INFORMATION CLAUSE
Dear Customers,
due to the fact that as of May 25, 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) applies, we are providing you with information regarding your personal data.
The following information is provided for informational purposes only; no action or contact with Andrzej Matoga, conducting business under the name Firma Produkcyjno – Handlowa „MANN” Andrzej Matoga, ul. Galicyjska 59, 32-040 Rzeszotary, is required from you.
Please be informed that the Controller of your personal data is Andrzej Matoga, conducting business under the name Firma Produkcyjno – Handlowa „MANN” Andrzej Matoga, ul. Galicyjska 59, 32-040 Rzeszotary, NIP: 681-000-20-28
1) Purpose and basis of processing
a) In the event of a desire to conclude or the conclusion of a contract, your personal data will be processed:
- In the case of contact for the purpose of concluding a contract, we process your data in order to take steps at your request before concluding the contract, e.g., conducting negotiations or presenting an offer (basis: Art. 6(1)(b) of the GDPR);
- In the case of concluding a contract with you, the data necessary for its conclusion and performance are processed for the purpose of its conclusion and performance (including contact in connection with its performance, payment confirmation) and based on it (basis: Art. 6(1)(b) of the GDPR);
- for the purpose of fulfilling legal obligations incumbent on the Controller, including tax obligations, issuing VAT invoices, handling complaints, fulfilling the information obligation (basis: Art. 6(1)(c) of the GDPR);
Furthermore, your personal data will be processed:
- for archiving (evidentiary) purposes to secure information in case of a legal need to prove facts, based on the Controller's legitimate interest (basis: Art. 6(1)(f) of the GDPR), which is the archiving of documentation,
- for the purpose of possibly establishing, pursuing or defending against claims, based on the Controller's legitimate interest (basis: Art. 6(1)(f) of the GDPR), which is then the establishment, pursuit and defense against claims,
- for the purpose of marketing own products and services based on the Controller's legitimate interest (basis: Art. 6(1)(f) of the GDPR), which is the marketing of own products and services.
b) Commercial information
If you have given your consent, your personal data will be processed for the purpose of sending commercial information based on your consent (basis: Art. 6(1)(a) of the GDPR),
c) Telephone contact
In the case of contact by telephone on matters not related to the performance of a contract, the personal data provided by you are processed for the purpose of handling the request or the reported inquiry. The basis for processing in such a case is the Controller's legitimate interest (Art. 6(1)(f) of the GDPR), which consists in handling requests and inquiries in connection with the business activity conducted. Your personal data are also processed for the purpose of possibly establishing, pursuing or defending against claims, based on the Controller's legitimate interest (basis: Art. 6(1)(f) of the GDPR), which is then the establishment, pursuit and defense against claims.
d) Conducting traditional correspondence and via e-mail
In the case of directing e-mail or traditional correspondence to the Controller that is not related to the performance of a contract, the personal data contained therein are processed for the purpose of handling the request or the inquiry reported in the correspondence. The basis for processing in such a case is the Controller's legitimate interest (Art. 6(1)(f) of the GDPR), which consists in conducting correspondence and handling requests and inquiries in connection with the business activity conducted. Your personal data are also processed for the purpose of possibly establishing, pursuing or defending against claims, based on the Controller's legitimate interest (basis: Art. 6(1)(f) of the GDPR), which is then the establishment, pursuit and defense against claims.
e) Contact of the contractor's or Client's employees
In the event that you contact us by telephone or e-mail in connection with a contract concluded with your employer or activities undertaken at their request before concluding a contract - we process the data obtained in this way for the purpose of performing the concluded contract and taking actions at their request before concluding a contract (basis: Art. 6(1)(b) of the GDPR), as well as for the purpose of pursuing and defending against claims, which constitutes the Controller's legitimate interest in protecting their rights (basis: Art. 6(1)(f) of the GDPR).
If you contact us in a matter other than the concluded contract, we process your data for the purpose of responding to the question asked or resolving the matter with which you are approaching us and for the purpose of pursuing and defending against claims. The basis for processing is the Controller's legitimate interest consisting in responding to the question asked or resolving the matter in connection with the business activity conducted and pursuing and defending against claims (basis: Art. 6(1)(f) of the GDPR).
2) Information on the requirement/voluntariness of providing data
To the extent that the processing of your data occurs for the purpose of concluding and performing a contract, providing your data is a condition for concluding and performing the contract. Providing them is voluntary, but necessary for the conclusion and performance of the contract.
To the extent that the processing of your data occurs based on a request by you to take action by us before concluding a contract, providing your data is voluntary, but necessary to perform the actions requested by you.
We may also request the provision of your data if it is necessary for the performance of legal obligations incumbent on us.
In the event that you contact us to ask a question or indicate a matter to be resolved, providing your data enabling return contact is voluntary, but necessary to provide an answer to the question or resolve the matter presented.
Providing the data necessary to send commercial information is voluntary, but necessary for sending commercial information. Failure to provide them prevents the sending of commercial information
3) Data recipients
We may share your personal data with entities that we use for their processing, e.g.: law firms, IT companies, entities providing access to e-mail, postal operators. The Controller will also share your data in situations when it is necessary due to an obligation incumbent on them.
4) Transfer of data to Third Countries
We do not transfer your data outside the territory of the EU/European Economic Area.
5) Data processing time
Your data:
a) obtained based on your request to take action by the Controller before concluding a contract, are processed for the time necessary to take action at your request,
b) obtained for the purpose of concluding and performing a contract, are processed until its performance,
c) processed for the purpose of fulfilling a legal obligation - until its fulfillment,
d) processed in connection with the Controller's legitimate interest - until its fulfillment or the submission of an effective objection by you,
e) processed based on your consent - until its withdrawal.
The above processing periods may be extended by a maximum of the time necessary to establish, pursue or defend against claims. After this period, personal data will be anonymized or deleted.
6) Your rights:
Please be informed that you have:
a) the right of access to your data and to receive a copy of them
b) the right to rectification (correction) of your data
c) the right to erasure of data.
If, in your opinion, there are no grounds for us to process your data, you can request that we delete them.
d) restriction of processing of data
You can request that we restrict the processing of your personal data exclusively to their storage or performance of actions agreed with you, if in your opinion we have incorrect data about you or we process them without grounds; or you do not want us to delete them because you need them to establish, pursue or defend against claims; or for the time of an objection filed by you against the processing of data.
e) the right to object to the processing of data:
"Marketing" objection. You have the right to object to the processing of your data for the purpose of direct marketing. If you exercise this right - we will stop processing data for this purpose.
Objection due to a special situation. You also have the right to object to the processing of your data based on a legitimate interest for purposes other than direct marketing, as well as when the processing is necessary for us to perform a task carried out in the public interest or to exercise public authority entrusted to us. You should then indicate to us your special situation which, in your opinion, justifies the cessation of the processing covered by the objection. We will stop processing your data for these purposes unless we demonstrate that the grounds for processing your data by us override your rights or that your data are necessary for us to establish, pursue or defend against claims.
f) the right to data portability:
You have the right to receive from us, in a structured, commonly used machine-readable format (e.g., ".csv" format), personal data concerning you that you provided to us based on a contract or your consent. You can also instruct us to send these data directly to another entity.
g) the right to lodge a complaint with a supervisory authority
If you believe that we are processing your data unlawfully, you can lodge a complaint in this matter with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
h) the right to withdraw consent for the processing of personal data
At any time you have the right to withdraw consent for the processing of those personal data that we process based on your consent. Withdrawal of consent will not affect the lawfulness of processing carried out based on your consent before its withdrawal.
In the event of a desire to exercise the above rights, please contact us in person, via traditional mail or e-mail using the following data:
Andrzej Matoga, conducting business under the name Firma Produkcyjno – Handlowa „MANN” Andrzej Matoga, ul. Galicyjska 59, 32-040 Rzeszotary
e-mail: info@maan.net.pl
(from Monday to Friday, between 7:00 AM and 6:00 PM).
7) Automated decision-making
I inform you that we will not make automated decisions regarding you, including that you will not be subject to profiling.