Dear Sir or Madam,
In connection with the entry into force on 25 May 2018 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter: the GDPR), and in order to ensure the security of the processing of your personal data, we would like to inform you of several important matters. Please read the information below carefully. Should you have any questions, we remain at your disposal.
1. Who is the Controller of your personal data?
The Controller of your personal data is:
POLEXPANS SP. Z O.O.
with its registered office in Częstochowa, Hausbrandta Street 1/3, 42-224 Częstochowa,
entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court in Częstochowa,
under KRS number: 0000703209,
NIP (Tax ID): 9492222247,
REGON: 368745500.
You may contact the Personal Data Controller:
a) in writing, by traditional mail to the Company’s registered address.
All matters concerning the processing of personal data and the exercise of rights related thereto should be addressed in writing to the Controller’s registered office.
2. What personal data are concerned?
Your personal data are processed for the purpose of establishing or maintaining business relationships between you and the Company, conducting commercial analyses, exchanging information on market trends, pursuing potential claims, and performing contracts and agreements binding you with the Company.
Accordingly, we process identification data, address data, and contact details.
3. Jaki jest cel przetwarzania danych osobowych?
Each processing operation is based on an appropriate legal ground in accordance with applicable regulations.
a) For the performance of contracts and agreements concluded with the Company:
— legal basis: Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f) GDPR (legitimate interest of the Controller).
b) For pursuing potential claims related to the Company’s business activity:
— legal basis: Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
c) For fulfilling legal and tax obligations related to the Company’s business operations:
— legal basis: Article 6(1)(b) GDPR, Article 6(1)(f) GDPR, or Article 6(1)(c) GDPR (legal obligation).
d) For statistical and analytical purposes, where results do not constitute personal data and are not used to make decisions about specific individuals:
— legal basis: Article 6(1)(f) GDPR.
e) For other legitimate business purposes, including maintaining business relationships, commercial analyses, and market trend exchanges:
— legal basis: Article 6(1)(f) GDPR.
4. Are personal data shared with other entities?
As a commercial and service-oriented company, we ensure the confidentiality of your data. For organizational and operational purposes (including IT infrastructure and daily business activities), personal data may be disclosed to:
a) employees, associates, and contractors cooperating in achieving the purposes described above;
b) business partners providing services to the Company;
c) providers of technical, IT, organizational, courier, and postal services;
d) legal and advisory service providers, including debt collection entities.
— legal basis: Article 6(1)(f) GDPR.
Entities processing data on behalf of POLEXPANS SP. Z O.O. do so under data processing agreements pursuant to Article 28 GDPR or confidentiality obligations.
The Controller does not process personal data using automated decision-making, including profiling.
5. Source of personal data?
Personal data were obtained directly from you in connection with cooperation, from websites, and from commercially available databases.
6. Data retention period?
Personal data will be processed for the period necessary to achieve the purposes indicated above:
a) for the duration of contracts and up to 10 years after their termination;
b) for pursuing claims – up to 5 years after the limitation period expires;
c) for legal and accounting obligations – up to 10 years;
d) for statistical and archival purposes – up to 10 years;
e) for other legitimate business purposes – up to 10 years.
After these periods, data will be deleted or anonymized
7. Your rights?
You have the right to:
• access your personal data and request rectification,
• request erasure of data,
• request restriction of processing,
• data portability,
• object to processing,
• lodge a complaint with a supervisory authority if you believe your data are processed unlawfully.
These rights may be exercised by contacting the Controller in writing at the registered office address.