INFORMATION CLAUSE ON PERSONAL DATA PROCESSING OF GELDBACH POLSKA SP. Z O.O. CUSTOMERS

In accordance with Article 13 para. 1 and para. 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 /EC (Official Journal of the European Union L. 2016.119.1), General Data Protection Regulation, hereinafter referred to as "GDPR", we inform that:

DATA ADMINISTRATOR

The Administrator of your personal data is GELDBACH POLSKA sp. z o.o. with its registered office in Mysłowice at ul. Mikołowska 31B, 41-400 Mysłowice, NIP: 2220791536, REGON: 240089327; registered at the District Court for Katowice-Wschód in Katowice, 8th Commercial Department of the National Register Courthouse under the number KRS 235883; share capital 8 850 000,00; hereinafter referred to as "Data Administrator". The data administrator can be contacted via the contact form available on our website www.geldbach.pl or via email: biuro@geldbach.pl or in writing via traditional post service, at the above indicated address of the administrator's office.

DATA PROTECTION OFFICER

The contact person in all matters regarding the protection of personal data and your rights is the Data Protection Officer. The Data Protection Officer can be contacted via e-mail: biuro@geldbach.pl or via traditional post at the address of the Administrator's registered office indicated above with the note "To Data Protection Officer".

THE PURPOSE AND LEGAL BASIS OF PERSONAL DATA PROCESSING

Your personal data will be processed for the following purposes:

1. conducting communication and answering the question asked - the legal basis for data processing is the necessity of processing for implementation the legitimate interest of the Administrator. Legitimate interest in this case is that tthe administrator is able to reply to you inquiry and communication (article 6 sec. 1 f of the GDPR);
2. possible determination, investigation and / or defense against claims - the legal basis for data processing is the necessity of processing for legal implementation legitimate interest of the Administrator. The legitimate interest of the Administrator is in this case, the possibility of astablishing, investigating or defending against claims (article 6 sec. 1 f of the GDPR);
3. conclusion and performance of the contract concluded with the Administrator and the enforcement of rights and obligations under the contract - for the duration of the contract and after its expiry for the period necessary to secure or pursuing any claims due to the Administrator or fulfilling the Administrator's legal obligation (e.g. resulting from tax or accounting regulations - legal basis (article 6 sec. 1 b of the GDPR);
4. taking action at the request of the data subject before placing an order, conclusion of the contract - legal basis (article 6 sec. 1 b of the GDPR);
5. performance of legal obligations incumbent on the Administrator, such as issuing and storage of VAT invoices and accounting documents - for a period of time performance of duties, as well as for the time in which the law requires Administrator to store data and for the time in which the Administrator can bear the legal consequences of failure to comply with a legal obligation - legal basis (article 6 sec. 1 c of the GDPR and article 6 sec. 1 f of the GDPR);
6. marketing of the Administrator's services - until an objection is raised by the person to whom data concerns - legal basis (article 6 sec. 1 a of the GDPR and article 6 sec. 1 f of the GDPR).

DATA RECIPIENTS

The recipients of your personal data are entities commissioned by the Administrator performing activities that involve the need to process data, in particular in the field of e-mail service, administrative service, legal service or advisory services, providers of ICT services and technical equipment. The recipients of your personal data may also be authorized entities and bodies to receive your data - only in justified cases and on the basis of generally applicable laws.

DATA STORAGE PERIOD

Your personal data will be processed:

1. for the period necessary to answer the submitted inquiry and settle the matter being the subject of the inquiry,
2. until the claims are time-barred in accordance with generally applicable regulations of Polish law,
3. until withdrawal of consent to the processing of personal data.

RIGHTS OF DATA SUBJECTS

In connection with the processing of personal data, the data subject is entitled to the right to: access to data, rectification of data, deletion of data, limitation of data processing, data transfer, as well as lodging a complaint to the President of the Personal Data Protection Office. You have these rights in cases and to the extent provided for by generally applicable provisions of law, in particular the GDPR. In addition, data subjects, whose personal data is processed on the basis of art. 6 sec. 1 f of the GDPR, also have the right to express objection to the processing undertaken by the administrator in this respect - in accordance with article 21 of the GDPR.

INFORMATION ON THE REQUIREMENT / VOLUNTARY PROVISION OF DATA

Providing personal data and consenting to its processing is voluntary, however necessary to answer your inquiry.

INFORMATION ABOUT AUTOMATED DECISIONS, INCLUDING PROFILING

Based on personal data, the Administrator will not make automated decisions, including decisions resulting from profiling.