The administrator of the addressees and senders is Fabryka Farb i Lakierów Śnieżka SA, the company’s registered office: 00-867 Warszawa, ul. Chłodna 51; mailing address: 39207 Brzeźnica, ul. Dębicka 44, (hereinafter referred to as: “Administrator”) The data Administrator will process your personal data based on legal provisions, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free the flow of such data and the repeal of Directive 95/46 / EC (General Data Protection Regulation), hereinafter: “GDPR”, for the following purposes:
1. enabling e-mail contact with the Administrator (his employees and associates) and making contact with addressees as well as documenting arrangements made with the Administrator’s contractors via e-mail pursuant to art. 6 sec. 1(f) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection), hereinafter: “GDPR”, where the Administrator’s legitimate interest consists in carrying out correspondence and the possibility of proving the arrangements made in the course of correspondence;
2. implementation of concluded commercial agreements if you are a party to such an agreement (legal basis: art.6 par.1(b)) GDPR),
3. if you are an employee/contractor of a Party to a cooperation agreement, your data is processed by the Administrator pursuant to art. 6 sec. 1(f)) of the GDPR, where the legitimate legal interest is the correct implementation of the agreement between the Administrator and your employer/principal; The administrator obtained your personal data directly from you or from your employer/principal;
4. recording the concluded agreements and their settlement, pursuant to the provisions of the tax law, the Accounting Act (legal basis: art.6 par.1(c)) GDPR);
5. considering complaints from persons submitting a complaint pursuant to art. 6 sec. 1(f) of the GDPR in connection with Art. art. 6 sec. 1(c) of the GDPR, where the Administrator’s legitimate interest is to consider a complaint submitted by the sender of the correspondence.
6. establishing, investigating or defending against claims that are the implementation of our legitimate interest and for archival purposes (legal basis: Article 6 sec. 1(f) of the GDPR).
If the correspondence addressed to the Administrator includes data of specific categories, the legal basis for their processing will be the consent expressed voluntarily. If the sender did not include consent in his correspondence, they will be asked to do so. Lack of consent is tantamount to the Administrator’s inability to process data of specific categories. Voluntary consent may also be expressed through a clear confirmation action: if the sender requests information regarding the Administrator’s brand, its products or services – sending an inquiry means that the Administrator is allowed to send commercial information to the e-mail address provided, to the extent necessary to provide replies (Article 10 of the Act on the provision of electronic services).
The Administrator will transfer your personal data to entities cooperating with the Administrator in order to provide specific services to the Administrator, in particular in the field of IT support, debt collection, consulting, auditing services, administrative, accounting and tax services.
We keep correspondence:
- if the basis for the processing of data contained in the correspondence is the legitimate interest of the administrator – until the data subject objects, unless the messages contain content essential for pursuing claims or defending against claims, then the correspondence will be kept until the claims are time-barred in accordance with the Civil Code;
- if the data contained in the correspondence is necessary for the performance of the contract concluded with customers and contractors – until the claims are time-barred in accordance with the Civil Code;
- if the basis for the processing of data contained in the correspondence is the consent of the data subject – until the consent is withdrawn.
By contacting our Data Protection Officer at the following e-mail address: firstname.lastname@example.org or tel. +48 14 699 72 60 you can exercise your rights, i.e.:
- the right to access to your personal data and receive the copies of personal data processed;
- the right to correct any irrelevant data;
- the right to request for deletion of data (right to be forgotten) in the case of circumstances specified in art. 17 of GDPR;
- the right to request to limit data processing in the cases specified in art. 18 of GDPR;
- the right to raise objections to data processing in the cases specified in art. 21 of GDPR;
- the right to transfer the data provided, processed in an automated manner;
- the right to a complaint: you have the right to lodge a complaint to the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warszawa), if you consider that the processing of your personal data violates the provisions of the GDPR.
We would like to kindly inform you that providing personal data is voluntary, however, it is necessary to exchange e-mail correspondence with the Administrator. Failure to provide data will result in the inability to exchange e-mail correspondence with the Administrator.
Please note that:
- the right to delete data and the right to demand restriction of their processing only apply in the cases specified in the provisions of the GDPR;
- the right to data transfer applies only if the legal basis for processing is consent or performance of a contract;
- the administrator may refuse to delete the data despite submitting such a request, provided that one of the exceptions listed in the GDPR applies, e.g. when data processing is necessary to fulfil a legal obligation or to establish, investigate or defend claims;
- in some cases, the administrator may refuse to take into account the objection to the processing of data on the basis of the legitimate interest of the administrator, when there are valid legitimate grounds for data processing that override the interests, rights and freedoms of the data subject or there are grounds for establishing, investigating or defending claims.