SZP management reviewsNEW PROJECT Andrzej Brzeziński

Management review as teamwork: inputs by standard, versions, communication, report and actions

Privacy and personal data

Draft for approval

This notice was prepared by the portal provider. The data controller (SZP PLAST) should review it, complete the record retention period and approve it; the coordinator pastes the approved text in Settings. The binding version is in Polish.

Controller

SZP PLAST Sp. z o.o., ul. Bema 2, 19-300 Ełk, Poland, office@szp.com.pl.

Processor

NEW PROJECT Andrzej Brzeziński, Ełk: hosting and maintenance of the portal on a VPS under a data processing agreement (GDPR Art. 28). Sub-processors: the server provider (Hostinger), the e-mail provider, and for executor jobs (AI tool Claude Code, Anthropic) the review data is processed by that provider.

What data and why

Account: login, name, e-mail, position, role, language, password hash: sign-in and notifications.
Content: inputs, comments, attachments, decisions and actions with the names of those responsible: preparing, approving and documenting the management review required by the standards.
Change history and e-mail log: accountability of management system records.
Sign-in log (IP address, browser): account security.

Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)).

What not to enter

Do not enter names of accident victims, health data or data of people who raise complaints or reports. Aggregate figures are enough.

Retention, rights, cookies

Review records: 6 years from approval of the review (proposal, to be approved); sign-in log: 12 months. You have the right of access, rectification, erasure or restriction (within record-keeping obligations), objection and a complaint to the Polish supervisory authority (UODO). Only strictly necessary cookies (session, language); no analytics, so no consent banner.