Administrator

The data administrator is Imperial Pay Sp. z o. o. with its registered office in Hajnówka at ul. Kwiatowa 9, 17-200 Hajnówka, entered into the Register of Entrepreneurs kept by the District Court in Białystok, XII Commercial Division of the National Court Register under KRS number 0001038671, registered as a taxpayer under NIP number 6030082431, with share capital in the amount of PLN 5,000.00.

Contact details

The Company can be contacted via the e-mail address: office@imperial-holding.xyz or in writing to the address of Imperial Pay Sp. z o. o 

The Administrator can be contacted via e-mail office@imperial-holding.xyz or in writing to the address of the Administrator’s registered office.

Purposes of personal data processing and legal basis for processing

The processing of your data takes place for the following purposes:

• conclusion and performance of a contract for services using profiling – data processing is necessary to conclude and perform the contract, and verification in external databases may take place on the basis of your consent;
• marketing, using profiling, in relation to products and services offered by the Administrator – during the term of the contract, the processing takes place as part of the so-called the legitimate interest of the Administrator, and after the end of the contract based on your consent;
• debt collection, including the transfer of due receivables to third parties, in the case of pursuing claims arising from the contract concluded with you – data processing takes place as part of the so-called the Administrator’s legitimate interest, which is pursuing claims for the Administrator’s business activity;
• related to counteracting abuses – data processing takes place as part of the so-called the legitimate interest of the Administrator, which is preventing abuses and prosecuting crimes committed to the detriment of the Administrator;
• analytical – data processing takes place as part of the so-called the Administrator’s legitimate interest in managing the Administrator’s activities (so-called operational risk) and the Administrator applies appropriate measures to protect the interests or rights and freedoms of persons whose data is processed (e.g. data encryption);
• archival and evidence – data processing takes place as part of the so-called the legitimate interest of the Administrator, which is the defense of possible claims;
• fulfillment of legal obligations by the Administrator, including those resulting from the provisions on counteracting money laundering and financing of terrorism (AML), accounting and tax regulations.

data recipients

Depending on the purpose of processing, your data may be transferred:

• entities processing personal data at the request of the Administrator, including service providers in the field of IT system maintenance, data storage, correspondence printing, marketing communication, postal and debt collection services – such entities process data on the basis of an agreement with the Administrator and only in accordance with the Administrator’s instructions,
• entities conducting business activity in the field of debt purchase.

Source of origin of personal data

The administrator obtains personal data directly from the client. 

The period of personal data processing

Your data will be processed for the duration of the contract and after its completion:

• for the period of limitation of claims arising from the contract or other titles,
• until the obligations to store data resulting from legal provisions expire, including in the field of counteracting money laundering and financing of terrorism (AML), accounting and tax regulations,
• to the extent that the basis for processing is consent – until its withdrawal or for the period for which it was granted.

Rights of the person to whom the personal data relates

You have the right  to access  your data and the right to request their  rectification ,  deletion  or  limitation  of their processing.

To the extent that the basis for the processing of your personal data is the premise of the legitimate interest of the Administrator, you have the right to object  to  the processing of your personal data. In particular, you have the right to object to the processing of data for the purposes of direct marketing, including profiling for these purposes.

To the extent that the basis for the processing of your personal data is consent, you have the right to  withdraw your consent  at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You also have the right  to lodge a complaint  with the supervisory body dealing with the protection of personal data.

In order to exercise the above rights, please contact the Data Administrator or the Data Protection Officer. Contact details are indicated above.

Information on voluntariness or the requirement to provide data

Providing personal data is necessary to conclude and perform the contract. The consequence of not providing data is the inability to conclude a contract.

Providing personal data for marketing purposes is voluntary.

Rights of the data subject:  You have the right to access your personal data, the right to request their rectification, deletion, restriction of processing, their transfer, objection to their processing, lodging a complaint to the supervisory body, withdrawal of consent to their processing, which will not affect the current processing – on the terms resulting from the GDPR.