In connection with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016 No. 119, p. 1), hereinafter referred to as GDPR, handles.pl Piotr MOCH. with its registered office at ul. Zgoda 12, 60-128 Poznań, NIP 7792012346, informs you that:

1. The video surveillance system covers the following area:
   • the building at ul. Zgoda 12 in Poznań, i.e. its entrance/exit, warehouses, corridors, staircase;
   • the pavement around the building in question;
   • the building at 11 Zgoda Street in Poznań, i.e. its entrance/exit, staircase
   • the pavement around the building in question;
   • the car park in front of the building.
2. The controller of your personal data is andles.pl Piotr MOCH. with its registered office at 12 Zgoda Street, 60-128 Poznań, NIP 7792012346, hereinafter referred to as the Controller.
3. The entity processing your personal data within the meaning of the GDPR is the Administrator.
4. Only images without sound are recorded and stored on the medium. Data recorded by CCTV cameras is stored and available for up to 3 months, except in the situation described in point 5. The storage time depends on the number of events and the capacity of the recorder's disk. When the entire disk is full, the data is automatically overwritten.
5. If the image recordings constitute evidence in proceedings conducted by public authorities or if the Administrator has become aware that they may constitute evidence in proceedings, the period specified in point 4 shall be extended until the proceedings are legally concluded.
6. After the expiry of the periods specified in points 4 and 5, the image recordings containing personal data shall be destroyed.
7. Image recordings containing personal data may only be transferred to entities authorised to obtain personal data on the basis of legal provisions, e.g. the police, the public prosecutor's office, courts.
8. Personal data is processed on the basis of:
   • 6(1)(b) of the GDPR, which states that processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
   • 6(1)(c) of the GDPR, which states that processing is necessary for compliance with a legal obligation to which the controller is subject;
   • 6(1)(f) of the GDPR, which states that processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, in particular risk management and monitoring of obligations arising from the Agreements and consisting in servicing and ensuring the proper performance of the Agreements, as well as considering potential complaints and reported claims, in particular consisting in considering the report being the subject of the complaint and defending against potential claims.
   • the safety of persons and property and the good name of the personal data controller.
9. We hereby inform you that you have the right to access your registered personal data, rectify it, delete it, restrict its processing, object to its processing, as well as the right to transfer data and the right to lodge a complaint with the President of the Personal Data Protection Office – on the terms specified in the GDPR (Articles 15–22 of the GDPR). Your registered personal data will not be transferred to a third country.
10. The controller does not process personal data in the process of automated decision-making, including profiling.