> GDPR - basic information

GDPR - basic information

GDPR - basic information

1. What is the GDPR?

GDPR (General Data Protection Regulation) is a legal act adopted by the European Union that regulates the principles of personal data protection. You can find the text of the regulationhere .

2. From when will the GDPR come into force?

From May 25, 2018, the GDPR regulation applies in every member state of the European Union.

3. How does the GDPR relate to the Polish provisions on the protection of personal data?

The provisions of the GDPR replaced the Act of August 29, 1997 on the protection of personal data. From May 25, 2018, they are directly applicable in every country of the European Union.

4. Who is subject to and who is not subject to the GDPR?

Every company that provides services to natural persons in the European Union is subject to GDPR. The GDPR also applies to companies that are not based in any EU country, but offer their services to people living there. This means that the regulations must be implemented by both GO ELECTRIC and every entrepreneur selling on the site.

The GDPR does not apply to personal or domestic activities. This means that a natural person running a business must apply the GDPR to the personal data of his clients or employees, but does not apply the GDPR to data processed for purely private purposes, e.g. to the data of addressees sent annually with Christmas cards.

5. What is personal data?

This is information relating to a specific natural person and can help directly or indirectly identify that person. For example: name and surname, telephone number, home address, e-mail address. Personal data also includes, for example: data about a person's purchases or sales, about his or her racial origin, health or sexual orientation.

6. What are the conditions for the processing of personal data?

The condition for the processing of personal data is the legal basis. The most common legal bases:

  • consent of the data subject
  • data processing is necessary to perform the contract with the data subject
  • processing is necessary to fulfill the legal obligation incumbent on the controller
  • processing is necessary for purposes resulting from legitimate interests pursued by the administrator or by a third party, for example, a payment operator, Polish Post, etc.

7. What is the principle of personal data minimization?

According to it, only personal data that is necessary to achieve the purpose of data processing may be processed. For example: if the goal is to fulfill a customer's order, the seller should not collect data about, for example, his family situation.

8. What is profiling?

Profiling is the automatic processing of data aimed at evaluating a given person and predicting their behavior. We distinguish 2 types of profiling:

  • "Normal" profiling, for example for direct marketing purposes, that is, the selection of advertising on the website based on previous activity. In this case, each person will have the right to object not to profiling.
  • Profiling "for the needs of automatically made decisions". An example is the automatic calculation of the insurance premium, the loan value based on the data provided on the website. In this case, the IT system processes data by making a complex assessment of various factors, also with the use of data not directly related to a given person (statistical data).

9. What is the right to be forgotten?

It is the common name of the currently applicable right to erasure in the event of the expiry of the purpose and legal basis for data processing.

10. What is the right to transfer personal data?

Each person registered in GOELECTRIC.pl will have the right to receive data processed about himself in a structured, commonly used format. We will ensure that the system allows you to safely download or send data to another administrator.

11. Where can I learn more about the GDPR?

Check out the pages below:

12. Is there a GIODO equivalent in the new regulations?

Yes, it is PUODO (President of the Personal Data Protection Office), which took over the competences of GIODO and performs new obligations - resulting from the GDPR.