Processing of personal data of addressees and senders of electronic messages – Śnieżka SA

The administrator of the addressees and senders is Fabryka Farb i Lakierów Śnieżka SA, the company’s registered office: 00-867 Warszawa, ul. Chłodna 51; mailing address: 39­207 Brzeźnica, ul. Dębicka 44, (hereinafter referred to as: “Administrator”) The data Administrator will process your personal data based on legal provisions, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free the flow of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation), hereinafter: “GDPR”, for the following purposes:

1. enabling e-mail contact with the Administrator (his employees and associates) and making contact with addressees as well as documenting arrangements made with the Administrator’s contractors via e-mail pursuant to art. 6 sec. 1(f) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection), hereinafter: “GDPR”, where the Administrator’s legitimate interest consists in carrying out correspondence and the possibility of proving the arrangements made in the course of correspondence;
2. implementation of concluded commercial agreements if you are a party to such an agreement (legal basis: art.6 par.1(b)) GDPR),
3. if you are an employee/contractor of a Party to a cooperation agreement, your data is processed by the Administrator pursuant to art. 6 sec. 1(f)) of the GDPR, where the legitimate legal interest is the correct implementation of the agreement between the Administrator and your employer/principal; The administrator obtained your personal data directly from you or from your employer/principal;
4. recording the concluded agreements and their settlement, pursuant to the provisions of the tax law, the Accounting Act (legal basis: art.6 par.1(c)) GDPR);
5. considering complaints from persons submitting a complaint pursuant to art. 6 sec. 1(f) of the GDPR in connection with Art. art. 6 sec. 1(c) of the GDPR, where the Administrator’s legitimate interest is to consider a complaint submitted by the sender of the correspondence.
6. establishing, investigating or defending against claims that are the implementation of our legitimate interest and for archival purposes (legal basis: Article 6 sec. 1(f) of the GDPR).

If the correspondence addressed to the Administrator includes data of specific categories, the legal basis for their processing will be the consent expressed voluntarily. If the sender did not include consent in his correspondence, they will be asked to do so. Lack of consent is tantamount to the Administrator’s inability to process data of specific categories. Voluntary consent may also be expressed through a clear confirmation action: if the sender requests information regarding the Administrator’s brand, its products or services – sending an inquiry means that the Administrator is allowed to send commercial information to the e-mail address provided, to the extent necessary to provide replies (Article 10 of the Act on the provision of electronic services).

The Administrator will transfer your personal data to entities cooperating with the Administrator in order to provide specific services to the Administrator, in particular in the field of IT support, debt collection, consulting, auditing services, administrative, accounting and tax services.

We keep correspondence:

• if the basis for the processing of data contained in the correspondence is the legitimate interest of the administrator – until the data subject objects, unless the messages contain content essential for pursuing claims or defending against claims, then the correspondence will be kept until the claims are time-barred in accordance with the Civil Code;
• if the data contained in the correspondence is necessary for the performance of the contract concluded with customers and contractors – until the claims are time-barred in accordance with the Civil Code;
• if the basis for the processing of data contained in the correspondence is the consent of the data subject – until the consent is withdrawn.

By contacting our Data Protection Officer at the following e-mail address: dane.osobowe@sniezka.com or tel. +48 14 699 72 60 you can exercise your rights, i.e.:

• the right to access to your personal data and receive the copies of personal data processed;
• the right to correct any irrelevant data;
• the right to request for deletion of data (right to be forgotten) in the case of circumstances specified in art. 17 of GDPR;
• the right to request to limit data processing in the cases specified in art. 18 of GDPR;
• the right to raise objections to data processing in the cases specified in art. 21 of GDPR;
• the right to transfer the data provided, processed in an automated manner;
• the right to a complaint: you have the right to lodge a complaint to the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warszawa), if you consider that the processing of your personal data violates the provisions of the GDPR.

We would like to kindly inform you that providing personal data is voluntary, however, it is necessary to exchange e-mail correspondence with the Administrator. Failure to provide data will result in the inability to exchange e-mail correspondence with the Administrator.

Please note that:

• the right to delete data and the right to demand restriction of their processing only apply in the cases specified in the provisions of the GDPR;
• the right to data transfer applies only if the legal basis for processing is consent or performance of a contract;
• the administrator may refuse to delete the data despite submitting such a request, provided that one of the exceptions listed in the GDPR applies, e.g. when data processing is necessary to fulfil a legal obligation or to establish, investigate or defend claims;
• in some cases, the administrator may refuse to take into account the objection to the processing of data on the basis of the legitimate interest of the administrator, when there are valid legitimate grounds for data processing that override the interests, rights and freedoms of the data subject or there are grounds for establishing, investigating or defending claims.

In connection with the cooperation with Fabryka Farb i Lakierów Śnieżka S.A., the company’s registered office: 00-867 Warszawa, ul. Chłodna 51; mailing address: 39­207 Brzeźnica, ul. Dębicka 44, (hereinafter referred to as: „FFiL Śnieżka SA” or „Administrator”). FFiL Śnieżka S.A. as a data Administrator will process your personal data for the following purposes:

a. performance of concluded contracts, if you are a party to such an agreement (legal basis: Article sec. 1(b) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation), hereinafter: “GDPR”,
b. if you are an employee/contractor of a Party to a cooperation agreement, your data is processed by the Administrator pursuant to art. 6 sec. 1(f)) of the GDPR, where the legitimate legal interest is the correct implementation of the agreement between the Administrator and your employer/principal; The administrator obtained your personal data directly from you or from your employer/principal;
c. enabling e-mail contact with the Administrator (his employees and associates) and making contact with addressees, as well as documenting arrangements made with the Administrator’s contractors via e-mail pursuant to art. 6 sec. 1 (f) of the GDPR, where the Administrator’s legitimate interest consists in carrying out correspondence and the possibility of proving the arrangements made in the course of correspondence;
d. recording the concluded agreements and their settlement, pursuant to the provisions of the tax law, the Accounting Act (legal basis: art.6 sec. 1(c)) of the GDPR);
e. establishing, investigating or defending against claims that are the implementation of our legitimate interest and for archival purposes (legal basis: Article 6 sec. 1(f) of the GDPR).

The Administrator may transfer your personal data to other recipients entrusted with the processing of personal data on behalf and for the benefit of the Administrator, including Śnieżka Trade of Colors Sp. z o.o., 00-867 Warsaw, ul. Chłodna 51; mailing address: 39-207 Brzeźnica, ul. Dębicka 44, entities providing consulting services in favour of the Administrator and entities with whom the Administrator has concluded a contract for the provision of maintenance services of the IT systems used by the Administrator. Your personal data may also be made available to law firms providing legal assistance to the Administrator.

Your personal data will be processed by the Administrator for the term of the commercial agreement concluded between the parties, for the period of pursuing possible claims, i.e. 3 years from the date of the agreement termination between the parties, as well as for archival and settlement purposes specified by special provisions such as tax law and the Accounting Act.

By contacting our Data Protection Officer at the following e-mail address: dane.osobowe@sniezka.com you can exercise your rights, i.e.:

• the right to access to your personal data and receive the copies of personal data processed;
• the right to correct any irrelevant data;
• the right to request for deletion of data (right to be forgotten) in the case of circumstances specified in art. 17 of GDPR;
• the right to request to limit data processing in the cases specified in art. 18 of GDPR;
• the right to raise objections to data processing in the cases specified in art. 21 of GDPR;
• the right to transfer the data provided, processed in an automated manner;
• the right to a complaint: you have the right to lodge a complaint to the President of the Office for Personal Data Protection, if you consider that the processing of your personal data violates the provisions of the GDPR.

We would like to kindly inform you that providing personal data is voluntary, but necessary for the conclusion and performance of the contract and/or cooperation. Failure to provide the data will result in the inability to conclude and perform the contract and/or cooperation.