Information Clause under Articles 13 and 14 of the GDPR – e-Delivery Service Users

Who processes your data?

The Controller of your personal data is: Autenti spółka z ograniczoną odpowiedzialnością with its registered office in Poznań, ul. Święty Marcin 29/8, entered in the register of entrepreneurs kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań under KRS number: 0000436998 (hereinafter “Autenti”) - provider of the online service available under the name “Autenti” - the internet platform available at www.autenti.com (hereinafter ‘Autenti Platform’) and the provider of qualified electronic delivery service.

Where did we get your data from?

We obtained your personal data directly from you in connection with your acceptance of the Autenti e-Delivery Terms and Conditions and the Autenti Platform Terms and Conditions, if you are a registered user of the Autenti Platform and the registered electronic delivery service.

We may obtain your personal data:

directly from you when you create an account on the Autenti Platform (necessary to use the electronic delivery service, including to set up an inbox) or
from the Super Administrator of the organisation's account where you have been designated as the person entitled to use the registered electronic delivery service, including access to the inbox,
directly from you or at your request as part of the Identification process required for the registered electronic delivery service,
from the sender of your e-Parcel, in connection with the registered electronic delivery service.

Your personal data may also be obtained from other sources or activities that you have performed as part of managing your account on the Autenti Platform.

What is the purpose and legal basis of Autenti's processing of your personal data?

Your personal data is processed by Autenti in order to:

the performance of the contract for the provision of services set out in the Autenti Platform Terms and Conditions and the Autenti e-Delivery Terms and Conditions (pursuant to Article 6(1)(b) of the GDPR) e.g.;
- the provision of the e-Delivery service and the full use of the registered e-Delivery service, including the sending or receiving of e-Parcel,
- setting up and managing your account and providing the operation of your account, the operation of the inbox or the operation of the registered delivery service,
- to handle requests you send to us, e.g. via a contact form, including resolving technical problems you report to us,
to comply with the Contractor's legal obligation (on the basis of Article 6(1)(c) and (3) GDPR) e.g. for purposes of:
- tax and accounting,
- handling complaints,
- verification of your identity,
- archiving and evidential purposes, in connection with the qualified electronic delivery service provided to you,
the performance of a task carried out in the public interest entrusted to Autenti in connection with the provision of a qualified electronic delivery service and in connection with participation in the provision of a public registered electronic delivery service (on the basis of Article 6(1)(e) and (3) GDPR),
pursuing Autenti's legitimate interests (on the basis of Article 6(1)(f) GDPR), including informing you of changes to the service, rules and regulations and other documents that apply to you as a Service User,
to assert, secure or defend claims (based on Article 6(1)(f) GDPR).
on the basis of your consent, e.g.
- for Autenti to send you marketing or commercial content,
- marketing of products or services through Trusted Partners with whom Autenti cooperates. By Trusted Partners we mean entities with whom Autenti cooperates in the implementation or promotion of the services set out in the Autenti Platform Terms and Conditions.

Do you have to provide us with your personal data?

If we obtain personal data directly from you, we require you to provide the following personal data in order to be able to conclude and perform the contract concluded with you and thus provide the electronic delivery service to you:

first name, last name, e-mail address, telephone number,
other data to prove your identity, including, but not limited to, your identity document number or other data, depending on the identification method you have chosen.

If you use an organisation's account, it is also necessary to provide your place of employment, position or role.

The provision of personal data is voluntary but required. If you do not provide this personal data, unfortunately we will not be able to enter into a contract with you or provide an electronic delivery service to you.

What rights do you have against Autenti with regard to the data processed?

Based on the GDPR, you have the following rights:

The right to access and rectify the content of your data,
The right to erasure of your personal data (right to be forgotten),
The right to restrict processing,
the right to data portability,
the right to object to the processing of your data on the basis of Autenti's legitimate interests or to the processing for direct marketing purposes,
the right to withdraw the consent given to us at any time without affecting the lawfulness of previous processing (where processing is based on consent),
the right to lodge a complaint with a supervisory body if you consider that the processing of your personal data violates the provisions of the GDPR.

The execution of your rights is carried out in accordance with the relevant provisions of the GDPR, which means that Autenti has the right to refuse to execute them if the law requires or allows it.

If you have questions, would like to use your right or have any other concerns - please contact our Data Protection Officer. You will find the details below.

With whom do we share your personal data?

We may share your personal with:

senders or recipients of e-Delivery,
other providers of registered electronic delivery services, within the framework of so-called interoperability,
the Polish Ministry of Digitisation and the Central Informatics Centre in Poland for the use of the public service of registered electronic delivery, including, in particular, for the purpose of disclosing your address in the so-called “BAE” (Database of Electronic Addresses) - based on your request,
other Users who share an inbox with you for e-Parcels,
entities that support Autenti in the provision of electronic services or electronic delivery services, i.e. entities that provide SMS and e-mail delivery services, a list of which can be found at the link (at the very bottom of the page, under the question: What does it mean that Autenti e-Delivery is a qualified service?),
providers of services related to the verification of your identity,
payment service providers,
entities that provide consulting or auditing services,
entities that support the Autenti Platform users, provide technical services such as hosting (including data storage in the so-called cloud),
entities that support the promotion of offers, cooperate in marketing campaigns.

We may also provide your personal data to authorised public authorities combating fraud and abuse for the purposes of criminal proceedings, if the law allows such sharing.

How long do we keep your personal data?

Your personal data is processed for the performance of the contract for the provision of services set out in Autenti's e-Delivery Terms & Conditions and for the fulfilment of a legal obligation and for the performance of a task in the public interest, so the duration of processing will be determined by which database your personal data is stored in and for which purposes it is processed.

To the extent that your personal data is necessary for the performance of a service to you, your personal data will be processed for the duration of the contract and thereafter for the period necessary for:

post-sales customer service (e.g. complaints handling),
securing or pursuing claims,
if necessary, the proper provision of services in accordance with Autenti's e-Delivery Terms & Conditions,
fulfilment of the Controllerr's legal obligations (e.g. under tax or accounting regulations, the eIDAS Regulation and others).

The retention periods for your personal data, where the basis for processing is a relevant legal provision or the fulfilment of a public interest purpose, are indicated in the Policy and Declaration of Conduct for the Qualified Registered Electronic Delivery Service or the e-Delivery Terms & Conditions.

Personal data that we process for the purpose of marketing our own products or services, based on a legitimate legal interest or on the basis of your consent, will be processed until you raise an objection against processing.

Data processed on the basis of your consent is processed until you withdraw it.

After the end of the processing period, your data will be irreversibly deleted or anonymised.

Your personal data will be processed in an IT environment, which means that it may also be temporarily stored and processed to ensure the security and correct functioning of IT systems, e.g. in connection with making security copies, testing changes to IT systems, detecting anomalies or protecting against exploitation and attacks.

Do we transfer your data to countries outside the European Economic Area?

Your personal data may be transferred outside the European Economic Area (EEA) to entities that meet an adequate level of protection, by:

cooperating with processors of personal data in countries for which a relevant decision of the European Commission has been issued,
the use of standard contractual clauses issued by the European Commission,
the use of binding corporate rules approved by the competent supervisory authority,
other safeguards that meet an adequate level of protection based on the relevant legal safeguards.

Do we process your personal data automatically (including through profiling) in a way that affects your rights?

Your personal data will be processed by automated means (including profiling), but this will not have any legal effect on you or similarly influence your situation materially, except where Autenti is required to carry out a verification of your identity. As a result of a negative verification of your identity, Autenti may refuse to provide the registered electronic delivery service to you.

Personal data profiling by Autenti involves the processing of your data (including by automated means), by using it to assess certain information about you, in particular to confirm your identity and your right to representation if you are acting on behalf of another person or entity.

How to contact us for more information about the processing of your personal data?

Write to Autenti's designated Data Protection Officer using their contact details indicated below:

Data Protection Officer: Agata Kolorz,

e-mail address: dpo@autenti.com,

postal address: Data Protection Inspector of Autenti sp. z o.o., 1 Leona Henryka Sternbach Street (Building L1), 30-394 Kraków

Detailed rules of personal data processing are contained in our Privacy Policy (link)