Gwanda Model Agency

file), year of birth, gender, dimensions, photos.

2. Objectives of data processing
We process personal data in accordance with the rule described in art. 6 par. 1b RODO (Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC) within the framework of business and business relationships based on legal requirements in art. 6 par. 1c RODO or in the public interest (Article 6 paragraph 1e of the GDPR) and in the context of balancing interests (Article 6 paragraph 1f of the RODO). In particular, we process this data in order to:
- keeping financial, personnel and payroll documentation of the enterprise;
- keeping records regarding the protection of personal data in connection with applicable regulations;
- entering partial data (including images with an image) into the IT system on the website www.bloommanagament.pl;
- transmission of partial data (including images with the image) to the clients, in order to present the Models as part of castings, send proposals to new orders, update information. Consent to the processing of personal data may be revoked at any time. It should be remembered that withdrawal of the consent will not affect the legality of data processing before its withdrawal. The processing of personal data without the consent of the user is legal, if it is necessary to implement the Agreements that connect us or before its conclusion (RODO Article 6 paragraph 1b). The Administrator reserves the right to disclose selected information about the data subject to the competent authorities or third parties who submit a request for such information, based on an appropriate legal basis and in accordance with the applicable law. The transfer of data to countries outside the EU (European Union) or EEA (European Economic Area) (so-called Third Countries) takes place only in exceptional cases, when it is necessary to fulfill our contractual obligations, situations required by law (eg tax liabilities) or if we have received appropriate consent.

3. Data processing period
The period of data processing depends on contractual obligations and the purpose of processing. Period data processing can also result from the rules when they form the basis processing. In the case of data processing based on the justified interest of the Administrator - the data is processed for a period of time enabling this interest or for reporting effective opposition to data processing. If processing is done on based on consent, the data is stored until its withdrawal. The data processing period can be extended if the processing is necessary to establish and enforce claims or defend against claims, and after that period - only in the case and scope, as required by law. After the processing period has expired, the data is deleted or anonymized.

4. Rights of data subjects
Data subjects have the following rights: - the right to information about the processing of personal data - on this basis, the Administrator transmits information about the processing of data to the person making the request, including all about the purposes and legal grounds of processing, the scope of the data held, entities to which they are disclosed;

- the right to obtain a copy of the data - on this basis, the Administrator provides a copy processed data about the person making the request;

- right to rectification - the Administrator is obliged to remove any nonconformities or errors in personal data being processed and supplement them if incomplete;

- the right to delete data - on this basis you can request deletion of data, which processing is not necessary to accomplish any of the purposes for which they have been harvested;

- the right to limit processing - in the event of such a request being made by the Administrator ceases to perform operations on personal data - except for operations for which agreed to the data subject - and their storage, in accordance with accepted ones retention rules or until the reasons for limiting data processing (e.g. a decision of the supervisory body will be issued allowing further processing of data);

- the right to data transfer - on this basis, to the extent to which the data is processed in connection with the concluded agreement or expressed consent - the Administrator issues the data provided by the person they concern in a format that allows them to be read by a computer. It is also possible to request sending data to another entity - provided, however, that there are technical possibilities in this regard on the part of the Administrator, as well as also this other entity;

- the right to object to other purposes of data processing - the data subject, can at any time object to the processing of personal data that takes place based on the justified interest of the Administrator (eg for analytical purposes or statistics); objection in this respect should contain justification;

- the right to withdraw consent - if the data are processed on the basis of an explicit consent, the person, which the data refers to, has the right to withdraw it at any time, but this does not affect compliance with the law of processing carried out prior to the withdrawal of consent;

- the right to complain - if it is found that the processing of personal data violates regulations of the GDPR or other regulations regarding the protection of personal data, the data subject concern, may submit a complaint to the President of the Office for the Protection of Personal Data. In order to exercise the above rights, please contact the Administrator, using the contact details indicated above.