Others persons who contact us

We may also collect personal data when an individual contacts us with a question, complaint or to provide a comment or feedback. In these cases, the individual is in control of what personal data they provide to us, and we will only use the relevant data to respond to the individual's questions and process the case accordingly.

PwC may process the following personal data:

name and surname;
position;
contact information (e.g. phone number, e-mail, residential address, etc.);
any other data that the person submits to us.

Legal basis of processing

Purposes of processing

Retention

PwC’s legitimate interests (subsection f) of Article 6(1) of General Data Protection Regulation).

Personal data may be processed for the following purposes (description of legitimate interests):

to fulfill the request of an individual;
to improvePwC and the quality of its services;
to carry out security and risk management activities (for example, we have implemented security measures to protect our own and our customers' information (including personal data), which include the detection, investigation and prevention of security threats; personal data may also be processed as part of our security monitoring, for example, by performing automated scans to identify malicious emails);
to enforce legal claims.

As long as the personal data is necessary for the described purposes or as long as there are other legitimate interests of PwC that are considered more important than the interests of the data subject.

In the absence of specific regulatory or contractual requirements or other legal basis, we generally retain documents and other documentary evidence resulting from the processing of individual claims for no longer than 10 years.

Data subject consent (subsection a) of Article 6(1) of General Data Protection Regulation).

If we have asked the data subject to give consent, personal data may be processed for the following purposes:

to fulfill a specific request of an individual.

As long as the data subject's consent is valid, unless there are other legitimate interests of PwC (for example, protection of PwC's interests in a dispute with the data subject) that are considered more important than the interests of the data subject.