We will stop processing your data for these purposes, unless we can demonstrate that the grounds for processing your data by us override your rights or that these data are necessary for us to determine, assertion or defence of claims,
  • the right to data portability: you have the right to receive personal data from us in a structured, commonly used and machine-readable format (eg „.csv” format), such as, which you have provided to us on the basis of a contract or your consent, and the processing takes place in an automated manner. You can also order us to send this data directly to another entity,
  • the right to object: you have the right to object to the processing of your data at any time,
  • the right to lodge a complaint: you have the right to lodge a complaint in connection with the processing of your personal data by us to the supervisory body, which is the President of the Office for Personal Data Protection (address: President of the Office for Personal Data Protection, Rates 2 Street, 00-193 Warsaw), if you believe that the processing of personal data violates the provisions of the GDPR.
  • the right to withdraw consent to the processing of personal data: at any time you have the right to withdraw your consent to the processing of personal data that we process on the basis of your consent. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

How to exercise your rights?

In order to exercise their rights, a request should be made:

  • in writing to the following address: Infra SILESIA S.A., Klokocinska 51 Street, 44-251Rybnik, note: Data protection officer Dariusz Kańtoch
  • e-mail us at: daneosobowe@deutschebahn.com

If the Administrator is not able to identify the person submitting the application based on the submitted application, he will ask the applicant for additional information.

Reply to the application should be given within one month of its receipt. If it is necessary to extend this deadline, the Administrator shall inform the applicant about the reasons for such extension.

The reply shall be given in writing unless the request has been submitted by e-mail or a reply has been requested in electronic form.

Proceedings on submitted applications are free of charge. Fees may be collected only if a request is made to issue a second and each subsequent copy of the data (the first copy of the data is free); in this case, the Administrator may request payment of a fee of PLN 12.00. The above abbot contains administrative costs related to the implementation of the request.

If the decision to impose a fee is challenged, the data subject may lodge a complaint with the President of the Office for Personal Data Protection.

 What happens with links to external websites?

After clicking the link leading to the external website, the user is redirected to a page from outside the Infra SILESIA S.A website. Infra SILESIA S.A.is not responsible for the content, services or products offered through external websites. Infra SILESIA S.A.is not responsible for data protection or technical security during visits to external websites.

When are cookies used?

Cookies are small text files used to store personal data. Cookies are sent to the website after opening it and allow the user to be identified. They facilitate the use of websites. We distinguish between cookies necessary for technical reasons and cookies that are not necessarily required.

We want you to make an informed decision for or against the use of these cookies, which are not necessary from a technical perspective for the functionality of the website. Please note that rejecting commercially used cookies means that the ads displayed will not be tailored to your interests. However, this will not affect the way you use the website. The following describes how we use cookies on our websites.

It is possible to use www.infrasilesia.pl without saving cookies for purposes other than technical. This means that you can disable the tracking of cookies (options „do not track” or „trackingprotection”) or disable the saving of third-party cookies. In addition, we recommend that you check your saved cookies regularly if you have not consented to their use.

It should be noted that deleting all cookies also means deleting those cookies that contain information about the lack of consent to save them, which is tantamount to the need to again refuse.