According to our standards we only collect personal data necessary for our specified purposes and we encourage our customers, subcontractors or suppliers to only share personal data where it is strictly required for those purposes.
If, as part of the professional services provided to customers or within the framework of cooperation with subcontractors or suppliers, we also need to process the data of individuals with whom we do not have direct communication, we ask our customers, subcontractors and suppliers to provide the relevant data subjects with information about the use of their data. Our customers, subcontractors and suppliers may use the relevant sections of this privacy statement or refer to this privacy statement in their communication with their data subjects if they deem it appropriate.
PwC may process the following personal data:
name, surname, phone number, e-mail and other contact information, as well as position, of the business contact,
personal data of the company's legal or authorized representatives and beneficial owners, as well as data of other individuals associated with the customer, subcontractor or supplier, for example:
first name, last name, position,
personal identification number or birth data,
personal ID document data,
sources of personal income,
a person's status as a politically exposed person,
the amount of the person's income and other information that may be necessary for providing services to customers, cooperating with a subcontractor or receiving goods and services from suppliers.
|Legal basis of processing||Purposes of processing||Retention|
PwC's legal obligation (subsection c) of Article 6(1) of General Data Protection Regulation):
Personal data may be processed for the following purposes:
|Five years after the termination of business relations or for accounting purposes in accordance with Article 28 of the Accounting Law.|
|PwC’s legitimate interests (subsection f) of Article 6(1) of General Data Protection Regulation).||
Personal data may be processed for the following purposes (description of legitimate interests):
As long as the personal data is necessary for the described purposes, as long as the person works for a specific customer, subcontractor or supplier or as long as there are other legitimate interests of PwC that are considered more important than the interests of the data subject.
In the absence of specific regulatory or contractual requirements or other legal basis, we generally retain documents and other documentary evidence arising from the provision of services or cooperation with a subcontractor or supplier for no longer than 5 years.