Rodo
Dear Sir/Madam,
Considering the imminent changes in personal data protection laws related to the enforcement of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the EU L 119/1 of 4 May 2016), hereinafter referred to as GDPR, and fulfilling your right to information arising from Article 13 of GDPR, the company under the name: Firma Produkcyjno-Handlowa BRYDEX Sp. z o.o. (BRYDEX Production and Trade Company, limited liability company), address: 34-123 Chocznia, ul. Kościuszki 161a, kindly states that, as of 25 May 2018, you shall have the below-specified rights related to the processing of your personal data by the Company under the name of Firma Produkcyjno-Handlowa BRYDEX Sp. z o.o.
At the same time, pursuant to Article 13 of GDPR, we wish to inform you that, as of 25 May 2018, the following information and principles shall apply to the processing of your personal data by the COMPANY:
1. The Controller of your personal data shall be the COMPANY, address: 34-123 Chocznia, ul. Kościuszki 161a, REGON (Statistical Number) 070516930, NIP (Tax Identification Number) 551-000-78-02, (hereinafter referred to as the “Company”).
2. The COMPANY has appointed a contact person for matters related to personal data processing who may be contacted by email: rodo@brydex.pl.
3. Your personal data shall be processed:
a.) to provide services by electronic means and to conclude contracts of sale – the legal basis for the processing of personal data shall be Article 6 section 1 letter b) of GDPR,
b.) for the COMPANY to provide you with marketing content in a manner accepted by you – the legal basis for the processing of personal data shall be legitimate interest of the COMPANY (Article 6 section 1 letter f) of GDPR); legitimate interest of the COMPANY shall involve sending marketing content to you in the period of provision of services to you by electronic means via mail and additionally in a manner accepted by you,
c.) to meet the legal obligations of the COMPANY under the commonly applicable provisions of the law, including the tax and accounting regulations – the legal basis for the processing of personal data shall be Article 6 section 1 letter c) of GDPR,
d.) for analytical and statistical purposes – the legal basis for the processing of personal data shall be legitimate interest of the COMPANY (Article 6 section 1 letter f) of GDPR); legitimate interest of the COMPANY shall be carrying out the analysis of results of its business operations,
e.) to perform legitimate interest of the COMPANY involving the potential determination or assertion of claims or defence against claims – the legal basis for the processing of personal data shall be legitimate interest of the COMPANY (Article 6 section 1 letter f) of GDPR).
4. The recipients of your personal data may be:
a.) IT system providers and IT service providers,
b.) entities providing the COMPANY with services in the fields of accounting, service quality research, recovery of amounts due, legal, analytical or marketing services,
c.) post and courier operators,
d.) electronic payment system operators and banks within the scope of payment execution,
e.) bodies authorised to receive your personal data under the provisions of the law.
5. The COMPANY shall not transfer your personal data to any third countries.
6. Your personal data shall be processed: (i) in the case of personal data processed for the conclusion and performance of contracts of sale – for a period of time necessary to perform all obligations arising from the contracts of sale, (ii) in the case of personal data processed for the provision of services to you by electronic means – for a period of time of provision of services to you by electronic means, (iii) in the case of personal data processed for the purposes of sending marketing content to you by the COMPANY – until you lodge an objection to the processing of personal data within this scope, (iv) in the case referred to in point 3 letter d) above – for the period of time of provision of services to you by electronic means, (v) in the case referred to in point 3 letter e) above – until the lapse of the limitation period for such claims. After this period the personal data shall only be processed within the scope and for the period of time required by the provisions of the law, including the accounting law.
7. The Company shall not use automatic decision-making processes or profiling.
8. Every consent given may be revoked at any time. The revocation of consent does not affect the compliance with the law of the processing conducted prior to its revocation. For evidence purposes, the COMPANY requests that you revoke your consent in writing to the address of the COMPANY (34-123 Chocznia, ul. Kościuszki 161a) or by electronic means (via email to the following address wypisz@brydex.pl
9. You have the right to access, rectify or delete your personal data, restrict their processing, lodge a complaint with a supervisory authority for personal data protection.
10. You have the right to data portability which covers the right to receive your data and send them to another controller, or to request that such data be sent directly to another controller, if it is technically practicable.
11. The provision of personal data is voluntary but necessary – with the exception of data processed for the purpose set in point 3 letter b) – for the provision of services to you by electronic means or for the conclusion and performance of contracts of sale. Should you refuse to provide personal data required by the COMPANY, the provision of services by electronic means or the conclusion of contracts of sale shall be impossible.
This information does not require any response from you, unless you do not consent to the further processing of your data.