1. Pursuant to Article 13(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – hereinafter “GDPR”), we inform you that the controller of your personal data is CENTRUM ROZWOJU I BEZPIECZEŃSTWA Sp. z o.o., with its registered office at ul. Grzybowska 87, 00-844 Warszawa, Poland.
2. In accordance with applicable regulations, a Data Protection Officer has been appointed and can be contacted:

• by post: ul. Grzybowska 87, 00-844 Warszawa, Poland
• by email: centrum.sbz@gmail.com

3. Your personal data obtained in connection with the conclusion of a contract will be processed for the following purposes:

• performance of the contract concluded with you;
• possible assertion of claims and recovery of damages;
• responding to your letters, inquiries, and complaints;
• providing responses within ongoing procedures and processes;
• recording telephone conversations for quality control, staff training, and confirmation of arrangements;
• organization and conduct of training, courses, and practical sessions, including shooting training.

4. The legal basis for processing your personal data is:

• the necessity for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR);
• compliance with a legal obligation to which the controller is subject (Article 6(1)(c) GDPR);
• the necessity for the purposes of legitimate interests pursued by the controller (Article 6(1)(f) GDPR), including recording telephone conversations to improve service quality.

5. Providing personal data is voluntary; however, it is necessary for the performance of the contract.
6. Personal data obtained from you may be transferred to:

• entities processing data on behalf of the controller;
• public authorities and other authorized bodies, if they submit a request pursuant to applicable law (e.g., courts, public institutions).

7. Your personal data will not be transferred outside the European Economic Area (to third countries).
8. The retention period for your personal data depends on the purpose for which they were collected. Data will be stored in accordance with:

• the duration of the contract;
• applicable legal provisions requiring the controller to retain data for a specified period;
• the period necessary to protect the legitimate interests of the controller.

9. You have the right to:

• access your personal data;
• request rectification of inaccurate or incomplete data;
• request erasure of your data, provided that no other legal grounds for processing exist;
• request restriction of processing;
• object to processing where it is carried out based on the legitimate interest of the controller or for direct marketing purposes;
• data portability;
• lodge a complaint with the supervisory authority for personal data protection — the President of the Personal Data Protection Office (UODO).

10. Where the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Consent may be withdrawn by submitting a relevant statement by post or by email to: centrum.sbz@gmail.com.
11. We do not use automated decision-making systems, including profiling.