DATA CLAUSE

Notice regarding processing personal data

In accordance with Article 13 (1) to (2) of the European Parliament and the Council (EU)

2016/679 of 27 April 2016 on protection of indiciduals in relation to processing of personal data and in relation to free movement of such data as well as the repeal of Directive 95/46/WE (General Data Protection Regulation – hereinafter referred to as GDPR) we would like to inform that:

1) The administrator of your personal data is IMERCON Ltd., based in Swadzim, ul. Parkowa 4, 62-080, Tarnowo Podgórne, listed in the National Court Register (KRS) in the Poznań – Nowe Miasto and Wilda District Court, VIII Economy Department of the National Court Register under No KRS 370939;

2) Your personal data is processed for the purpose of: marketing and promoting offered products and services, responding to messages and questions sent, concluding and implementing the contract, performing the order or the service, issuing sales invoices, handling complaints, responding to trade offers, carrying out activities necessary to ensuring the safety, determining, defending and redress, verifying financial credibility, fraud detection and prevention, internal administrative tasks (analytics, statistics, statements and raports), archiving;

3) the basis for processing the personal data is, depending on the actions performed:

  • your consent (article 6 (1)(a) GDPR),
  • entering and implementing a contract with the administrator (article 6 (1)(b) GDPR),
  • fulfilling the legal obligations for which the administrator is responsible of (article 6(1)(c)GDPR),
  • your consent (article 6 (1)(a) GDPR);

4) Your data might be provided to the following parties:

  • processors in connection with the contract signed in order to supply IT services, as well as ogranisational services, technical services, HR services and accounting services,
  • transport, spedition and mail companies, in order to ship the products ordered or to deliver the packages/the mail,
  • trade partners, to process the order, the service or the contract,
  • law offices which have been contracted to administrate the proceedings by the administrator,
  • banks,
  • people otherwise authorised on the basis of a written mandate;

5) in relation to the processing of data for the reasons listed in paragraph 2, your data might also be forwarded to the authorities authorised to control the administrator’s operation (Chief Labour Inspectorate (PIP), ZUS, Tax Office), advisors, external consultants (tax consultants, financial consultants, etc.);

 

6) Your personal data will be stored:

  • in regard to implementation of the contract concluded by you with the administrator until the end of implementation, and later for the period of time required by the law,
  • in regard to fulfilling the legal obligations for which the administrator is responsible for in relation to carrying out and implementation of the concluded contracts until the obligations are fulfilled by the administrator,
  • in regard to marketing and promotion of products and services offered by the administrator, until revoking your consent to such processing,
  • until the period of limitation, as stated in the provisions of the Civil Code in case of necessity of redress (for example, in case of legal proceedings);

 

7) In relation to processing your personal data, you have the following rights:

  • the right to access the personal data, including the right to receive a copy of it,
  • the right to demand a correction of the personal data – if the data are incorrect or incomplete,
  • the right to demand removal of the personal data (the so-called right to being forgotten) in case of:
    • data not being necessary anymore for the purposes they were collected for or processed in any other way,
    • the data subject had objected to having their data personal data being processed,
    • the data subject has withdrawn their consent to process their personal data, which is the basis to processing personal data and there’s no other legal basis to processing the data,
    • personal data is being processed unlawfully,
    • personal data must be removed in order to comply with legal obligations;
  • the right to demand restriction of processing the personal data – in case of:
    • the data subject questions the accuracy of the personal data,
    • the processing of data has been conducted in an unlawful manner and the data subject opposes removal of the data, demanding restriction of processing of it instead,
    • the administrator does not need the data for their purposes, but the data subject requires it it to determine, defend or redress,
    • the data subject has objected to processing the data, pending determining whether reasonable grounds of the administrator overrule the grounds of the objection;
  • the right to transfer the data – in case when all the following conditions have been fulfilled:
    • processing of the data takes place on the basis of a contract which has been concluded with the person whom the data concerns or on the basis of a permission expressed by the person,
    • processing is carried out by automatic means,
  • the right to object to processing the data in case of grounds based on your specific situation arising, of which the basis is their necessity for purposes emerging from legally justified interests realised by the administrator or a third party (article 6 (1)(f) GDPR), except for situations in which the administrator:
    • demonstrates the existence of important, legally justified bases to processing the data, which prevail over the interests, rights and the freedom of the person, whom the data concerns, requiring the protection of the personal data, especially when the person in question is a child, or
    • demonstrates the basis for establishment, defense or redress,

However, if the data is being processed for the purpose of direct marketing (including profiling), you have the right to express your objection at any moment, and the administrator will not be allowed to process your personal data for this reason.

  • In case of the procedure of processing the personal data taking place on the basis of a permission of a person to processing personal data (article 6 (1)(a)GDPR), you have the right to withdraw your permission in any given moment. The withdrawal does not affect the lawfulness of the processing that took place on the basis of the permission before its withdrawal, according to the current law.

8) you have the right to lodge a complaint to the Personal Data Protection Office if you consider that processing your personal data infringes GDPR,

9) the obligation to provide your personal data is based on the relevant provisions and is voluntary,

10) automated decision-making is not considered,

11) transferring the collected personal data to third countries is not considered,

12) profiling of collected personal data is not considered;

© ImerCon | Engineering Company 2019