Any person whose personal data is processed and for which the Data Controller is one of the Vidicon Group Companies (Vidicon Sp. z o.o. and Vidicon Investments Sp. z o.o.) is entitled to certain rights, under the principles and to the extent set forth in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – the General Data Protection Regulation (hereinafter: GDPR), in particular:
Right of Access (Article 15 GDPR)
The data subject has the right, under the terms specified in the GDPR, to obtain from the Controller confirmation as to whether or not their personal data is being processed, to gain access to such data, and to obtain information on the purposes of processing, and, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
Right to Rectification (Article 16 GDPR)
The data subject has the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning them, as well as the completion of incomplete personal data.
Right to Erasure (‘Right to be Forgotten’) (Article 17 GDPR)
The data subject has the right, under the conditions specified in the GDPR, to obtain from the Controller the erasure of personal data concerning them without undue delay, in particular where the data is no longer necessary for the purposes for which it was collected, where consent for processing has been withdrawn, where the data subject has objected to the processing, or where the data has been processed unlawfully.
Right to Restriction of Processing (Article 18 GDPR)
The data subject has the right, under the conditions specified in the GDPR, to obtain from the Controller restriction of processing, for example where the accuracy of the data is contested, the processing is unlawful, the Controller no longer requires the data for its purposes, or the data subject has objected to processing.
Right to Object (Article 21 GDPR)
The data subject has the right, under the conditions specified in the GDPR, to object at any time to the processing of their personal data where the processing is based on our legitimate interests. In such a case, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Rights in Relation to Automated Decision‑Making and Profiling (Article 22 GDPR)
In the case of decisions made on the basis of automated processing, including profiling, the data subject has the right, under the conditions specified in the GDPR, to object to such processing, unless it is carried out under the circumstances specified in Article 22(2) GDPR.
Right to Withdraw Consent (Article 7 GDPR)
The data subject has the right to withdraw their consent to processing at any time, for one or more of the purposes for which it was granted. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights
To exercise the above‑mentioned rights, please send a request by post to:
Vidicon Group
Vidicon Sp. z o.o.
7–9 Generała Józefa Bema Street
50‑265 Wrocław, Poland
The entity designated to handle the exercise of rights is Vidicon Sp. z o.o.
Extract from GDPR Provisions Related to the Exercise of Data Subject Rights
An extract from the relevant GDPR provisions (full text available here:
https://www.uodo.gov.pl/pl/131/224) covering:
- Article 7 – Conditions for Consent
- Article 15 – Right of Access
- Article 16 – Right to Rectification
- Article 17 – Right to Erasure (‘Right to be Forgotten’)
- Article 18 – Right to Restriction of Processing
- Article 20 – Right to Data Portability
- Article 21 – Right to Object
- Article 22 – Automated Individual Decision‑Making, Including Profiling
