Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as “GDPR”, has been in force since 25 May 2018.
Having regard to the need to protect your rights under the new regulations, we would like to inform you that:
- The Controller of your personal data is Aluco System Spółka z o.o. with its registered office at ul. Pańska 84, 25-811 in Kielce, registered in the District Court of Kielce, 10th Commercial Division of the National Court Register under number 0000092273, NIP [Tax ID No.]9591454713, with the share capital of PLN 50 000, telephone: +48413464846, hereinafter referred to as the “Company”.
- The Company processes the following categories of your personal data: identification data (name, surname, Tax Id. No. etc.), address details (address of residence, registered office etc.) and contact details (telephone, e-mail etc.).
- Your personal data may be processed by the Company for the following purposes:
- presenting the Company’s offers (pursuant to Article 6(1)(b) or (f) of the GDPR),
- concluding and performing the agreement between you and the Company (pursuant to Article 6(1)(b)(c) of the GDPR),
- performing the activities resulting from generally applicable provisions of law by the Company, including: issuing and storing invoices and accounting documents, replying to complaints within the time and form provided for by provisions of law (pursuant to Article 6 paragraph 1(c)(e) of the GDPR),
- marketing (pursuant to Article 6(1)(f) of the GDPR),
- making statements, analyses, statistics for the internal needs of the Company (pursuant to Article 6(1)(f) of the GDPR),
- establishing and pursuing claims by the Company in connection with its activity, including debt collection, enforcement of claims or defence against claims against the Company, law enforcement authorities, adjudicating bodies, including common courts, administrative courts, the Supreme Court, in administrative proceedings, including tax proceedings (pursuant to Article 6(1)(f) of the GDPR).
- Your personal data may be made available by the Company to:
- entities and bodies to which the Company is obliged or authorized to disclose personal data on the basis of generally applicable provisions of law, including entities and bodies entitled to receive personal data from the Company or authorized to request access to personal data on the basis of generally applicable provisions of law,
- advertising agencies and other entities organizing marketing campaigns for the Company,
- entities servicing the Company’s IT systems,
- subcontractors of investments implemented by the Company,
- entities providing the Company with advisory, consulting, auditing, legal, tax and accounting assistance at the Company’s request,
- entities providing postal or courier services.
- Your personal data are not currently processed outside of the European Economic Area (EEA). However, it may occur that, during the term of the agreement, the Company will decide to transfer data outside the EEA, only to the extent permitted by law, though.
- Your personal data will be stored:
- for the period of performing duties, e.g. issuing invoices,
- for the duration of the agreement concluded with the Company, and after its termination, in connection with the legal obligation of the Company resulting from generally applicable provisions of law,
- for the time necessary to pursue claims by the Company in connection with its activity or defend against claims against the Company on the basis of generally applicable provisions of law, including limitation periods for claims set out in generally applicable provisions of law.
- the Company is guided by the principles of purpose limitation, data minimization and limited processing periods at all times during the processing of personal data
- In relation to the processing of your personal data by the Company, you have a right to:
- access your personal data,
- correct your personal data,
- remove your personal data (right to be forgotten),
- limit the processing of your personal data,
- transfer your personal data to another controller,
- object to data processing, including profiling and for direct marketing purposes,
- withdraw your consent if the Company processes your personal data on the basis of your consent at any time and in any way, without affecting the legality of the processing which was made on the basis of the consent before its withdrawal,
- lodge a complaint with the President of Data Protection Office if you decide that the processing of personal data violates the provisions of the GDPR.
- Providing your personal data is necessary for the purpose specified in paragraph 3 above, for:
- the conclusion and performance of the agreement entered into with the Company. Failure to provide your personal data will result in the inability to conclude and perform the agreement entered into with the Company,
- receiving offers or marketing products offered by the Company. Failure to provide your personal data will result in the inability to receive these offers or marketing products or services.
9. Your personal data will be processed by the Company by automatic means, excluding profiling.