Information clause on the protection of personal data in Przedsiębiorstwo Handlowo-Usługowe PAK-MAR Marek Napierała

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation , hereinafter: „GDPR“), pursuant to art. 13 sec. 1 and 2 and art. 14 sec. 1 and 2 at Przedsiębiorstwo Handlowo-Usługowe PAK-MAR Marek Napierała in Zbąszyń presents the following information about the manner and purpose for which your personal data is processed (hereinafter: „personal data“), as well as about your rights related to data protection: I. Personal data administrator and his contact details The administrator of your personal data is Przedsiębiorstwo Handlowo-Usługowe PAK-MAR Marek Napierała with its registered office in Zbąszyń, ul. Przysiółki 2, 64-360 Zbąszyń (hereinafter referred to as the „Company“ or „Administrator“). The Administrator can be contacted at the e-mail address: wiktor.napierala@gmail.com or in writing: ul. Przysiółki 2, 64-360 Zbaszyn.

II. Categories of personal data processing The company processes your data in the following scope: identification data, address data and contact details. III. Purposes and legal basis for the processing of personal data Your personal data will be processed by the Company in order to: a) take the necessary steps and actions related to concluding a contract with the Company and taking actions and actions by the Company at your request submitted before the conclusion of the contract – the legal basis for the processing of personal data in this respect is art. 6 sec. 1 lit. b) GDPR; b) taking and implementing the necessary activities and activities related to the performance of the contract concluded with the Company, in connection with which personal data was transferred to the Company, e.g. in order to establish a relationship under a cooperation agreement, lease, mandate or other commercial agreement, depending on depending on the circumstances – the legal basis for the processing of personal data in this respect is art. 6 sec. 1 lit. b) GDPR; c) the Company’s business activity and the provision of other services as part of the implementation of contracts concluded with customers or in order to carry out activities performed at the customer’s request before or in connection with the conclusion of the contract – the legal basis for the processing of personal data in this respect is art. 6 sec. 1 lit. b) GDPR; d) verifying the identity of customers and their representatives, fulfilling obligations related to monitoring the timeliness of payment of receivables and managing risk in the Company – the legal basis for the processing of personal data in this respect is art. 6 sec. 1 lit. b) and f) GDPR; e) statistical and analyzes which do not result in personal data and this result is not used as the basis for making decisions regarding specific natural persons – the legal basis for the processing of personal data in this respect is art. 6 sec. 1 lit. f) GDPR; f) statistical and internal reporting – the legal basis for the processing of personal data in this respect is art. 6 lit. f) GDPR; g) direct marketing of the Company during the term of the contract – the legal basis for the processing of personal data in this respect is art. 6 sec. 1 lit. f) GDPR; h) direct marketing of the Company after termination, expiration or withdrawal from the contract – the legal basis for the processing of personal data in this respect is your consent, i.e. art. 6 sec. 1 lit. a) GDPR;
i) establishing and pursuing own claims or defending against reported claims, including claims related to the business activity conducted by the Company (including debt collection, debt enforcement), as well as ensuring the Company’s IT security – the legal basis for the processing of personal data is art. 6 sec. 1 lit. f) GDPR; j) compliance with legal and regulatory requirements imposed on the Company, such as, among others, responding to official inquiries sent by a duly authorized public or judicial authority, performing duties in accordance with tax legislation – the legal basis for the processing of personal data in this respect is art. 6 sec. 1 lit. c) and f) GDPR. In addition, we process your personal data on the basis of your consent (legal basis: Article 6(1)(a) of the GDPR), granted for specific purposes. IV. Source of origin of personal data The information concerns personal data obtained in a different way than from the data subject. Your personal data may come from a statutory representative, principal in the case of a power of attorney granted, employer, party to the contract concluded with the Company, economic information bureaus and from publicly available sources, in in particular from public databases, registers and records: PESEL, National Court Register (KRS), Central Register and Information on Economic Activity (CEIDG), REGON, register of VAT taxpayers. These sources include data such as customer identification data, contact details, data on existing obligations.

V. Information about recipients of personal data or categories of recipients
Personal data may be made available to other recipients in order to perform the contract, in order to perform the legal obligation imposed on the Company, based on your consent or for purposes arising from the legitimate interests of the Company or a third party. Personal data is intended for the Company and may be transferred to the following recipients:
a) authorized employees of the Company and other persons acting under the authority of the Company,
b) entities processing your personal data on behalf of the Company and persons acting on their behalf, where such entities process data on the basis of an agreement concluded with the Company and only in accordance with the Company’s instructions and subject to confidentiality, including professional and insurance secrets, i.e. specific obligations to protect information resulting from the relevant provisions of law. The group of entities performing activities on behalf of and for the Company includes entities providing services, in particular in the field of IT, legal, accounting and bookkeeping, auditing, etc.
c) Tax Offices,
d) the Social Insurance Institution,
e) insurance companies,
f) other institutions authorized to receive your data on the basis of applicable law, when they make a request based on an appropriate legal basis.

VI. The period for which personal data will be stored (processed)
Your data will be stored (processed) for the period necessary to achieve the purposes of data processing indicated in point III of this Information Clause regarding the protection of personal data, i.e.
a) in the scope of performance of the contract concluded with the Company – until its completion, and after that time for the period required by law or for the implementation of any claims, but not longer than their limitation period;
b) in the scope of fulfilling the legal obligations incumbent on the Company in connection with the conduct of business and the implementation of concluded contracts – until the Company fulfills these obligations;
c) in the scope of data processing carried out solely on the basis of consent – until the immediate deletion of data, carried out on the basis of your request;
d) until the legitimate interests of the Company constituting the basis for this processing are fulfilled or until you object to such processing, unless there are legally justified grounds for further data processing.

VII. Rights of the data subject
In connection with the processing of your personal data by the Company, you have the following rights:
a) request access to your personal data, as well as request their rectification, limitation of their processing or their removal under the conditions resulting from the GDPR,
b) to the extent that the basis for the processing of personal data is consent – withdraw the previously granted consent at any time, with the proviso that the withdrawal of consent will not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal,
c) to the extent that the basis for the processing of personal data is the premise of the legitimate interest of the Company – to object to the processing of personal data,
d) to the extent that the basis for the processing of personal data is the performance of a contract or consent – transfer of personal data, i.e. the right to receive personal data from the Company in a structured, commonly used, machine-readable format and send them to another administrator, provided that it is technically possible.
If you believe that the processing of your data violates the provisions of generally applicable law, including the GDPR, you also have the right to lodge a complaint with the competent supervisory authority.